JPH03123230A - Early alarm detector relating to network monitor system - Google Patents

Abstract

PURPOSE:To detect a fault caused in a network early and to quickly analyze the cause by providing a line connection table, an analysis processing means and a relating alarm processing means to a monitor. CONSTITUTION:A monitor 6 applies polling sequentially to the monitored equipments 81-8n via the monitor lines 91-9n in the normal state and receives alarm information sequentially from the monitored equipments 81-8n. Suppose that polling is given to the monitored equipment 7i, then alarm information received from the equipment 7i is analyzed by an analysis processing means 62 to check to which the alarm information relates. As the result of the analysis, when the alarm information is detected to be relating to a fault of a line 8m connecting to the equipment 7i, a relating alarm processing means 63 references a line connection table 61 to detect other monitored equipment 7n relating to the line 8m. Then the sequence of the succeeding polling is revised and the retrieved equipment 7n receives polling with priority.

Description

[Detailed Description of the Invention] [Summary] In a network monitoring system configured such that a monitoring device monitors the alarm occurrence status of a plurality of monitored devices by polling, related alarms occurring in the network can be detected early. Regarding alarm early detection devices related to network monitoring systems.

The purpose is to operate network monitoring systems efficiently and improve their reliability by quickly detecting network failures and quickly analyzing their causes.

a line connection data table storing connection information consisting of a name of the monitored device related to each line connecting the monitored devices, and an analysis processing means for analyzing alarm information received from the monitored device through polling; Related alarm processing that, when a line alarm is detected by the analysis processing means, refers to the 9-line connection data table and polls other monitored devices related to that line on a priority basis to collect alarm information. The monitoring device is equipped with means.

[Industrial Application Field] The present invention is a network monitoring system in which a monitoring device is configured to monitor the alarm occurrence status of a plurality of monitored devices, and is capable of efficiently and early detecting related alarms occurring in a network. The present invention relates to a related alarm early detection device for a network monitoring system.

Today, as communication networks are developing and larger network systems are being constructed, it is important to improve the reliability of network systems by efficiently and promptly detecting and dealing with failures that occur in networks. is needed.

[Conventional technology] Conventionally, a monitoring device and multiple monitored devices (
(e.g. data terminal equipment).

In a network where these multiple monitored devices are connected via lines so that data can be sent and received mutually, the monitoring device collects alarm information by sequentially polling these multiple monitored devices. A network monitoring system based on the above is known.

In this network monitoring system, when a monitoring device monitors multiple monitored devices by polling,
The polling order for these monitored devices is fixedly determined to be a certain order, regardless of whether an alarm occurs in each monitored device.

[Problem to be solved by the invention] For example, if a certain line in a network has a fault, all monitored devices connected to that line will simultaneously generate some kind of alarm due to the influence of the line fault. There is a high possibility that

On the other hand, alarm monitoring by the monitoring device is based on a polling method from the monitoring device.

Even when alarms are generated from multiple monitored devices simultaneously due to the same factor as described above.

If the monitored device is polled later in the order, alarm detection will be delayed.

For example, in the case of a line failure, the cause can be easily identified by collecting and analyzing related alarm information from all monitored devices connected to the failed line, but conventional network monitoring Since the system only performs polling in a uniform order, in order to collect related alarm information due to the same cause, it is necessary to collect alarm information once from all monitored devices in the network. Therefore, related alarm information is not collected efficiently.

There is a problem in that it takes time to determine the exact cause of the alarm.

In addition, if it takes a long time from the occurrence of an alarm in the monitored device to the detection of the alarm by the monitoring device, for example, countermeasures may not be taken during that time (if the alarm condition is restored, the alarm detection may become meaningless). It is a point.

Therefore, an object of the present invention is to quickly detect failures that occur in a network and quickly analyze their causes, thereby enabling efficient operation of a network monitoring system and improving its reliability. be.

[Means to solve the problem] FIG. 1 is a diagram explaining the principle of the present invention.

