CN1503508A - Fault coherence analysis of network management system and implement method - Google Patents
Fault coherence analysis of network management system and implement method Download PDFInfo
- Publication number
- CN1503508A CN1503508A CNA021494401A CN02149440A CN1503508A CN 1503508 A CN1503508 A CN 1503508A CN A021494401 A CNA021494401 A CN A021494401A CN 02149440 A CN02149440 A CN 02149440A CN 1503508 A CN1503508 A CN 1503508A
- Authority
- CN
- China
- Prior art keywords
- warning information
- alarm
- fault
- management system
- network management
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
This invention relates to a fault coherence analysis for a network management system and its realization method including: when the time interval generated by two pieces of fault alarm information with the same content is smaller than a predesigned repeat period, the latter one is judged to be a piece of repeated alarm information to be shielded only the content is displayed. When the time interval generated by two same kinds of fault recovered alarm information is shorter than the predesigned flash period, the latter one is judged to be the flash alarm information to be shielded and only the alarm of such kind is displayed.
Description
Technical field
The present invention relates to communication network network management technology field, is a kind of failure dependency analysis and implementation method of network management system, by failure dependency analysis and processing, improves the operation maintenance personnel and network operation failure location is handled and solved efficient.
Background technology
At present in the GSM/CDMA network management system, the alarm business platform is all, directly shows each the bar warning information that collects from main frame, from collecting between the demonstration, except judge gather with the content of alarm whether just the same, server does not carry out any other filterability to be handled.The alarm of communication network element (referring to a certain equipment in the network) is that the utmost point has characteristics, comprising but in fact:
1. repeated, event alarm repeated apparent in view, before fault is not got rid of, equipment can be according to the frequent report and alarm of certain frequency, repeat to alarm production process as Fig. 1 signal, after alarm 1 takes place, after the repetition period (Repeat Period), produce the alarm 2 of same content again, even after several repetition periods, also can produce the alarm n of same content.These alarms are except the asynchronism(-nization) that produces, other guide is on all four, cause alarm subsystem to enumerate, be full of a large amount of this type of " repetition " alarms, so numerous alarms that repeat often make the operation maintenance personnel dazzled, give to select to handle to alarm and bring certain degree of difficulty, bring difficulty to maintenance work.
2. dodge disconnected property, when the running status of network or network element is unstable, bad during the working state of system fashion, the alarm of certain class will be continually reports continuously with the state of " fault "-" recovery "-" fault "-" recovery ", illustrate the flash alarm production process as Fig. 2, system produces the uploaded state of " alarm "-" recovery "-" alarm "-" recovery " continuously, and wherein continuous two time intervals of recovering to take place form one and dodge the disconnected cycle (FlashPeriod).This kind state alarm can not receive that alarm clearing just illustrates that fault removes because of system, can only illustrative system work at present be in " jolting " state, and " jolting " means that system is in malfunction.If do not carry out special processing for this flash alarm, the alarm subsystem interface can frequently be refreshed, and equally also can make the operation maintenance personnel dazzled, brings difficulty for the location fault.
According to existing technology, more than the alarm of two kinds of situations can cause all on the alarm display interface, to enumerate and repeat the result that alarms in a large number that simultaneously, a large amount of flash alarms frequently report and make the alarm display interface frequently refresh.In this case, the user can not get information about how about system is current exists which (class) fault, operation conditions on earth, and will select one to position processing and also have certain degree of difficulty in refreshing frequent alarm.
Summary of the invention
The objective of the invention is to design a kind of failure dependency analysis and implementation method of network management system, repeatability and the disconnected property characteristics of sudden strain of a muscle at the communication network element alarm, handle with flash alarm repeating according to failure dependency analysis of the present invention and implementation method, make the user can locate, solve fault easily, do not repeated to alarm, the interference of flash alarm, improve the efficient of operation maintenance work.
