WO2021135479A1

WO2021135479A1 - Prompt information processing method and apparatus, and storage medium

Info

Publication number: WO2021135479A1
Application number: PCT/CN2020/119207
Authority: WO
Inventors: 谢青; 占恒; 王继禹
Original assignee: 华为技术有限公司
Priority date: 2019-12-30
Filing date: 2020-09-30
Publication date: 2021-07-08
Also published as: CN113132128A; CN113132128B

Abstract

Disclosed are a prompt information processing method and apparatus, and a storage medium, wherein same belong to the technical field of the Internet. The method comprises: displaying a time axis, wherein the time axis is provided with a sliding block for responding to a movement operation; and on the basis of the time axis, displaying the number of pieces of prompt information associated with a plurality of time points in the time axis, and displaying prompt information associated with a time point in a time period from a starting time point in the time axis to a time point indicated by the sliding block. In the present application, the operation and maintenance personnel can carefully view, by means of moving the sliding block on the time axis, prompt information generated by a network at each time. Therefore, the operation and maintenance personnel can view, by means of time playback, a context situation when a fault occurs in the network, and can then understand the context of a fault scenario and quickly give a more reliable probable root cause, such that a root cause identification rate can be improved.

Description

Prompt information processing method, device and storage medium

This application claims the priority of the Chinese patent application filed on December 30, 2019, with the application number 201911396981.5 and the title of the invention "Prompt Information Processing Method, Device and Storage Medium", the entire content of which is incorporated into this application by reference.

Technical field

This application relates to the field of Internet technology, and in particular to a method, device and storage medium for processing prompt information.

Background technique

There are usually multiple nodes distributed in a large-scale network, and each node is connected through a communication medium such as optical fiber. When a certain communication medium in the network is interrupted or a certain node fails, all objects related to the communication medium or the node in the network may report alarm information, thereby inducing a series of alarm information. In this case, it is necessary to identify the probable root cause (PRC) from this series of alarm information, so as to facilitate subsequent maintenance of the network based on the probable root cause.

Summary of the invention

The present application provides a prompt information processing method, device and storage medium, which can improve the root cause identification rate. The technical solution is as follows:

In the first aspect, a method for processing prompt information is provided. In this method, a time axis is displayed, and a slider for responding to the movement operation is provided on the time axis. Based on the time axis, display the number of prompt information associated with multiple time points in the time axis, and display the time point associations in the time period from the start time point in the time axis to the time point indicated by the slider Prompt information.

It should be noted that the prompt information may be actively reported to the network management system by the object in the network. If an abnormal situation occurs in the network, objects related to the abnormal situation can report prompt information. For example, the prompt information may include at least one of alarm information, configuration change information, service failure information, and the like.

In this application, the operation and maintenance personnel can carefully view the prompt information generated by the network at various times by moving the slider on the time axis. In this way, the operation and maintenance personnel can view the context of the failure in the network through time playback, and then understand the context of the failure scenario, and quickly give a more reliable suspected root cause, which can improve the root cause recognition rate.

The operation of displaying the number of prompt information associated with multiple time points in the time axis based on the time axis may be: displaying each of the multiple time points in the time axis on one or both sides of the time axis. The number of prompt messages associated with each time point. In this way, it is convenient for operation and maintenance personnel to quickly learn the number of prompt messages of the network at various points in time.

It should be noted that when the prompt information includes different types of prompt information, the number of each type of prompt information is displayed respectively. For example, when the prompt information includes alarm information, configuration change information, and business failure information, the number of alarm information, the number of configuration change information, and the number of business failure information are respectively displayed.

Further, before displaying the time axis, prompt information in the network can also be obtained, and the prompt information can be associated with the same time point in the time axis as the reporting time of the prompt information.

In this application, the prompt information in the network can be associated with a time point in the time axis. At this time, the prompt information associated with a certain time point in the time axis is related to the abnormal situation that occurred at this time point. .

In a possible situation, the business topology map can be constructed according to the business path in the business fault information associated with the time point indicated by the slider. Then display the business topology diagram. After that, if a query instruction is detected in the business topology diagram, the business data in the business fault information is displayed.

In this application, the operation and maintenance personnel can move the slider on the time axis to adjust the time point indicated by the slider. At this time, the business topology map corresponding to the business fault information associated with the time point indicated by the slider will be displayed. Operation and maintenance personnel can query business data by operating the business topology map. That is, the operation and maintenance personnel can carefully view the service failure information at the time point indicated by the slider by moving the slider on the time axis, and learn the service path and transmission level of the damaged service. In this way, even if the network situation changes, the operation and maintenance personnel can view the business situation before and after the business is damaged through time replay.

Further, when the prompt information includes alarm information, the suspected root cause probability and root cause recommendation source of the alarm information associated with the time point in the time period can also be displayed. Since the operation and maintenance personnel can view the context of the fault in the network through time playback, they can quickly infer the possible suspected root causes and roughly judge whether the suspected root causes recommended by the system are accurate enough.

In a possible situation, when the prompt information includes alarm information and configuration change information, the alarm source in the alarm information associated with the time point in the time period and the configuration change information associated with the time point in the time period can be used The operation object in the construction of the physical topology map. Then display the physical topology diagram. According to the suspected root cause probability of the alarm information associated with the time point in the time period, the root cause indicator is displayed in the physical topology diagram, and the operation object in the configuration change information associated with the time point in the time period is displayed in the The operation indicator is displayed in the physical topology diagram.

