JP2006246001A - Alarm processing system for network - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To efficiently save warning notification omission in a monitor device even in the case of the frequent occurrence of warning notification to be generated by each transmitter of a plurality of networks configured of a plurality of transmitters in the warning processing system of a network. <P>SOLUTION: In this warning processing system, a monitor device 1 is provided with a warning frequent occurrence monitoring part 15 for deciding whether or not the number of warning to be notified from a network has exceeded the threshold of the number of warning set by a number of warning threshold setting means installed inside, and a warning status combination processing part 14 to be started according to output obtained when it is decided that the number of warning has exceeded the threshold of the number of warning set by the warning frequent occurrence circumstance monitoring part 15 issues a warning acquisition request to the transmitter designated by the network, and acquires the warning information from the transmitter, and reflects it on a database. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an alarm processing system for a network.

  The present invention provides a gate transmission apparatus in which a plurality of networks that provide a user's communication path by connecting a plurality of transmission apparatuses through a transmission path are provided, and the monitoring apparatus that monitors and controls each network has a gateway function of each network. The present invention relates to a network alarm processing method for preventing the occurrence of alarm notification omission in a system that acquires and monitors alarm information from transmission devices in each network.

  The monitoring device that monitors and controls the network has a reception function (client system) that accepts service requests from maintenance operators, and a control function (server system) that is connected to the network and executes services accepted by the reception function A monitoring device called reception / control function type is configured, and alarms generated (or restored) in transmission devices in the network managed by the monitoring device are transmitted with a communication path (gateway function) to the monitoring device. The monitoring device is notified via the device (gate transmission device). In the monitoring device that has received the notification, the alarm information is displayed on an HMI (Human Machine Interface), so that the maintenance person can be notified of the occurrence or recovery of the alarm in real time. As described above, in order to transmit the alarm to the maintenance person in real time and without omission, it is important that the transmission device notifies the alarm reliably. However, the notification may be leaked due to congestion of the route for transmitting the alarm. There is a need for a solution.

  FIG. 7 shows a conventional system configuration. In the figure, 80 is a monitoring device (OPS: OPerating System) provided for monitoring and controlling a plurality of networks, 81-1, 81-2,..., 81-n each indicate a plurality of transmission devices. The networks 1 to n, 82 that provide communication paths to users by connecting via transmission lines are gate transmission apparatuses (GNE) having a gateway function for connecting a plurality of transmission apparatuses constituting each network and the monitoring apparatus 80. Indicated by: Gateway Network Element), 83 is a plurality of transmission devices (displayed by NE: Network Element) constituting each network 81, and is connected to the monitoring device 80 via the gate transmission device 82 or another transmission device 83. it can. Reference numeral 84 denotes an operating device (HMI: Human Machine Interface) which is connected to the monitoring device 80 and outputs a network status and inputs control / monitoring. The monitoring device 80 operated by the maintenance person holds information on the network constituting the business process 80a for realizing the monitoring / control function, the OS (operating system) 80b of the monitoring device (OPS) mounting machine, and the transmission device (NE). It consists of a device database (displayed by device DB) 80c and an alarm database (alarm DB) 80d that holds alarm information. Each alarm information includes a transmission device (NE) name, a network name, an alarm type, an occurrence time, and a recovery time. Consists of information. Although not shown, each transmission device 82, 83 has a buffer for storing alarm and recovery information.

  The monitoring device 80 monitors and controls each transmission device (including GNE82 and NE83) in each of the plurality of networks 1 to n, and when a failure is detected by the transmission device in the network, an alarm is generated / restored , Each transmission device is composed of a control signal channel for overhead (DCC line: Data Communication Channel, called control channel) rather than a channel for user communication signals on the transmission line connecting alarm / recovery information between the transmission devices. Is transmitted over the network. FIG. 8 shows a technique for transmitting alarm (or recovery) information.

