WO2007143943A1 - Method, system and network device of centralized maintenance of multiple devices - Google Patents

Method, system and network device of centralized maintenance of multiple devices Download PDF

Info

Publication number
WO2007143943A1
WO2007143943A1 PCT/CN2007/070076 CN2007070076W WO2007143943A1 WO 2007143943 A1 WO2007143943 A1 WO 2007143943A1 CN 2007070076 W CN2007070076 W CN 2007070076W WO 2007143943 A1 WO2007143943 A1 WO 2007143943A1
Authority
WO
WIPO (PCT)
Prior art keywords
alarm
centralized maintenance
alarms
association
maintenance center
Prior art date
Application number
PCT/CN2007/070076
Other languages
French (fr)
Chinese (zh)
Inventor
Xiaohong Gao
Huili Lu
Wentang Zhong
Original Assignee
Huawei Technologies Co., Ltd.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to CNB2006100838300A priority Critical patent/CN100479385C/en
Priority to CN200610083830.0 priority
Application filed by Huawei Technologies Co., Ltd. filed Critical Huawei Technologies Co., Ltd.
Publication of WO2007143943A1 publication Critical patent/WO2007143943A1/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance or administration or management of packet switching networks
    • H04L41/06Arrangements for maintenance or administration or management of packet switching networks involving management of faults or events or alarms
    • H04L41/0604Alarm or event filtering, e.g. for reduction of information

Abstract

A method, system and network device of centralized maintenance of multiple devices. The method includes: an alarm collecting system transmits alarms of each system device to a centralized maintenance center, the centralized maintenance center filters the received alarms according to the predetermined alarm filtering conditions, the centralized maintenance center maintains the system devices according to the filtered alarms. By setting the predetermined alarm filtering conditions, it makes the centralized maintenance center determine the valuable alarms quickly. Predetermined alarm filtering conditions can be divided into multi-levels, such as physical relevant relationship information, initial relevant analyzing information and alarm special relevant analyzing information, etc.