The technical scheme that realizes the object of the invention is such: a kind of failure dependency analysis and implementation method of network management system is characterized in that:
A. during at interval less than default repetition period, a back fault warning information is judged as the repetition warning information at the generation time of the identical fault warning information of two contents, the repetition warning information is carried out shielding processing, only show the fault warning of this content;
B. at the generation time of the identical fault recovery warning information of two types during at interval less than disconnected cycle of default sudden strain of a muscle, a back fault recovery warning information is judged as flash alarm information, flash alarm information is carried out shielding processing, only show the fault warning an of the type.
Wherein, described steps A further comprises:
A1. receive the fault warning information 2 that network element produces;
A2. whether record exists and the on all four fault warning information 1 of warning information 2 contents that receives in the analytical database network analysis table, if exist, further fault warning information 1 and fault warning information 2 time interval that produces and the repetition period of presetting are compared;
A3. if there is no fault warning information 1, perhaps have fault warning information 1 but fault warning information 1 and fault warning information 2 produce interval greater than the default repetition period, further analyze whether shown this fault warning information 2 on the current alarm interface;
If a4. also do not show this fault warning information 2 on the current alarm interface, then on the alarm interface, show this fault warning information 2, and be kept at this fault warning information 2 in the network management system database and be kept in the Database Systems analytical table;
If a5. in step a3, analyze when having shown this fault warning information 2 on the current alarm interface, be kept at this fault warning information 2 in the network management system database and be kept in the Database Systems analytical table;
If a6. in step a2, the time interval that fault warning information 1 and fault warning information 2 produce is less than the default repetition period, then fault warning information 2 is judged as the information that repeats to alarm, the alarm display interface of not bothering to see me out, but fault warning information 2 is kept in the Database Systems analytical table.
Wherein, described step B further comprises:
B1. receive the fault recovery warning information that network element produces;
B2. whether there is the corresponding fault warning of the alarm of fault recovery therewith in the analytical database network analysis table;
Whether b3. analyze the fault recovery alarm receive breaks the cycle less than the sudden strain of a muscle of presetting at interval with the generation time of corresponding fault warning;
B4. when the time interval among the b3 is broken the cycle less than default sudden strain of a muscle, further whether there is the fault recovery warning information of same nature in the analytical database network analysis table;
B5. when having the fault recovery warning information of same nature in the Database Systems analytical table, whether the time interval of two fault recovery warning information generations is less than the disconnected cycle of default sudden strain of a muscle before and after further analyzing;
B6. when the time interval that analyzes front and back two fault recovery alarms generation is broken the cycle less than default sudden strain of a muscle, be judged as the disconnected character of sudden strain of a muscle and alarm, send the Database Systems analytical table to preserve this fault recovery warning information;
When b7. when at execution in step b2, analyzing the fault warning that does not have the alarm of fault recovery therewith correspondence in the Database Systems analytical table, or when execution in step b3, during interval greater than disconnected cycle of default sudden strain of a muscle, or when execution in step b4, when analyzing the fault recovery alarm that does not have same nature in the Database Systems analytical table, or when two fault recoveries alarm produces before and after analyzing when execution in step b5 interval greater than disconnected cycle of default sudden strain of a muscle, send display interface to show this fault recovery warning information, also send the Database Systems analytical table to preserve simultaneously with this fault recovery warning information net carrying pipe system database preservation with this fault recovery warning information.
Failure dependency analysis of the present invention and implementation method are in network management system, by alarm server each the bar warning information that collects is carried out filterability earlier and handle, and then whether decision send the alarm business platform to show.
Method of the present invention, characteristics according to communication network element alarm repeatability and the disconnected property of sudden strain of a muscle, utilize the current software environment that possesses of network management system (a network analysis table to be arranged in the network management system database, be used for alarm is analyzed, other forms are used for the storage alarm), a kind of feasible method is provided on this basis.By analyzing and processing is carried out in repetition and the disconnected fault of sudden strain of a muscle, set up the failure dependency function, warning information is carried out filterability to be handled, understand which (class) alarm of the current existence of system at a glance for the operation maintenance personnel, needn't be as frequent alarm was selected to handle in the past, can improve the efficient of dealing with problems, the ease for use of system is improved greatly.