  FIG. 8 is an explanatory diagram of alarm reception in the conventional system. In FIG. 8, the gate transmission device (GNE1) includes a buffer 820 for storing alarm data. In the example shown in FIG. 8, when an alarm is generated in one transmission device 83 (indicated by NE4) of the network 1 (81-1) or the cause of the alarm is restored, the transmission device (NE4) transmits the alarm information to the DCC line. (Control channel) notifies the gate transmission device (GNE1). The alarm / return information generated in the transmission device 83 other than the gate transmission device 82 is notified to the gate transmission device 82 in the network to which the transmission device 83 belongs via the control channel (DCC). The alarm / return information notified from the transmission device 83 is temporarily stored in the buffer 820, and the alarms in the buffer 820 are sequentially notified to the monitoring device 80. The monitoring device 80 that has received the notification reflects the alarm information in the alarm database 80d, so that each alarm information is sequentially stored in the alarm database 80d as shown enlarged on the right side. When the operation device 84 periodically acquires alarm information from the monitoring device 80 by polling, the state of the alarm occurrence is displayed on a screen as shown in the example of the main screen of the operation device in FIG.

  In order to know the detailed information of the alarm on the main screen of FIG. 9, it can be confirmed that the alarm detailed screen shown as an example in FIG. 10 is opened by operating the detail button. On this alarm details screen, NE (transmission device) name, network name, alarm type, occurrence time, recovery time, etc. are displayed.

  Further, the monitoring device 80 has a function of inquiring about alarm information currently generated in response to the designation. When the maintenance person operates the alarm acquisition request button on the screen of the operation device 84 in FIG. 9, the alarm in FIG. The acquisition request screen is displayed. On this screen, the alarm information is inquired by specifying the network name and NE (transmission device) name.

  FIG. 12 is an explanatory diagram of the alarm acquisition request process. This example is a case where an alarm acquisition request is generated for NE2 of network 1, and NE (transmission device) 2 receives the alarm acquisition request, and GNE (gate transmission) indicates the current alarm state held in alarm database 80d. The monitoring device 80 is notified via the device. The monitoring device 80 that has received the alarm information reflects the difference between the alarm information received from the NE (transmission device) and the alarm information held in the alarm database 80d in the alarm database 80d. Usually, since the alarm has already been notified, there is no difference and the alarm database 80d is not updated.

  As a method similar to the prior art described with reference to FIGS. 7 to 12, when monitoring information generated by a plurality of monitored devices is collected in the monitoring device via a common transmission path, in a normal state where the alarm frequency is low, A polling system that collects alarm information from monitored devices using a contention method and collects data by specifying the monitored device from the monitoring device to prevent the transmission efficiency from deteriorating when the frequency of alarm information increases. The invention of switching is known (see Patent Document 1 and Patent Document 2).

Also, in a network failure monitoring system consisting of multiple transmission devices, when a failure is reported from a transmission device (monitored device), the monitoring device receives the failure and updates the table, and a failure occurs in the transmission device where the failure has occurred. When the traffic rises and drops, the monitoring device issues a command to acquire the number of failures held for each transmission device, and the monitoring device recognizes the number of failures acquired from each transmission device. There is a technology that compares the number of faults of each transmission device to be held (holds), and if it does not match, instructs the transmission device to collect fault information and matches the number of faults recognized by the fault monitoring device with the number held by the transmission device Exists (see Patent Document 3).
JP-A-4-54097 JP 2002-57666 A JP-A-3-272235

  In the conventional techniques shown in FIGS. 7 to 12 (including the techniques of Patent Document 1 and Patent Document 2), the alarm generated / restored by the transmission device (NE) is immediately notified to the monitoring device without omission. The maintenance person can recognize the alarm in real time, but when the occurrence / restoration of alarms frequently occurs in multiple transmission devices (NE) in a network, the alarm is exceeded if the buffer capacity of the gate transmission device (GNE) is exceeded. Information cannot be stored. The alarm that could not be stored at this time cannot be notified to the monitoring device, and there is a problem that the alarm state of the monitoring device and the transmission device (NE) are different.

  However, since alarm information remains in the database that each transmission device (NE) has, even if the notification at the time of alarm occurrence / recovery leaks as in the technique shown in Patent Document 3, all transmission devices Issue a command to acquire the number of failures held by each of them, compare the number of failures recognized by the monitoring device with the number of failures acquired for each transmission device, and detect a mismatch. By executing the alarm information acquisition request from the monitoring device, the alarm status of the monitoring device and the transmission device (NE) can be matched. However, this method has a problem that it is necessary to execute a process such as issuing a command to each transmission apparatus and comparing it with the acquired number of cases. If such a command is not issued, the maintenance personnel of the monitoring device does not know when and which transmission device (NE) alarm leakage has occurred, and all the transmission devices (NE in the network where the alarm occurs frequently) ), The alarm information acquisition request must be executed and the alarm status must be adjusted. However, the burst of alarm information acquisition requests may increase network traffic and promote the occurrence of the above problem.