In this way, the operation and maintenance personnel can quickly learn the suspected root cause recommended by the system and the object of the configuration change from the physical topology diagram, so that the operation and maintenance personnel can more easily understand the fault context, and then quickly find the suspected root cause.

Further, if the first operation instruction for the time axis is received, the content of the prompt information associated with multiple time points in the time axis may also be displayed based on the time axis.

In this application, the operation and maintenance personnel can quickly view the content of the prompt information associated with multiple time points based on the time axis by operating the time axis, so that the operation and maintenance personnel can quickly understand the alarm information and configuration change information at each time point in the network And the basic content of business failure information.

Further, if a second operation instruction for the time axis is received, an indication of prompt information associated with multiple time points in the time axis may also be displayed based on the time axis, and the indication of the prompt information is used to indicate that the corresponding time point has Associated prompt information.

In a second aspect, a prompt information processing device is provided, and the prompt information processing device has the function of realizing the behavior of the prompt information processing method in the first aspect. The prompt information processing apparatus includes at least one module, and the at least one module is configured to implement the prompt information processing method provided in the first aspect.

In a third aspect, a prompt information processing device is provided. The structure of the prompt information processing device includes a processor and a memory, and the memory is used to store and support the prompt information processing device to perform the prompt information processing provided in the first aspect. The program of the method, and the data stored for realizing the prompt information processing method described in the first aspect. The processor is configured to execute a program stored in the memory. The prompt information processing apparatus may further include a communication bus, and the communication bus is used to establish a connection between the processor and the memory.

In a fourth aspect, a computer-readable storage medium is provided. The computer-readable storage medium stores instructions that, when run on a computer, cause the computer to execute the prompt information processing method described in the first aspect.

In a fifth aspect, a computer program product containing instructions is provided, which when running on a computer, causes the computer to execute the prompt information processing method described in the first aspect.

The technical effects obtained by the second, third, fourth, and fifth aspects described above are similar to those obtained by the corresponding technical means in the first aspect, and will not be repeated here.

The technical solution provided in this application can at least bring about the following beneficial effects:

Operation and maintenance personnel can carefully view the prompt information generated by the network at various times by moving the slider on the time axis. In this way, the operation and maintenance personnel can view the context of the failure in the network through time playback, and then understand the context of the failure scenario, and quickly give a more reliable suspected root cause, which can improve the root cause recognition rate.

Description of the drawings

Fig. 1 is a schematic structural diagram of a computer device provided by an embodiment of the present application;

FIG. 2 is a flowchart of a method for processing prompt information provided by an embodiment of the present application;

FIG. 3 is a schematic diagram of a management page provided by an embodiment of the present application;

FIG. 4 is a schematic diagram of another management page provided by an embodiment of the present application;

FIG. 5 is a schematic diagram of another management page provided by an embodiment of the present application;

Fig. 6 is a schematic structural diagram of a prompt information processing apparatus provided by an embodiment of the present application.

Detailed ways

In order to make the purpose, technical solutions, and advantages of the present application clearer, the implementation manners of the present application will be further described in detail below in conjunction with the accompanying drawings.

Before explaining the embodiments of the present application, the application scenarios of the embodiments of the present application will be briefly introduced.

For large-scale networks (the number of devices is more than 10,000), the various nodes in the network are connected through communication media such as optical fibers. In addition, the network location of each node (for example, it may be a core ring, an aggregation ring, an access ring, an access chain), the number of connected optical fibers, and the topological shape (ring/chain) may be different.

Generally, there are core equipment, aggregation equipment, and access equipment in the network. Each device has multiple ports, and multiple optical fibers can be connected to each other through ports to form a large network connected by the entire network. Every port, board, network element, and sub-interface in the network can detect signals and report alarms. And, the more the middle node is, the more the number of fibers connected, the more rings are involved. The more edge nodes have fewer fiber connections, and some edge nodes may not involve rings and are only connected by chains. However, the nodes in the network as a whole are connected to each other in a topology, forming a complex connected network.

Service signals flow in and out of various nodes in the network, and any fiber connection on the network is interrupted or any node fails, which may cause partial service switching (with protection) or interruption (without protection). Moreover, because the signal transmission is blocked, when the downstream node cannot detect the signal, it will trigger a series of nodes to report alarms. At this time, operation and maintenance personnel are required to identify the suspected root cause from a large number of alarms to facilitate subsequent network maintenance. Among them, the suspected root may be an alarm caused by a real failure point. The alarms reported by the nodes can generally refer to alarm events, abnormal events, configuration changes and/or business failures, and so on.

Due to the increasing scale of the network, the number of alarms is also increasing exponentially, even reaching the order of millions per day. However, the actual number of alarms caused by real failure points may be less than a thousand or even less than a hundred. It is very difficult for operation and maintenance personnel to identify the suspected root cause among the massive alarms.

When a fault that has a greater impact on the network occurs (such as critical business damage), it is particularly important to quickly and accurately identify the suspected root cause. Mean time to diagnose (MTTD) is a key indicator for evaluating maintenance efficiency. If the system recommended root cause rules are inaccurate, it will delay the maintenance time window and waste maintenance manpower. The MTTD will be enlarged and customer satisfaction will be affected. Moreover, as time goes by, the network is constantly changing, and it becomes more difficult to analyze the failures in the early stage of the network. For this reason, it is very important for the operation and maintenance personnel to further confirm the fault or provide more suspected root causes.