Description

说明书 一种多设备集中维护方法、 系统和网络设备  Description A multi-device centralized maintenance method, system and network device
[1] 技术领域 [1] Technical field
[2] 本发明涉及网络通讯技术领域, 具体涉及一种多设备集中维护方法、 系统和网 络设备。  [2] The present invention relates to the field of network communication technologies, and in particular, to a multi-device centralized maintenance method, system, and network device.
[3] 发明背景 [3] Background of the invention
[4] 随着移动通讯业务的发展, 移动通讯的网络规模越来越大, 越来越复杂。 移动 通讯网络的管理和维护也变得越来越重要。  [4] With the development of mobile communication services, the scale of mobile communication networks is becoming larger and more complex. The management and maintenance of mobile communication networks is also becoming more and more important.
[5] 移动通讯网络中网元设备的告警是网络管理和维护的重要观测对象, 网元设备 的告警直接反映了网元设备的运行健康情况, 是网元设备的晴雨表, 是日常设 备运行维护的主要依据。 [5] The alarm of the network element device in the mobile communication network is an important observation object for network management and maintenance. The alarm of the network element device directly reflects the health of the network element device. It is a barometer of the network element device and is a daily device operation. The main basis for maintenance.
[6] 在电信业中, 对通讯网络中的各网元设备进行集中网络管理是一个发展趋势。 [6] In the telecommunications industry, centralized network management of each network element device in a communication network is a development trend.
多设备集中维护系统可以对各网元设备进行单独管理, 也可以对各网元设备进 行联合管理, 多设备集中维护系统如附图 1所示。  The multi-device centralized maintenance system can manage each NE device separately or jointly for each NE device. The multi-device centralized maintenance system is shown in Figure 1.
[7] 图 1 [7] Figure 1
中, 多设备集中维护系统包括: 一个或多个系统设备、 告警釆集系统和集中维 护中心。 系统设备即网元设备, 多个系统设备如系统设备 1至系统设备 N。 每个网元设备都是由多个单板构成的复杂系统, 网元设备及其单板的告警通过 告警釆集系统传输至近端维护终端和远端的集中维护中心。 告警釆集系统可以 是固定的物理实体, 也可以没有固定的物理实体。 集中维护中心接收各告警信 息, 并显示各告警信息。  The multi-device centralized maintenance system includes: one or more system devices, an alarm collection system, and a centralized maintenance center. The system device is the network element device, and the multiple system devices are the system device 1 to the system device N. Each NE device is a complex system consisting of multiple boards. The alarms of the NE devices and their boards are transmitted to the near-end maintenance terminal and the remote centralized maintenance center through the alarm collection system. The alarm collection system can be a fixed physical entity or a fixed physical entity. The centralized maintenance center receives each alarm information and displays each alarm information.
[8] 由于通信系统中多个网元设备之间、 各单板之间彼此依赖, 相互影响, 共同或 协作完成系统功能, 所以, 多网元设备之间、 单板之间存在紧密或松散耦合的 关系, 单一网元设备、 单一单板的故障可能会引发其它单板或其它网元设备、 甚至系统功能的异常, 即一个单板出现告警会使其它单板、 网元设备等也产生 告警, 从而, 导致集中维护中心的告警数量巨大。 [8] Because multiple network elements in the communication system and each board depend on each other, interact with each other, and work together or cooperate to complete the system function. Therefore, there is a tight or loose relationship between multiple network elements and boards. The relationship between the single-board device and the single-board device may cause abnormalities in other boards or other network element devices or even system functions. That is, an alarm on one board may cause other boards and network element devices to be generated. The alarms, thus, result in a large number of alarms in the centralized maintenance center.
[9] 由于目前主要釆用单一告警处理机制来对告警信息进行分析, 即对各网元设备 的告警进行简单收集、 显示、 监控, 所以, 在集中维护中心的告警数量多吋, 重要的告警信息常常被淹没, 而无法及吋发现, 因此, 无法及吋分析出问题的 根源, 从而增加了维护工作量和维护难度, 最终导致通信系统的可维护性、 可 管理性差。 [9] Since the alarm information is mainly analyzed by a single alarm processing mechanism, that is, each network element device The alarms are simply collected, displayed, and monitored. Therefore, the number of alarms in the centralized maintenance center is high, and important alarm information is often overwhelmed and cannot be discovered. Therefore, it is impossible to analyze the root cause of the problem, thereby increasing the number of alarms. Maintaining workload and maintenance difficulty ultimately leads to poor maintainability and manageability of the communication system.
[10] 发明内容  [10] Summary of the invention
[11] 本发明实施方式提供一种多设备集中维护方法、 系统和网络设备, 利用预定告 警筛选条件能够快速确定出有价值的告警, 使集中维护中心能够对各系统设备 进行有效的维护管理, 提高了系统设备的可维护性。  [11] The embodiments of the present invention provide a multi-device centralized maintenance method, system, and network device, which can quickly determine valuable alarms by using predetermined alarm screening conditions, so that the centralized maintenance center can perform effective maintenance and management on each system device. Improve the maintainability of system equipment.
[12] 本发明实施方式提供的一种多设备集中维护方法, 包括:  [12] A multi-device centralized maintenance method provided by an embodiment of the present invention includes:
[13] 告警釆集系统将各系统设备的告警传输至集中维护中心;  [13] The alarm collection system transmits the alarms of each system device to the centralized maintenance center;
[14] 集中维护中心根据预定告警筛选条件对其接收的告警进行筛选;  [14] The centralized maintenance center filters the alarms it receives according to predetermined alarm screening conditions;
[15] 集中维护中心根据筛选后得到的告警对系统设备进行维护。  [15] The centralized maintenance center maintains system equipment based on the alarms obtained after screening.
[16] 本发明实施方式还提供一种多设备集中维护系统, 包括: 多个系统设备、 告警 釆集系统和集中维护中心, 告警釆集系统将系统设备的告警传输至集中维护中 心, 所述集中维护中心还设置有:  [16] The embodiment of the present invention further provides a multi-device centralized maintenance system, including: a plurality of system devices, an alarm collection system, and a centralized maintenance center, wherein the alarm collection system transmits the alarm of the system equipment to the centralized maintenance center, The centralized maintenance center is also equipped with:
[17] 告警管理单元: 根据预定告警筛选条件对集中维护中心接收的告警进行筛选, 并将筛选后得到的告警传输至集中维护单元; [17] The alarm management unit: filters the alarms received by the centralized maintenance center according to the predetermined alarm screening conditions, and transmits the alarms obtained after the screening to the centralized maintenance unit;
[18] 集中维护单元: 根据其接收的告警对系统设备进行维护。 [18] Centralized Maintenance Unit: Maintains system equipment based on the alarms it receives.
[19] 本发明实施方式还提供一种网络设备, 为多设备集中维护系统中的集中维护中 心, 所述集中维护中心还设置有:  [19] The embodiment of the present invention further provides a network device, which is a centralized maintenance center in a multi-device centralized maintenance system, and the centralized maintenance center is further configured with:
[20] 告警管理单元: 根据预定告警筛选条件对集中维护中心接收的告警进行筛选, 并将筛选后得到的告警传输至集中维护单元; [20] The alarm management unit: filters the alarms received by the centralized maintenance center according to the predetermined alarm screening conditions, and transmits the alarms obtained after the screening to the centralized maintenance unit;
[21] 集中维护单元: 根据其接收的告警对系统设备进行维护。 [21] Centralized maintenance unit: Maintains system equipment based on the alarms it receives.
[22] 通过上述技术方案的描述可知, 本发明实施方式通过设置预定告警筛选条件, 使集中维护中心能够快速的确定出有价值的告警; 从而通过本发明实施方式提 供的技术方案提高了系统设备的可维护性的目的。 [22] According to the description of the foregoing technical solution, the embodiment of the present invention can enable the centralized maintenance center to quickly determine a valuable alarm by setting a predetermined alarm screening condition; thereby improving the system device by using the technical solution provided by the embodiment of the present invention. The purpose of maintainability.
[23] 附图简要说明 [23] BRIEF DESCRIPTION OF THE DRAWINGS
[24] 图 1是多设备集中维护系统示意图; [25] 图 2是本发明实施方式的多设备集中维护系统示意图; [24] Figure 1 is a schematic diagram of a multi-device centralized maintenance system; 2 is a schematic diagram of a multi-device centralized maintenance system according to an embodiment of the present invention;
[26] 图 3是本发明实施方式的告警关联关系树示意图一; FIG. 3 is a schematic diagram 1 of an alarm association tree according to an embodiment of the present invention; FIG.
[27] 图 4是本发明实施方式的告警关联关系树引擎处理流程图; 4 is a flowchart of processing an alarm association tree engine according to an embodiment of the present invention;
[28] 图 5是本发明实施方式的逻辑关联关系树示意图二。 FIG. 5 is a second schematic diagram of a logical association tree according to an embodiment of the present invention.
[29] 实施本发明的方式 [29] Mode for carrying out the invention
[30] 在本发明实施方式的多设备集中维护方法和系统中, 告警釆集系统将各系统设 备的告警传输至集中维护中心, 集中维护中心根据预定告警筛选条件对其接收 的告警进行筛选, 并根据筛选后得到的告警对各系统设备进行维护。  [30] In the multi-device centralized maintenance method and system of the embodiment of the present invention, the alarm collection system transmits the alarms of the system devices to the centralized maintenance center, and the centralized maintenance center filters the alarms received according to the predetermined alarm screening conditions. The system equipment is maintained according to the alarms obtained after the screening.
[31] 下面对本发明实施方式提供的方法和系统做进一步的描述。 [31] The method and system provided by the embodiments of the present invention are further described below.