Because flexible, stable failure dependency determination methods of the present invention, be to adopt the database routine operation to realize fully, therefore needn't buy, integrated third party's engine interface flexible; Can effectively shield insignificant alarm and show, make the operation maintenance personnel can grasp the current operation conditions of system more quickly, reduce fault location and analysis time, improve operation maintenance efficient.
Description of drawings
Fig. 1 repeats alarm to produce schematic diagram;
Fig. 2 is that flash alarm produces schematic diagram;
Fig. 3 is that recurring rule of the present invention is provided with surface chart;
Fig. 4 is that the disconnected rule of sudden strain of a muscle of the present invention is provided with surface chart;
Fig. 5 is that the inventive method is filtered the FB(flow block) that repeats to alarm;
Fig. 6 is the FB(flow block) that the inventive method is filtered flash alarm.
Embodiment
The repeatability that The present invention be directed to communication network element alarm with dodge that disconnected property characteristics make, carry out the failure dependency analysis and realize before at first need the failure dependency rule is defined, could analyze and handle alarm by this rule then.
The user can be according to the characteristics of own system operation, and definition is fit to the failure dependency processing rule of own system, comprise the recurring rule of fault and dodge disconnected rule.
Recurring rule wherein: the user can be provided with according to the actual alarm situation that reports and repeat the alarm cycle, repetition period as shown in fig. 1, if two the generation time of identical warning content is at interval less than the repetition period of setting, then these two alarms are considered to repeat alarm, then can carry out shielding processing to repeating alarm.
Can adopt the setting interface of recurring rule condition as shown in Figure 3: the alarm that repeats in the related condition setting is provided with, the user can be provided with repetition report cycle (second), activate and repeat to alarm library item, the time interval of the alarm report of two identical contents before and after " repetition report cycle " item wherein is meant; " activation " wherein is meant whether the repetition alarm filter function of Set For Current comes into force; Repeating wherein alarmed warehouse-in and is meant whether the event alarm of repetition is kept in the network management system database table.
The disconnected rule of sudden strain of a muscle wherein: the user is provided with the disconnected cycle of sudden strain of a muscle of flash alarm according to the actual alarm situation that reports, sudden strain of a muscle is as shown in Figure 2 broken the cycle, flash alarm is to occur with the sequence state of " fault "-" recovery "-" fault "-" recovery ", dodge disconnected period definition be two recover between the alarm generation times at interval.If certain type fault frequently occurs with the state of " fault "-" recovery "-" fault "-" recovery ", and the time interval between two fault recoveries of the same type less than the disconnected cycle of default sudden strain of a muscle, then this fault is a flash alarm.
Can adopt the setting interface of the disconnected rule condition of sudden strain of a muscle as shown in Figure 4: in the flash alarm of related condition setting was provided with, the user can be provided with and dodge the disconnected number of times item of disconnected cycle (second), activation, flash alarm warehouse-in, HF switch and sudden strain of a muscle." dodging the disconnected cycle " wherein is meant the time interval of the recovery alarm report of two same types; " activation " wherein is meant whether the flash alarm filtering function of Set For Current comes into force; Flash alarm warehouse-in wherein is meant whether dodge disconnected event alarm is kept in the network management system database table; Whether HF switch wherein shows a fault warning after being meant and dodging the number of times that disconnected number of times reaches setting; The disconnected number of times of sudden strain of a muscle wherein is meant the number of times of the alarm " recovery-fault-recovery " that type is identical.
Database Systems all are installed on network management system, as: ORACLE, SYBASE, SQL SERVER etc., possess very strong database operation and disposal ability, the embodiment of the invention is to utilize existing database technology and its conventional computing that alarm data is carried out computing and comparison, and whether analyze it is repetition or flash alarm.
When carrying out correlation analysis, the warning information that receives is compared and analyzes with the data in the Database Systems analytical table earlier, judge whether to be repetition or flash alarm, this alarm re-entry data storehouse analytical table with after having analyzed compares with this and alarm afterwards.
The present invention just can increase filtration or shielding processing to failure dependency between original receiving alarm and display alarm after having formulated the fault warning association rules, comprise that repeating alarm judges and the flash alarm deterministic process.
Referring to Fig. 5, repeat the alert analysis deterministic process.
