WO2015192561A1 - 一种告警数据处理方法及网络管理设备 - Google Patents

一种告警数据处理方法及网络管理设备 Download PDF

Info

Publication number
WO2015192561A1
WO2015192561A1 PCT/CN2014/088834 CN2014088834W WO2015192561A1 WO 2015192561 A1 WO2015192561 A1 WO 2015192561A1 CN 2014088834 W CN2014088834 W CN 2014088834W WO 2015192561 A1 WO2015192561 A1 WO 2015192561A1
Authority
WO
WIPO (PCT)
Prior art keywords
alarm data
priority
alarm
queue
sending
Prior art date
Application number
PCT/CN2014/088834
Other languages
English (en)
French (fr)
Inventor
刘云
余辰东
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to EP14895457.1A priority Critical patent/EP3160081A4/en
Publication of WO2015192561A1 publication Critical patent/WO2015192561A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
    • H04L41/0609—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on severity or priority
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/30—Flow control; Congestion control in combination with information about buffer occupancy at either end or at transit nodes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/50—Queue scheduling
    • H04L47/62—Queue scheduling characterised by scheduling criteria
    • H04L47/6215—Individual queue per QOS, rate or priority
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0686—Additional information in the notification, e.g. enhancement of specific meta-data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/29—Flow control; Congestion control using a combination of thresholds