[32] 由于系统设备的告警存在反复上报、 告警级别存在差异、 告警之间存在引发告 警等等现象, 所以, 本发明实施方式需要对多设备集中维护系统中集中维护中 心接收的告警进行筛选, 使筛选后的告警能够分层次、 分类别的呈现出来。 本 发明实施方式的集中维护中心对告警的筛选过程可以包括两层, 即物理关联分 析处理和逻辑关联分析处理。 通过物理关联分析处理, 使集中维护中心能够过 滤掉一些冗余的告警信息, 通过逻辑关联分析处理, 使集中维护中心能够快速 准确的确定出主告警和从告警, 从而能够快速准确的进行故障定位, 使集中维 护中心能够对各系统设备进行有效的维护管理。 本发明实施方式提供的方法和 系统可以针对一个系统设备进行单独管理, 也可以针对多个系统设备进行联合 管理。 [32] The alarms received by the centralized maintenance center in the multi-device centralized maintenance system need to be filtered, because the alarms of the system equipment are repeatedly reported, the alarm levels are different, and the alarms are generated between the alarms. The filtered alarms can be presented hierarchically and sub-category. The screening process of the alarm by the centralized maintenance center in the embodiment of the present invention may include two layers, namely, physical association analysis processing and logical association analysis processing. Through the physical association analysis process, the centralized maintenance center can filter out some redundant alarm information, and the logical maintenance analysis process enables the centralized maintenance center to quickly and accurately determine the primary alarm and the secondary alarm, so that fault location can be quickly and accurately performed. , enable the centralized maintenance center to effectively maintain and manage each system equipment. The method and system provided by the embodiments of the present invention may be separately managed for one system device, or may be jointly managed for multiple system devices.
[33] 下面结合附图 2  [33] Below with reference to Figure 2
对本发明实施方式提供的多设备集中维护系统和方法进行说明。  A multi-device centralized maintenance system and method provided by an embodiment of the present invention will be described.
[34] 图 2 [34] Figure 2
中, 告警釆集系统釆集各系统设备的告警, 并将其传输至集中维护中心, 集中 维护中心可以将告警釆集系统传输来的告警以告警序列的形式实吋显示出来。  The alarm collection system collects alarms of each system device and transmits them to the centralized maintenance center. The centralized maintenance center can display the alarms transmitted by the alarm collection system in the form of alarm sequences.
[35] 传输到集中维护中心的告警序列需要首先经过物理关联分析处理, 物理关联分 析处理的功能由告警管理单元实现。 告警的物理关联的特点是: 告警的关联关 系不依赖于网络模型, 且不需要了解各种告警之间的相互依赖关系, 只对告警 的参数、 属性、 类别进行分析, 从而使集中维护中心能够提供不同的告警观测 纬度, 有效把握各系统设备的运行情况。 [35] The alarm sequence transmitted to the centralized maintenance center needs to be processed through physical association analysis first. The function of physical association analysis processing is implemented by the alarm management unit. The physical association of alarms is characterized by: The association of alarms does not depend on the network model, and it is not necessary to understand the interdependencies between alarms. Only the parameters, attributes, and categories of alarms are analyzed, so that the centralized maintenance center can Provide different alarm observations Latitude, effectively grasp the operation of each system equipment.
[36] 物理关联分析的方法主要包括: 告警压缩分析, 告警过滤分析, 告警抑制分析 , 告警计数分析, 告警概括分析, 告警细化分析和告警吋间关联分析, 即告警 管理单元的功能主要由告警压缩分析模块、 忽略告警分析模块, 置换告警分析 模块和告警概括分析模块来实现, 其中, 忽略告警分析模块主要包括: 告警过 滤分析子模块、 告警抑制分析子模块、 吋间关联分析子模块, 置换告警分析模 块主要包括: 告警计数分析子模块和告警细化分析子模块。  [36] The methods of physical association analysis mainly include: alarm compression analysis, alarm filtering analysis, alarm suppression analysis, alarm counting analysis, alarm summary analysis, alarm thinning analysis and alarm inter-day correlation analysis, that is, the function of the alarm management unit is mainly The alarm compression analysis module, the ignore alarm analysis module, the replacement alarm analysis module and the alarm summary analysis module are implemented, wherein the ignore alarm analysis module mainly includes: an alarm filtering analysis sub-module, an alarm suppression analysis sub-module, and a diurnal correlation analysis sub-module. The replacement alarm analysis module mainly includes: an alarm count analysis sub-module and an alarm refinement analysis sub-module.
[37] 各物理关联分析方法和模块、 子模块的功能如表 1所示。  [37] The functions of each physical association analysis method and module and submodule are shown in Table 1.
[38] 表 1  [38] Table 1
[39] [39]
分析方法 概述 表述方式 应用场景 告警压缩分析 视多次发生的相同 对于吋间窗 [Τ1,Τ2] 多次出现的事件告 Analysis Method Overview Representation Method Application Scenario Alarm Compression Analysis The same occurs multiple times. For the inter-turn window [Τ1, Τ2] multiple occurrences
Π J Π 内的告警 [A, A, Α] 警, 可以大大减少 告警 J Π Alarm [A, A, Α] alarm, can be greatly reduced
, 我们可以压缩为 频繁出现的吋间告 一条告警 Α[η], 其 警的数量, 吋间告 中: η是发生次数 警如帧失步告警等We can compress an alarm 频繁[η] for frequent occurrences, the number of alarms, and the number of alarms: η is the number of occurrences, such as frame out-of-step alarms, etc.
〇 告警过滤分析 忽略掉不满足给定 告警不满足给定条 信令链路闪断告警 条件的告警 件 [Α ρ(Α) 处理中继闪断告警 告警 Alarm filtering analysis Ignore alarms that do not meet the given alarms that do not satisfy the given bar Signaling link flashing alarm condition [Α ρ(Α) Processing relay flashing alarm
]=>不显示该告警 告警抑制分析 在特定的上下文中 对于告警序列 [A1, 单板故障吋, 抑制 对某些告警进行抑 Α2,Α3, Β] ' A1 A2 单板内的单元故障 制, 如在级别高的 A3 eB , 那么 Π  ]=>Do not display the alarm alarm suppression analysis in the specific context for the alarm sequence [A1, board failure, suppression of certain alarms 2, Α3, Β] 'Unit failure in the A1 A2 board, As in the high level of A3 eB, then Π
告警发生吋忽略级 [A1,A2,A3, B] = >B 别低的告警 告警计数分析 置换指定数目相同 [n x A]=>B 当告警反复出现吋 的重复告警为一个 , 就需要升级告警 新类型告警 的级别如:  Alarm occurrence 吋Ignore level [A1, A2, A3, B] = >B The alarm alarm count is not low. The specified number of replacements is the same [nx A]=>B. When the alarm repeatedly occurs, the alarm needs to be upgraded. The level of the new type of alarm is as follows:
中继电路频繁闪断 吋, 虽然闪断吋间 很短, 也会影响业 务, 因此, 要上报 并升级告警级别。  The trunk circuit is frequently flashed. 吋 Although the flashing time is short, it will affect the service. Therefore, the alarm level should be reported and upgraded.
告警概括分析 对告警进行分类, 严重告警 [Al, A2 按照告警网管类型 提供观测的维度 , B, C] 分类 Alarm summary analysis Classify alarms, critical alarms [Al, A2 Provide dimensions for observation according to alarm network management type, B, C] Classification
重要告警 [A3, A4 按照严重程度分类 Important alarms [A3, A4 are classified according to severity
[40] 从表 1  [40] From Table 1
可以看出, 集中维护中心通过物理关联分析有效减少了告警的冗余信息, 且能 够将告警进行分类统计, 使告警信息能够清晰、 有条理的展现在集中维护中心  It can be seen that the centralized maintenance center effectively reduces the redundant information of the alarm through physical association analysis, and can classify and collect the alarms so that the alarm information can be clearly and systematically displayed in the centralized maintenance center.
[41] 集中维护中心需要对物理关联分析处理后的告警信息继续进行逻辑关联分析, 告警的逻辑关联分析能够在物理关联分析的基础上进行深入的告警关联分析, 获得各告警中的根节点告警即主告警, 从而确定系统设备的故障根源。 [42] 逻辑关联分析可以通过生成告警关联关系树的方式来实现。 集中维护中心可以 根据告警初始关联分析信息和告警特殊关联分析信息生成告警关联关系树。 [41] The centralized maintenance center needs to perform logical association analysis on the alarm information processed by the physical association analysis. The logical association analysis of the alarm can perform in-depth alarm correlation analysis based on the physical association analysis to obtain the root node alarm in each alarm. That is, the main alarm, thereby determining the root cause of the failure of the system equipment. [42] Logical association analysis can be implemented by generating an alarm correlation tree. The centralized maintenance center can generate an alarm correlation tree based on the initial association analysis information of the alarm and the special association analysis information of the alarm.
[43] 集中维护中心可以根据不同告警之间的基于吋间相关性和参数相关性的逻辑关 联关系来设置告警初始关联分析信息, 初始关联分析信息存储于初始逻辑关联 关系存储模块中。 [43] The centralized maintenance center can set the initial association analysis information of the alarm according to the logical relationship between the different alarms based on the correlation between the diurnal correlation and the parameter correlation. The initial association analysis information is stored in the initial logical association storage module.
[44] 初始逻辑关联关系和下面介绍的特殊逻辑关联关系可统称为图 2  [44] The initial logical association and the special logical associations described below can be collectively referred to as Figure 2.
中的专家知识库。  Expert knowledge base.
[45] 专家知识库中的告警初始关联分析信息主要包括: 告警标识、 关联告警标识、 告警吋间关联上限、 告警吋间关联下限、 相互关联告警的参数对应关系和特殊 关联分析指示信息, 为便于故障的排除, 专家知识库中的告警初始关联分析信 息还可以包括: 告警产生原因、 恢复建议、 告警产生的影响等信息。  [45] The initial association analysis information of the alarm in the expert knowledge base mainly includes: an alarm identifier, an associated alarm identifier, an upper limit of the alarm time, a lower limit of the alarm time, a parameter correspondence relationship of the interrelated alarm, and a special association analysis instruction information. For the troubleshooting of faults, the initial association analysis information of the alarm in the expert knowledge base may also include: information such as the cause of the alarm, the recovery suggestion, and the impact of the alarm.
[46] 告警标识代表的告警和关联告警标识代表的告警在告警的产生吋间满足告警吋 间关联上限和告警吋间关联下限、 且这两个告警的参数同吋满足参数对应关系 吋, 即可以确定这两个告警为相互关联的告警。 [46] The alarm represented by the alarm identifier and the alarm represented by the associated alarm identifier meet the upper limit of the alarm correlation and the lower limit of the alarm correlation between the alarm generation, and the parameters of the two alarms satisfy the parameter correspondence relationship, that is, It can be determined that the two alarms are interrelated alarms.
[47] 特殊关联分析指示信息用于指示告警标识代表的告警还可以存在与其有进一步 深层次关联的告警。 [47] The special association analysis indication information is used to indicate that the alarm represented by the alarm identifier may also have an alarm with which it has a deeper association.
