KR20180005512A - Apparatus and method for detecting error occurrence - Google Patents

Abstract

The present invention provides a device and a method for judging a failure occurrence, which analyze event information of a failure event generated from a communication device, predict whether the failure event occurs, and provide the predicted result to a manager. The device for judging a failure occurrence comprises: a collection part collecting the event information with respect to the event generated from a plurality of communication devices; a registration part registering a window size with respect to the plurality of communication devices; a tree building part building an event tree based on a plurality of events related to a predetermined event and the registered window size, if the predetermined event generated from the plurality of communication devices occurs; and an analysis part analyzing the collected event information based on the built event tree.

Description

[0001] APPARATUS AND METHOD FOR DETECTING ERROR OCCURRENCE [0002]

The present invention relates to a fault occurrence determination apparatus and a fault occurrence determination method.

ICT (Information Communication Technology) Integrated control system is a system of integrated control system that manages IT infrastructure and can collectively judge the overall IT resource situation through linkage of various factors.

In the case of CT resources, the ICT integrated control system collects information through protocols (SNMP, CMIP, etc.) provided by the network equipment or manages information by using commands such as syslog, trap and cli to manage network and line equipment By collecting, fault and performance information can be monitored and provided to the administrator. In the case of IT resources, the ICT integrated control system can periodically collect system failure detection information, application failure information, and performance information by using network connection (ping, etc.) and provide fault events to the administrator.

With respect to this ICT integrated control system, Korean Patent Registration No. 10-1204236, a prior art, discloses an integrated control system and method.

However, the existing ICT integrated control system can not judge the service failure by only a plurality of failure events generated in the equipment when a plurality of failures occur. In addition, since the event information generated by the equipment may not be related to the actual service failure, it is difficult to determine the service failure based on only one failure event.

The present invention provides a fault occurrence determination apparatus and a fault occurrence determination method that predicts whether a fault event is generated by analyzing event information of a fault event generated in a communication device, and provides a prediction result to an administrator. The present invention provides a fault occurrence determination device and a fault occurrence determination method that minimize the loss due to a fault occurrence when a fault occurs and allow the administrator to quickly respond to the fault event. By learning a pattern of an event that can occur for each equipment, it is possible to construct a variety of large-scale events as a knowledge base, and to make it possible to anticipate and prevent failures occurring in repetitive and various types, Method. It is to be understood, however, that the technical scope of the present invention is not limited to the above-described technical problems, and other technical problems may exist.

According to an aspect of the present invention, there is provided a communication system including a collecting unit for collecting event information on events generated from a plurality of communication equipments, a registration unit for registering a window size for the plurality of communication equipments, A tree construction unit for constructing an event tree based on a plurality of events related to the preset event and the registered window size when a predetermined event is generated from the plurality of communication equipments, And an analyzer for analyzing the collected event information.

According to another embodiment of the present invention, there is provided a communication apparatus including a collection unit for collecting event information on events generated from a plurality of communication equipments, a registration unit for registering a window size for the plurality of communication equipments, A tree construction unit for constructing an event tree based on the event information, and analyzing the collected event information based on the constructed event tree to predict whether a service fault event occurs in at least one of the plurality of communication equipments It is possible to provide a fault occurrence determination apparatus including a prediction unit.

According to another embodiment of the present invention, there is provided a method for controlling a communication device, the method comprising: collecting event information for an event generated from a plurality of communication devices; registering a window size for the plurality of communication devices; The method comprising the steps of: constructing an event tree based on a plurality of events related to the preset event and the registered window size when an event occurs, analyzing the collected event information based on the constructed event tree, And estimating whether or not a service fault event occurs in at least one of the communication devices.

The above-described task solution is merely exemplary and should not be construed as limiting the present invention. In addition to the exemplary embodiments described above, there may be additional embodiments described in the drawings and the detailed description of the invention.