  It is an object of the present invention to provide a network alarm processing system that can efficiently relieve an alarm notification omission in a monitoring device even if alarm notifications that occur in each of the transmission devices of a plurality of networks each composed of a plurality of transmission devices occur frequently. Objective.

  FIG. 1 shows the basic configuration of the present invention. In the figure, 1 is a monitoring device, 10 to 13 are components similar to those provided in a conventional monitoring device, 10 is a business process, 11 is an OS (operating system) that is a control program, and 12 is a device database. (DB) and 13 are alarm databases (DB), 14 to 17 are components according to the present invention, and 14 is alarm information generated in the transmission device of each network and the monitoring device 1 receives and holds from the transmission device. An alarm status adjustment processing unit that performs processing to eliminate (match) the difference from the alarm status, 15 is an alarm frequent occurrence status monitoring unit that determines whether the number of alarms exceeds a preset threshold value, and 150 is an alarm number threshold value Setting means 16 is an alarm type monitoring unit for determining whether an alarm of a preset alarm type has occurred, 160 is a target alarm type setting means, and 17 is a network game. A traffic monitoring unit for discriminating whether the traffic between the transmission device (20 described later) and the monitoring device 1 is lower than a preset traffic value, 170 is a traffic value setting means, 18 is a communication unit, and 19-1 to 19-m Is an operating device that a network maintainer inputs and outputs to the monitoring device 1 for monitoring and control.

  Reference numerals 2-1 to 2-n denote a network 1 to a network n each composed of a plurality of transmission apparatuses. Reference numerals 20 and 21 denote transmission apparatuses constituting each of the networks 2-1 to 2-n. Reference numeral 20 denotes a gate transmission apparatus provided with means for transmitting / receiving monitoring / control signals to / from the monitoring apparatus 1 among the transmission apparatuses constituting each network. 21 is a transmission device (indicated by NE) other than the gate transmission device in each network by the gate transmission device 20 and a plurality of sequential transmission lines.

  In each of the networks 1 to n, a gate transmission device 20 and a plurality of transmission devices 21 are connected in a ring shape (or may be a star shape), and alarm / control information of each transmission path is transmitted to a control signal channel (DCC) as in the conventional case. The monitoring / control signal between the gate transmission device 20 and the monitoring device 1 is transmitted via a monitoring / control network.

  The monitoring device 1 has an alarm status adjustment processing unit that executes alarm status adjustment processing for preventing occurrence of alarm notification omission due to buffer overflow of the transmission device due to frequent occurrence of alarm information generated from the networks 1 to n. 14 and the conditions for starting this alarm state matching processing unit 14 are set as follows.

  The threshold of the number of alarms to be generated (number generated within a predetermined time) is set in the alarm number threshold setting means 150 by any one of the operation devices 19-1 to 19-m. An alarm type for starting the process of adjusting the state is set in the target alarm type setting means 160. Further, the traffic value of the network that may execute the alarm state matching process (the alarm state matching process is started when the traffic falls below this value) is set in the traffic value setting means 170.

  The alarm frequent occurrence status monitoring unit 15 monitors the alarm occurrence status (the number of alarms generated from each network within a certain time), and when the threshold set in the alarm number threshold setting means 150 is reached, the alarm status matching processing unit 14 is started. Further, when the alarm type monitoring unit 16 determines whether the alarm type generated from the network is the alarm type set in the target alarm type setting means 160, and if it is determined that the alarm of the set alarm type has occurred, the alarm state adjustment is performed. The processing unit 14 is activated.

  When the alarm state matching processing unit 14 is activated, the network to which the gate transmission apparatus 20 that has notified the alarm that satisfies the conditions of the alarm number threshold setting means 150 or the target alarm type setting means 160 belongs, and the transmission apparatus name of the network. Is obtained from the device database 12, the traffic between the gate transmission device 20 and the monitoring device 1 of the network is monitored by the traffic monitoring unit 17, and it is detected that the traffic value is lower than the traffic value set in the traffic value setting means 170. An alarm acquisition request is sent to the acquired transmission device (or gate transmission device), and the alarm information sent from the transmission device is reflected in the alarm database 13.