[48] 相互关联告警的参数对应关系可以为两个相互关联告警的参数之间存在的相等 关系, 也可以为两个相互关联告警的参数之间存在的计算关系。  [48] The parameter correspondence of the interrelated alarms may be an equal relationship between the parameters of the two interrelated alarms, or may be a calculation relationship between the parameters of the two interrelated alarms.
[49] 表 2是一个具体的专家知识库中的初始关联分析信息的例子。 [49] Table 2 is an example of initial association analysis information in a specific expert knowledge base.
[50] 表 2 [50] Table 2
[51] [51]
[52] 表 2中的参数 1至参数 7即相互关联告警的参数对应关系, 特殊关联 ID  [52] Parameter 1 to parameter 7 in Table 2 are the parameters corresponding to the alarms associated with each other, and the special association ID
即特殊关联分析指示信息。  That is, special association analysis indication information.
[53] 表 2中, 告警 1分别与告警 2、 告警 3、 告警 5存在逻辑关联关系, 以告警 1 和告警 2 [53] In Table 2, alarm 1 has a logical relationship with alarm 2, alarm 3, and alarm 5, respectively, with alarm 1 and alarm 2
之间的逻辑关联关系为例对不同告警之间的逻辑关联关系进行说明。 告警 1 和告警 2分别包括 4个参数, 且告警 1的参数 1与告警 2的参数 1相等、 告警 1 的参数 2与告警 2的参数 2相等、 告警 1的参数 3与告警 2的参数 3 相等、 告警 1的参数 4与告警 2的参数 4相等。 告警 1与告警 2 的吋间关联上限、 吋间关联下限均为 1, 即告警 1和告警 2 The logical relationship between the two is used as an example to describe the logical relationship between different alarms. Alarm 1 and Alarm 2 respectively include 4 parameters, and parameter 1 of alarm 1 is equal to parameter 1 of alarm 2, parameter 2 of alarm 1 is equal to parameter 2 of alarm 2, parameter 3 of alarm 1 and parameter 3 of alarm 2 Equal, parameter 4 of alarm 1 is equal to parameter 4 of alarm 2. The upper limit of the correlation between alarm 1 and alarm 2 and the lower limit of the correlation between the two are both 1, that is, alarm 1 and alarm 2
的产生吋间应相同。  The generation should be the same.
[54] 表 2中告警 1的参数 1与告警 3的参数 1存在计算关系, 计算关系为公式 F1 [55] 逻辑关联分析模块 1  [54] The parameter 1 of alarm 1 in Table 2 has a calculation relationship with the parameter 1 of alarm 3. The calculation relationship is the formula F1 [55] Logical correlation analysis module 1
可根据专家知识库中的初始关联分析信息通过告警关联关系树分析弓 I擎将经过 物理关联分析后的告警生成至少一个告警关联关系树。 初始关联分析信息和告 警关联关系树分析引擎在集中维护中心中相对独立。 本发明实施方式根据初始 关联分析信息生成的告警关联关系树可以为只有一个根节点告警的树, 即该告 警没有与其有逻辑关系的告警, 该告警没有引发其它告警, 此吋, 这个根节点 可以称为独立节点。  According to the initial association analysis information in the expert knowledge base, the alarm correlation tree can be used to generate at least one alarm association tree for the alarms after the physical association analysis. The initial association analysis information and the alarm correlation tree analysis engine are relatively independent in the centralized maintenance center. In the embodiment of the present invention, the alarm association tree generated by the initial association analysis information may be a tree with only one root node alarm, that is, the alarm has no logical relationship with the alarm, and the alarm does not trigger other alarms. It is called an independent node.
[56] 在不同告警之间的关联关系中, 有些告警之间的逻辑关系很复杂, 不能简单地 通过告警吋间和告警参数的逻辑关联分析出来, 这部分逻辑关系很复杂的告警 如网元外部接口设备引发的告警, 网元内部通讯单元引发的告警, 不同传输介 质的信号关系等, 具体分类如下:  [56] In the association between different alarms, the logical relationship between some alarms is complex. It cannot be easily analyzed through the logical association between alarms and alarm parameters. This part of the logic is complex with alarms such as network elements. Alarms caused by external interface devices, alarms caused by internal communication units of network elements, signal relationships of different transmission media, etc., are classified as follows:
[57] 外部接口分析: 如 MSC的局向信令链路相关性分析, 局向电路相关性分析; [57] External interface analysis: such as MSC's office route signaling link correlation analysis, office circuit correlation analysis;
[58] 设备管理上下级管理层次故障关系分析; [58] Equipment management upper and lower level management level fault relationship analysis;
[59] 话路系统告警关联分析: 包括光路和话路的转换关系等;  [59] Alarm system association analysis: including the conversion relationship between optical path and voice channel;
[60] 内部通信系统告警关联分析;  [60] Internal communication system alarm correlation analysis;
[61] 业务逻辑关联分析。  [61] Business Logic Association Analysis.
[62] 对这部分告警进行逻辑关联分析吋, 除了需要釆用基于吋间关联性和参数关联 性的初始关联分析信息, 还需要包括统筹学的方法, 其参数关联性分析也复杂 得多, 要把两种告警的多个属性进行交叉分析, 如对某个 MSC  [62] Logical correlation analysis of this part of the alarm, in addition to the need to use the initial correlation analysis information based on the inter-day correlation and parameter relevance, it also needs to include the method of overall planning, and its parameter correlation analysis is much more complicated. Cross-analysis of multiple attributes of two types of alarms, such as for an MSC
局向, 该局向的电路 /链路 /中继群 /  Office route, circuit/link/relay group of the office/
中继设备都是这个局向的属性, 都要进行关联分析。  Relay devices are attributes of this office direction, and correlation analysis is required.
[63] 为进一步发现不同告警之间的进一步的逻辑关联关系, 集中维护中心还可以根 据不同告警之间的基于数据挖掘的逻辑关联关系来设置告警的特殊关联分析信 息。 特殊关联分析信息存储于特殊逻辑关联关系存储模块中。 初始关联分析信 息和特殊关联分析信息是专家知识库中的重要组成部分。 特殊关联分析信息主 要包括: 告警标识、 关联告警标识、 关联表数、 系统配置表名称、 输入参数、 输入字段、 输出参数、 输出字段等。 [63] In order to further discover further logical associations between different alarms, the centralized maintenance center may also set a special association analysis letter of the alarm according to the logical association relationship based on data mining between different alarms. Interest. The special association analysis information is stored in a special logical association storage module. Initial association analysis information and special association analysis information are important components of the expert knowledge base. The special association analysis information mainly includes: an alarm identifier, an associated alarm identifier, a correlation table number, a system configuration table name, an input parameter, an input field, an output parameter, an output field, and the like.
[64] 特殊关联分析是基于专家知识库中定义的公式和算法, 通过对系统配置库中告 警参数的关系分析判断其关联关系的。 关联表数表示对告警进行特殊关联分析 吋, 需要査询的系统配置表数。 输入字段和输出字段一般为算法公式, 输入参 数表示其对应的告警参数, 如输入参数为 N , 则表示其对应告警的第 N 个参数。 输出参数表示其对应的告警参数, 如输出参数为 M [64] The special association analysis is based on the formulas and algorithms defined in the expert knowledge base, and the relationship between the alarm parameters in the system configuration library is judged and judged. The number of association tables indicates the special association analysis of the alarms. 吋, the number of system configuration tables that need to be queried. The input field and the output field are generally algorithm formulas, and the input parameters indicate their corresponding alarm parameters. For example, if the input parameter is N, it indicates the Nth parameter of the corresponding alarm. The output parameter indicates its corresponding alarm parameter, such as the output parameter is M.
, 则表示其对应告警的第 M  , indicating the M of the corresponding alarm
个参数。 输入参数需要代入输入字段并在系统配置表名称对应的表中査询, 输 出参数需要代入输出字段, 当输入字段査询结果获得的记录与输出字段符合一 定的算法吋, 则表示两个告警标识对应的告警有特殊告警关联关系。 如果输出 字段缺省, 则表示当输入字段査询结果获得的记录与输出参数 M  Parameters. The input parameters need to be substituted into the input field and queried in the table corresponding to the system configuration table name. The output parameters need to be substituted into the output field. When the records obtained by the input field query result and the output field conform to a certain algorithm, the two alarm identifiers are represented. The corresponding alarm has a special alarm relationship. If the output field defaults, it indicates the record and output parameters obtained when the input field query results.
相同吋, 两个告警标识对应的告警有特殊告警关联关系。 如果输出字段中只有 字段名称, 则表示当输入字段査询结果获得的记录中的输出字段的字段名称中 的内容与输出参数 M  Similarly, the alarms corresponding to the two alarm identifiers have a special alarm association relationship. If there is only a field name in the output field, it means the content and output parameter in the field name of the output field in the record obtained by the input field query result.
相同吋, 两个告警标识对应的告警有特殊告警关联关系。 输入参数可以有一个 或多个, 输出参数也可以有一个或多个。  Similarly, the alarms corresponding to the two alarm identifiers have a special alarm association relationship. There can be one or more input parameters, and one or more output parameters.
[65] 专家知识表中可以定义多次査表的复杂逻辑关系。 当关联表数大于 1 [65] The complex logical relationship of multiple lookup tables can be defined in the expert knowledge table. When the number of association tables is greater than 1
吋, 表示需要进行多次査表。  吋, indicating that multiple checklists are required.
[66] 表 3是一个具体的专家知识库中的特殊关联分析信息的例子。 下面以表 3为例对 利用特殊关联分析信息进行特殊告警关联分析的过程进行描述。 [66] Table 3 is an example of special association analysis information in a specific expert knowledge base. The following describes the process of special alarm correlation analysis using special association analysis information by using Table 3 as an example.
[67] 表 3 [67] Table 3
[69] 表 3中, 每条记录代表一对需要判断特殊关联关系的告警, 如表中第 1 条记录, 就是判断告警 ID为 471的告警与告警 ID为 302  [69] In Table 3, each record represents a pair of alarms that need to determine the special association relationship. For example, in the first record in the table, the alarm and alarm ID with the alarm ID 471 is 302.
的告警是否具有关联关系, 具体判断特殊关联关系的过程为: 由于输入参数 1 为 1, 所以, 需要将 471告警的第 1个参数 P1作为输入 IModuleNo = PI 条件査询数据表 SpmBoardModule, 获得的匹配记录中 iLogicalBoardNo 的值如果等于 302告警的第 5个参数 P5, 则 302告警是 471  Whether the alarm has an association relationship or not, the process of determining the special association relationship is as follows: Since the input parameter 1 is 1, the first parameter P1 of the 471 alarm needs to be used as the input IModuleNo = PI condition query data table SpmBoardModule, and the matching is obtained. If the value of iLogicalBoardNo in the record is equal to the fifth parameter P5 of the 302 alarm, the 302 alarm is 471.