According to any one of the above-mentioned objects of the present invention, there is provided a fault occurrence determination device for analyzing event information of a fault event generated in a communication device to predict whether or not a fault event is generated, A judgment method can be provided. It is possible to provide a failure occurrence determination device and a failure occurrence determination method that minimize the loss due to the occurrence of a failure when a failure occurs and provide reliability so that the administrator can quickly respond to the failure event. By learning a pattern of an event that can occur for each equipment, it is possible to construct a variety of large-scale events as a knowledge base, and to make it possible to anticipate and prevent failures occurring in repetitive and various types, Method can be provided.

1 is an exemplary diagram for explaining a process of providing failure event information when an event is generated in a conventional communication device.
2 is a configuration diagram of a fault occurrence determination system according to an embodiment of the present invention.
3 is a block diagram of a fault occurrence determination apparatus according to an embodiment of the present invention.
4 is an exemplary diagram illustrating a registration UI of attribute information for a window size and event information according to an exemplary embodiment of the present invention.
5 is an exemplary diagram illustrating a process of constructing an event tree in the fault occurrence determination apparatus according to an embodiment of the present invention.
6 is a flowchart illustrating a method of analyzing event information by constructing an event tree according to a preset event in the fault occurrence determination apparatus according to an embodiment of the present invention.
FIG. 7 is a flowchart of a method for determining a failure occurrence in a failure occurrence determination apparatus according to an embodiment of the present invention. Referring to FIG.
8 is an exemplary diagram for explaining a process of estimating whether a service fault event is generated by analyzing event information collected by the fault occurrence determination apparatus according to an embodiment of the present invention.
9 is an exemplary diagram for explaining a process of comparing the event information and the event tree in the fault occurrence determination apparatus according to an embodiment of the present invention to calculate the match degree.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "including" an element, it is to be understood that the element may include other elements as well as other elements, And does not preclude the presence or addition of one or more other features, integers, steps, operations, components, parts, or combinations thereof.

In this specification, the term " part " includes a unit realized by hardware, a unit realized by software, and a unit realized by using both. Further, one unit may be implemented using two or more hardware, or two or more units may be implemented by one hardware.

In this specification, some of the operations or functions described as being performed by the terminal or the device may be performed in the server connected to the terminal or the device instead. Similarly, some of the operations or functions described as being performed by the server may also be performed on a terminal or device connected to the server.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary diagram for explaining a process of providing failure event information when an event is generated in a conventional communication device. Referring to FIG. 1, when a failure occurs in a graphics card or a main board in a communication device, the communication device can provide various kinds of failure events and performance / quality events to the manager without directly down the system.

For example, when a failure event occurs, the communication device can provide a syslog message provided by the main board to a manager terminal (not shown) in a notification form. In another example, when a performance / quality event occurs, the communication device provides a load average, a CPU average, a free memory, a standby QUEUE SIZE, and the like of the communication equipment as threshold event information to the administrator or the user can do.

The administrator terminal (not shown) receives over / under event information on the failure event and the performance threshold from the communication equipment and displays, for example, a total of nine event information through a display.

However, when the event information is excessively generated, and the recently generated event and the unprocessed event are mixed, the manager has a disadvantage that it is difficult to detect a simple fault generated in the communication equipment. In addition, when the failure events are accumulated, a fault occurs in the main board and the normal communication service can not be provided.

2 is a configuration diagram of a fault occurrence determination system according to an embodiment of the present invention. Referring to FIG. 2, the failure occurrence determination system 1 may include a plurality of communication devices 210 and a failure occurrence determination device 220. The plurality of communication devices 210 and the failure occurrence determination device 220 shown in FIG. 2 illustratively show the components that can be controlled by the failure occurrence determination system 1. As shown in FIG.

Each component of the failure occurrence judgment system 1 of FIG. 2 is generally connected via a network. For example, as shown in FIG. 1, the failure occurrence determination device 220 may be connected to the plurality of communication devices 210 at the same time or at intervals.

The network refers to a connection structure in which information can be exchanged between each node such as terminals and servers. An example of such a network is 3G, 4G, 5G, Wi-Fi, Bluetooth, , A LAN (Local Area Network), a Wireless LAN (Local Area Network), a WAN (Wide Area Network), a PAN (Personal Area Network), and the like.