Definitions

  • the present invention relates to network management technologies in the field of communications, and in particular, to an alarm data processing method and a network management device.
  • the network management system is mainly responsible for network alarm management, security management, configuration management, etc. Among them, alarm management plays a very important role in the normal operation of network maintenance.
  • alarm management plays a very important role in the normal operation of network maintenance.
  • the network management system In the current network communication device field, when the network element is abnormal due to environmental impact or hardware failure, it needs to be reported to the network management system in the form of an alarm. The alarm is sent to the network management system to send alarm data, and then the network management system analyzes the alarm data. .
  • the network management system receives a large amount of alarm data in a short period of time, that is, an alarm storm occurs.
  • an alarm storm occurs, if the network management system processes the received alarm data slowly, the alarm data will be accumulated in a large amount. As a result, important alarm data will be delayed and reported, which will affect the normal alarm management function.
  • an embodiment of the present invention provides an alarm data processing method and a network management device.
  • the embodiment of the invention provides a method for processing alarm data, the method comprising:
  • the identifier information of the alarm data is obtained
  • the alarm data is determined to be high priority alarm data according to the identifier information of the alarm data and the preset priority rule, the alarm data is added to one of the N high priority transmission queues, N a positive integer greater than or equal to 1;
  • the priority rule includes: one or more identifier information, and a priority corresponding to each identifier information, where the priority may include a high priority and a low priority;
  • the adding the alarm data to one of the N high-priority transmission queues includes: adding the alarm data to the corresponding N high-priority transmissions according to the identifier information of the alarm data.
  • the method further includes:
  • the alarm data is determined to be low priority alarm data according to the identifier information of the alarm data and the preset priority rule, the alarm data is added to the low priority transmission queue.
  • the method further includes:
  • the low priority sending queue is controlled to add only new alarm data, stop sending the alarm data in the low priority sending queue, and control to keep the sending station. Describe the alarm data in the high priority sending queue;
  • the alarm data in the low priority transmission queue is sent, and the alarm data in the high priority transmission queue is sent.
  • the adding the alarm data to the low priority sending queue includes: creating a buffer space for the low priority sending queue in the network management device, and buffering the alarm data into the buffer space.
  • the embodiment of the invention further provides a network management device, where the network management device includes:
  • the alarm parsing unit is configured to obtain the identifier information of the alarm data after receiving the alarm data;
  • the alarm analysis processing unit is configured to add the alarm data to the N high prioritys when determining that the alarm data is high priority alarm data according to the identifier information of the alarm data and a preset priority rule.
  • N is a positive integer greater than or equal to 1;
  • a high-priority management unit configured to retrieve M alarm data from the N high-priority transmission queues, and send the M alarm data to a corresponding client, where the M is greater than or equal to 1 and less than or equal to A positive integer of N.
  • the priority rule includes: one or more identifier information, and a priority corresponding to each identifier information, where the priority may include a high priority and a low priority;
  • the alarm analysis processing unit is specifically configured to add the alarm data to one of the corresponding N high priority transmission queues according to the identification information of the alarm data.
  • the network management device further includes: a low priority management unit, configured to cache low priority alarm data of the low priority sending queue;
  • the alarm analysis processing unit is further configured to add the alarm data when determining that the alarm data is low priority alarm data according to the identifier information of the alarm data and a preset priority rule. The lowest priority send queue.
  • the real-time monitoring unit is further configured to detect the amount of alarm data within a specified duration in real time
  • the low priority sending queue is controlled to add only new alarm data, stop sending the alarm data in the low priority sending queue, and control to keep the sending station. Describe the alarm data in the high priority sending queue;
  • the alarm data in the low priority transmission queue is sent, and the alarm data in the high priority transmission queue is sent.
  • the low priority management unit is specifically configured to create a cache space for the low priority send queue in the network management device, and cache the alarm data into the cache space.
  • the alarm data processing method and the network management device provided by the embodiments of the present invention can use the multi-thread high-priority queue to report the received alarm data to the priority level concurrently, so as to ensure valuable and high.
  • Priority alarm data can be processed and reported immediately without being delayed or discarded.
  • FIG. 1 is a schematic flowchart of a method for processing alarm data according to an embodiment of the present invention
  • FIG. 2 is a schematic structural diagram of a network management device according to an embodiment of the present invention.
  • FIG. 3 is a schematic diagram of a process of processing alarm data according to an embodiment of the present invention.
  • the method for processing alarm data provided by the embodiment of the present invention, as shown in FIG. 1 includes:
  • Step 101 When it is determined that an alarm storm occurs, after receiving the alarm data, obtain the identifier information of the alarm data.
  • Step 102 Add the alarm data to one of the N high priority sending queues when determining that the alarm data is high priority alarm data according to the identifier information of the alarm data and a preset priority rule.
  • N is a positive integer greater than or equal to 1.
  • Step 103 Extract M alarm data from the N high-priority transmission queues, and send the M alarm data to the corresponding client, so that the client processes the alarm data, where the M is greater than A positive integer equal to 1 and less than or equal to N.
  • the determining that an alarm storm occurs may be within a specified duration, and an alarm data amount.
  • the alarm data amount is higher than a preset first threshold, determining that an alarm storm occurs;
  • the method for obtaining the alarm data may be obtained by the network management device according to the provisions of the prior art, and is not described herein; the first threshold is preset according to actual conditions.
  • the method may further include: detecting, according to the identifier information of the alarm data, whether it is in a high priority sending queue or a low priority sending queue, The alarm data with the same identification information, if any, discards the alarm data directly.
  • the obtaining the identification information of the alarm data may include: parsing the received alarm data, obtaining an object identifier (OID, Object Identifier) of the alarm data, and using the OID as the identifier information.
  • OID object identifier
  • the priority rule may include: one or more identification information, and a priority corresponding to each identification information, the priority may include a high priority and a low priority; or may include one or more presets as high Priority identification information.
  • Determining, by the identifier information of the alarm data, and the preset priority rule, that the alarm data is the high priority alarm data may include: searching for the preset priority rule according to the identifier information of the alarm data. Determining the priority corresponding to the identifier information, and determining the alarm data bit high priority alarm data when the priority is the high priority; or, the method may include: searching for the identifier information of the alarm data, and whether The high priority identification information of the preset priority rule has matching identification information, and if yes, the alarm data is determined to be high priority alarm data.
  • Adding the alarm data to one of the N high-priority transmission queues includes: adding the alarm data to one of the corresponding N high-priority transmission queues according to the identification information of the alarm data; Where N is a positive integer greater than or equal to 1.
  • the N high-priority sending queues may be preset N buffer spaces, and are used to cache alarm data of different specified types of identification information.
  • the extracting M alarm data from the N high priority sending queues may be The data is taken out from the N high-priority transmission queues at the same time.
  • the alarm data is also taken out from the M high-priority transmission queues in the N high-priority transmission queues, and the remaining high-priority transmission queues are area-by-area alarm data.
  • the alarm data may be fetched one by one for the N high priority transmission queues.
  • the determining that the alarm data is a high-priority alarm data may further include: searching for a priority corresponding to the identifier information from a preset priority rule according to the identifier information of the alarm data, when If the priority is the low priority, the alarm data is determined to be low priority alarm data; or the method may include: searching for the identifier information of the alarm data, and whether it is related to the preset priority rule.
  • the high priority identifier information has matching identifier information, and if not, the alarm data is determined to be low priority alarm data.
  • the step 102 may further include: adding the alarm data to the low when determining that the alarm data is low priority alarm data according to the identification information of the alarm data and a preset priority rule. Priority send queue.
  • the embodiment may further include: detecting the amount of alarm data within a specified duration, and controlling the low priority sending queue to add only new alarm data when the alarm data amount reaches the second preset threshold. Stop sending the alarm data in the low priority sending queue, and control to keep sending the alarm data in the high priority sending queue; when the alarm data amount does not reach the second preset threshold, the sending station And the alarm data in the high priority sending queue is sent, and the second preset threshold is higher than the first threshold.
  • the sending the alarm data in the low priority sending queue and sending the alarm data in the high priority sending queue may be: sending the alarm data in the low priority sending queue according to the set low sending frequency, and according to The set high transmission frequency sends alarm data in the high priority transmission queue; the low transmission frequency is lower than the high transmission frequency; and the high transmission frequency can be set to be transmitted in real time.
  • the method for adding the alarm data in the low priority sending queue may include: creating a buffer space for the low priority sending queue in the network management device, and buffering the alarm data into the buffer space.