告警的子节点, 也就是说, 471告警和 302告警有特殊关联关系。  The child node of the alarm, that is, the 471 alarm and the 302 alarm have a special relationship.
[70] 逻辑关联分析模块 1和逻辑关联分析模块 2  [70] Logical Correlation Analysis Module 1 and Logical Correlation Analysis Module 2
一起根据专家知识库中的初始关联分析信息、 特殊关联分析信息通过告警关联 关系树分析弓 I擎将经过物理关联分析后的告警生成至少一个告警关联关系树。 特殊关联分析信息和告警关联关系树分析引擎在集中维护中心中相对独立。 本 发明实施方式根据初始关联分析信息、 特殊关联分析信息生成的告警关联关系 树可以为只有一个根节点告警的树, 即该根节点告警没有与其有逻辑关系的告 警, 该根节点告警没有引发其它告警, 此吋, 这个根节点可以称为独立节点。 According to the initial association analysis information and the special association analysis information in the expert knowledge base, the alarm correlation tree is used to analyze the alarms generated by the physical association analysis to generate at least one alarm association tree. The special association analysis information and the alarm correlation tree analysis engine are relatively independent in the centralized maintenance center. The alarm association relationship generated by the initial association analysis information and the special association analysis information according to the embodiment of the present invention The tree can be a tree with only one root node alarm. That is, the root node alarm does not have an alarm related to it. The root node alarm does not raise other alarms. Therefore, this root node can be called an independent node.
[71] 附图 3是通过逻辑关联分析得到的告警关联关系树的具体例子。  [71] FIG. 3 is a specific example of an alarm correlation tree obtained by logical correlation analysis.
[72] 图 3中, 告警 2是根节点告警, 与告警 2逻辑关联的告警为告警 21和告警 22 , 即告警 2引发告警 21和告警 22。 与告警 21逻辑关联的告警为告警 211 和告警 212, 即告警 21引发告警 211和告警 212。  [72] In Figure 3, alarm 2 is the root node alarm, and the alarms associated with alarm 2 are alarm 21 and alarm 22, that is, alarm 2 raises alarm 21 and alarm 22. The alarms associated with the alarm 21 are alarm 211 and alarm 212, that is, the alarm 21 triggers the alarm 211 and the alarm 212.
[73] 逻辑关联分析模块 1和逻辑关联分析模块 2  [73] Logical Correlation Analysis Module 1 and Logical Correlation Analysis Module 2
可以将生成的告警关联关系树传输至集中维护单元, 或者直接将根节点告警传 输至集中维护单元, 使集中维护单元能够迅速、 准确根据根节点告警或告警关 联关系树判断出故障所在, 以便对故障进行迅速排除。  The generated alarm association tree may be transmitted to the centralized maintenance unit, or the root node alarm may be directly transmitted to the centralized maintenance unit, so that the centralized maintenance unit can quickly and accurately determine the fault according to the root node alarm or the alarm association tree, so that The fault is quickly eliminated.
[74] 由于有些关联告警节点可能在系统中不存在告警标识, 即不存在告警 ID  [74] Since some associated alarm nodes may not have an alarm identifier in the system, there is no alarm ID.
, 如同一局向的电路或链路异常, 或同一号码的紧急呼叫等, 在建立告警关联 关系树吋可能会引起麻烦、 或者导致无法建立关系树, 因此, 本发明实施方式 引入了虚拟节点的概念, 以便使逻辑关联分析模块 1和逻辑关联分析模块 2 能够通过告警关联关系树分析弓 I擎根据专家知识库生成告警关联关系树。  If the circuit or link of the same office is abnormal, or an emergency call of the same number, etc., establishing an alarm association tree may cause trouble or cause a relationship tree to be established. Therefore, the embodiment of the present invention introduces a virtual node. The concept is such that the logical association analysis module 1 and the logical association analysis module 2 can generate an alarm association tree according to the expert knowledge base through the alarm correlation relationship tree analysis.
[75] 虚拟节点由虚拟告警构成, 虚拟告警是由正常告警衍生而来的, 具有虚拟告警 标识信息如虚拟告警 ID, 虚拟告警 ID在正常的告警 ID  [75] The virtual node is composed of virtual alarms. The virtual alarm is derived from normal alarms. It has virtual alarm identification information such as virtual alarm ID, and the virtual alarm ID is in the normal alarm ID.
范围之外, 以便区分。 虚拟告警由正常告警分析获得, 如某个局向中继 E1 故障等告警。  Out of scope, to distinguish. The virtual alarm is obtained by normal alarm analysis, such as an office route relay E1 fault.
[76] 上述告警关联关系树也可以表述为如下形式:  [76] The above alarm correlation tree can also be expressed as follows:
[77] 虚拟根节点 (0层) [77] Virtual Root Node (Layer 0)
[78] I-告警 1 (1层) [78] I-Alarm 1 (1st floor)
[79] I I 可能引起告警 2 (2层)  [79] I I may cause an alarm 2 (2 layers)
[80] 1 1 I 吋间相关性描述  [80] 1 1 I Inter-relationship description
[81] I I I 参数相关性描述  [81] I I I Parameter Correlation Description
[82] 1 1 I——其他描述  [82] 1 1 I - Other description
[83] I I 可能引起告警 3 (2层)  [83] I I may cause an alarm 3 (2 layers)
[84] 1 1 I 吋间相关性描述 [85] 1 1 I 参数相关性描述 [84] 1 1 I Inter-relationship description [85] 1 1 I Parameter Correlation Description
[86] 1 1 I 其他描述  [86] 1 1 I Other description
[87] I-告警 2 (1层)  [87] I-Alarm 2 (1st floor)
[88] I-告警 3 (1层) [88] I-Alarm 3 (1st floor)
[89] 其中, 0层虚拟根节点是指用户根据自己的经验或专家知识库自定义的告警。  [89] Among them, the 0-layer virtual root node refers to the alarm that the user customizes according to his own experience or expert knowledge base.
1层为所有告警 ID按顺序排列, 2层为 1层的告警可能引起的告警 ID, 3 层为相互关联的告警的参数描述、 吋间描述和其他相关描述, 3  Layer 1 is the order of all alarm IDs. Layer 2 is the alarm ID that may be caused by Layer 1 alarms. Layer 3 is the parameter description, inter-description and other related descriptions of the alarms associated with each other.
层的内容为相互关联告警的判断条件, 独立告警分布在 1  The content of the layer is the judgment condition of the interrelated alarm, and the independent alarm is distributed in 1
层的没有子节点的节点上。  Layers on nodes that have no children.
[90] 从上述描述可以看出, 本发明实施方式的专家知识库可以分为两部分, 一部分 为初始关联分析信息, 一部分为特殊关联分析信息, 这两部分是专家知识库的 核心。 专家知识库中的信息可以是由系统专家经过对系统告警的严格分析验证 制定的, 是告警的逻辑关联分析的重要依据。 告警初始关联信息定义了两个不 同告警之间的在告警吋间、 告警参数等上面的关联关系。 特殊关联分析信息是 在两个告警之间的参数关系复杂、 不能通过简单的算法表达、 而需要系统的配 置数据库支持吋使用的, 特殊关联分析信息是一种通过数据挖掘方法建立的信 息, 通过特殊关联分析信息对系统配置库的参数的表间关系进行分析, 可以得 到两个告警之间是否有告警引发关系。  [90] As can be seen from the above description, the expert knowledge base of the embodiment of the present invention can be divided into two parts, one part is the initial association analysis information, and the other part is the special association analysis information, and these two parts are the core of the expert knowledge base. The information in the expert knowledge base can be determined by the system experts through the rigorous analysis and verification of the system alarms, and is an important basis for the logical correlation analysis of the alarms. The initial association information of the alarm defines the relationship between the alarms and alarm parameters between the two different alarms. The special association analysis information is that the parameter relationship between the two alarms is complex and cannot be expressed by a simple algorithm, but needs to be supported by the configuration database of the system. The special association analysis information is a kind of information established by the data mining method. The special association analysis information analyzes the inter-table relationship of the parameters of the system configuration database, and can obtain an alarm-initiated relationship between the two alarms.
[91] 通过根据专家知识库对各系统设备产生的告警进行逻辑关联关系分析, 将各告 警加入告警关联关系树中分级显示, 即可将各系统设备的告警组建为一个或多 个告警关联关系树, 每一个告警关联关系树的根节点告警即为主告警, 与该根 节点告警有逻辑关联关系的告警应该为该根节点告警下面的分支告警或叶子告 警, 集中维护中心可以不对叶子节点告警进行任何处理, 仅对根节点告警进行 处理, 只需要恢复了根节点上的根源告警, 叶子节点告警自然会恢复, 从而使 集中维护中心能够迅速、 准确的找到故障所在, 同吋提供有效的恢复建议, 以 便排除故障, 恢复设备运行。  [91] The logical association analysis of the alarms generated by the system devices according to the expert knowledge base is performed, and the alarms are added to the alarm association tree for hierarchical display, and the alarms of each system device can be set up as one or more alarm associations. In the tree, the alarm of the root node of each alarm association tree is the primary alarm. The alarm that is logically related to the alarm of the root node should be the branch alarm or leaf alarm under the alarm of the root node. The centralized maintenance center may not alarm the leaf node. For any processing, only the root node alarms are processed, only the root alarms on the root node are restored, and the leaf node alarms are naturally restored, so that the centralized maintenance center can quickly and accurately find the faults and provide effective recovery. It is recommended to troubleshoot and restore the device.
[92] 专家知识库可以实吋修改、 更新, 可以根据不同的系统定制不同的专家知识库 [93] 下面结合附图 4 [92] The expert knowledge base can be modified and updated, and different expert knowledge bases can be customized according to different systems. [93] Below with reference to Figure 4
对本发明实施方式根据专家知识库通过告警关联关系树分析引擎生成告警关联 关系树的流程进行描述。  The process of generating an alarm association tree by the alarm association tree analysis engine according to the expert knowledge base is described in the embodiment of the present invention.
[94] 图 4中, 在步骤 400, 需要将告警序列 An中的 n个告警: 告警 A1至告警 An 生成告警关联关系树。 设置 i的初始值为 0, k的初始值为 0。 k [94] In FIG. 4, in step 400, n alarms in the alarm sequence An are required: Alarm A1 to Alarm An generates an alarm correlation tree. Set the initial value of i to 0 and the initial value of k to 0. k
表示告警关联关系树的分支节点的个数。  Indicates the number of branch nodes in the alarm correlation tree.
[95] 到步骤 410, 判断 i是否小于 n, 如果不小于, 到步骤 411 [95] Step 410, determining whether i is less than n, if not less than, to step 411
, 生成告警关联关系树的过程结束, 输出生成的告警关联关系树。  The process of generating an alarm association tree ends, and the generated alarm association tree is output.