  In the above description, when the number of alarms reaches the threshold set in the alarm number threshold setting unit 150 by the alarm frequent occurrence monitoring unit 15 or the alarm type set in the target alarm type setting unit 160 by the alarm type monitoring unit 16 It is determined whether the traffic status by the traffic monitoring unit 17 is lower than the traffic value set in the traffic value setting unit 170 by detecting when the type is detected, and the alarm status matching processing unit 14 is activated. However, both the state in which the threshold set in the alarm number threshold setting unit 150 by the alarm frequent occurrence monitoring unit 15 and the state in which the alarm of the type set in the target alarm type setting unit 160 by the alarm type monitoring unit 16 has occurred are generated. When the above condition is satisfied, the alarm state matching processing unit 14 may be activated.

  According to the present invention, when notification omission due to frequent occurrence of alarm notifications in the network is predicted, by setting the alarm occurrence threshold and the alarm type that causes frequent occurrence of alarms, the alarm notification omission of the transmission device due to frequent occurrences of alarms is set. Even if it occurs, the alarm acquisition request is autonomously generated for the transmission device in the network, and the alarm information of each transmission device cannot be transmitted to the monitoring device. It becomes possible to convey.

  FIG. 2 shows an example of a notification omission relief condition setting screen. This screen is displayed on the display devices of the operation devices 19-1 to 19-m operated by the maintenance person in FIG. In this notification omission relief condition setting screen, the alarm occurrence threshold (number / second) is set in the alarm occurrence threshold input unit 19a as the alarm occurrence threshold value, and “100 / second” is input in this example. Yes. Next, the type of frequent factor alarm is input to the frequent factor alarm type input unit 19b. In this example, a plurality of alarms “alarm X, alarm Y,...” Are set. Further, a traffic value input unit 19c for executing notification omission relief is provided. In this example, "1000 (bps)" is set. In this way, after entering each item, you can operate from the “Yes” and “No” buttons displayed after the “Are you sure?” Message displayed at the bottom of the screen in FIG. When the user selects one and “Yes” is selected, each value input to each of the input units 19 a to 19 c is converted into the alarm number threshold setting means 150 of the alarm frequent occurrence status monitoring unit 15, the alarm type monitoring unit 16. The target alarm type setting means 160 and the traffic value setting means 170 at the time of relief execution of the traffic monitoring unit 17 are set.

  FIG. 3 is a diagram showing a processing flow of frequent alarm detection in the monitoring device and the mutual operation of each part. Each symbol in FIG. 3 corresponds to each part of the same symbol in FIG. 1, 20 at the right end represents a gate transmission device of each network, 13 is an alarm database (DB), and 10 is a task for performing a task process in the monitoring device 1. A process, 14 is an alarm state adjustment processing unit, and 15 is an alarm frequent occurrence state monitoring unit.

  When the gate transmission device 20 of each network generates an alarm on its own device or receives an alarm generated by the transmission device 21 under the gate transmission device 20, it notifies the alarm to the monitoring device 1 (a in FIG. 3). . Upon receiving this, the business process 10 of the monitoring device 1 stores it in the alarm database (DB) 13 (b in FIG. 3) and notifies the alarm occurrence status monitoring unit 15 of the occurrence of the alarm (the same c). The alarm frequent occurrence monitoring unit 15 determines whether an alarm has been notified (S1 in FIG. 3). If an alarm is notified, the current time is acquired (S2 in FIG. 3), and the previous alarm notification time and the current time are obtained. It is determined whether the difference is within 1 second or 1 second (S3). If it is within 1 second, add +1 to the number of alarms generated (S4), and if 1 second has elapsed, an alarm is generated. The number of cases is reset (S5). Subsequently, it is determined whether or not the number of alarm occurrences exceeds the threshold value for alarm generation (threshold value set in the alarm number threshold setting means 150 in FIG. 1) (S6 in FIG. 3). Issues an alarm status matching process execution request to the alarm status matching processing unit 14 (d in FIG. 3). The processing content of the alarm state adjustment processing unit 14 is shown in FIG.