The related alarm early detection device of the network monitoring system according to the present invention includes the monitoring device 6 and the lines 8 to 8, respectively.
Multiple monitored devices 7 - 7 interconnected by [phase]
In a network with @ and.

In a network monitoring system configured such that a monitoring device 6 sequentially polls a plurality of monitored devices 7 - 7 to collect alarm information, the monitoring device 6 has a plurality of monitored devices 7 - 7 ■Each line connecting between 8■～
A line connection data table 61 storing connection information consisting of names of monitored devices involved in the line for 8 [phases], an analysis processing means 62 for analyzing alarm information received from the monitored device by polling, and an analysis processing means. When a line alarm is detected at 62, related alarm processing means refers to the line connection data table 61 and collects alarm information by preferentially polling other monitored devices involved in the line. 63.

[Function] In the normal state, the monitoring device 6 sequentially polls the monitored devices 8■ to 8@ via the monitoring lines 9■ to 9■, and issues an alarm sequentially from each monitored measure 8■ to 8■. Receive information.

Assume that the monitored device 7■ has now been polled, and the analysis processing means 62 analyzes the alarm information received from the monitored device 7■ to find out what alarm the alarm information relates to.

As a result of this analysis, it is assumed that the alarm information is detected to be related to a failure in the line 8 [phase] to which the polled monitored device 72 is connected. Then, the related alarm processing means 63 outputs the line connection data table 6.
1 and searches for other monitored devices 7■ that are involved in the faulty line 8@l.

In the next polling, the normal polling order is changed so that the searched monitored device 72 is given priority.

With this, when an alarm is detected from any monitored device, related alarm information can be quickly and efficiently collected from other monitored devices.

The cause of alarm occurrence can be quickly analyzed and the network monitoring system can be operated efficiently.

[Example] The present invention will be described in detail below with reference to nine drawings.

FIG. 2 shows a related alarm early detection device for a network monitoring system as an embodiment of the present invention, and FIG. 3 shows the overall configuration of a network monitoring system to which this embodiment device is applied.

In FIG. 3, the network of the embodiment includes a monitoring device l and six monitored devices 21 to 26, and each monitored device 21
26 are appropriately connected by control paths 31 to 36, and monitored devices interconnected by these control paths 31 to 36 can mutually send and receive data via the control paths. It has become.

Further, the monitoring device l and each of the monitored devices 21 to 26 are connected by monitoring control paths 41 to 46, respectively.
The monitoring device 1 can collect alarm information from each monitored device by sequentially polling each of the monitored devices 21 to 26 via the monitoring control paths 41 to 46.

This alarm information includes alarms related to the monitored device itself and alarms related to control paths connected to the monitored device.

A detailed configuration example of the monitoring device 1 and the monitored devices 21 to 26 is shown in FIG. The monitored device 21 includes a communication processing section 211 that communicates with other monitored devices 22.26 via a control path 31.36, and a communication processing section 211 that communicates with other monitored devices 22.26 via a control path 31.36. A status collection unit 212 that collects status information such as alarms. The communication processing unit 213 includes a communication processing unit 213 that transmits the status information collected by the status collection unit 212 to the monitoring device 1 via the monitoring control path 41 in response to polling.

Although the other monitored devices 22 to 26 are not shown in FIG. 2, they have the same configuration as the monitored device 21.

The monitoring device l includes a communication processing unit 11. which communicates with the monitored devices 21-26. A processing program execution unit 12 that executes various processing programs. It is configured to include a line connection data table 13 and the like.

The line connection data table 13, as shown in FIG. 2, is for each of the control buses 31-37 interconnecting the monitored devices 21-26.

Using the control bus number as an index, the number of the monitored device connected to each control bus is used as connection information for the monitored device related to the control bus.

This is a table that stores each connection information so that it can be searched.

Each process in the processing program execution unit 12 is realized in software, and in FIG. 2, these are expressed in the form of functional blocks. That is, the response analysis processing section 14 analyzes response information received from each monitored device 21 to 26 via the communication processing section 11, detects the type of alarm, etc., and performs alarm notification processing on the alarm analysis results. If the alarm analysis result is related to the control buses 31 to 37, the information is transmitted to the related alarm processing section 16.