[96] 在步骤 410, 如果 i小于 n, 到步骤 420, 从告警序列 An [96] In step 410, if i is less than n, to step 420, the alarm sequence An
中取一条没有进行过告警关联关系树处理的告警。  An alarm is generated that has not been processed by the alarm correlation tree.
[97] 到步骤 430, 根据专家知识库从告警序列 An [97] to step 430, according to the expert knowledge base from the alarm sequence An
中选取可能与该告警有逻辑关联关系的告警, 根据这些可以有逻辑关联关系的 告警建立关联告警系列 Bm, 该序列中包括 m个告警, 即告警 B1至告警 Bm The alarms that may be logically associated with the alarm are selected, and the associated alarm series Bm is established according to the alarms that can be logically associated, and the sequence includes m alarms, that is, alarm B1 to alarm Bm.
, 设置 j的初始值为 0。 , set the initial value of j to 0.
[98] 到步骤 440, 判断 m的取值是否为 0 [98] Go to step 440 to determine whether the value of m is 0.
, 即判断关联告警序列中是否有关联告警, 如果 m为 0, 到步骤 441, 将从 An 中选取的告警作为独立节点, 到步骤 442, i的取值增加 1。 到步骤 410。  That is, whether there is an associated alarm in the associated alarm sequence. If m is 0, go to step 441, and the alarm selected from An is used as an independent node. In step 442, the value of i is increased by 1. Go to step 410.
[99] 在步骤 440, 如果 m的取值不为 0, 到步骤 450, 判断 j是否小于 m [99] In step 440, if the value of m is not 0, to step 450, it is determined whether j is less than m
, 即判断关联告警序列中的关联告警是否都已经处理完成了, 如果 j不小于 m , that is, whether the associated alarms in the associated alarm sequence have been processed, if j is not less than m
, 表示关联告警序列中的关联告警都已经处理完成了, 到步骤 451, 判断 k 的取值是否为 0, 即判断告警关联关系树是否存在分支节点, 如果 k的取值为 0, indicating that the associated alarms in the associated alarm sequence have been processed. In step 451, it is determined whether the value of k is 0, that is, whether the branch node of the alarm correlation tree exists, and if the value of k is 0.
, 表示告警关联关系树不存在分支节点, 到步骤 441, 将从 An , indicating that there is no branch node in the alarm correlation tree, go to step 441, and will be from An.
中选取的告警作为独立节点, 到步骤 442, i的取值增加 1。 到步骤 410。  The selected alarm is used as an independent node. In step 442, the value of i is increased by 1. Go to step 410.
[100] 在步骤 451, 如果 k的取值不为 0 [100] In step 451, if the value of k is not 0
, 表示告警关联关系树存在分支节点, 不需要创建独立节点, 到步骤 442, i 的取值增加 1。 到步骤 410。  Indicates that there is a branch node in the alarm association tree. You do not need to create an independent node. In step 442, the value of i is increased by 1. Go to step 410.
[101] 在步骤 450, 如果 j的取值小于 m, 到步骤 460, 从关联告警序列 Bm [101] In step 450, if the value of j is less than m, to step 460, the associated alarm sequence Bm
中取一条没有处理过的关联告警。 [102] 到步骤 470、 480 Take an associated alarm that has not been processed. [102] to steps 470, 480
, 根据专家知识库分别判断两个告警的告警参数、 告警吋间是否满足相关关联 的条件, 如果都满足, 则可以直接到步骤 490, 判断 i的取值是否为 0, 如果 i 的取值为 0, 表示还没有创建根节点, 到步骤 491, 将从 An  According to the expert knowledge base, it is determined whether the alarm parameters of the two alarms and the alarm time meet the relevant association conditions. If they are all satisfied, you can go directly to step 490 to determine whether the value of i is 0. If the value of i is 0, indicating that the root node has not been created yet, to step 491, from An
告警序列中选取的告警设置为根节点, 将从 Bm中选取的告警设置为分支节点, k的取值增加 1。 到步骤 493 , j的取值增加 1。 到步骤 450。  The alarm selected in the alarm sequence is set to the root node, and the alarm selected from Bm is set as the branch node, and the value of k is increased by 1. Go to step 493 and the value of j is increased by 1. Go to step 450.
[103] 在步骤 490, 如果 i的取值不为 0  [103] In step 490, if the value of i is not 0
, 表示已经创建了逻辑关联关系树的根节点, 到步骤 492, 将 Bm  , indicating that the root node of the logical association tree has been created, to step 492, Bm
序列中选取的告警设置为分支节点, k的取值增加 1。 到步骤 493, j  The alarm selected in the sequence is set to the branch node, and the value of k is increased by 1. Go to step 493, j
的取值增加 1。 到步骤 450。  The value of the increase is 1. Go to step 450.
[104] 在步骤 470、 480  [104] In steps 470, 480
, 如果两个告警的告警参数、 告警吋间都满足相关关联的条件, 也可以到步骤 481, 判断专家知识库中的 An  If the alarm parameters and alarms of the two alarms meet the relevant association conditions, you can also go to step 481 to determine the An in the expert knowledge base.
序列中选取的告警对应的初始关联分析信息中是否设置了特殊关联分析指示信 息, 如果没有设置特殊关联分析指示信息, 到步骤 493, j的取值增加 1 。 到步骤 450。  If the special association analysis indication information is set in the initial association analysis information corresponding to the alarm selected in the sequence, if the special association analysis indication information is not set, the value of j is increased by 1 in step 493. Go to step 450.
[105] 在步骤 481, 如果设置了特殊关联分析指示信息, 到步骤 482  [105] In step 481, if special association analysis indication information is set, go to step 482
, 根据专家知识库中的特殊关联分析信息对从 An和 Bm  Analyze information from An and Bm according to the special associations in the expert knowledge base
中选取的两个告警进行特殊关联分析, 如果确定存在特殊关联分析吋, 到步骤 490; 如果确定不存在特殊关联分析吋, 到步骤 493 , j的取值增加 1。 到步骤 450。  The two selected alarms perform special association analysis. If it is determined that there is a special association analysis, step 490; if it is determined that there is no special association analysis, the value of j is increased by 1 to step 493. Go to step 450.
[106] 根据上述流程可以将告警序列 An  [106] According to the above process, the alarm sequence An can be
中的告警组建为一个或多个告警关联关系树。 下面以一个具体的告警序列为例 、 结合表 2对本发明实施方式建立的告警关联关系树进行说明。  The alarms are grouped into one or more alarm association trees. The following describes an alarm association tree established in the embodiment of the present invention by using a specific alarm sequence as an example and in conjunction with Table 2.
[107] 设定传输至集中维护中心的告警序列为: {告警 1, 告警 2, 告警 3, 告警 4 [107] Set the alarm sequence transmitted to the centralized maintenance center as: {alarm 1, alarm 2, alarm 3, alarm 4
, 告警 5}。  , alarm 5}.
[108] 集中维护中心从告警序列中选取告警 1, 根据表 2确定告警序列中的告警 2 、 告警 3和告警 5可能会与告警 1存在逻辑关联关系。 [109] 集中维护中心根据表 2中的参数、 告警吋间上限、 告警吋间下限、 告警 1 、 告警 2、 告警 3、 告警 5的参数、 告警吋间确定告警 2、 告警 3、 告警 5 与告警 1存在逻辑关联关系吋, 将告警 2、 告警 3、 告警 5作为告警 1 的叶子节点, 由于表 2中告警 1与告警 4不存在逻辑关联关系, 所以告警 4 为独立节点, 即告警 4为一个仅有根节点告警的逻辑关联关系树。 告警 1 、 告警 2、 告警 3、 告警 4、 告警 5生成的两个逻辑关系树如附图 5所示。 [108] The centralized maintenance center selects alarm 1 from the alarm sequence. According to Table 2, it is determined that alarm 2, alarm 3, and alarm 5 in the alarm sequence may be logically related to alarm 1. [109] The centralized maintenance center determines the alarm according to the parameters in Table 2, the upper limit of the alarm, the lower limit of the alarm, the alarm 1, the alarm 2, the alarm 3, the alarm 5, the alarm, the alarm 2, the alarm 3, and the alarm 5 Alarm 1 has a logical relationship 吋, and alarm 2, alarm 3, and alarm 5 are used as leaf nodes of alarm 1. Since alarm 1 and alarm 4 in Table 2 do not have a logical association relationship, alarm 4 is an independent node, that is, alarm 4 is A logical association tree with only root node alarms. Alarm 2, Alarm 2, Alarm 3, Alarm 4, and Alarm 2 generate two logical relationship trees as shown in Figure 5.
[110] 本发明实施方式通过设置预定告警筛选条件, 使集中维护中心能够快速的确定 出有价值的告警; 预定告警筛选条件可以为物理关联关系信息, 如重复告警压 缩条件、 忽略告警条件、 告警置换条件、 告警概括条件等, 不但避免了不必要 的冗余的告警信息, 使集中维护中心能够将告警信息清晰、 有条理的呈现出来 , 从而提供不同的告警观测纬度, 有效把握各系统设备的运行情况; 预定告警 筛选条件也可以为逻辑关联关系信息, 本发明实施方式的逻辑关联关系信息引 入了告警初始关联分析信息和告警特殊关联分析信息, 通过利用告警特殊关联 分析信息进一步挖掘了不同告警之间的逻辑关联关系, 告警使集中维护中心能 够将其接收的告警组建为逻辑关联关系树, 使集中维护中心能够快速确定出告 警的根源, 避免了对与根源告警相关联的告警的处理过程, 使集中维护中心能 够快速准确的进行故障定位, 使集中维护中心能够对各系统设备进行有效的维 护管理; 从而通过本发明实施方式提供的技术方案提高了系统设备的可维护性  [110] The embodiment of the present invention enables a centralized maintenance center to quickly determine a valuable alarm by setting a predetermined alarm screening condition; the predetermined alarm screening condition may be physical association information, such as repeated alarm compression conditions, ignoring alarm conditions, and alarms. The replacement conditions and alarm summary conditions not only avoid unnecessary redundant alarm information, but also enable the centralized maintenance center to present the alarm information clearly and systematically, thus providing different alarm observation latitudes and effectively grasping the system equipment. The operation of the predetermined alarm screening condition may also be logical association information. The logical association information of the embodiment of the present invention introduces the initial association analysis information of the alarm and the special association analysis information of the alarm, and further mines different alarms by using the alarm special association analysis information. The logical association between the alarms enables the centralized maintenance center to set up the alarms it receives as a logical association tree, so that the centralized maintenance center can quickly determine the root cause of the alarm and avoid the correlation with the root cause alarm. The process of the alarms enables the centralized maintenance center to quickly and accurately locate the faults, so that the centralized maintenance center can perform effective maintenance and management on each system equipment. Therefore, the technical solutions provided by the embodiments of the present invention improve the maintainability of the system equipment. Sex
[111] 虽然通过实施例描绘了本发明, 本领域普通技术人员知道, 本发明有许多变形 和变化而不脱离本发明的精神, 本发明的申请文件的权利要求包括这些变形和 变化。 While the invention has been described by the embodiments of the present invention, it will be understood that