  FIG. 4 shows an operation example of the recognition processing for frequent alarms. Each symbol in the figure corresponds to the same symbol in FIG. 1 and 19 is displayed as HMI (Human Machine Interface), but is the same as the operation device 19 in FIG. 1, and the gate transmission device 20 constituting the network 1 is GNE1. , 200 represents a buffer of GNE1, and five transmission devices 21 NE1 to NE5 are provided.

  If alarms frequently occur at NE 2, NE 4, etc. of the transmission device 21, a buffer excess occurs in the buffer 200 of the gate transmission device 20. At this time, an alarm is notified from the GNE 1 to the monitoring device 1, but a situation occurs in which some alarms are not transmitted due to buffer excess. As a result, the alarm frequent occurrence monitoring unit 15 performs monitoring according to the processing flow shown in FIG. 3 and adjusts the alarm state when the number of alarm occurrences within a certain time exceeds the threshold set in the alarm number threshold setting means 150. The processing unit 14 is activated, and processing shown in FIG. 6 to be described later is executed.

  FIG. 5 is a diagram showing a processing flow for alarm type recognition in the monitoring apparatus and the mutual operation of each part. In the figure, reference numerals 20, 13, 10, and 14 are the same as those in FIG. 3, and 16 is an alarm type monitoring unit (16 in the monitoring apparatus 1 in FIG. 1).

  An alarm from the gate transmission device 20 of each network (including an alarm generated from the subordinate gate transmission device 20) is received by the business process 10 (a in FIG. 5), and the business process 10 is stored in the alarm database (DB) 13. The alarm information is stored (the same b) and at the same time, the alarm type monitoring unit 16 is notified of the occurrence of the alarm (the same c). The business process 10 also notifies the occurrence of an alarm to the alarm frequent occurrence status monitoring unit 15 as shown in FIG.

  The alarm type monitoring unit 16 determines whether an alarm has been notified (S1 in FIG. 5). If an alarm has been notified, the alarm type becomes an alarm type that causes frequent alarms (target alarm type setting means 160 in FIG. 1). (S2 in FIG. 5). If not, the process returns to step S1. If they match, an alarm status matching process execution request is issued to the alarm status matching processing unit 14 (S2 in FIG. 5). D) in FIG.

  FIG. 6 is a diagram showing the mutual operation of each part related to the processing flow of alarm status adjustment in the monitoring device. Each symbol in the figure corresponds to each part having the same symbol as shown in FIG. 1. From the right end, 12 is a device database (DB), 10 is a business process, 17 is a traffic monitoring unit, and 14 is an alarm status matching processing unit. .

  When the alarm status matching processing unit 14 is activated by the generation of an alarm status matching execution request by the processing in the alarm frequent occurrence monitoring unit 15 shown in FIG. 3 or the alarm type monitoring unit 16 shown in FIG. 5 (FIG. 6). S1), the network name acquisition request that generated the alarm that caused the activation is sent to the device database (DB) 12 (a in FIG. 6), the network name is acquired (b), and the network name is further acquired. A request for obtaining a list of transmission devices (NE) in the network is sent to the device database (DB) 12 (same as c), and the name of the transmission device (NE) is obtained (same as d). Thereafter, a traffic acquisition request for the network having the acquired network name is sent to the traffic monitoring unit 17 (e in FIG. 6), and a corresponding traffic value is obtained (f). The alarm state matching processing unit determines whether the acquired traffic is equal to or less than the specified load (the traffic value set in the traffic value setting unit 170 in FIG. 1) (S2 in FIG. 6). Returning to the previous process, when the load is equal to or less than the specified load, the alarm acquisition request process is executed by specifying the name of the transmission apparatus (NE) acquired from the apparatus database (DB) 12 (g in FIG. 6). Thus, when the alarm information from the designated transmission device (NE) is acquired, the state is reflected in the alarm database (13 in FIG. 1) not shown in FIG. Subsequently, it is determined whether or not processing has been performed for all acquired transmission devices (NE) (S3 in FIG. 6). If processing has not been performed for all, acquisition of network traffic values that have not been performed ( Returning to e) of FIG.