  • the method for sending the alarm data in the low priority sending queue may be sent in a first-in-first-out manner, or may be sent in a first-in-first-out manner.
  • the controlling the low priority sending queue only adds new alarm data, and stops sending the low priority sending queue.
  • the alarm data may be: increasing the buffer space capacity corresponding to the low priority queue.
  • the foregoing processing of the alarm data is a prior art, and is not described here. For example, it may be reported to the alarm receiving client.
  • the existing alarm storm reporting processing technology mainly adopts a method of rule discarding, alarm suppression, and buffer delay processing to process an alarm storm. None of these methods are based on prioritization of alarms, resulting in valuable, important alarms that cannot be processed or missing in the event of an alarm storm.
  • the received alarm data is concurrently reported and processed by the multi-threaded high- and low-priority queues to ensure that valuable and important alarms can be processed and reported immediately without being delayed. Or discard.
  • the network management device includes:
  • the real-time monitoring unit 21 is configured to determine that an alarm storm occurs
  • the alarm parsing unit 22 is configured to obtain the identifier information of the alarm data after receiving the alarm data.
  • the alarm analysis processing unit 23 is configured to: when the alarm data is determined as high priority alarm data according to the identifier information of the alarm data and a preset priority rule, the alarm is generated Data is added to one of the N high priority send queues;
  • the high priority management unit 24 is configured to: retrieve M alarm data from the N high priority transmission queues, and send the M alarm data to a corresponding client, so that the client processes the alarm. Data, the M being a positive integer greater than or equal to 1 and less than or equal to N.
  • the real-time monitoring unit 21 is specifically configured to detect an alarm data amount within a specified duration, and when the alarm data amount is higher than a preset first threshold, determine that an alarm storm occurs; wherein the manner of acquiring the alarm data may be Obtained for the provisions of the prior art, and will not be described herein; the first threshold is preset according to actual conditions.
  • the alarm analysis processing unit 23 may be further configured to detect, according to the identifier information of the alarm data, whether the alarm data having the same identification information is in the high priority sending queue or the low priority sending queue, and if yes, the alarm data is generated. Discard directly.
  • the alarm parsing unit 22 is configured to parse the received alarm data to obtain an object identifier (OID, Object Identifier) of the alarm data, and use the OID as the identifier information.
  • OID object identifier
  • the priority rule may include: one or more identification information, and a priority corresponding to each identification information, the priority may include a high priority and a low priority; or may include one or more presets as high Priority identification information.
  • the alarm analysis processing unit 23 is configured to search for a priority corresponding to the identifier information from a preset priority rule according to the identifier information of the alarm data, and when the found priority is a high priority, Determining the alarm data bit with high priority alarm data; or: determining whether the identifier information of the alarm data has matching identification information with the high priority identifier information of the preset priority rule, If yes, it is determined that the alarm data is high priority alarm data.
  • the alarm analysis processing unit 23 is configured to search for a priority corresponding to the identifier information from a preset priority rule according to the identifier information of the alarm data, where the priority is found.
  • the alarm data is determined to be the low priority alarm data; or the method may include: searching for the identifier information of the alarm data, and whether the high priority identifier information is in the preset priority rule. There is matching identification information, and if not, it is determined that the alarm data is low priority alarm data.
  • the alarm analysis processing unit 23 is further configured to: when the alarm data is determined to be low priority alarm data according to the identifier information of the alarm data and a preset priority rule, add the alarm data to Low priority send queue.
  • the real-time monitoring unit 21 is further configured to detect the amount of alarm data within a specified duration, and when the amount of the alarm data reaches the second preset threshold, control the low-priority sending queue to add only new Alarm data, stopping sending alarm data in the low priority transmission queue, and controlling to keep transmitting alarm data in the high priority transmission queue; when the alarm data amount does not reach the second preset threshold And sending the alarm data in the low priority sending queue, and sending the alarm data in the high priority sending queue; wherein the second preset threshold is higher than the first threshold.
  • the network management device further includes: a low priority management unit 25, configured to send the alarm data in the low priority transmission queue according to the set low transmission frequency.
  • the low priority management unit 25 is specifically configured to create a cache space for the low priority send queue and cache the alarm data into the cache space.
  • the method for sending the alarm data in the low priority sending queue may be sent in a first-in-first-out manner, or may be sent in a first-in-first-out manner.
  • the high priority management unit is configured to add the alarm data to one of the corresponding N high priority sending queues according to the identifier information of the alarm data, where N is a positive integer greater than or equal to 1.
  • the N high-priority sending queues may be preset N buffer spaces, and are used to cache alarm data of different specified types of identification information.
  • the high priority management unit is further configured to be taken out from the N high priority sending queues at the same time;
  • the alarm data may be taken out from the M high-priority transmission queues in the N high-priority transmission queues at the same time, and the remaining high-priority transmission queues may be the area-by-area alarm data; or may be in the N high-priority transmission queues.
  • the alarm data is taken out one by one.
  • the controlling the low priority sending queue only adds new alarm data, and stops sending the low priority sending queue.
  • the alarm data may be: increasing the buffer space capacity corresponding to the low priority queue.
  • the foregoing processing of the alarm data is a prior art, and is not described here. For example, it may be reported to the alarm receiving client.
  • a scenario for processing an alarm storm problem by using the alarm data processing method and the network management device provided by the present invention, as shown in FIG. 3, includes the following steps:
  • Step 301 The alarm analysis unit parses the alarm data when the alarm storm occurs, and the alarm analysis processing unit forwards to the corresponding high priority transmission queue one, two, three, or low priority transmission queue according to the priority rule, and Filter out duplicate alarms;
  • Step 302 In the high-priority sending queue, the alarm data is immediately taken out, and the alarm processing is performed, such as service opening. For the alarm processing to be efficient and without delay, each type of network element type alarm has a corresponding high-priority sending queue.
  • the high-priority sending queue may be processed concurrently, or polled, for example, setting a high-priority sending queue one or two concurrent processing;
  • Step 303 The alarm processing performs the service related to the service opening and the like for the alarm sent by the high priority sending queue, and reports the related work to the alarm receiving client.
  • Step 304 In the low-priority queue, the storm is mainly used to cache a large number of low-priority alarm data, so that the alarm client can efficiently receive the alarm sent by the high-priority queue; when the alarm storm traffic is reduced to the alarm When the client receives the threshold, it sends a low priority alarm to the client.
  • Step 305 The real-time monitoring module continuously detects the threshold value of the alarm storm traffic and the status of the cache queue, and adjusts the size of the priority cache queue and the sending status to notify the receiving client accordingly.
  • the low-priority queue increases the capacity, caches the low-priority alarm data, and stops the transmission, so that the alarm sent by the high-priority queue can be efficiently received and processed immediately by the alarm client.
  • the low priority queue sends an alarm.
  • the disclosed apparatus and method may be implemented in other manners.
  • the device embodiments described above are merely illustrative.
  • the division of the unit is only a logical function division.
  • there may be another division manner such as: multiple units or components may be combined, or Can be integrated into another system, or some features can be ignored or not executed.
  • the coupling, or direct coupling, or communication connection of the components shown or discussed may be indirect coupling or communication connection through some interfaces, devices or units, and may be electrical, mechanical or other forms. of.
  • the units described above as separate components may or may not be physically separated, and the components displayed as the unit may or may not be physical units, that is, may be located in one place or distributed to multiple network units; Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.
  • each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may be separately used as one unit, or two or more units may be integrated into one unit;
  • the unit can be implemented in the form of hardware or in the form of hardware plus software functional units.
  • the foregoing program may be stored in a computer readable storage medium, and the program is executed when executed.
  • the steps of the foregoing method embodiments are included; and the foregoing storage medium includes: a mobile storage device, a read only memory (ROM, Read-Only) Memory, random access memory (RAM), disk or optical disk, and other media that can store program code.
  • the above-described integrated unit of the present invention may be stored in a computer readable storage medium if it is implemented in the form of a software function module and sold or used as a standalone product.
  • the technical solution of the embodiments of the present invention may be embodied in the form of a software product in essence or in the form of a software product stored in a storage medium, including a plurality of instructions.
  • a computer device (which may be a personal computer, server, or network device, etc.) is caused to perform all or part of the methods described in various embodiments of the present invention.
  • the foregoing storage medium includes: a removable storage device, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes.
  • the present invention discloses an alarm data processing method and a network management device.
  • the alarm data is determined to be high priority alarm data according to the identification information of the alarm data and a preset priority rule.
  • the multi-threaded high-priority queues are used to report the received alarm data to the priority level for concurrent reporting to ensure that valuable, high-priority alarm data can be processed and reported immediately without being delayed or discarded.