The plurality of communication devices 210 may transmit the event information about the generated event to the failure occurrence determination device 220. The plurality of communication devices 210 may be IT or CT equipment. Events generated in the plurality of communication devices 210 may include performance / quality events based on performance / quality data such as failure events based on failure data, loss / delay / throughput, and service failure events. The fault event may include an inform fault event, a minor fault event, a major fault event, and a critical fault event depending on the degree of the fault. The performance / quality event may mean that the performance / quality data is eventized when the data exceeds the predetermined threshold.

The failure occurrence determination device 220 can collect event information on events generated from the plurality of communication devices 210. [ For example, the failure occurrence determination device 220 may collect event information about an event from a plurality of communication devices 210 in a polling manner using a trap or SNMP.

The failure occurrence determination device 220 can register a window size for a plurality of communication devices 210. [ At this time, the failure occurrence determination device 220 can register the window size so as to correspond to the number of events to be monitored for each communication device. In addition, the failure occurrence determination apparatus 120 may register attribute information of a plurality of event information included in the event tree. The attribute information may include the order of each event, the duration of each event, and whether or not each event is redundant.

The failure occurrence determination device 220 can determine whether a service failure event is generated based on the network connection state between the event information and the corresponding communication device at each time point at which the event information is collected.

When a predetermined event is generated from a plurality of communication devices 210, the failure occurrence determination device 220 can construct an event tree based on a plurality of events related to a preset event and a registered window size. At this time, the failure occurrence determination device 220 can construct an event tree for each communication device. The predetermined event may include a critical failure event, a service failure event, and the like.

For example, when a critical failure event occurs as a preset event, the failure occurrence determination unit 220 stores event information of a plurality of events generated before a critical event occurs and corresponding to the registered window size, Can be constructed.

For example, when a service fault event occurs in a preset event, the fault occurrence determination unit 220 stores event information of a plurality of events that occurred before the occurrence of the service fault event and corresponded to the registered window size You can build an event tree.

The failure occurrence determination device 220 compares event information of a plurality of events generated before the preset event is generated and corresponding to a registered window size with the established event tree to generate event information about a new event in the event tree Can be added.

The failure occurrence determination device 220 may analyze the collected event information based on the constructed event tree to predict whether a service failure event occurs in at least one of the plurality of communication devices 210. [ At this time, the failure occurrence determination device 220 can predict whether or not a service failure event occurs for each communication device.

For example, the failure occurrence determination device 220 compares the event information of the plurality of events corresponding to the registered window size with the event tree at each time when the event information is collected, Can be predicted. At this time, the failure occurrence determination device 220 may display the maximum value of the match degree calculated for each communication device through a separate display.

3 is a block diagram of a fault occurrence determination apparatus according to an embodiment of the present invention. 3, the fault occurrence determination apparatus 220 may include a collecting unit 310, a registering unit 320, a failure determining unit 330, a tree building unit 340, and an analyzing unit 350.

The collecting unit 310 may collect event information on events generated from the plurality of communication equipments 110. Events generated from a plurality of communication devices 110 may include performance / quality events based on performance / quality data such as failure events based on failure data, loss / delay / throughput, and service failure events. The collecting unit 210 collects event information about events generated in the plurality of communication equipments 110 by a polling method using a trap or SNMP and manages the event information as raw data .

The registration unit 320 can register a window size for the plurality of communication equipments 110. At this time, the registration unit 320 may register the window size so as to correspond to the number of events to be monitored for each communication device, and may be set to a default value. For example, the registration unit 220 may register the name of the communication equipment to be provided with the failure occurrence determination service, basic information of the window size, IP or URL used by the customer.

The registration unit 320 can register attribute information of a plurality of event information included in the event tree. The attribute information indicates the attribute of the event node corresponding to each event information included in the event tree for each communication device. For example, whether or not the order of each event, the duration of each event, and the redundancy of each event are allowed . ≪ / RTI >

The window size of the plurality of communication equipments 210 and registering the attribute information of the plurality of event information included in the event tree in the registration unit 320 will be described in detail with reference to FIG.