In a typical scenario, it is not because of a hardware failure, but because the communication protocol is artificially modified, which causes a service interruption to report a loss of signal (LOS) alarm. For example, the service configuration personnel inadvertently modified a service port mode, which caused the service to be interrupted and reported a LOS alarm. The physical fiber was normally undamaged or loose. In this case, if the station is removed, the time for real fault repair will be prolonged, and the actual repair only requires the business configuration personnel to restore the business port configuration on the system.

Fig. 1 is a schematic structural diagram of a computer device provided by an embodiment of the present application. Referring to FIG. 1, the computer device includes at least one processor 101, a communication bus 102, a memory 103, and at least one communication interface 104.

The processor 101 may be a microprocessor (including a central processing unit (CPU), etc.), an application-specific integrated circuit (ASIC), or may be one or more for controlling the solution of the application Integrated circuit for program execution.

The communication bus 102 may include a path for transferring information between the aforementioned components.

The memory 103 can be read-only memory (ROM), random access memory (RAM), electrically erasable programmable read-only memory (read-only memory, EEPROM), optical disk ( Including read-only discs (compact disc read-only memory, CD-ROM), compact discs, laser discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or can be used to carry or store The desired program code in the form of instructions or data structures and any other medium that can be accessed by the computer, but not limited to this. The memory 103 may exist independently and is connected to the processor 101 through the communication bus 102. The memory 103 may also be integrated with the processor 101.

The communication interface 104 uses any device such as a transceiver to communicate with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area network (WLAN), and so on.

In a specific implementation, as an embodiment, the processor 101 may include one or more CPUs, such as CPU0 and CPU1 as shown in FIG. 2.

In a specific implementation, as an embodiment, the computer device may include multiple processors, such as the processor 101 and the processor 105 as shown in FIG. 2. Each of these processors can be a single-core processor or a multi-core processor. The processor here may refer to one or more devices, circuits, and/or processing cores for processing data (such as computer program instructions).

In a specific implementation, as an embodiment, the computer device may further include an output device 106 and an input device 107. The output device 106 communicates with the processor 101 and can display information in a variety of ways. For example, the output device 106 may be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector, etc. . The input device 107 communicates with the processor 101 and can receive user input in a variety of ways. For example, the input device 107 may be a mouse, a keyboard, a touch screen device, a sensor device, or the like.

The above-mentioned computer equipment may be a general-purpose computer equipment or a special-purpose computer equipment. In a specific implementation, the computer device may be a desktop computer, a portable computer, a network server, a palmtop computer, a mobile phone, a tablet computer, a wireless terminal device, a communication device, or an embedded device. The embodiment of the application does not limit the type of the computer device.

The memory 103 is used to store the program code 110 for executing the solution of the present application, and the processor 101 is used to execute the program code 110 stored in the memory 103. The computer device can implement the prompt information processing method provided in the embodiment of FIG. 2 below through the processor 101 and the program code 110 in the memory 103.

Figure 2 is a flowchart of a method for processing prompt information provided by an embodiment of the present application. The method is applied to a network management system. The network management system is used to manage and maintain nodes in the network. The computer equipment shown in 1 is realized. Referring to Figure 2, the method includes:

Step 201: Obtain prompt information in the network, and associate the prompt information with the same time point in the time axis as the reporting time of the prompt information.

It should be noted that the timeline can be displayed on the management page to represent a certain period of time, such as 15 minutes. The time axis may include time points representing the minimum time interval, such as seconds.

In addition, the prompt information may be actively reported to the network management system by the object in the network. If an abnormal situation occurs in the network, objects related to the abnormal situation can report prompt information. For example, the prompt information may include at least one of alarm information, configuration change information, service failure information, and the like.

Furthermore, in the embodiment of the present application, the prompt information in the network can be associated with a time point in the time axis. At this time, the prompt information associated with a certain time point in the time axis is an abnormality that occurred at this time point. Information about the situation.

Wherein, when a communication medium in the network is interrupted or a node fails, objects in the network related to the communication medium or the node may report alarm information, thereby inducing a series of alarm information. The alarm information may include alarm name, alarm source, occurrence time (that is, reporting time), etc. The alarm source may be the identification of the object reporting the alarm information (such as device name, internet protocol (IP) address, etc.).

Wherein, when the configuration personnel changes the configuration of an object in the network (such as communication parameters, port parameters, service parameters, etc.), the object can report configuration change information. For example, the configuration change information may be an operation log or the like. The configuration change information may include operation name, operation description, operation object, operation time (that is, report time), etc. The operation object may be an identifier (such as device name, IP address, etc.) of the object that has the configuration change.

Wherein, when an object in the network detects that its ongoing service has a failure (such as interruption, switching, degradation, freeze, etc.), the object can report service failure information. The business failure information may include failure time (that is, reporting time), business path, and business data. The service data may include service name, transmission level, and so on.

Specifically, step 201 may include the following steps (1) to (3), and the execution order of step (1) to step (3) is not limited.

(1) Obtain the alarm information in the network, and associate the alarm information to the same time point in the time axis as the occurrence time in the alarm information.