Step 51 receives the warning information that network element produces, and warning information comprises the position of serial number, appearance of network element, title, arrival system and alarm type etc., and alarm type wherein comprises event alarm, fault warning and fault recovery alarm etc.;
Step 52, the warning information that receives is carried out correlation judgement and processing, comprise that analytical database network analysis table (writes down warning information by network management system in table, use SQL sql language to analyze) in the warning information of record whether in full accord with the warning information content that receives, the so-called content network element that is meant in full accord, title, the serial number of arrival system, information such as position that occurs and alarm type are in full accord, if exist, whether then analyze time interval that the on all four warning information of warning information content that writes down in two that receive continuously and the Database Systems analytical tables produced again less than the default repetition period;
Step 53 if in step 52, analyzes the on all four fault warning information of the warning information content that does not exist in the Database Systems analytical table and receive; Perhaps exist, but two front and back receive with the Database Systems table in the on all four warning information of warning information content that writes down produced interval greater than the default repetition period, then need further judge whether it is to repeat alarm, promptly whether show this warning information on the current alarm interface of analytical equipment;
Step 54 if also do not show this warning information on the current alarm interface, then shows this warning information on the alarm interface;
Step 55, if in the step 53, analyze when having shown this warning information on the current alarm interface, be judged as the alarm of repetition, then do not need to show again, because the demonstration of this type of alarm has been arranged on the current interface, the user can be known the information of this type of alarm fully, this warning information is kept in the network management system database, or after execution of step 54, also this warning information is kept in the network management system database;
Step 57, if in step 52, though the record in the Database Systems analytical table exists and the on all four fault warning information of warning information content that receives, but analyze that two front and back receive with the Database Systems table in time interval of being produced of the on all four warning information of warning information content that writes down during less than default repetition period, then this warning information is not sent the alarm display interface to show, for the alarm that is judged as repetition, can also whether go into the preservation of network management system database according to setting warehouse-in preservation condition decision shown in Figure 3, so that save the network management system database space to repeating alarm;
Step 56 after the execution of step 55,57, is gone into each bar warning information in the Database Systems analytical table, gives over to follow-up warning information with reception and compares.
Referring to Fig. 6, flash alarm analysis, determination methods flow process.
Step 60 receives the recovery warning information that network element produces, i.e. one fault-recovery-malfunction sequence;
Whether step 61 is used to exist in the sql language analysis Database Systems analytical table and is recovered the corresponding fault warning of alarm therewith;
Step 62 is used the sql language to carry out correlation and is judged and handle, and comprises whether the generation time of analyzing the recovery that receives and fault breaks the cycle less than default sudden strain of a muscle at interval;
Step 63, when the generation time that analyzes the recovery that receives and fault during at interval less than disconnected cycle of default sudden strain of a muscle, further whether analysis repeats alarm, i.e. whether have the recovery alarm of same nature in the analytical database network analysis table;
Step 64, when having the recovery alarm of same nature in the Database Systems analytical table, whether two time intervals of recovering the alarm generation are less than the disconnected cycle of default sudden strain of a muscle before and after further the analysis;
Step 65, two are recovered time interval that alarm produces during less than disconnected cycle of default sudden strain of a muscle before and after analyze, and illustrates that the Failure And Recovery alarm belongs to dodge disconnected character alarm, whether go into the preservation of network management system database according to the imposing a condition decision among Fig. 4;
Step 67, when in execution in step 61, analyze when not having the fault warning that recovers the alarm correspondence therewith in the Database Systems analytical table, or the generation time that analyzes the recovery that receives and fault when execution in step 62 is during at interval greater than disconnected cycle of default sudden strain of a muscle, or when execution in step 63, analyze recovery when alarm that does not have same nature in the Database Systems analytical table, or when two are recovered that alarm produces before and after analyzing when execution in step 64 interval greater than disconnected cycle of default sudden strain of a muscle, will recover to alarm and send display interface to show;
Step 68 also should be recovered alarm net carrying pipe system database and preserve when step 67 shows;
Step 66 after the execution of step 65,68, is recovered warning information with each bar and is gone into the preservation of Database Systems analytical table, gives over to follow-up recovery alarm sequence with reception and compares.