Abstract

本发明公开了一种告警数据处理方法及网络管理设备，其中方法包括：当确定出现告警风暴时，接收到告警数据后，获取所述告警数据的标识信息；当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列之一中，N为大于等于1的正整数；从所述N个高优先级发送队列中取出M个告警数据，将所述M个告警数据发送至对应的客户端，使得所述客户端处理所述告警数据，所述M为大于等于1且小于等于N的正整数。

Description

一种告警数据处理方法及网络管理设备 技术领域
本发明涉及通信领域的网络管理技术，尤其涉及一种告警数据处理方法及网络管理设备。
背景技术
在网络通讯环境下，网络管理系统主要负责网络的告警管理、安全管理、配置管理等工作，其中，告警管理对网络维护的正常运行起着非常重要的作用。在当前网络通讯设备领域中,网元由于环境影响或硬件故障而发生异常情况时，需要以告警的方式上报到网管系统，告警的方式是向网管系统发送告警数据，然后由网管系统解析告警数据。
但是，随着网络设备规模的增大，整个网络中的网元在短时间内会产生大量的告警数据，此时网管系统就会在短时间内接收到海量的告警数据，即发生告警风暴。当发生告警风暴时，如果网管系统对接收到的告警数据处理慢，就会导致告警数据大量堆积，导致重要的告警数据被延迟上报，影响正常的告警管理功能。
发明内容
为解决上述技术问题，本发明实施例提供一种告警数据处理方法及网络管理设备。
本发明实施例提供了一种告警数据处理方法，所述方法包括：
当确定出现告警风暴时，接收到告警数据后，获取所述告警数据的标识信息；
当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列之一中，N为大于等于1的正整数；
从所述N个高优先级发送队列中的取出M个告警数据，将所述M个告警数据发送至对应的客户端，使得所述客户端处理所述告警数据，所述M为大于等于1且小于等于N的正整数。
上述方案中，所述所述优先级规则包括：一个或多个标识信息、以及各个标识信息对应的优先级，所述优先级可以包括高优先级和低优先级；
或者，包括一个或多个预设为高优先级的标识信息。
上述方案中，所述将所述告警数据添加至N个高优先级发送队列之一中，包括：根据所述告警数据的标识信息，将所述告警数据添加至对应的N个高优先级发送队列之一；其中，N为大于等于1的正整数。
上述方案中，所述方法还包括：
当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为低优先级告警数据时，将所述告警数据添加至低优先级发送队列。
上述方案中，所述方法还包括：
实时检测指定时长内告警数据量；
当所述告警数据量达到第二预设门限值时，控制所述低优先级发送队列仅添加新的告警数据、停止发送所述低优先级发送队列中的告警数据，并且控制保持发送所述高优先级发送队列中的告警数据；
当所述告警数据量没有达到第二预设门限值时，发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据。
上述方案中，所述在低优先级发送队列中添加告警数据，包括：在网络管理设备中为低优先级发送队列创建缓存空间，将告警数据缓存至缓存空间中。
本发明实施例还提供了一种网络管理设备，所述网络管理设备包括：
实时监测单元，用于确定出现告警风暴；
告警解析单元，用于接收到告警数据后，获取所述告警数据的标识信息；
告警分析处理单元，用于当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列之一中，N为大于等于1的正整数；
高优先级管理单元，用于从所述N个高优先级发送队列中的取出M个告警数据，将所述M个告警数据发送至对应的客户端，所述M为大于等于1且小于等于N的正整数。
上述方案中，所述优先级规则包括：一个或多个标识信息、以及各个标识信息对应的优先级，所述优先级可以包括高优先级和低优先级；
或者，包括一个或多个预设为高优先级的标识信息。
上述方案中，所述告警分析处理单元，具体用于根据所述告警数据的标识信息，将所述告警数据添加至对应的N个高优先级发送队列之一。
上述方案中，所述网络管理设备还包括：低优先级管理单元，用于缓存低优先级发送队列的低优先级告警数据；
相应的，所述告警分析处理单元，还用于当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为低优先级告警数据时，将所述告警数据添加至低优先级发送队列。
上述方案中，所述实时监测单元，还用于实时检测指定时长内告警数据量；
当所述告警数据量达到第二预设门限值时，控制所述低优先级发送队列仅添加新的告警数据、停止发送所述低优先级发送队列中的告警数据，并且控制保持发送所述高优先级发送队列中的告警数据；
当所述告警数据量没有达到第二预设门限值时，发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据。
上述方案中，所述低优先级管理单元，具体用于在网络管理设备中为低优先级发送队列创建缓存空间，将告警数据缓存至缓存空间中。
本发明实施例所提供的告警数据处理方法及网络管理设备，能在发生告警风暴时，利用多线程高优先级队列对接收到的告警数据按优先级别并发上报处理，以保证有价值的，高优先级的告警数据可以被立即处理和上报，而不会被延迟或丢弃。
附图说明
图1为本发明实施例告警数据处理方法流程示意图；
图2为本发明实施例网络管理设备组成结构示意图；
图3为本发明实施例告警数据处理流程示意图。
具体实施方式
下面结合附图及具体实施例对本发明再作进一步详细的说明。
实施例一、
本发明实施例提供的告警数据处理方法，如图1所示，包括：
步骤101：当确定出现告警风暴时，接收到告警数据后，获取所述告警数据的标识信息。
步骤102：当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列之一中，其中N为大于等于1的正整数。
步骤103：从所述N个高优先级发送队列中取出M个告警数据，将所述M个告警数据发送至对应的客户端，使得所述客户端处理所述告警数据，所述M为大于等于1且小于等于N的正整数。
这里，所述确定出现告警风暴可以为检测指定时长内、告警数据量，当所述告警数据量高于预设的第一门限值时，确定出现告警风暴；其中， 获取告警数据的方式可以为网络管理设备根据现有技术的规定获取，这里不做赘述；所述第一门限值为根据实际情况预设。