It should be noted that the embodiment of the present application may associate the alarm information in the network with the time point in the time axis, and at this time, the alarm information associated with a certain time point in the time axis is the alarm that occurred at this time point. Relevant information.

(2) Acquire configuration change information in the network, and associate the configuration change information to the same time point in the time axis as the operation time in the configuration change information.

It should be noted that the embodiment of the present application may associate configuration change information in the network with a time point in the time axis, and at this time, the configuration change information associated with a certain time point in the time axis appears at this time point. Information about the configuration changes.

(3) Obtain service failure information in the network, and associate the service failure information to the same time point in the time axis as the failure time in the service failure information.

It should be noted that the embodiment of the present application may associate service failure information in the network with a time point in the time axis, and at this time, the service failure information associated with a certain time point in the time axis appears at this time point. Information about business failures.

After associating the time point in the time axis with the prompt information through the above step 201, the time axis can be displayed, and the associated prompt information can be displayed based on the time axis. Specifically, it may include the following steps 202 to 205.

Step 202: Display the time axis, and a slider for responding to the movement operation is provided on the time axis.

It should be noted that the time axis can be displayed on the management page, and the time axis can generally run through the page. For example, the time axis can extend from the left end to the right end of the management page. Both ends of the timeline can be provided with a forward button and a back button, the time period currently displayed on the timeline can be adjusted through the forward button and the back button, and the time period can have a start time point and an end time point . Wherein, through the forward button, the time axis can be displayed at a time point after the current end time point, and through the back button, the time axis can be displayed at a time point before the current start time point.

In addition, the slider is used to indicate a time point in the time axis, and the time point indicated by the slider is a time point corresponding to the position of the slider in the time axis. The slider may respond to a moving operation, and the moving operation may be triggered by an operation and maintenance personnel, that is, the operation and maintenance personnel may move the slider on the time axis. For example, the operation and maintenance personnel can drag the slider to move on the time axis, or the operation and maintenance personnel can directly click a time point in the time axis to quickly move the slider to the position corresponding to this time point.

Step 203: Display the number of pieces of prompt information associated with multiple time points in the time axis based on the time axis.

It should be noted that the embodiment of the present application may display the number of pieces of prompt information associated with multiple time points in the time axis based on the time axis. In this way, displaying the prompt information generated in the network in chronological order can facilitate the operation and maintenance personnel to understand the flow of network events as a whole.

In addition, when the prompt information includes different types of prompt information, the number of each type of prompt information is displayed respectively. For example, when the prompt information includes alarm information, configuration change information, and business failure information, the number of alarm information, the number of configuration change information, and the number of business failure information are respectively displayed.

Specifically, the operation of step 203 may be: displaying the number of pieces of prompt information associated with each of the multiple time points in the time axis on one or both sides of the time axis.

It should be noted that, in addition to the area displaying the time axis, the management page may also include first areas located on both sides of the time axis. The first area can be divided into a first sub-area and a second sub-area. The first sub-region is located on one side of the time axis, and the second sub-region is located on the other side of the time axis.

In addition, for any point in the time axis, if the time point has associated prompt information, the number of prompt information associated with this time point can be displayed in the first sub-region or the second sub-region At the location corresponding to this point in time. In this way, it is convenient for the operation and maintenance personnel to quickly learn the number of prompt messages of the network at this point in time.

For example, the prompt information includes alarm information and configuration change information. For any time point in the time axis, if this time point has associated alarm information, the number of alarm information associated with this time point can be displayed in the first sub-area corresponding to this time point Location; if there is associated configuration change information at this time point, the number of configuration change information associated at this time point can be displayed in the second sub-region at the position corresponding to this time point. In this way, it is convenient for operation and maintenance personnel to quickly learn the number of alarms and configuration changes of the network at this point in time.

In a possible implementation manner, if the first operation instruction for the time axis is received, the content of the prompt information associated with multiple time points in the time axis is displayed based on the time axis. Wherein, the first operation instruction may be a display enlargement instruction, which is used to instruct to enlarge the display scale of the time axis on the management page. The duration of the time period represented by the time axis will decrease. Alternatively, the first operation instruction may also be other instructions, such as a single-click operation or a double-click operation on the time axis.

Optionally, when the number of prompt information associated with multiple time points in the time axis is displayed on the management page, the first operation instruction for the time axis is received, and multiple information in the time axis are displayed based on the time axis. The content of each prompt message associated at the time point. For example, you can change the number of prompt information associated with multiple time points in the displayed time axis to the content of the prompt information associated with multiple time points in the time axis; or, based on the time axis, display the prompt information in the time axis synchronously. The number of reminders associated with multiple time points and the content of each reminder.

For example, the prompt information includes warning information. When the time axis is displayed normally on the management page, the number of alarm information associated with multiple time points in the time axis is displayed on the management page based on the time axis; when the time axis is displayed on the management page enlarged, the management page Based on the time axis, the alarm names of the alarm information associated with multiple time points in the time axis are displayed.

It should be noted that by operating the time axis, such as zooming in on the display scale of the time axis, the operation and maintenance personnel can quickly view the content of the prompt information associated with multiple time points based on the time axis, so that the operation and maintenance personnel can quickly understand each time in the network The basic content of the alarm information, configuration change information and business failure information of the point.