Claims

权利要求书 Claim
[1] 1、 一种多设备集中维护方法, 包括:  [1] 1. A centralized maintenance method for multiple devices, including:
告警采集系统将各系统设备的告警传输至集中维护中心;  The alarm collection system transmits the alarms of each system device to the centralized maintenance center.
集中维护中心根据预定告警筛选条件对其接收的告警进行筛选; 集中维护中心根据筛选后得到的告警对系统设备进行维护。  The centralized maintenance center filters the alarms received according to the predetermined alarm screening conditions. The centralized maintenance center maintains the system equipment according to the alarms obtained after the screening.
[2] 2、 如权利要求 1  [2] 2, as claimed in claim 1
所述的一种多设备集中维护方法, 其特征在于, 所述预定筛选条件包括: 根据不同告警之间的基于时间相关性和参数相关性的逻辑关联关系设置的 告警初始关联分析信息, 且所述筛选的步骤具体包括:  The method for maintaining centralized maintenance of a multi-device, wherein the predetermined screening condition comprises: initial association analysis information of an alarm set according to a logical association relationship between time-correlation and parameter correlation between different alarms, and The steps of the screening specifically include:
集中维护中心根据告警初始关联分析信息将其接收的告警组建为至少一个 告警关联关系树, 并获取所述告警关联关系树的根节点告警。  The centralized maintenance center establishes the alarms that are received by the alarm as the root association alarm in the alarm association tree.
[3] 3、 如权利要求 2  [3] 3. According to claim 2
所述的一种多设备集中维护方法, 其特征在于, 所述告警初始关联分析信 息包括: 告警标识、 关联告警标识、 告警时间关联上限、 告警时间关联下 限、 相互关联告警的参数对应关系。  The multi-device centralized maintenance method is characterized in that: the alarm initial association analysis information includes: an alarm identifier, an associated alarm identifier, an alarm time association upper limit, an alarm time association lower limit, and a parameter correspondence relationship of the correlated alarm.
[4] 4 、 如权利要求 3  [4] 4, as claimed in claim 3
所述的一种多设备集中维护方法, 其特征在于, 所述告警初始关联分析信 息还包括: 告警产生原因、 恢复建议、 告警产生的影响中的至少一个。  The multi-device centralized maintenance method is characterized in that: the initial association analysis information of the alarm further includes: at least one of an alarm occurrence cause, a restoration suggestion, and an impact generated by the alarm.
[5] 5 、 如权利要求 1  [5] 5, as claimed in claim 1
所述的一种多设备集中维护方法, 其特征在于, 所述预定筛选条件包括: 根据不同告警之间的基于数据挖掘的逻辑关联关系设置的告警特殊关联分 析信息, 且所述筛选的步骤包括:  The multi-device centralized maintenance method is characterized in that: the predetermined screening condition includes: alarm special association analysis information set according to a data mining-based logical association relationship between different alarms, and the screening step includes :
集中维护中心根据告警特殊关联分析信息将其接收的告警组建为至少一个 告警关联关系树, 并获取所述告警关联关系树的根节点告警。  The centralized maintenance center establishes the alarms that are received by the alarm-related association analysis information into at least one alarm association tree, and obtains the root node alarm of the alarm association tree.
[6] 6 、 如权利要求 1 至 5 [6] 6 , as claimed in claims 1 to 5
中任一权利要求所述的一种多设备集中维护方法, 其特征在于, 当所述预 定筛选条件包括: 告警初始关联分析信息和告警特殊关联分析信息时, 告 警初始关联分析信息还包括: 特殊关联分析指示信息, 且所述筛选的步骤 具体包括: A multi-device centralized maintenance method according to any one of the preceding claims, wherein, when the predetermined screening condition includes: an initial association analysis information and an alarm special association analysis information, the initial association analysis information of the alarm further includes: Correlation analysis indication information, and the step of screening Specifically include:
集中维护中心根据告警初始关联分析信息中的特殊关系分析指示信息利用 告警初始关联分析信息和告警特殊关联分析信息将其接收的告警组建为至 少一个告警关联关系树, 并获取所述告警关联关系树的根节点告警。  The centralized maintenance center uses the alarm initial association analysis information and the alarm special association analysis information to construct the alarms received into at least one alarm association tree according to the special relationship analysis indication information in the initial association analysis information of the alarm, and acquires the alarm association tree. Root node alarm.
[7] 7 、 如权利要求 1  [7] 7 as claimed in claim 1
所述的一种多设备集中维护方法, 其特征在于, 所述预定告警筛选条件包 括: 重复告警压缩条件、 忽略告警条件、 告警置换条件、 告警概括条件中 的至少一个, 且所述筛选的步骤包括下述至少一个步骤:  The multi-device centralized maintenance method is characterized in that: the predetermined alarm screening condition comprises: at least one of a repeated alarm compression condition, an ignoring an alarm condition, an alarm replacement condition, and an alarm generalization condition, and the step of screening Including at least one of the following steps:
集中维护中心根据重复告警压缩条件将其在预定时间间隔内多次接收到的 相同告警作为一次告警;  The centralized maintenance center uses the same alarm that is received multiple times within a predetermined time interval as an alarm according to the repeated alarm compression condition;
集中维护中心根据忽略告警条件选取告警;  The centralized maintenance center selects an alarm according to the ignored alarm condition;
集中维护中心将其接收的满足告警置换条件的告警置换为预定告警; 集中维护中心根据告警概括条件将其接收的告警概括为至少一个告警类型  The centralized maintenance center replaces the alarms it receives that meet the alarm replacement conditions with the predetermined alarms; the centralized maintenance center summarizes the alarms it receives according to the alarm summary conditions into at least one alarm type.
[8] 8 、 如权利要求 7所述的一种多设备集中维护方法, 其特征在于: [8] 8. A multi-device centralized maintenance method according to claim 7, wherein:
所述忽略告警条件包括: 过滤条件、 抑制条件和时间窗提取条件中的至少 一个, 且所述集中维护中心根据忽略告警条件选取告警的步骤具体包括下 述至少一个步骤:  The step of ignoring the alarm includes: at least one of a filter condition, a suppression condition, and a time window extraction condition, and the step of the centralized maintenance center selecting the alarm according to the ignoring the alarm condition comprises the following at least one step:
集中维护中心从其接收的告警中选取满足过滤条件的告警; 集中维护中心根据抑制条件对其接收的、 在预定的上下文中的告警进行抑 制;  The centralized maintenance center selects an alarm that meets the filtering condition from the alarms it receives; the centralized maintenance center suppresses the alarm received in the predetermined context according to the suppression condition;
集中维护中心根据时间窗提取条件提取其在预定时间窗内接收的告警; 或者所述告警置换条件包括: 升级置换条件、 子类置换条件中的至少一个 , 且所述集中维护中心将其接收的满足告警置换条件的告警置换为预定告 警的步骤具体包括下述至少一个步骤:  The centralized maintenance center extracts an alarm that is received within a predetermined time window according to the time window extraction condition; or the alarm replacement condition includes: upgrading at least one of a replacement condition and a sub-category replacement condition, and the centralized maintenance center receives the alarm The step of replacing the alarm satisfying the alarm replacement condition with the predetermined alarm includes at least one of the following steps:
集中维护中心根据升级置换条件确定其在预定时间间隔内接收到的相同告 警的次数, 并在所述次数达到预定次数时, 将所述各相同告警置换为一条 高级别的告警; 集中维护中心将其接收的、 满足子类置换条件的告警置换为子类告警。 The centralized maintenance center determines the number of times the same alarm is received in the predetermined time interval according to the upgrade replacement condition, and replaces the same alarm with a high-level alarm when the number of times reaches a predetermined number of times; The centralized maintenance center replaces the alarms it receives and meets the subclass replacement conditions with subclass alarms.
[9] 9  [9] 9
、 一种多设备集中维护系统, 包括: 多个系统设备、 告警采集系统和集中 维护中心, 告警采集系统将系统设备的告警传输至集中维护中心, 其特征 在于, 所述集中维护中心还设置有:  A multi-device centralized maintenance system includes: a plurality of system devices, an alarm collection system, and a centralized maintenance center, wherein the alarm collection system transmits the alarms of the system equipment to the centralized maintenance center, wherein the centralized maintenance center is further provided with :
告警管理单元: 根据预定告警筛选条件对集中维护中心接收的告警进行筛 选, 并将筛选后得到的告警传输至集中维护单元;  The alarm management unit: screens the alarms received by the centralized maintenance center according to the predetermined alarm screening conditions, and transmits the alarms obtained after the screening to the centralized maintenance unit;
集中维护单元: 根据其接收的告警对系统设备进行维护。  Centralized maintenance unit: Maintains system equipment based on the alarms it receives.
[10] 10 、 如权利要求 9 [10] 10, as claimed in claim 9
所述的一种多设备集中维护系统, 其特征在于, 所述告警管理单元包括: 初始逻辑关联关系存储模块: 根据不同告警之间的基于时间相关性和参数 相关性的逻辑关联关系设置的告警初始关联分析信息, 并存储; 逻辑关联分析模块 1  The multi-device centralized maintenance system is characterized in that: the alarm management unit comprises: an initial logical association relationship storage module: an alarm set according to a logical association relationship between time-correlation and parameter correlation between different alarms Initial association analysis information, and storage; logical association analysis module 1
: 根据初始逻辑关联关系存储模块中存储的告警初始关联分析信息将集中 维护中心接收的告警组建为至少一个告警关联关系树, 并将所述告警关联 关系树或者所述告警关联关系树的根节点告警传输至集中维护单元。  And generating, according to the initial association analysis information of the alarms stored in the initial logical association storage module, the alarms received by the centralized maintenance center into at least one alarm association tree, and the alarm association tree or the root node of the alarm association tree The alarm is transmitted to the centralized maintenance unit.
[11] 11 、 如权利要求 9 [11] 11 , as claimed in claim 9
所述的一种多设备集中维护系统, 其特征在于, 所述告警管理单元包括: 特殊逻辑关联关系存储模块: 根据不同告警之间的基于数据挖掘的逻辑关 联关系设置的告警特殊关联分析信息, 并存储;  The multi-device centralized maintenance system is characterized in that: the alarm management unit comprises: a special logical association relationship storage module: an alarm special association analysis information set according to a logical association relationship based on data mining between different alarms, And store
逻辑关联分析模块 2  Logical association analysis module 2
: 根据特殊逻辑关联关系存储模块中存储的告警初始关联分析信息将集中 维护中心接收的告警组建为至少一个告警关联关系树, 并将所述告警关联 关系树或者所述告警关联关系树的根节点告警传输至集中维护单元。  And generating, according to the initial association analysis information of the alarms stored in the special logical association storage module, the alarms received by the centralized maintenance center into at least one alarm association tree, and the alarm association tree or the root node of the alarm association tree The alarm is transmitted to the centralized maintenance unit.
[12] 12 [12] 12
、 一种网络设备, 为多设备集中维护系统中的集中维护中心, 其特征在于 , 所述集中维护中心还设置有:  A network device is a centralized maintenance center in a centralized maintenance system of a multi-device. The centralized maintenance center is further configured with:
告警管理单元: 根据预定告警筛选条件对集中维护中心接收的告警进行筛 选, 并将筛选后得到的告警传输至集中维护单元; Alarm management unit: Screens the alarms received by the centralized maintenance center according to the predetermined alarm screening conditions. Selecting, and transmitting the alarm obtained after screening to the centralized maintenance unit;
集中维护单元: 根据其接收的告警对系统设备进行维护。  Centralized maintenance unit: Maintains system equipment based on the alarms it receives.
[13] 13 、 如权利要求 12  [13] 13 as claimed in claim 12
所述的一种网络设备, 其特征在于, 所述告警管理单元包括: 初始逻辑关联关系存储模块: 根据不同告警之间的基于时间相关性和参数 相关性的逻辑关联关系设置的告警初始关联分析信息, 并存储; 逻辑关联分析模块 1  The network device is characterized in that: the alarm management unit comprises: an initial logical association relationship storage module: an initial association analysis of alarms set according to a logical association relationship between time alarms and parameter correlations between different alarms Information, and storage; logical association analysis module 1
: 根据初始逻辑关联关系存储模块中存储的告警初始关联分析信息将集中 维护中心接收的告警组建为至少一个告警关联关系树, 并将所述告警关联 关系树或者所述告警关联关系树的根节点告警传输至集中维护单元。  And generating, according to the initial association analysis information of the alarms stored in the initial logical association storage module, the alarms received by the centralized maintenance center into at least one alarm association tree, and the alarm association tree or the root node of the alarm association tree The alarm is transmitted to the centralized maintenance unit.
[14] 14 、 如权利要求 12 [14] 14 , as claimed in claim 12
所述的一种网络设备, 其特征在于, 所述告警管理单元包括: 特殊逻辑关联关系存储模块: 根据不同告警之间的基于数据挖掘的逻辑关 联关系设置的告警特殊关联分析信息, 并存储;  The network device is characterized in that: the alarm management unit comprises: a special logical association relationship storage module: the alarm special association analysis information set according to the data association-based logical association relationship between different alarms, and stored;
逻辑关联分析模块 2  Logical association analysis module 2
: 根据特殊逻辑关联关系存储模块中存储的告警初始关联分析信息将集中 维护中心接收的告警组建为至少一个告警关联关系树, 并将所述告警关联 关系树或者所述告警关联关系树的根节点告警传输至集中维护单元。  And generating, according to the initial association analysis information of the alarms stored in the special logical association storage module, the alarms received by the centralized maintenance center into at least one alarm association tree, and the alarm association tree or the root node of the alarm association tree The alarm is transmitted to the centralized maintenance unit.
[15] 15 、 如权利要求 12或 13或 14 [15] 15 as claimed in claim 12 or 13 or 14
所述的一种网络设备, 其特征在于, 所述告警管理单元包括: 告警压缩分 析模块、 忽略告警分析模块, 置换告警分析模块和告警概括分析模块中的 至少一个;  The network management device is characterized in that: the alarm management unit comprises: at least one of an alarm compression analysis module, a ignore alarm analysis module, a replacement alarm analysis module and an alarm summary analysis module;
告警压缩分析模块: 根据重复告警压缩条件将集中维护中心在预定时间间 隔内多次接收到的相同告警作为一次告警传输至集中维护单元, 并将所述 相同告警的接收次数传输至集中维护单元;  The alarm compression analysis module: transmits the same alarm received by the centralized maintenance center multiple times in a predetermined time interval as an alarm to the centralized maintenance unit according to the repeated alarm compression condition, and transmits the received number of the same alarm to the centralized maintenance unit;
忽略告警分析模块: 根据忽略告警条件选取告警, 并将选取的告警传输至 集中维护单元;  Ignore the alarm analysis module: Select the alarm according to the ignore alarm condition, and transmit the selected alarm to the centralized maintenance unit;
置换告警分析模块: 根据告警置换条件将集中维护中心接收的满足置换条 件的告警置换为预定告警, 并将预定告警传输至集中维护单元; 告警概括分析模块: 根据告警概括条件将集中维护中心接收的告警概括为 至少一个告警类型, 并将告警类型信息传输至集中维护单元。 Replacement alarm analysis module: The replacement replacement bar received by the centralized maintenance center according to the alarm replacement condition The alarm is replaced with a predetermined alarm, and the predetermined alarm is transmitted to the centralized maintenance unit. The alarm summary analysis module: summarizes the alarm received by the centralized maintenance center into at least one alarm type according to the alarm summary condition, and transmits the alarm type information to the centralized maintenance. unit.
16 、 如权利要求 15  16 as in claim 15
所述的一种网络设备, 其特征在于: 所述忽略告警分析模块包括下述至少 一个子模块: The network device is characterized in that: the ignore alarm analysis module comprises at least one submodule described below:
告警过滤分析子模块: 将集中维护中心接收的满足过滤条件的告警传输至 集中维护单元; Alarm filtering analysis sub-module: transmitting the alarms that meet the filtering conditions received by the centralized maintenance center to the centralized maintenance unit;
告警抑制分析子模块: 对集中维护中心接收的满足抑制条件的告警进行抑 制, 并将不满足抑制条件的告警传输至集中维护单元; The alarm suppression analysis sub-module: suppresses the alarm that meets the suppression condition received by the centralized maintenance center, and transmits the alarm that does not satisfy the suppression condition to the centralized maintenance unit;
时间关联分析子模块: 将集中维护中心接收到的、 在预定时间窗内的告警 传输至集中维护单元; Time correlation analysis sub-module: transmitting the alarm received by the centralized maintenance center and within a predetermined time window to the centralized maintenance unit;
或者所述置换告警分析模块包括下述至少一个子模块: Or the replacement alarm analysis module includes at least one submodule described below:
告警计数分析子模块: 根据升级置换条件确定其在预定时间间隔内接收到 的相同告警的次数, 并在所述次数达到预定次数时, 将所述各相同告警置 换为一条高级别的告警, 并所述高级别的告警传输至集中维护单元; 告警细化分析子模块: 将集中维护中心接收的、 满足子类置换条件的告警 置换为子类告警, 并将子类告警传输至集中维护单元。 The alarm count analysis sub-module: determining, according to the upgrade replacement condition, the number of times the same alarm is received within a predetermined time interval, and replacing the same alarm with a high-level alarm when the number of times reaches a predetermined number of times, and The high-level alarm is transmitted to the centralized maintenance unit. The alarm refinement analysis sub-module: replaces the alarm received by the centralized maintenance center that satisfies the sub-type replacement condition with a sub-type alarm, and transmits the sub-type alarm to the centralized maintenance unit.
PCT/CN2007/070076 2006-06-01 2007-06-01 Method, system and network device of centralized maintenance of multiple devices WO2007143943A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CNB2006100838300A CN100479385C (en) 2006-06-01 2006-06-01 Integral maintaining method and system for multi-equipment
CN200610083830.0 2006-06-01