所述将所述告警数据添加至N个高优先级发送队列之一中之前，还可以包括：根据所述告警数据的标识信息，检测是否在高优先级发送队列或低优先级发送队列中，有相同标识信息的告警数据，若有，则将告警数据直接丢弃。
所述获取告警数据的标识信息可以包括：对接收到的告警数据进行解析，得到告警数据的对象标识符(OID，Object Identifier)，将所述OID作为所述标识信息。
所述优先级规则可以包括：一个或多个标识信息、以及各个标识信息对应的优先级，所述优先级可以包括高优先级和低优先级；或者，可以包括一个或多个预设为高优先级标识信息。
根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据可以包括：根据所述告警数据的标识信息，从预设的优先级规则中查找所述标识信息对应的优先级，当查找到的所述优先级为高优先级时，确定所述告警数据位高优先级告警数据；或者，可以包括：查找所述告警数据的标识信息，是否与在预设的优先级规则的所述高优先级标识信息中有匹配的标识信息，若有，则确定所述告警数据为高优先级告警数据。
所述将所述告警数据添加至N个高优先级发送队列之一中，包括：根据所述告警数据的标识信息，将所述告警数据添加至对应的N个高优先级发送队列之一；其中，N为大于等于1的正整数。所述N个高优先级发送队列可以为预设的N个缓存空间，分别用于缓存不同的指定类型的标识信息的告警数据。
相应的，所述从所述N个高优先级发送队列中取出M个告警数据可以 为同时从N个高优先级发送队列中取出；也可以为同时从N个高优先级发送队列中的M个高优先级发送队列中取出告警数据，其余高优先级发送队列逐个区域告警数据；或者，还可以为N个高优先级发送队列中逐个取出告警数据。
进一步的，上述确定所述告警数据为高优先级告警数据之外，还可以包括：根据所述告警数据的标识信息，从预设的优先级规则中查找所述标识信息对应的优先级，当查找到的所述优先级为低优先级时，确定所述告警数据为低优先级告警数据；或者，可以包括：查找所述告警数据的标识信息，是否与在预设的优先级规则的所述高优先级标识信息中有匹配的标识信息，若没有，则确定所述告警数据为低优先级告警数据。
优选地，所述步骤102还可以包括：当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为低优先级告警数据时，将所述告警数据添加至低优先级发送队列。
优选地，本实施例还可以包括：实时检测指定时长内、告警数据量，当所述告警数据量达到第二预设门限值时，控制所述低优先级发送队列仅添加新的告警数据、停止发送所述低优先级发送队列中的告警数据，并且控制保持发送所述高优先级发送队列中的告警数据；当所述告警数据量没有达到第二预设门限值时，发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据；其中，所述第二预设门限值高于所述第一门限值。
所述发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据可以为：根据设置的低发送频率发送低优先级发送队列中的告警数据，以及根据设置的高发送频率发送高优先级发送队列中的告警数据；所述低发送频率低于所述高发送频率；所述高发送频率可以设置为实时发送。
所述在低优先级发送队列中添加告警数据的方法可以包括：在网络管理设备中为低优先级发送队列创建缓存空间，将告警数据缓存至缓存空间中。相应的，所述发送所述低优先级发送队列中的告警数据的方法可以为以先入后出的方式发送、或者可以为以先入先出的方式发送。
可以理解的是，与上述所述在缓存空间中缓存告警数据的方法对应的，所述控制所述低优先级发送队列仅添加新的告警数据、并且停止发送所述低优先级发送队列中的告警数据可以为：增加低优先级队列对应的缓存空间容量。
上述对告警数据进行处理为现有技术，这里不做赘述，比如可以为上报到告警接收客户端。
可见，与现有技术相比较，现有的告警风暴上报处理技术中主要采用规则丢弃，告警抑制，缓存延迟处理等方法来处理告警风暴发生的场景。这些方法都没有基于对告警的优先级别处理，导致在告警风暴产生的情况下有价值的，重要的告警不能及时处理或者缺失。本实施例在发生告警风暴时，利用多线程高低优先级队列对接收到的告警数据按优先级别并发上报处理，以保证有价值的，重要的告警可以被立即处理和上报，而不会被延迟或丢弃。
实施例二、
本实施例提供一种网络管理设备，如图2所示，所述网络管理设备包括：
实时监测单元21，用于确定出现告警风暴；
告警解析单元22，用于接收到告警数据后，获取所述告警数据的标识信息；
告警分析处理单元23，用于当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警 数据添加至N个高优先级发送队列之一中；
高优先级管理单元24，用于从所述N个高优先级发送队列中的取出M个告警数据，将所述M个告警数据发送至对应的客户端，使得所述客户端处理所述告警数据，所述M为大于等于1且小于等于N的正整数。
所述实时监测单元21，具体用于检测指定时长内、告警数据量，当所述告警数据量高于预设的第一门限值时，确定出现告警风暴；其中，获取告警数据的方式可以为现有技术的规定获取，这里不做赘述；所述第一门限值为根据实际情况预设。
告警分析处理单元23，还可以用于根据所述告警数据的标识信息，检测是否在高优先级发送队列或低优先级发送队列中，有相同标识信息的告警数据，若有，则将告警数据直接丢弃。
所述告警解析单元22，具体用于对接收到的告警数据进行解析，得到告警数据的对象标识符(OID，Object Identifier)，将所述OID作为所述标识信息。
所述优先级规则可以包括：一个或多个标识信息、以及各个标识信息对应的优先级，所述优先级可以包括高优先级和低优先级；或者，可以包括一个或多个预设为高优先级标识信息。
告警分析处理单元23，具体用于根据所述告警数据的标识信息，从预设的优先级规则中查找所述标识信息对应的优先级，当查找到的所述优先级为高优先级时，确定所述告警数据位高优先级告警数据；或者，可以包括：查找所述告警数据的标识信息，是否与在预设的优先级规则的所述高优先级标识信息中有匹配的标识信息，若有，则确定所述告警数据为高优先级告警数据。
告警分析处理单元23，具体用于根据所述告警数据的标识信息，从预设的优先级规则中查找所述标识信息对应的优先级，当查找到的所述优先 级为低优先级时，确定所述告警数据为低优先级告警数据；或者，可以包括：查找所述告警数据的标识信息，是否与在预设的优先级规则的所述高优先级标识信息中有匹配的标识信息，若没有，则确定所述告警数据为低优先级告警数据。