In another possible implementation manner, if a second operation instruction for a time axis is received, an indication of prompt information associated with multiple time points in the time axis is displayed based on the time axis. The indication of the prompt information is used to indicate that the corresponding time point has associated prompt information. Wherein, the second operation instruction may be a display reduction instruction, which is used to instruct to reduce the display scale of the time axis on the management page. The duration of the time period represented by the time axis will increase. Alternatively, the second operation instruction may also be other instructions, such as a single-click operation or a double-click operation on the time axis. The second operation instruction is different from the first operation instruction.

Optionally, when the number of prompt information associated with multiple time points in the time axis is displayed on the management page, a second operation instruction for the time axis is received, and multiple items in the time axis are displayed based on the time axis. The indication of the prompt information associated with the time point. Different types of prompt information can use different instructions, for example, different colors and/or different patterns can be used, and so on.

Step 204: Display the prompt information associated with the time point in the time period from the start time point in the time axis to the time point indicated by the slider.

It should be noted that, in this embodiment of the application, the operation and maintenance personnel can move the slider on the time axis to adjust the time point indicated by the slider. At this time, the prompt information associated with the time point in the time period from the start time point in the time axis to the time point indicated by the slider will be displayed. That is, the operation and maintenance personnel can carefully view the prompt information of the network at various points in time by moving the slider on the time axis. In this way, the operation and maintenance personnel can view the context of the failure in the network through time replay, and then understand the context of the failure scenario, and quickly infer more reliable suspected root causes, thereby improving the root cause recognition rate and thus MTTD.

In addition, the operation and maintenance personnel can infer the suspected root cause on various basis. For example, the alarm reported by the object at the bottom of the network model (such as the physical layer) is more likely to be the root cause, reported by the object upstream of the signal flow link. The alarm is more likely to be the root cause, and the alarm reported by the object at the intersection of the signal flow link is more likely to be the root cause, the earlier the alarm is reported, the more likely it is the root cause, the higher the alarm level, the more likely the alarm It is the root cause and so on.

For example, the prompt information includes alarm information, configuration change information, and business failure information. By introducing time replay in the embodiments of the present application, the operation and maintenance personnel can be guided to visually and quickly understand the fault context. It is clear at a glance what configuration has been changed, what alarms have been generated, and what services have been affected at a glance, which helps operation and maintenance personnel to quickly find the suspected root cause. Moreover, in this case, the operation and maintenance personnel may also infer where the failure point is and which alarms are derived from the failure point. For example, an alarm may be caused by a configuration change.

It should be noted that, in addition to the area displaying the time axis and the first area, the management page may also include a second area. For any time point in the time period from the start time point in the time axis to the time point indicated by the slider, if this time point has associated prompt information, you can associate this time point with the prompt information Shown in the second area.

In addition, when the prompt information includes different types of prompt information, the different types of prompt information can be displayed in different lists. For example, when the prompt information includes alarm information, configuration change information, and business failure information, the alarm information can be displayed in the alarm list, the configuration change information can be displayed in the configuration change list, and the business failure information can be displayed in the business failure list. .

Furthermore, while displaying the prompt information, the viewing time of the prompt information and the number of currently displayed prompt information can also be displayed. For example, the viewing time of the alarm information and the number of alarm information included in the alarm list can be displayed in the alarm list, and the viewing time of the configuration change information and the configuration change information included in the configuration change list can be displayed in the configuration change list. The number of articles.

For example, the prompt information may include alarm information and configuration change information. The second area can be divided into a third subarea and a fourth subarea. The third subarea is used to display the alarm list, and the fourth subarea is used to display the configuration change list. For any time point in the time period from the start time point in the time axis to the time point indicated by the slider, if this time point has associated alarm information, you can associate the alarm information with this time point Displayed in the alarm list in the third sub-area; if there is associated configuration change information at this point in time, the configuration change information associated at this point in time can be displayed in the configuration change list in the fourth sub-area. In this way, it is convenient for technicians to quickly learn the details of alarms and configuration changes.

The display mode when the prompt information includes alarm information and configuration change information is described below.

In a possible situation, all the alarm information and the corresponding clearing time associated with the time point in the time period from the start time point in the time axis to the time point indicated by the slider can be displayed, or only the time point can be displayed. The alarm information that has not been cleared among all the alarm information associated with the time point in the time period.

Further, while displaying the alarm information associated with the time point in the time period, the suspected root cause probability and the root cause recommendation source of the alarm information associated at the time point in the time period can also be displayed. Specifically, the suspected root cause probability and the recommended source of the root cause can be displayed in the alarm list.

It should be noted that the suspected root cause probability may be determined by the network management system. The network management system can determine the suspected root cause probability of alarm information in various ways, such as expert rules, fault propagation diagrams, neural networks, and artificial labeling to determine the suspected root cause probability of alarm information.

In addition, the recommended source of root cause refers to the way to determine the probability of suspected root cause. For example, if the network management system determines the suspected root cause probability of alarm information through expert rules, the recommended source of the root cause of the alarm information is expert rules.

Furthermore, in the embodiments of the present application, since the operation and maintenance personnel can view the context of the network failure by time playback, they can quickly infer the possible suspected root causes and roughly judge the suspected suspects recommended by the system. Whether the root cause is accurate enough.

Furthermore, a physical topology diagram may be constructed according to the alarm source in the alarm information associated with the time point in the time period and the operation object in the configuration change information associated with the time point in the time period, and the physical topology diagram may be displayed. According to the suspected root cause probability of the alarm information associated with the time point in the time period, the root cause indicator is displayed in the physical topology diagram. According to the operation object in the configuration change information associated with the time point in the time period, the operation indicator is displayed in the physical topology diagram.