4 is an exemplary diagram illustrating a registration UI of attribute information for a window size and event information according to an exemplary embodiment of the present invention. Referring to FIG. 4, the failure occurrence determination device 220 can register an event window for each communication device 210 by registering window size and event attribute information for each device to provide a failure occurrence determination service .

The registration UI may include a window size registration UI 410 and a registration UI 420 of attribute information for event information.

The registration unit 320 can register the settings for the equipment 411, the service IP 412, and the window size 413 through the window size registration UI 410. For example, the registration unit 320 selects a device 411 to be managed by the administrator through the window size registration UI 410, receives the user's IP or URL through the service IP 412, The number of monitoring events for providing the failure occurrence judgment service of the corresponding equipment can be registered. For example, the registration unit 320 can register four window sizes for one piece of equipment.

The registration unit 320 registers the equipment 421, the event order 422, the redundancy permission 423, the duration 424, and the number of occurrences 425 through the registration UI 420 of the attribute information about the event Can receive. For example, the registration unit 320 selects the equipment 421 to be managed through the registration UI 420 of the attribute information about the event, and the event generated through the event sequence 422 includes a series of Whether or not to perform a check as to whether the event is related to the order in which the event is generated is set to Y / N, whether or not to allow a single event to occur redundantly through redundancy permission 423 is determined by Y / N And sets the time for which the occurrence of the fault in the case where the occurrence and the cancellation of the fault for the event is repeated is maintained through the duration 424 and sets a threshold value for the minimum event occurrence number through the occurrence number 425 Can be set.

When the registration of the attribute information for the event is completed, the input result can be displayed through the essential failure event processing list registration result 426. [ For example, when one device and four window sizes are registered through the window size registration UI 410, the failure occurrence determination device 220 can construct an event tree from Events 1 to 4, May be constructed based on the attribute information.

The failure determination unit 330 may determine whether a service fault event is generated based on the network connection state between the event information and the corresponding communication equipment at each time of collecting the event information. For example, the failure determination unit 330 can determine whether a service failure event has occurred by searching the event information database that has been learned in the pattern of the service failure that has occurred in the past using the event information that has recently occurred.

The tree construction unit 340 may construct an event tree based on a plurality of events related to a preset event and a registered window size when a predetermined event is generated from a plurality of communication devices 110. [ At this time, the tree construction unit 340 can construct an event tree for each communication equipment. The predetermined event may include a critical failure event and a service failure event.

For example, when a critical failure event occurs as a predetermined event, the tree construction unit 340 stores event information of a plurality of events generated before the occurrence of the critical event and corresponding to the registered window size, Can be constructed.

For example, when a service fault event occurs in a preset event, the tree construction unit 340 stores event information of a plurality of events generated before the occurrence of the service fault event and corresponding to the registered window size, You can build a tree.

The tree construction unit 340 compares event information of a plurality of events generated before the preset event is generated and corresponding to the registered window size with the constructed event tree to add event information about a new event to the constructed event tree can do.

The process of constructing the event tree in the tree building unit 340 will be described in detail with reference to FIG.

5 is an exemplary diagram illustrating a process of constructing an event tree in the fault occurrence determination apparatus according to an embodiment of the present invention. Referring to FIG. 5, since the failure occurrence determination device 220 does not have event information related to the device at the time of constructing the initial event tree, the failure pattern information may be null.

When a critical failure event or a service failure event occurs as a preset event, the tree construction unit 340 stores event information by the number of window sizes for each communication device, and constructs an event tree. For example, when four window sizes are registered for one piece of equipment, the tree construction unit 340 can construct an event tree having four event lists. The event tree can be organized in multiple multi-route structures for each device and event.

For example, when a series of events such as the ABCX 510 occurs in the event tree and a critical failure event or a service fault event occurs, the tree construction unit 340 stores event information for the corresponding event, (520). The tree construction unit 340 searches for the root of the A event and searches for the event node to trace to the leaf node. If the event tree does not match the event information corresponding to the window size, If there is no node associated with it, you can add the event node. At this time, the attribute information about the event can be stored and managed for each node, and the failure occurrence can be determined by comparing the attribute information with the node.