优选地，告警分析处理单元23，还用于当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为低优先级告警数据时，将所述告警数据添加至低优先级发送队列。
优选地，所述实时监测单元21，还用于实时检测指定时长内、告警数据量，当所述告警数据量达到第二预设门限值时，控制所述低优先级发送队列仅添加新的告警数据、停止发送所述低优先级发送队列中的告警数据，并且控制保持发送所述高优先级发送队列中的告警数据；当所述告警数据量没有达到第二预设门限值时，发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据；其中，所述第二预设门限值高于所述第一门限值。
所述网络管理设备还包括：低优先级管理单元25，用于根据设置的低发送频率发送低优先级发送队列中的告警数据。
所述低优先级管理单元25，具体用于为低优先级发送队列创建缓存空间，将告警数据缓存至缓存空间中。相应的，所述发送所述低优先级发送队列中的告警数据的方法可以为以先入后出的方式发送、或者可以为以先入先出的方式发送。
所述高优先级管理单元，用于根据所述告警数据的标识信息，将所述告警数据添加至对应的N个高优先级发送队列之一；其中，N为大于等于1的正整数。所述N个高优先级发送队列可以为预设的N个缓存空间，分别用于缓存不同的指定类型的标识信息的告警数据。
所述高优先级管理单元，还用于同时从N个高优先级发送队列中取出； 也可以为同时从N个高优先级发送队列中的M个高优先级发送队列中取出告警数据，其余高优先级发送队列逐个区域告警数据；或者，还可以为N个高优先级发送队列中逐个取出告警数据。
可以理解的是，与上述所述在缓存空间中缓存告警数据的方法对应的，所述控制所述低优先级发送队列仅添加新的告警数据、并且停止发送所述低优先级发送队列中的告警数据可以为：增加低优先级队列对应的缓存空间容量。
上述对告警数据进行处理为现有技术，这里不做赘述，比如可以为上报到告警接收客户端。
实施例三、
使用本发明提供的告警数据处理方法及网络管理设备处理告警风暴问题的一个场景，如图3所示，包括以下步骤：
步骤301：针对告警风暴发生时，告警解析单元对告警数据进行解析，告警分析处理单元按照优先级规则转发到相应的高优先级发送队列一、二、三、或低优先级发送队列中，并过滤掉重复的告警；
步骤302：在高优先级发送队列中，告警数据被立即取出，并做业务开通等告警处理工作，为了告警处理高效且没有延迟，每种网元类型的告警都有相应的高优先级发送队列；另外，所述高优先级发送队列可以并发处理，或轮询发送，比如，设置高优先级发送队列一、二彼此并发处理；
步骤303：告警处理对高优先级发送队列发来的告警做解析处理等业务开通相关工作，并上报到告警接收客户端；
步骤304：在低优先级队列中，风暴来临时主要用于缓存大量的低优先级别的告警数据，以保证告警客户端能够高效接收到高优先级队列发送的告警；当告警风暴流量降低到告警客户端的接收门限值时，发送低优先级别的告警到客户端；
步骤305：实时监测模块持续检测告警风暴流量的门限值及缓存队列的状态，并依此调整优先级缓存队列的大小及发送状态到通知接收客户端。
当达到告警客户端最大接收门限时，低优先级队列增大容量，缓存低优先级告警数据，并停止发送，以保证高优先级队列发送出来的告警可以被告警客户端高效接收和立即处理。当风暴压力在客户端告警接收门限值以下时，低优先级队列发送告警。
在本申请所提供的几个实施例中，应该理解到，所揭露的设备和方法，可以通过其它的方式实现。以上所描述的设备实施例仅仅是示意性的，例如，所述单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，如：多个单元或组件可以结合，或可以集成到另一个系统，或一些特征可以忽略，或不执行。另外，所显示或讨论的各组成部分相互之间的耦合、或直接耦合、或通信连接可以是通过一些接口，设备或单元的间接耦合或通信连接，可以是电性的、机械的或其它形式的。
上述作为分离部件说明的单元可以是、或也可以不是物理上分开的，作为单元显示的部件可以是、或也可以不是物理单元，即可以位于一个地方，也可以分布到多个网络单元上；可以根据实际的需要选择其中的部分或全部单元来实现本实施例方案的目的。
另外，在本发明各实施例中的各功能单元可以全部集成在一个处理单元中，也可以是各单元分别单独作为一个单元，也可以两个或两个以上单元集成在一个单元中；上述集成的单元既可以采用硬件的形式实现，也可以采用硬件加软件功能单元的形式实现。
本领域普通技术人员可以理解：实现上述方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成，前述的程序可以存储于一计算机可读取存储介质中，该程序在执行时，执行包括上述方法实施例的步骤；而前述的存储介质包括：移动存储设备、只读存储器(ROM，Read-Only  Memory)、随机存取存储器(RAM，Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。
或者，本发明上述集成的单元如果以软件功能模块的形式实现并作为独立的产品销售或使用时，也可以存储在一个计算机可读取存储介质中。基于这样的理解，本发明实施例的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机、服务器、或者网络设备等)执行本发明各个实施例所述方法的全部或部分。而前述的存储介质包括：移动存储设备、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。
以上所述，仅为本发明的具体实施方式，但本发明的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本发明揭露的技术范围内，可轻易想到变化或替换，都应涵盖在本发明的保护范围之内。因此，本发明的保护范围应以所述权利要求的保护范围为准。
工业实用性
本发明公开了一种告警数据处理方法及网络管理设备，当在发生告警风暴时，根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列；从高优先级发送队列中取出告警数据，发送至对应的客户端，使得所述客户端处理所述告警数据；如此，就能够利用多线程高优先级队列对接收到的告警数据按优先级别并发上报处理，以保证有价值的、高优先级的告警数据可以被立即处理和上报，而不会被延迟或丢弃。