  As the transmission capacity of the transmission equipment that constitutes the transmission network increases, the impact on the service when a failure occurs increases. On the other hand, the increase in traffic due to the increase in alarm notifications caused by a single failure The alarm information to be recognized and recorded does not match the actual information generated by the transmission equipment, and a leak occurs, making it difficult to identify the cause of the failure. It takes time to start maintenance work. It is industrially useful to prevent the occurrence of such a situation in monitoring a plurality of networks according to the present invention.

It is a figure which shows the basic composition of this invention. It is a figure which shows the example of a notification omission relief condition setting screen. It is a figure which shows the processing flow of the alarm frequent occurrence detection in a monitoring apparatus, and the mutual operation | movement of each part. It is a figure which shows the operation example of the recognition process of frequent occurrence of an alarm. It is a figure which shows the processing flow of alarm classification recognition in a monitoring apparatus, and the mutual operation | movement of each part. It is a figure which shows the processing flow of alarm status adjustment in a monitoring apparatus, and the mutual operation | movement of each part. It is a figure which shows the system configuration | structure of a prior art example. It is explanatory drawing of the alarm reception in the system of a prior art example. It is a figure which shows the example of the main screen of an operating device. It is a figure which shows the example of an alarm detailed screen. It is a figure which shows the example of an alarm acquisition request screen. It is explanatory drawing of a warning acquisition request process.

Explanation of symbols

1 Monitoring Device 2-1 to 2-n Network 10 Business Process 11 OS (Operating System)
12 Device database (DB)
13 Alarm database (DB)
14 Alarm status matching processing unit 15 Alarm frequent occurrence status monitoring unit 150 Alarm number threshold setting unit 16 Alarm type monitoring unit 160 Target alarm type setting unit 17 Traffic monitoring unit 170 Traffic value setting unit 18 Communication unit 19-1 to 19-m Operation Equipment 20 Gate transmission equipment (GNE)
21 Transmission equipment (NE)

Claims (4)

A plurality of networks in which a plurality of transmission devices are connected by a transmission line are provided, each network is connected to a monitoring device via a gate transmission device in the network, and an alarm generated in each transmission device is a control signal channel on the transmission line. In the network alarm processing system, which is temporarily stored in the buffer of the gate transmission device, passed through to the monitoring device, and stored in the monitoring device database.
The monitoring device includes an alarm frequent occurrence status monitoring unit that determines whether the number of alarms notified from the network exceeds an alarm number threshold set in an alarm number threshold setting means provided therein, and the alarm frequent occurrence status monitoring unit A function for generating an alarm acquisition request to a transmission device designated on the network when the output is determined to have exceeded the set alarm number threshold, and acquiring the alarm information from the transmission device and reflecting it in the database An alarm state adjustment processing unit,
A network alarm processing system characterized by comprising: A plurality of networks in which a plurality of transmission devices are connected by a transmission line are provided, each network is connected to a monitoring device via a gate transmission device in the network, and an alarm generated in each transmission device is a control signal channel on the transmission line. In the network alarm processing system that is temporarily stored in the buffer of the gate transmission device through the output and output to the monitoring device and accumulated in the database of the monitoring device,
The monitoring device includes: an alarm type monitoring unit that determines whether an alarm type notified from the network matches an alarm type set in a target alarm type setting unit provided therein; and the alarm type monitoring unit An alarm that has the function of generating an alarm acquisition request to a transmission device specified on the network when the output is determined to match the set alarm type, acquiring the alarm information from the transmission device, and reflecting it in the alarm database A state matching processing unit;
A network alarm processing system characterized by comprising: In either claim 1 or claim 2,
The monitoring device includes a traffic monitoring unit that includes a traffic value setting means for setting a traffic value and monitors a traffic value of a target network,
The alarm status matching processing unit executes the alarm status matching processing when the traffic monitoring unit detects that the traffic value of the target network is less than or equal to the traffic value set in the traffic setting means. Characteristic network alarm processing method. In claim 1,
The monitoring device includes an alarm type monitoring unit that determines whether an alarm type notified from the network matches an alarm type set in a target alarm type setting unit provided therein,
The alarm status matching processing unit is activated by either an output that determines that the alarm type notified by the alarm type monitoring unit matches the set alarm type or an output of the alarm frequent occurrence status monitoring unit Network alarm processing system characterized by

Images