Above-mentioned steps shows, for being judged as repetition or dodging disconnected alarm, shield a series of alarm or " fault "-" recovery " alarm sequence of repeating, show a fault warning prompting user: current system exists fault or " jolting " phenomenon, need the user that this fault warning is intervened, solve the reason that causes the system failure or work " to be jolted " conscientiously.For being judged as repetition or the disconnected alarm of sudden strain of a muscle, can also whether go into the preservation of network management system database according to the warehouse-in preservation condition decision of setting, to save database space to repetition or flash alarm.
The present invention utilizes database manipulation to realize to analysis, the processing of failure dependency, can field be set flexibly according to system's difference and carry out judgment processing.
Failure dependency analysis of the present invention, processing method can be applicable in a complete set of network webmaster of the mobile network solution.
Claims (8)
1. the failure dependency analysis and the implementation method of a network management system is characterized in that:
A. during at interval less than default repetition period, a back fault warning information is judged as the repetition warning information at the generation time of the identical fault warning information of two contents, the repetition warning information is carried out shielding processing, only show the fault warning of this content;
B. at the generation time of the identical fault recovery warning information of two types during at interval less than disconnected cycle of default sudden strain of a muscle, a back fault recovery warning information is judged as flash alarm information, flash alarm information is carried out shielding processing, only show the fault warning an of the type.
2. the failure dependency analysis and the implementation method of a kind of network management system according to claim 1 is characterized in that described steps A further comprises:
A1. receive the fault warning information 2 that network element produces;
A2. whether record exists and the on all four fault warning information 1 of warning information 2 contents that receives in the analytical database network analysis table, if exist, further fault warning information 1 and fault warning information 2 time interval that produces and the repetition period of presetting are compared;
A3. if there is no fault warning information 1, perhaps have fault warning information 1 but fault warning information 1 and fault warning information 2 produce interval greater than the default repetition period, further analyze whether shown this fault warning information 2 on the current alarm interface;
If a4. also do not show this fault warning information 2 on the current alarm interface, then on the alarm interface, show this fault warning information 2, and be kept at this fault warning information 2 in the network management system database and be kept in the Database Systems analytical table;
If a5. in step a3, analyze when having shown this fault warning information 2 on the current alarm interface, be kept at this fault warning information 2 in the network management system database and be kept in the Database Systems analytical table;
If a6. in step a2, the time interval that fault warning information 1 and fault warning information 2 produce is less than the default repetition period, then fault warning information 2 is judged as the information that repeats to alarm, the alarm display interface of not bothering to see me out, but fault warning information 2 is kept in the Database Systems analytical table.
3. the failure dependency analysis and the implementation method of a kind of network management system according to claim 2, it is characterized in that described step a6 further comprises, for being judged as the information that repeats to alarm, whether go into the preservation of network management system database to repeating alarm according to the warehouse-in preservation condition decision that the user is provided with.
4. the failure dependency analysis and the implementation method of a kind of network management system according to claim 3 is characterized in that: described warehouse-in preservation condition is that the related condition at equipment repeats to alarm to be provided with on the interface and is provided with.
5. the failure dependency analysis and the implementation method of a kind of network management system according to claim 1 is characterized in that described step B further comprises:
B1. receive the fault recovery warning information that network element produces;
B2. whether there is the corresponding fault warning of the alarm of fault recovery therewith in the analytical database network analysis table;
Whether b3. analyze the fault recovery alarm receive breaks the cycle less than the sudden strain of a muscle of presetting at interval with the generation time of corresponding fault warning;
B4. when the time interval among the b3 is broken the cycle less than default sudden strain of a muscle, further whether there is the fault recovery warning information of same nature in the analytical database network analysis table;
B5. when having the fault recovery warning information of same nature in the Database Systems analytical table, whether the time interval of two fault recovery warning information generations is less than the disconnected cycle of default sudden strain of a muscle before and after further analyzing;
B6. when the time interval that analyzes front and back two fault recovery alarms generation is broken the cycle less than default sudden strain of a muscle, be judged as the disconnected character of sudden strain of a muscle and alarm, send the Database Systems analytical table to preserve this fault recovery warning information;
When b7. when at execution in step b2, analyzing the fault warning that does not have the alarm of fault recovery therewith correspondence in the Database Systems analytical table, or when execution in step b3, during interval greater than disconnected cycle of default sudden strain of a muscle, or when execution in step b4, when analyzing the fault recovery alarm that does not have same nature in the Database Systems analytical table, or when two fault recoveries alarm produces before and after analyzing when execution in step b5 interval greater than disconnected cycle of default sudden strain of a muscle, send display interface to show this fault recovery warning information, also send the Database Systems analytical table to preserve simultaneously with this fault recovery warning information net carrying pipe system database preservation with this fault recovery warning information.