Publications (1)

Publication Number Publication Date
WO2007143943A1 true WO2007143943A1 (en) 2007-12-21

Family

ID=38771805

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2007/070076 WO2007143943A1 (en) 2006-06-01 2007-06-01 Method, system and network device of centralized maintenance of multiple devices

Country Status (2)

Country Link
CN (1) CN100479385C (en)
WO (1) WO2007143943A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102111296A (en) * 2011-01-10 2011-06-29 浪潮通信信息系统有限公司 Mining method for communication alarm association rule based on maximal frequent item set

Families Citing this family (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI588760B (en) 2009-11-30 2017-06-21 萬國商業機器公司 Task management system associating with contact information and method thereof
CN102195791A (en) * 2010-03-05 2011-09-21 华为技术有限公司 Alarm analysis method, device and system
CN102236340B (en) * 2010-04-26 2014-12-03 北大方正集团有限公司 Multi-equipment management method and device
CN101958803A (en) * 2010-09-09 2011-01-26 中兴通讯股份有限公司 Alarm compression system and method based on communication network
CN102468979B (en) * 2010-11-12 2016-03-30 国际商业机器公司 The Work management system of association contact details and method thereof
CN102546274A (en) * 2010-12-20 2012-07-04 中国移动通信集团广西有限公司 Alarm monitoring method and alarm monitoring equipment in communication service
CN102540899A (en) * 2010-12-31 2012-07-04 上海可鲁系统软件有限公司 Configurable activity alarm method for industrial automation system
CN103067045B (en) * 2011-10-18 2015-02-18 国家电网公司 Waste circuit identification method of electric power communication system and apparatus thereof
CN103428017A (en) * 2012-05-21 2013-12-04 中兴通讯股份有限公司 Method and device for alert forwarding
CN104424078A (en) * 2013-08-28 2015-03-18 鸿富锦精密工业(深圳)有限公司 Method and system for reducing floating alarm information
CN104753861A (en) * 2013-12-27 2015-07-01 中国电信股份有限公司 Security event handling method and device
CN104021195B (en) * 2014-06-13 2017-04-26 中国民航信息网络股份有限公司 Warning association analysis method based on knowledge base
CN104038375A (en) * 2014-06-30 2014-09-10 成都广达电子股份有限公司 Alarm processing analysis system and method of broadcasting and TV access network
CN105790972B (en) * 2014-12-18 2020-09-29 南京中兴软件有限责任公司 Controller and alarm correlation processing method
CN105099752A (en) * 2015-05-22 2015-11-25 杭州华三通信技术有限公司 Recommendation method and device for associated alarm data
CN105450444A (en) * 2015-11-16 2016-03-30 成都科来软件有限公司 Network parameter alarm configuration system and network parameter alarm evaluation system based on network data
CN106789138B (en) * 2015-11-23 2019-10-15 中国移动通信集团广西有限公司 A kind of method and device of network alarm association analysis
CN107181604B (en) * 2016-03-09 2020-06-02 华为技术有限公司 Generation method of alarm association rule, alarm compression method and device
CN106250288A (en) * 2016-07-29 2016-12-21 浪潮软件集团有限公司 A kind of root alert analysis recognition methods based on data mining
CN108073611A (en) * 2016-11-14 2018-05-25 国网江苏省电力公司镇江供电公司 The filter method and device of a kind of warning information
CN106713017B (en) * 2016-12-08 2020-06-19 国网北京市电力公司 Alarm information processing method and device
CN107395392A (en) * 2017-06-07 2017-11-24 成都视达科信息技术有限公司 A kind of alert analysis method and system
CN109327331A (en) * 2018-09-18 2019-02-12 北京邮电大学 Fault Locating Method and device in communication network
CN109615817A (en) * 2018-10-30 2019-04-12 珠海派诺科技股份有限公司 Monitoring system combines alarm method, device, electronic equipment and storage medium
CN110120146A (en) * 2019-04-25 2019-08-13 新浪网技术(中国)有限公司 It is a kind of based on platform system in the alarm method of platform system in alarm and alarm

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1635551A (en) * 2003-12-30 2005-07-06 上海贝尔阿尔卡特股份有限公司 Universal multi-hierarchy alarm processing method
CN1650269A (en) * 2002-04-19 2005-08-03 计算机联合思想公司 System and method for monitoring a computer application
WO2005114609A2 (en) * 2004-05-12 2005-12-01 Cisco Technology, Inc. Method and apparatus for triage of network alarms
CN1755651A (en) * 2004-09-30 2006-04-05 国际商业机器公司 Model and system for reasoning with N-step lookahead in policy-based system management

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1650269A (en) * 2002-04-19 2005-08-03 计算机联合思想公司 System and method for monitoring a computer application
CN1635551A (en) * 2003-12-30 2005-07-06 上海贝尔阿尔卡特股份有限公司 Universal multi-hierarchy alarm processing method
WO2005114609A2 (en) * 2004-05-12 2005-12-01 Cisco Technology, Inc. Method and apparatus for triage of network alarms
CN1755651A (en) * 2004-09-30 2006-04-05 国际商业机器公司 Model and system for reasoning with N-step lookahead in policy-based system management

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102111296A (en) * 2011-01-10 2011-06-29 浪潮通信信息系统有限公司 Mining method for communication alarm association rule based on maximal frequent item set

Also Published As

Publication number Publication date
CN100479385C (en) 2009-04-15
CN101047556A (en) 2007-10-03

Similar Documents

Publication Publication Date Title
WO2007143943A1 (en) Method, system and network device of centralized maintenance of multiple devices
CN105183609B (en) A kind of real-time monitoring system for being applied to software system and method
CN107196804B (en) Alarm centralized monitoring system and method for terminal communication access network of power system
US20200106662A1 (en) Systems and methods for managing network health
US6353902B1 (en) Network fault prediction and proactive maintenance system
US7636424B1 (en) Method and system for selectively displaying alarms in a communications network
US7259666B1 (en) Method and system for displaying status indications from communications network
US7389345B1 (en) Filtering approach for network system alarms
CN103370904B (en) Method, network entity for the seriousness that determines network accident
EP1279211B1 (en) Topology-based reasoning apparatus for root-cause analysis of network faults
US7301448B1 (en) Method and system for deduplicating status indications in a communications network
CN100495978C (en) A method and apparatus for fault location in communication network
CN101312405B (en) Alarm processing method and network management system
WO2014004721A1 (en) Network monitoring and diagnostics
CN101997709B (en) Root alarm data analysis method and system
CN100555952C (en) Screen the implementation method of relevant alarm
CN103281461A (en) Call center monitoring method, device and system
CN101150433A (en) A method for setting alarm filtering rule
CN101989931A (en) Operation alarm processing method and device
CN107332722A (en) The method for removing and system of a kind of fault message
CN104574219A (en) System and method for monitoring and early warning of operation conditions of power grid service information system
US7711811B1 (en) Filtering approach for network system alarms based on lifecycle state
CN108989132A (en) Fault warning processing method, system and computer readable storage medium
CN109787817A (en) Network fault diagnosis method, device and computer readable storage medium
US10432451B2 (en) Systems and methods for managing network health

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07721698

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase in:

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07721698

Country of ref document: EP

Kind code of ref document: A1