It should be noted that the physical topology diagram can reflect the connection relationship between the alarm source and the operation object. Specifically, both the alarm source and the operation object can be regarded as nodes in the physical topology map, and then the edges between the nodes in the physical topology map are constructed according to the physical connection relationship between the alarm source and the operation object, and the physical topology is obtained. Figure.

In addition, the management page may also include a third area in addition to the area displaying the time axis, the first area, and the second area. The physical topology map can be displayed in the third area.

Among them, according to the suspected root cause probability of the alarm information associated with the time point in the time period, when the root cause indicator is displayed in the physical topology diagram, it can be used for any time point in the time period. The suspected root cause probability of the associated alarm information is greater than the preset probability, that is, if the suspected root cause probability of the alarm information is large, it can be displayed at the node corresponding to the alarm source in the alarm information in the physical topology map Root cause indicator. In this way, the operation and maintenance personnel can quickly learn the suspected root cause recommended by the system from the physical topology diagram.

Wherein, according to the operation object in the configuration change information associated with the time point in the time period, when the operation indicator is displayed in the physical topology diagram, the operation indicator can be displayed in the physical topology diagram at any point in the time period. The operation indicator is displayed at the node corresponding to the operation object. In this way, the operation and maintenance personnel can quickly learn the object of the configuration change from the physical topology diagram.

It is worth noting that in the embodiments of the present application, a physical topology diagram can be constructed according to the alarm source in the alarm information associated with the time point and the operation object in the configuration change information, and the root cause indicator and operation can be displayed in the physical topology diagram. indicator. In this way, it is clear at a glance where and when the alarm and configuration change occurred, so that technicians can quickly find the suspected root cause.

Step 205: Construct a business topology map according to the business path in the business fault information associated with the time point indicated by the slider, and display the business topology map.

It should be noted that the business topology map can reflect business path nodes and business routes. Specifically, the identifiers (such as names, IP addresses, etc.) of all nodes in the business path can be used as nodes in the business topology map, and then the edges between the nodes in the business topology map are constructed according to the business route to obtain the business topology Figure. Optionally, the service name can also be marked in the service topology diagram.

In addition, in addition to the area, the first area, the second area, and the third area where the time axis is displayed, the management page may also include a fourth area. The business topology map can be displayed in the fourth area.

Step 206: If a query instruction is detected in the service topology diagram, display the service data in the service fault information.

It should be noted that the query instruction can be triggered by operation and maintenance personnel, and the query instruction is used to instruct to display business data. For example, the operation and maintenance personnel can right-click in the business topology diagram to trigger the option box, and select the view details option in the option box to trigger the query command.

In addition, it is possible to jump from the management page to another page to display the business data in the business fault information. Of course, the business data in the business fault information can also be superimposed and displayed on the management page. Not limited.

It is worth noting that in this embodiment of the application, the operation and maintenance personnel can move the slider on the time axis to adjust the time point indicated by the slider. At this time, the business topology map corresponding to the business fault information associated with the time point indicated by the slider will be displayed. Operation and maintenance personnel can query business data by operating the business topology map. That is, the operation and maintenance personnel can carefully view the service failure information at the time point indicated by the slider by moving the slider on the time axis, so as to learn the service path and transmission level of the damaged service. In this way, even if the network situation changes, the operation and maintenance personnel can view the business situation before and after the business is damaged through time replay.

It is worth noting that in an actual network, the network management system receives prompt information reported by objects in the network in real time. Due to the huge amount of prompt information, the network management system usually aggregates the received prompt information to divide the prompt information into multiple prompt information groups, and each prompt information group belongs to the same network monitoring area. Then, according to the prompt information processing method provided in the embodiment of the present application, a time axis can be displayed according to the alarm information, configuration change information, and service failure information included in a certain prompt information group. Operation and maintenance personnel can view the fault context by moving the slider on the timeline, thereby determining whether there is a network configuration change in the early stage, whether there is a physical hardware failure, whether there is a business failure, etc. The operation and maintenance personnel can quickly infer the possible suspected root causes based on the information of the aforementioned several dimensions, and roughly judge whether the suspected root causes recommended by the system are accurate enough. In this way, it can speed up the understanding of the fault by the operation and maintenance personnel, and then improve the efficiency of troubleshooting.

For ease of understanding, the embodiments of the present application are illustrated below with reference to FIG. 3, FIG. 4, and FIG. 5.

Fig. 3 is a schematic diagram of a management page provided by an embodiment of the present application. Referring to Figure 3, the management page includes a time axis, and a slider is provided on the time axis.

The number of pieces of alarm information and the number of pieces of configuration change information associated with multiple time points in the time axis are displayed below the time axis. Based on this, the operation and maintenance personnel can see that someone changed the configuration at 15:04:21, and then 4 alarms were generated. After 15:06:21, several configuration changes and alarms were generated.

The operation and maintenance personnel drag the slider to 15:05:01. At this time, the alarm information generated between 15:04:21 and 15:05:01 is displayed in the alarm list, and 15:04 is displayed in the configuration change list. : Configuration change information generated between 21 and 15:05:01. At this time, the physical topology map can be displayed according to the alarm information in the alarm list and the configuration change information in the configuration change list.