6. the failure dependency analysis and the implementation method of a kind of network management system according to claim 5, it is characterized in that: further comprise among the described step b6, for the information that is judged as flash alarm, whether flash alarm is gone into the preservation of network management system database according to the warehouse-in preservation condition decision that the user is provided with.
7. the failure dependency analysis and the implementation method of a kind of network management system according to claim 6 is characterized in that: described warehouse-in preservation condition is that the related condition flash alarm at equipment is provided with on the interface and is provided with.
8. the failure dependency analysis and the implementation method of a kind of network management system according to claim 1, it is characterized in that: described failure dependency analysis and realization, be in network management system, each the bar fault warning information that collects carried out determining whether send the alarm business platform to show again after filterability is handled by alarm server.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 02149440 CN1266881C (en) | 2002-11-20 | 2002-11-20 | Fault coherence analysis of network management system and implement method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 02149440 CN1266881C (en) | 2002-11-20 | 2002-11-20 | Fault coherence analysis of network management system and implement method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1503508A true CN1503508A (en) | 2004-06-09 |
| CN1266881C CN1266881C (en) | 2006-07-26 |
Family
ID=34233658
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN 02149440 Expired - Lifetime CN1266881C (en) | 2002-11-20 | 2002-11-20 | Fault coherence analysis of network management system and implement method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN1266881C (en) |
Cited By (23)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100343818C (en) * | 2004-08-24 | 2007-10-17 | 华为技术有限公司 | Method for warning correlation mask |
| CN100421384C (en) * | 2005-04-08 | 2008-09-24 | 华为技术有限公司 | Method for shielding processing transient interruption notifying event |
| CN100438443C (en) * | 2006-05-08 | 2008-11-26 | 国家数字交换系统工程技术研究中心 | Method and system for fault management |
| CN100461688C (en) * | 2004-10-11 | 2009-02-11 | 华为技术有限公司 | Method for treating alarm message |
| CN1992636B (en) * | 2005-12-29 | 2010-04-21 | 华为技术有限公司 | System and method for processing warning information |
| WO2010060327A1 (en) * | 2008-11-03 | 2010-06-03 | 华为技术有限公司 | Alarm handling method, apparatus and system |
| CN101102217B (en) * | 2006-07-07 | 2010-06-09 | 中兴通讯股份有限公司 | Processing method for duplicate alert and discontinuous reporting and monitoring in telecom network management system |
| CN101222742B (en) * | 2007-11-22 | 2010-12-01 | 中国移动通信集团山东有限公司 | Alarm self-positioning and self-processing method and system for mobile communication network guard system |
| CN101128001B (en) * | 2006-08-18 | 2010-12-01 | 中兴通讯股份有限公司 | Processing method for surge alarm of network element management system |
| CN101296122B (en) * | 2008-06-23 | 2011-04-20 | 中兴通讯股份有限公司 | Analytical method and device for alarm relativity |
| CN101150431B (en) * | 2007-06-06 | 2011-05-11 | 中兴通讯股份有限公司 | A method for alarm processing streamline and alarm processing |
| CN102201927A (en) * | 2010-03-26 | 2011-09-28 | 北京市电力公司 | Alarm information processing method and device |
| CN101242614B (en) * | 2007-02-09 | 2011-12-21 | 鼎桥通信技术有限公司 | A base station alarm filtering method |