Claims (12)

  1. 一种告警数据处理方法，所述方法包括：
    当确定出现告警风暴时，接收到告警数据后，获取所述告警数据的标识信息；
    当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列之一中，N为大于等于1的正整数；
    从所述N个高优先级发送队列中取出M个告警数据，将所述M个告警数据发送至对应的客户端，使得所述客户端处理所述告警数据，所述M为大于等于1且小于等于N的正整数。
  2. 根据权利要求1所述的方法，其中，
    所述优先级规则包括：一个或多个标识信息、以及各个标识信息对应的优先级，所述优先级可以包括高优先级和低优先级；
    或者，所述优先级规则包括一个或多个预设为高优先级的标识信息。
  3. 根据权利要求1或2所述的方法，其中，所述将所述告警数据添加至N个高优先级发送队列之一中，包括：根据所述告警数据的标识信息，将所述告警数据添加至对应的N个高优先级发送队列之一；其中，N为大于等于1的正整数。
  4. 根据权利要求1或2所述的方法，其中，所述方法还包括：
    当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为低优先级告警数据时，将所述告警数据添加至低优先级发送队列。
  5. 根据权利要求4所述的方法，其中，所述方法还包括：
    实时检测指定时长内告警数据量；
    当所述告警数据量达到第二预设门限值时，控制所述低优先级发送队 列仅添加新的告警数据、停止发送所述低优先级发送队列中的告警数据，并且控制保持发送所述高优先级发送队列中的告警数据；
    当所述告警数据量没有达到第二预设门限值时，发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据。
  6. 根据权利要求5所述的方法，其中，所述在低优先级发送队列中添加告警数据，包括：在网络管理设备中为低优先级发送队列创建缓存空间，将告警数据缓存至缓存空间中。
  7. 一种网络管理设备，所述网络管理设备包括：
    实时监测单元，配置为确定出现告警风暴；
    告警解析单元，配置为接收到告警数据后，获取所述告警数据的标识信息；
    告警分析处理单元，配置为当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为高优先级告警数据时，将所述告警数据添加至N个高优先级发送队列之一中，N为大于等于1的正整数；
    高优先级管理单元，配置为从所述N个高优先级发送队列中的取出M个告警数据，将所述M个告警数据发送至对应的客户端，所述M为大于等于1且小于等于N的正整数。
  8. 根据权利要求7所述的网络管理设备，其中，所述优先级规则包括：一个或多个标识信息、以及各个标识信息对应的优先级，所述优先级可以包括高优先级和低优先级；
    或者，包括一个或多个预设为高优先级的标识信息。
  9. 根据权利要求7或8所述的网络管理设备，其中，所述告警分析处理单元，配置为根据所述告警数据的标识信息，将所述告警数据添加至对应的N个高优先级发送队列之一。
  10. 根据权利要求7或8所述的网络管理设备，其中，所述网络管理 设备还包括：低优先级管理单元，配置为缓存低优先级发送队列的低优先级告警数据；
    相应的，所述告警分析处理单元，配置为当根据所述告警数据的标识信息、以及预设的优先级规则，确定所述告警数据为低优先级告警数据时，将所述告警数据添加至低优先级发送队列。
  11. 根据权利要求10所述的网络管理设备，其中，所述实时监测单元，配置为实时检测指定时长内告警数据量；
    当所述告警数据量达到第二预设门限值时，控制所述低优先级发送队列仅添加新的告警数据、停止发送所述低优先级发送队列中的告警数据，并且控制保持发送所述高优先级发送队列中的告警数据；
    当所述告警数据量没有达到第二预设门限值时，发送所述低优先级发送队列中的告警数据、并且发送所述高优先级发送队列中的告警数据。
  12. 根据权利要求11所述的网络管理设备，其中，所述低优先级管理单元，配置为在网络管理设备中为低优先级发送队列创建缓存空间，将告警数据缓存至缓存空间中。
PCT/CN2014/088834 2014-06-18 2014-10-17 一种告警数据处理方法及网络管理设备 WO2015192561A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP14895457.1A EP3160081A4 (en) 2014-06-18 2014-10-17 Alert data processing method and network management device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410272628.7 2014-06-18
CN201410272628.7A CN105306232A (zh) 2014-06-18 2014-06-18 一种告警数据处理方法及网络管理设备

Publications (1)

Publication Number Publication Date
WO2015192561A1 true WO2015192561A1 (zh) 2015-12-23

Family

ID=54934789

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/088834 WO2015192561A1 (zh) 2014-06-18 2014-10-17 一种告警数据处理方法及网络管理设备

Country Status (3)

Country Link
EP (1) EP3160081A4 (zh)
CN (1) CN105306232A (zh)
WO (1) WO2015192561A1 (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113141316A (zh) * 2021-05-08 2021-07-20 浙江宇视科技有限公司 一种告警处理方法、装置、设备及可读存储介质
CN114500127A (zh) * 2016-09-13 2022-05-13 高高商务航空有限责任公司 基于使用情况的带宽优化
CN115471983A (zh) * 2022-05-30 2022-12-13 北京罗克维尔斯科技有限公司 告警处理方法、装置、电子设备、车辆和存储介质
CN116486579A (zh) * 2023-04-27 2023-07-25 湖北清江水电开发有限责任公司 流域梯级电厂集控中心监控系统报警信号管理方法