Moreover, when the operation and maintenance personnel drag the slider to 15:05:01, they will find that the business is damaged at 15:05:01, and the business topology map can be displayed based on the business fault information generated at 15:05:01. After the operation and maintenance personnel operate on the business topology map to trigger a query instruction, the business data in the business fault information can be displayed.

In this way, the operation and maintenance personnel can view the alarm information, configuration change information, and business failure information generated by the network at various times in detail by moving the slider in the timeline. The operation and maintenance personnel can quickly understand the fault context through time playback, and then can quickly locate the fault point and promote the rapid resolution of the fault.

Fig. 4 is a schematic diagram of another management page provided by an embodiment of the present application. When the first operation instruction for the time axis on the management page as shown in FIG. 3 is received, the management page may be displayed as FIG. 4. Referring to Figure 4, the management page includes a time axis. Below the time axis is displayed the alarm name of each piece of alarm information associated with multiple time points in the time axis and/or the user operation corresponding to each piece of configuration change information. information. Among them, the alarm name can be displayed in the area that originally displayed the number of alarm information, and the user operation information can be displayed in the area that originally displayed the number of configuration change information. For example, the associated user operation information 1 and user operation information 2 are displayed at 15:04:21; the associated alarm name 1, alarm name 2, alarm name 3, and alarm name 4 are displayed at 15:04:36. If the first operation instruction is a display zoom instruction, the time axis can increase the display scale accordingly. For example, the time period represented by the time axis in Figure 3 ranges from 15:04:21 to 15:18:21, as shown by the time axis in Figure 4 The time period ranges from 15:04:21 to 15:05:31.

Fig. 5 is a schematic diagram of another management page provided by an embodiment of the present application. When a second operation instruction for the time axis on the management page shown in FIG. 3 is received, the management page may be displayed as FIG. 5. Referring to FIG. 5, the management page includes a time axis, and indications of alarm information and/or configuration change information associated with multiple time points in the time axis are displayed below the time axis. If the second operation command is a display zoom-out command, the time axis can be scaled down accordingly. For example, the time period indicated by the time axis in Figure 3 ranges from 15:04:21 to 15:18:21, and the time period represented by the time axis in Figure 5 The range is 15:04:21 to 15:20:21.

In the embodiment of the present application, a time axis is displayed, and a slider for responding to movement operations is provided on the time axis. Based on the time axis, display the number of prompt information associated with multiple time points in the time axis, and display the prompt information associated with time points in the time period from the start time point in the time axis to the time point indicated by the slider information. That is, the operation and maintenance personnel can carefully view the prompt information generated by the network at various times by moving the slider on the time axis. In this way, the operation and maintenance personnel can view the context of the failure in the network through time playback, and then understand the context of the failure scenario, and quickly give a more reliable suspected root cause, which can improve the root cause recognition rate.

FIG. 6 is a schematic structural diagram of a prompt information processing apparatus provided by an embodiment of the present application. The prompt information processing apparatus can be implemented as part or all of computer equipment by software, hardware, or a combination of the two. The computer equipment may be as shown in Figure 1 Computer equipment shown. Referring to FIG. 6, the device includes: a first display module 401, a second display module 402, and a third display module 403.

The first display module 401 is configured to perform step 202 in the embodiment of FIG. 2;

The second display module 402 is configured to perform step 203 in the embodiment of FIG. 2;

The third display module 403 is configured to execute step 204 in the embodiment of FIG. 2.

Optionally, the second display module 402 is used to:

The number of prompt messages associated with each time point in the multiple time points in the time axis is displayed on one or both sides of the time axis.

Optionally, the device further includes:

Obtaining module for obtaining prompt information in the network;

The association module is used to associate the prompt information to the same time point in the time axis as the reporting time of the prompt information.

Optionally, the device further includes:

The first building module is used to construct a business topology map according to the business path in the business fault information associated with the time point indicated by the slider;

The fourth display module is used to display the business topology diagram;

The fifth display module is used to display the business data in the business failure information if the query instruction is detected in the business topology diagram.

Optionally, the prompt information includes alarm information, and the third display module 403 is further configured to:

Shows the suspected root cause probability and the recommended root cause source of the alarm information associated with the time point in the time period.

Optionally, the prompt information further includes configuration change information, and the device further includes:

The second building module is used to construct a physical topology map according to the alarm source in the alarm information associated with the time point in the time period and the operation object in the configuration change information associated with the time point in the time period;

The sixth display module is used to display the physical topology diagram;

The seventh display module is used to display the root cause indicator in the physical topology diagram according to the suspected root cause probability of the alarm information associated with the time point in the time period;

The eighth display module is used to display the operation indicator in the physical topology diagram according to the operation object in the configuration change information associated with the time point in the time period.

Optionally, the device further includes:

The ninth display module is configured to display the content of the prompt information associated with multiple time points in the time axis based on the time axis if the first operation instruction for the time axis is received.

Optionally, the device further includes:

The tenth display module is configured to, if a second operation instruction for the time axis is received, display an indication of the prompt information associated with multiple time points in the time axis based on the time axis, and the indication of the prompt information is used to indicate the corresponding time Point has associated prompt information.