Referring again to FIG. 3, the analyzer 350 may analyze the collected event information based on the constructed event tree.

The analyzer 350 may include a predictor 355. The prediction unit 355 may analyze the collected event information based on the constructed event tree to predict whether or not a service fault event occurs in at least one of the plurality of communication devices 210. [

The prediction unit 355 can predict whether a service fault event will occur by comparing the event information of the plurality of events corresponding to the registered window size at each time of collecting the event information with the event tree. The prediction unit 355 can predict the probability of occurrence of a service failure by calculating the degree of agreement between a plurality of event information items corresponding to window sizes of the communication equipments and an event tree at the time of collecting the event information. The maximum value of the match degree can be provided to the display unit (not shown). For example, the predicting unit 840 may compare a plurality of event information corresponding to the window size through scanning from the root node in the event tree, and calculate the degree of match up to the leaf node.

6 is a flowchart illustrating a method of analyzing event information by constructing an event tree according to a preset event in the fault occurrence determination apparatus according to an embodiment of the present invention. Referring to FIG. 6, the failure occurrence determination device 220 registers window sizes for a plurality of communication devices 210 (S610), collects event information about events generated from the plurality of communication devices 210 (S620), and it may be determined whether a predetermined event is generated in the collected event information (S630).

The failure occurrence determination device 220 can determine whether the preset event information is a critical failure event or a service failure event (S640). For example, when the preset event is a critical failure event (S641), the failure occurrence determination device 220 stores event information of a plurality of events generated before the occurrence of the critical event and corresponding to the registered window size, The tree can be constructed (S650). At this time, the failure occurrence determination device 220 can start searching the event tree from the root node using the event information corresponding to the size of the window size. If the node list exists by the window size, If not, you can add nodes to the tree.

For example, if the preset event is a service fault event (S642), the fault occurrence determination device 220 stores event information of a plurality of events that occurred before the occurrence of the service fault event and corresponded to the registered window size An event tree can be constructed (S660). The failure occurrence determination apparatus 220 can search for the event tree using the event information, and then calculate the degree of match between the event information and the event tree corresponding to the window size. If the leaf node has not reached the leaf node at the time of retrieval, the fault occurrence determination device 220 does not determine that the fault occurrence alarm is generated, and if the leaf node is reached, To an administrator terminal (not shown).

In the above description, steps S610 to S660 may be further divided into further steps or combined into fewer steps, according to an embodiment of the present invention. Also, some of the steps may be omitted as necessary, and the order between the steps may be changed.

FIG. 7 is a flowchart of a method for determining a failure occurrence in a failure occurrence determination apparatus according to an embodiment of the present invention. Referring to FIG. The method for determining the occurrence of a failure performed by the failure occurrence determination apparatus 220 according to the embodiment shown in FIG. 7 is the same as that of the failure occurrence determination system 1 according to the embodiment shown in FIGS. 1 to 6, Lt; / RTI > Therefore, the present invention is also applied to a method for determining occurrence of a failure to be performed by the failure generating apparatus 220 according to the embodiment shown in FIGS. 1 to 6 even if omitted from the following description.

In step S710, the failure occurrence determination device 220 may collect event information on events generated from the plurality of communication devices 210. [

In step S720, the failure occurrence determination device 220 can register a window size for a plurality of communication devices 210. [ For example, the failure occurrence determination device 220 may register a window size so as to correspond to the number of events to be monitored for each communication device.

In step S730, when a predetermined event is generated from the plurality of communication devices 210, the failure occurrence determination device 220 may construct an event tree based on a plurality of events related to the preset event and a registered window size . The fault occurrence determination device 220 can construct an event tree for each communication device. The predetermined event may include, for example, a critical failure event, a service failure event, and the like. For example, when a critical failure event occurs, the failure occurrence determination device 220 can construct an event tree by storing event information of a plurality of events generated before a critical event occurs and corresponding to a registered window size have. For example, when a service fault event occurs, the fault occurrence determination unit 220 stores event information of a plurality of events generated before the occurrence of the service fault event and corresponding to the registered window size to construct an event tree can do.