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107453882B (zh) * 2016-05-30 2020-06-30 北京京东尚科信息技术有限公司 一种集群中告警信息聚合系统及方法
US11314573B2 (en) * 2018-11-30 2022-04-26 Hewlett Packard Enterprise Development Lp Detection of event storms
CN109889373B (zh) * 2019-01-22 2022-06-21 视联动力信息技术股份有限公司 一种告警信息的传输方法、装置和系统
CN111726822A (zh) * 2019-03-21 2020-09-29 大唐移动通信设备有限公司 一种Trap报文处理方法及数据同步管理装置
CN112968967B (zh) 2020-09-25 2023-05-19 支付宝(杭州)信息技术有限公司 区块同步方法及装置
CN111934998B (zh) 2020-09-25 2021-02-09 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN111934997B (zh) 2020-09-25 2021-01-12 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN111934990B (zh) * 2020-09-25 2021-02-09 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN111935000B (zh) 2020-09-25 2021-01-08 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN111935314B (zh) 2020-09-25 2021-01-12 支付宝(杭州)信息技术有限公司 区块链系统、消息传输方法及装置
CN111934996B (zh) 2020-09-25 2021-01-12 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN111934999B (zh) 2020-09-25 2021-01-22 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN113206800B (zh) * 2021-03-15 2022-05-27 新华三信息安全技术有限公司 一种报文缓存方法、装置以及网络设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101145969A (zh) * 2007-10-25 2008-03-19 中兴通讯股份有限公司 一种减少网元上报告警数量的方法及系统
CN102368714A (zh) * 2011-11-09 2012-03-07 华为技术有限公司 一种网络告警的处理方法、装置及其系统
CN102694678A (zh) * 2012-05-04 2012-09-26 青岛海信传媒网络技术有限公司 告警消息传输方法及系统、网管服务器和网元设备
CN103259683A (zh) * 2013-05-16 2013-08-21 烽火通信科技股份有限公司 基于HTML5的Web网管系统二级缓存推送方法

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH05258194A (ja) * 1992-03-10 1993-10-08 Nec Corp 警報転送装置
CA2314444A1 (en) * 1999-08-02 2001-02-02 At&T Corp. Apparatus and method for providing a high-priority service for emergency messages on a network
CN101114945B (zh) * 2007-09-04 2012-09-19 华为技术有限公司 控制告警流量的方法、管理设备、被管设备和系统
US8700761B2 (en) * 2008-09-04 2014-04-15 At&T Intellectual Property I, L.P. Method and system for detecting and managing a fault alarm storm

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101145969A (zh) * 2007-10-25 2008-03-19 中兴通讯股份有限公司 一种减少网元上报告警数量的方法及系统
CN102368714A (zh) * 2011-11-09 2012-03-07 华为技术有限公司 一种网络告警的处理方法、装置及其系统
CN102694678A (zh) * 2012-05-04 2012-09-26 青岛海信传媒网络技术有限公司 告警消息传输方法及系统、网管服务器和网元设备
CN103259683A (zh) * 2013-05-16 2013-08-21 烽火通信科技股份有限公司 基于HTML5的Web网管系统二级缓存推送方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3160081A4 *

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114500127A (zh) * 2016-09-13 2022-05-13 高高商务航空有限责任公司 基于使用情况的带宽优化
CN113141316A (zh) * 2021-05-08 2021-07-20 浙江宇视科技有限公司 一种告警处理方法、装置、设备及可读存储介质
CN115471983A (zh) * 2022-05-30 2022-12-13 北京罗克维尔斯科技有限公司 告警处理方法、装置、电子设备、车辆和存储介质
CN115471983B (zh) * 2022-05-30 2024-01-30 北京罗克维尔斯科技有限公司 告警处理方法、装置、电子设备、车辆和存储介质
CN116486579A (zh) * 2023-04-27 2023-07-25 湖北清江水电开发有限责任公司 流域梯级电厂集控中心监控系统报警信号管理方法

Also Published As

Publication number Publication date
EP3160081A4 (en) 2017-06-14
EP3160081A1 (en) 2017-04-26
CN105306232A (zh) 2016-02-03

Similar Documents

Publication Publication Date Title
WO2015192561A1 (zh) 一种告警数据处理方法及网络管理设备
CN103220173B (zh) 一种报警监控方法及监控系统
US20090024722A1 (en) Proxying availability indications in a failover configuration
SG190946A1 (en) Method and system for resource-aware dynamic bandwidth control
US20140146687A1 (en) Method and apparatus for remotely locating wireless network fault
CN104954184A (zh) 云端后台服务器集群的监控、告警方法及系统
US9729355B2 (en) Method, device and system for remote management of terminal peripheral
WO2010099754A1 (zh) 一种发送日志信息的方法及装置
US20190036762A1 (en) Exception monitoring and alarming method and apparatus
JP4455658B2 (ja) ネットワーク監視システムとそのノード装置および監視装置
EP3417571B1 (en) Method and system for compression and optimization of in-line and in-transit information security data
US9948532B2 (en) Information processing apparatus, information processing method, and computer readable medium
CN104243192B (zh) 故障处理方法及系统
EP3154238A1 (en) Policy-based m2m terminal device monitoring and control method and device
KR20140098390A (ko) 네트워크 시스템의 공격 탐지 장치 및 방법
US9398040B2 (en) Intrusion detection system false positive detection apparatus and method
WO2016011819A1 (zh) 一种光网络单元业务开通方法、装置及存储介质
KR102046326B1 (ko) 데이터 처리 장치
CN103905271A (zh) 一种告警风暴抑制方法
KR101420301B1 (ko) ＤＤｏＳ 공격 검출 방법 및 장치
US11405358B2 (en) Network security monitoring of network traffic
CN104579836A (zh) 一种通过收发trap数据包监控存储服务器状态的方法
WO2014040470A1 (zh) 告警消息的处理方法及装置
CN107786380B (zh) 控制器网络环路的检测方法、装置及控制器
CN114513626A (zh) 多媒体播放方法、装置、电子设备及计算机可读存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14895457

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2014895457

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2014895457

Country of ref document: EP