| CN101257694B (en) * | 2007-11-22 | 2012-11-07 | 中国移动通信集团山东有限公司 | Mobile communication network managing intelligent sending method based on information support system |
| CN103401700A (en) * | 2013-07-18 | 2013-11-20 | 大唐移动通信设备有限公司 | Processing method and equipment of frequency shake alarm |
| CN106292496A (en) * | 2016-08-31 | 2017-01-04 | 浙江浙大中控信息技术有限公司 | A kind of subway monitoring system alarming management method |
| CN107181604A (en) * | 2016-03-09 | 2017-09-19 | 华为技术有限公司 | A kind of generation method, alarm compression method and the device of alarm association rule |
| CN107360013A (en) * | 2016-05-10 | 2017-11-17 | 北京数码视讯科技股份有限公司 | A kind of alarm synchronization method and system |
| CN109164790A (en) * | 2018-09-27 | 2019-01-08 | 合肥昌燎科技有限公司 | A kind of automation control appliance failure safe detection processing method |
| CN111613035A (en) * | 2020-05-21 | 2020-09-01 | 浩云科技股份有限公司 | Alarm information automatic processing method, device and storage medium |
| CN112463551A (en) * | 2020-12-08 | 2021-03-09 | 杭州电子科技大学上虞科学与工程研究院有限公司 | Configurable alarm standardization method |
| CN113012431A (en) * | 2021-02-25 | 2021-06-22 | 青岛海信网络科技股份有限公司 | Method and device for detecting highway traffic incident |
| CN113724437A (en) * | 2021-08-30 | 2021-11-30 | 四川虹美智能科技有限公司 | Unattended alarm method and system for unattended selling cabinet |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101201786B (en) * | 2006-12-13 | 2010-05-19 | 中兴通讯股份有限公司 | Method and device for monitoring fault log |
-
2002
- 2002-11-20 CN CN 02149440 patent/CN1266881C/en not_active Expired - Lifetime
Cited By (25)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100343818C (en) * | 2004-08-24 | 2007-10-17 | 华为技术有限公司 | Method for warning correlation mask |
| CN100461688C (en) * | 2004-10-11 | 2009-02-11 | 华为技术有限公司 | Method for treating alarm message |
| CN100421384C (en) * | 2005-04-08 | 2008-09-24 | 华为技术有限公司 | Method for shielding processing transient interruption notifying event |
| CN1992636B (en) * | 2005-12-29 | 2010-04-21 | 华为技术有限公司 | System and method for processing warning information |
| CN100438443C (en) * | 2006-05-08 | 2008-11-26 | 国家数字交换系统工程技术研究中心 | Method and system for fault management |
| CN101102217B (en) * | 2006-07-07 | 2010-06-09 | 中兴通讯股份有限公司 | Processing method for duplicate alert and discontinuous reporting and monitoring in telecom network management system |
| CN101128001B (en) * | 2006-08-18 | 2010-12-01 | 中兴通讯股份有限公司 | Processing method for surge alarm of network element management system |
| CN101242614B (en) * | 2007-02-09 | 2011-12-21 | 鼎桥通信技术有限公司 | A base station alarm filtering method |
| CN101150431B (en) * | 2007-06-06 | 2011-05-11 | 中兴通讯股份有限公司 | A method for alarm processing streamline and alarm processing |
| CN101222742B (en) * | 2007-11-22 | 2010-12-01 | 中国移动通信集团山东有限公司 | Alarm self-positioning and self-processing method and system for mobile communication network guard system |
| CN101257694B (en) * | 2007-11-22 | 2012-11-07 | 中国移动通信集团山东有限公司 | Mobile communication network managing intelligent sending method based on information support system |
| CN101296122B (en) * | 2008-06-23 | 2011-04-20 | 中兴通讯股份有限公司 | Analytical method and device for alarm relativity |
| WO2010060327A1 (en) * | 2008-11-03 | 2010-06-03 | 华为技术有限公司 | Alarm handling method, apparatus and system |
| CN102201927A (en) * | 2010-03-26 | 2011-09-28 | 北京市电力公司 | Alarm information processing method and device |
| CN103401700B (en) * | 2013-07-18 | 2017-08-25 | 大唐移动通信设备有限公司 | The processing method and equipment of a kind of frequency shake alarm |
| CN103401700A (en) * | 2013-07-18 | 2013-11-20 | 大唐移动通信设备有限公司 | Processing method and equipment of frequency shake alarm |