In step S740, the failure occurrence determination apparatus 220 may analyze event information collected based on the constructed event tree.

In step S750, the failure occurrence determination apparatus 220 can calculate the degree of match between the event information and the event tree corresponding to the window size.

In step S760, the failure occurrence determination device 220 can display a notification if the calculated match degree is equal to or greater than the threshold value. Alternatively, the failure occurrence determination device 220 may transmit a notification message to an administrator terminal (not shown). For example, when the calculated degree of match is 70% or more, the failure occurrence determination unit 220 displays a prediction notification about the occurrence of a service failure event through the user interface, or transmits a notification message to the administrator terminal, Can be recognized.

Although not shown in FIG. 7, the failure occurrence determination device 220 further includes a step of determining whether or not a service fault event is generated based on the network connection state between the event information and the corresponding communication device at each time of collecting the event information can do.

Although not shown in FIG. 7, the failure occurrence determination device 220 compares event information of a plurality of events generated before a predetermined event is generated and corresponding to a registered window size with an established event tree, And adding event information for the new event.

Although not illustrated in FIG. 7, the failure occurrence determination apparatus 220 may further include a step of registering attribute information on a plurality of event information included in the event tree, respectively. The attribute information may include the order of each event, the duration of each event, and whether or not each event is redundant.

In the above description, steps S710 to S760 may be further divided into further steps or combined into fewer steps, according to an embodiment of the present invention. Also, some of the steps may be omitted as necessary, and the order between the steps may be changed.

8 is an exemplary diagram for explaining a process of estimating whether a service fault event is generated by analyzing event information collected by the fault occurrence determination apparatus according to an embodiment of the present invention. Referring to FIG. 8, the failure occurrence determination device 220 can predict whether or not a service fault event has occurred by comparing the event information of a plurality of events corresponding to the window size at each event occurrence time with an event tree.

For example, if a failure event of F occurs at a time point of T1 810, the failure occurrence determination apparatus 220 may compare information of an event corresponding to a window size from A to F of the corresponding equipment to an event tree . The fault occurrence determination apparatus 220 can calculate the degree of correspondence between the information of the event corresponding to the window size and the event tree. At this time, if the event information corresponding to the window size and the event tree are inconsistent, the failure occurrence determination apparatus 220 can skip the possibility of occurrence of a failure, Can be expressed numerically.

For example, if a failure event of I occurs at the time of T4 820, the failure occurrence determination device 220 can compare the information of the event corresponding to the window size from D to I of the corresponding device to the event tree have. The fault occurrence determination apparatus 220 can calculate the degree of correspondence between the information of the event corresponding to the window size and the event tree. At this time, if the degree of match between the event information corresponding to the window size and the event tree coincides with each other, the failure occurrence determination apparatus 220 can transmit the possibility of failure occurrence to the administrator terminal (not shown) in the form of a notification message.

9 is an exemplary diagram for explaining a process of comparing the event information and the event tree in the fault occurrence determination apparatus according to an embodiment of the present invention to calculate the match degree. Referring to FIG. 9, the failure occurrence determination apparatus 220 may use the following equation to calculate the degree of agreement.

Referring to Equation (1), p (i) may compare the path information for the i-event with the event set tree (EST) and return a matched level. ws (i) may return the window size of the device that is generated in the i event.

The failure occurrence determination device 220 may classify the event i for each device, calculate the ratio between the window size (ws) and the event tree matching level, and provide the maximum value to the administrator. The failure occurrence determination device 220 may analyze the event pattern generated for each device to provide the maximum value information in order to prevent elements that may distort the index of the failure pattern of the specific device.

The failure occurrence determination device 220 may calculate the respective probabilities starting from the root node of the event tree, and may return the maximum value among them. This match degree calculation can be processed at each time an event occurs.

For example, when the event occurs in the order A-> Z-> B-> D-> X-> T-> H, the failure occurrence determination device 220 can calculate the degree of agreement at each point in time. The degree of agreement at each point in time may be, for example, 25% -> 25% -> 50% -> 75% -> 75% -> 100%. At this time, if the degree of agreement is close to 100%, the failure occurrence determination device 220 can predict the possibility of failure and analyze the detailed information to prevent the communication service from being interrupted in advance.