When the alarm notification processing unit 15 receives alarm information, the alarm notification processing unit 15 receives the alarm information.
Processing is performed so as to notify the operator of this by means of notification, and the notification means may include a display,
Means such as displaying on a printer or sounding a buzzer can be used.

When the related alarm processing section 16 is notified of alarm detection on the control buses 31 to 37 from the response analysis processing section 14, it refers to the 9-line connection data table 13 and determines which other monitored devices are involved in the control bus where the alarm was detected. 9, and controls the communication processing unit 11 to perform the next polling on those monitored devices, giving priority to the normal polling order.

The operation of the embodiment apparatus will be explained below with reference to FIG. FIG. 4 is a flowchart of a processing program in the monitoring device 1.

The monitoring device 1 sequentially polls the monitored devices 21 to 26 via the monitoring control buses 41 to 46, and repeats this process. That is, the device 21→device 22→・
. . . The device 26 → the device 21 → etc. are repeatedly polled.

Assuming that the monitored device 22 has now been polled (step si), response information returned from the monitored device 22 in response to this polling is received via the communication processing section 11 (step S2). This response information is analyzed by the response processing unit 14, and it is checked whether there is an alarm related to the control bus (step S3).

Assume that an alarm on the control bus 37 is now detected.

In this case, after the alarm notification processing unit 15 notifies the operator of the occurrence of an alarm (step S4), the related alarm processing unit 16 refers to the line connection data table 13 and determines the monitored device number related to the control bus 37. Step 56) Prioritize primary polling for this monitored device 26 by searching for other monitored devices participating in the control bus 37 other than the monitored device 22, i.e., the monitored device 26. (step S7). As a result, a response is received from the monitored device 26, and if an alarm is detected during the response (step S9), the alarm notification processing unit 15 notifies the operator of the occurrence of the alarm (step 510).

The above process is repeatedly performed on the monitored devices 21 to 26.

By doing so, when an alarm is detected from any monitored device, related alarms caused by the same factor can be efficiently and quickly collected from other monitored devices and notified to the operator.

[Effects of the Invention] As explained above, according to the present invention, when an alarm is detected from any monitored device, related alarms can be efficiently collected from other monitored devices at an early stage and sent to the operator. As a result, the cause of the alarm occurrence can be quickly analyzed, and the network monitoring system can be operated efficiently.

[Brief explanation of drawings]

FIG. 1 is a diagram explaining the principle of the present invention. FIG. 2 is a block diagram showing a related alarm early detection device of a network monitoring system as an embodiment of the present invention. FIG. 3 is a block diagram showing the overall configuration of a network to which the embodiment device is applied; FIG. 4 is a flowchart showing the processing procedure of the monitoring device in the embodiment. In fig. 1...Monitoring device 11.211,213...Communication processing section 12...Processing program execution section 13...Line connection data table 14...Response analysis processing section 15...Alarm notification processing section Main Figure 1 explaining the principles of the invention: Related alarm processing unit: Status collection unit, Gosawa device Figure 2: Practical example of the invention

Claims (1)

[Claims] 1. Monitoring device (6) and respective lines (8[1] to 8[
A plurality of monitored devices (7 [1
] to 7[n]), the monitoring device (6) sequentially polls the plurality of monitored devices (7[1] to 7[n]) to collect alarm information. In a network monitoring system configured to collect data, each line (8[1] to 8[m] connecting the monitored device (7[1] to 7[n]) to the monitoring device (6) ]), a line connection data table (61) that stores connection information consisting of names of monitored devices involved in the line, and an analysis processing means (62) that analyzes alarm information received from the monitored device through polling. , When the analysis processing means (62) detects a line alarm, it refers to the line connection data table (61) and polls other monitored devices related to the line with priority. A monitoring alarm early detection device for a network monitoring system, comprising related alarm processing means (63) for collecting alarm information.