| CN107181604A (en) * | 2016-03-09 | 2017-09-19 | 华为技术有限公司 | A kind of generation method, alarm compression method and the device of alarm association rule |
| CN107360013A (en) * | 2016-05-10 | 2017-11-17 | 北京数码视讯科技股份有限公司 | A kind of alarm synchronization method and system |
| CN106292496A (en) * | 2016-08-31 | 2017-01-04 | 浙江浙大中控信息技术有限公司 | A kind of subway monitoring system alarming management method |
| CN106292496B (en) * | 2016-08-31 | 2019-01-11 | 浙江浙大中控信息技术有限公司 | A kind of subway monitoring system alarming management method |
| CN109164790A (en) * | 2018-09-27 | 2019-01-08 | 合肥昌燎科技有限公司 | A kind of automation control appliance failure safe detection processing method |
| CN111613035A (en) * | 2020-05-21 | 2020-09-01 | 浩云科技股份有限公司 | Alarm information automatic processing method, device and storage medium |
| CN112463551A (en) * | 2020-12-08 | 2021-03-09 | 杭州电子科技大学上虞科学与工程研究院有限公司 | Configurable alarm standardization method |
| CN113012431A (en) * | 2021-02-25 | 2021-06-22 | 青岛海信网络科技股份有限公司 | Method and device for detecting highway traffic incident |
| CN113724437A (en) * | 2021-08-30 | 2021-11-30 | 四川虹美智能科技有限公司 | Unattended alarm method and system for unattended selling cabinet |
Also Published As
| Publication number | Publication date |
|---|---|
| CN1266881C (en) | 2006-07-26 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1266881C (en) | Fault coherence analysis of network management system and implement method | |
| Ambre et al. | Insider threat detection using log analysis and event correlation | |
| Aye | Web log cleaning for mining of web usage patterns | |
| CN101399658B (en) | Safe log analyzing method and system | |
| CN110740141A (en) | integration network security situation perception method, device and computer equipment | |
| US7961633B2 (en) | Method and system for real time detection of threats in high volume data streams | |
| Fu et al. | Digging deeper into cluster system logs for failure prediction and root cause diagnosis | |
| CN106371986A (en) | Log treatment operation and maintenance monitoring system | |
| EP3304397A1 (en) | Detecting anomalous accounts using event logs | |
| CN101075917A (en) | Method and apparatus for predicting network attack behaviour | |
| WO2011156731A2 (en) | Query pipeline | |
| CN115134250B (en) | Network attack tracing evidence obtaining method | |
| CN103107912A (en) | Abnormal detection system based on outlier excavation | |
| CN110519231A (en) | A kind of cross-domain data exchange supervisory systems and method | |
| CN111581056A (en) | Software engineering database maintenance and early warning system based on artificial intelligence | |
| CN113259316A (en) | Method and system for visualizing attack path in power system and electronic equipment | |
| CN114189367A (en) | Safety log analysis system based on knowledge graph | |
| CN114219374A (en) | Big data analysis decision system and method based on block chain | |
| CN113779573B (en) | Large-scale lux software analysis method and analysis device based on system traceability graph | |
| US11334626B1 (en) | Hybrid graph and relational database architecture | |
| CN110149303B (en) | Party-school network security early warning method and early warning system | |
| CN112583842A (en) | Network security situation awareness system platform based on data stream processing | |
| CN110941836A (en) | Distributed vertical crawler method and terminal equipment | |
| CN108984362A (en) | Log collection method and device, storage medium, electronic equipment | |
| CN111814013A (en) | Intelligent enterprise information processing method based on big data |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CX01 | Expiry of patent term |
Granted publication date: 20060726 |
|
| CX01 | Expiry of patent term |