The method for determining occurrence of a failure to be performed by the failure occurrence determination apparatus described with reference to Figs. 1 to 9 may be performed in the form of a computer program stored in a medium executed by a computer or a recording medium including instructions executable by the computer Can be implemented. In addition, the method for determining occurrence of a failure to be performed by the failure occurrence determination apparatus described with reference to Figs. 1 to 9 may be implemented in the form of a computer program stored in a medium executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

210: a plurality of communication equipments
220: Fault occurrence determination device
310:
320: Register
330:
340: Tree building part
350: Analytical Department
355:

Claims (14)

An apparatus for determining occurrence of a fault,
A collection unit for collecting event information on events generated from a plurality of communication devices;
A registration unit for registering a window size of the plurality of communication equipments;
A tree construction unit for constructing an event tree based on a plurality of events related to the preset event and the registered window size when a predetermined event is generated from the plurality of communication equipments; And
An analysis unit for analyzing the collected event information based on the constructed event tree,
Wherein the fault occurrence determination device comprises:
The method according to claim 1,
Wherein the registration unit registers the window size so as to correspond to the number of events to be monitored for each communication equipment.
3. The method of claim 2,
And the tree construction unit constructs the event tree for each communication equipment.
The method of claim 3,
The preset event includes a critical failure event,
Wherein the tree construction unit constructs the event tree by storing event information of a plurality of events generated before the occurrence of the critical event and corresponding to the registered window size when the event of the critical failure occurs, Determination device.
The method of claim 3,
A failure determination unit for determining whether a service failure event is generated based on a network connection state between the event information and the corresponding communication device at each time of collecting the event information;
Further comprising: a failure detection unit for detecting failure occurrence of the failure.
6. The method of claim 5,
Wherein the predetermined event includes the service failure event,
Wherein the tree construction unit constructs the event tree by storing event information of a plurality of events generated before the occurrence of the service fault event and corresponding to the registered window size when the service fault event occurs, An occurrence determination device.
3. The method of claim 2,
The tree construction unit compares event information of a plurality of events generated before the predetermined event occurs and corresponding to the registered window size with the constructed event tree, and stores event information on a new event in the constructed event tree Wherein the failure determination device determines whether or not the failure occurs.
3. The method of claim 2,
Wherein the registration unit registers attribute information of a plurality of event information included in the event tree,
Wherein the attribute information includes at least one of whether or not each event is in order, a duration of each event, and whether redundancy of each event is permitted.
An apparatus for determining occurrence of a fault,
A collection unit for collecting event information on events generated from a plurality of communication devices;
A registration unit for registering a window size of the plurality of communication equipments;
A tree construction unit for constructing an event tree based on the registered window size and the collected event information; And
A predictor for analyzing the collected event information based on the constructed event tree to predict whether or not a service fault event occurs in at least one of the plurality of communication equipments,
Wherein the fault occurrence determination device comprises:
10. The method of claim 9,
Wherein the predicting unit predicts whether or not the service fault event is generated for each communication equipment.
11. The method of claim 10,
Wherein the predicting unit predicts whether a service fault event is generated by comparing the event information of a plurality of events corresponding to the registered window size with the event tree at each time of collecting the event information.
12. The method of claim 11,
Wherein the predicting unit predicts the probability of occurrence of the service fault by calculating a degree of agreement between the event information and a plurality of event information corresponding to the window size of each communication equipment at each time of collecting the event information, Device.
13. The method of claim 12,
Wherein the predicting unit provides the display unit with a maximum value of the degree of agreement calculated for each communication equipment.
A method for determining the occurrence of a fault,
Collecting event information on events generated from a plurality of communication devices;
Receiving a window size for the plurality of communication devices;
Constructing an event tree based on the plurality of events associated with the predetermined event and the registered window size when a predetermined event is generated from the plurality of communication equipments;
Analyzing the collected event information based on the constructed event tree to predict whether a service fault event occurs in at least one of the plurality of communication equipments
Wherein the failure occurrence determination method comprises:

Images