It should be noted that when the prompt information processing apparatus provided in the above embodiment processes prompt information, only the division of the above functional modules is used as an example for illustration. In actual applications, the above functions can be allocated by different functional modules according to needs. , The internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the prompt information processing device provided in the foregoing embodiment and the prompt information processing method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented by software, it can be implemented in the form of a computer program product in whole or in part. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on the computer, the processes or functions described in the embodiments of the present application are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website, computer, server or data center via wired (for example: coaxial cable, optical fiber, Digital Subscriber Line (DSL)) or wireless (for example: infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The usable medium may be a magnetic medium (for example: floppy disk, hard disk, magnetic tape), optical medium (for example: Digital Versatile Disc (DVD)) or semiconductor medium (for example: Solid State Disk (SSD)) Wait.

The above-mentioned examples provided for this application are not intended to limit this application. Any modification, equivalent replacement, improvement, etc. made within the concept and principle of this application shall be included in the protection scope of this application. Inside.

Claims

A method for processing prompt information, characterized in that the method includes:

Display a time axis, and a slider for responding to movement operations is provided on the time axis;

Displaying the number of pieces of prompt information associated with multiple time points in the time axis based on the time axis;

Display the prompt information associated with the time point in the time period from the start time point in the time axis to the time point indicated by the slider.
The method according to claim 1, wherein the displaying the number of pieces of prompt information associated with multiple time points in the time axis based on the time axis comprises:

The number of pieces of prompt information associated with each time point in the multiple time points in the time axis is displayed on one or both sides of the time axis.
The method according to claim 1, wherein before the displaying the time axis, the method further comprises:

Obtain prompt information in the network;

Associating the prompt information to a time point in the time axis that is the same as the reporting time of the prompt information.
The method according to any one of claims 1-3, wherein the method further comprises:

Construct a business topology map according to the business path in the business fault information associated with the time point indicated by the slider;

Display the business topology diagram;

If a query instruction is detected in the service topology diagram, the service data in the service fault information is displayed.
The method according to any one of claims 1-3, wherein the prompt information includes alarm information, and the method further comprises:

The suspected root cause probability and root cause recommendation source of the alarm information associated with the time point in the time period are displayed.
The method according to claim 5, wherein the prompt information further comprises configuration change information, and the method further comprises:

Construct a physical topology map according to the alarm source in the alarm information associated with the time point in the time period and the operation object in the configuration change information associated with the time point in the time period;

Display the physical topology diagram;

Display a root cause indicator in the physical topology map according to the suspected root cause probability of the alarm information associated with the time point in the time period;

According to the operation object in the configuration change information associated with the time point in the time period, an operation indicator is displayed in the physical topology diagram.
The method according to any one of claims 1-6, wherein the method further comprises:

If the first operation instruction for the time axis is received, the content of the prompt information associated with multiple time points in the time axis is displayed based on the time axis.
The method according to any one of claims 1-6, wherein the method further comprises:

If a second operation instruction for the time axis is received, based on the time axis, an indication of prompt information associated with multiple time points in the time axis is displayed, and the indication of the prompt information is used to indicate the corresponding time point Has associated prompt information.
A prompt information processing device, characterized in that the device includes:

The first display module is configured to display a time axis, and a slider for responding to movement operations is provided on the time axis;

The second display module is configured to display the number of pieces of prompt information associated with multiple time points in the time axis based on the time axis;

The third display module is configured to display prompt information associated with a time point in a time period from the start time point in the time axis to the time point indicated by the slider.
9. The device of claim 9, wherein the second display module is used for:

The number of pieces of prompt information associated with each time point in the multiple time points in the time axis is displayed on one or both sides of the time axis.
The device according to claim 9, wherein the device further comprises:

Obtaining module for obtaining prompt information in the network;

The associating module is used for associating the prompt information to the same time point in the time axis as the reporting time of the prompt information.
The device according to any one of claims 9-11, wherein the device further comprises:

The first construction module is configured to construct a business topology map according to the business path in the business fault information associated with the time point indicated by the slider;

The fourth display module is used to display the service topology diagram;

The fifth display module is configured to display the business data in the business fault information if a query instruction is detected in the business topology diagram.
The device according to any one of claims 9-11, wherein the prompt information includes alarm information, and the third display module is further configured to:

The suspected root cause probability and root cause recommendation source of the alarm information associated with the time point in the time period are displayed.
The device according to claim 13, wherein the prompt information further comprises configuration change information, and the device further comprises:

The second construction module is configured to construct a physical topology map according to the alarm source in the alarm information associated with the time point in the time period and the operation object in the configuration change information associated with the time point in the time period;

The sixth display module is used to display the physical topology diagram;

The seventh display module is configured to display the root cause indicator in the physical topology diagram according to the suspected root cause probability of the alarm information associated with the time point in the time period;

The eighth display module is configured to display an operation indicator in the physical topology diagram according to the operation object in the configuration change information associated with the time point in the time period.
The device according to any one of claims 9-14, wherein the device further comprises:

The ninth display module is configured to display the content of the prompt information associated with multiple time points in the time axis based on the time axis if the first operation instruction for the time axis is received.
The device according to any one of claims 9-14, wherein the device further comprises:

The tenth display module is configured to: if a second operation instruction for the time axis is received, based on the time axis, display an indication of the prompt information associated with multiple time points in the time axis, and the indication of the prompt information Used to indicate that the corresponding time point has associated prompt information.
A computer-readable storage medium in which instructions are stored, which when run on a computer, cause the computer to execute the method according to any one of claims 1-8.