CN101047556A - Integral maintaining method and system for multi-equipment - Google Patents

Integral maintaining method and system for multi-equipment Download PDF

Info

Publication number
CN101047556A
CN101047556A CNA2006100838300A CN200610083830A CN101047556A CN 101047556 A CN101047556 A CN 101047556A CN A2006100838300 A CNA2006100838300 A CN A2006100838300A CN 200610083830 A CN200610083830 A CN 200610083830A CN 101047556 A CN101047556 A CN 101047556A
Authority
CN
China
Prior art keywords
alarm
centralized maintenance
association
maintenance center
condition
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2006100838300A
Other languages
Chinese (zh)
Other versions
CN100479385C (en
Inventor
高小宏
卢惠莉
钟文堂
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNB2006100838300A priority Critical patent/CN100479385C/en
Priority to PCT/CN2007/070076 priority patent/WO2007143943A1/en
Publication of CN101047556A publication Critical patent/CN101047556A/en
Application granted granted Critical
Publication of CN100479385C publication Critical patent/CN100479385C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0604Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Alarm Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

A centralized maintaining method of multi-device includes transmitting all alarms from various system devices to centralized maintenance center by alarm collection unit, carrying out screening on received alarms by centralized maintenance center according to preset alarm screening conditions and carrying out maintenance on system devices by centralized maintenance center according to obtained alarm after screening.

Description

A kind of many equipment centralized maintenance method and system
Technical field
The present invention relates to the network communications technology field, be specifically related to a kind of many equipment centralized maintenance method and system.
Background technology
Along with the development of mobile communication business, the network size of mobile communication is increasing, becomes increasingly complex.Administering and maintaining of mobile communication network also becomes more and more important.
The alarm of network element device is the important object of observation of network management and maintenance in the mobile communication network, and the alarm of network element device has directly reflected the operation health condition of network element device, is the barometer of network element device, is the main foundation of everyday devices operation maintenance.
In a lot of agreements, all associated description has been carried out in alarm as ITU-T (International Telecommunications Union-telecommunication standardization sector) agreement, GSM (global system for mobile communications) agreement, CDMA (Code Division Multiplex) agreement, WCDMA (wideband code division multichannel) agreement etc., these agreements have mainly been described the generation condition of alarming, processing mode etc.
At present, communication network mainly adopts many equipment Centralized Maintenance System For that each network element device is managed, and many equipment Centralized Maintenance System For as shown in Figure 1.
Among Fig. 1, many equipment Centralized Maintenance System For comprises: a plurality of system equipments are that network element device such as system equipment 1 are to system equipment N, alarm collection system and centralized maintenance center.Each network element device all is the complication system that is made of a plurality of veneers, and the alarm of network element device and veneer thereof is by the centralized maintenance center of alarm collection system transmissions to near-end maintaining terminal and far-end.The alarm collection system can be the physical entity of fixing, and also can not have fixing physical entity.The centralized maintenance center receives each warning information, and shows each warning information.
Many network elements Centralized Maintenance System For in the mobile communication system also is applicable to model shown in Figure 1.
Owing to rely on each other between a plurality of network element devices that exist in the communication system, between each veneer, influence each other, systemic-function is finished in common or cooperation, so, between many network element devices, have tight or loosely-coupled relation between the veneer, the fault of single network element device, single veneer may cause the unusual of other veneer or other network element device even systemic-function, promptly a veneer alarm occurs and can make other veneer, network element device etc. also produce alarm, thereby, cause the alarm quantity at centralized maintenance center huge.
Owing at present mainly adopt single alarming processing mechanism to come warning information is analyzed,, make the maintainability of communication system, manageability poor so at the alarm quantity at centralized maintenance center for a long time, important warning information usually is submerged, and can't in time find.
Summary of the invention
The objective of the invention is to, a kind of many equipment centralized maintenance method and system is provided, utilize predetermined alarm filtering condition can determine valuable alarm fast, make the centralized maintenance center carry out effective maintenance management, improved the maintainability of system equipment each system equipment.
For achieving the above object, a kind of many equipment centralized maintenance method provided by the invention comprises:
A, alarm collection system all transfer to the centralized maintenance center with the alarm of each system equipment;
Screen the alarm of its reception according to predetermined alarm filtering condition at b, centralized maintenance center;
Safeguard system equipment according to the alarm that obtains after screening at c, centralized maintenance center.
Described predetermined filtering condition comprises: concern the alarm initial association analytical information that is provided with according to the logic association based on temporal correlation and dependence on parameter between the difference alarm, and described step b comprises specifically:
B1, centralized maintenance center are constructed as at least one alarm association relational tree according to alarming the alarm of initial association analytical information with its reception.
Described alarm initial association analytical information comprises: the parameter corresponding relation of alarm identifier, related alarm identifier, the related upper limit of alarm time, the related lower limit of alarm time, interrelated alarm.
Described alarm initial association analytical information also comprises: one or more in the influence that alarm produces reason, recovers suggestion, alarm produces.
Described predetermined filtering condition comprises: concern the alarm particular associative analytical information that is provided with according to the logic association based on data mining between the difference alarm, and described step b comprises:
B2, centralized maintenance center are constructed as at least one alarm association relational tree according to alarming the alarm of particular associative analytical information with its reception.
When described predetermined filtering condition comprises: when alarm initial association analytical information and alarm particular associative analytical information, alarm initial association analytical information also comprises: particular associative is analyzed indication information, and described step b specifically comprises:
B3, centralized maintenance center analyze indication information utilization alarm initial association analytical information and alarm particular associative analytical information according to the special relationship in the alarm initial association analytical information alarm of its reception are constructed as at least one alarm association relational tree.
Described predetermined alarm filtering condition comprises: repeat to alarm contractive condition, ignore alarm conditions, one or more in the alarm permutizer condition, alarm summary condition, and described step b comprises:
B4, centralized maintenance center according to repeat to alarm contractive condition with its identical alarm that repeatedly receives at interval at the fixed time as once alarming; And/or
Alarm is chosen according to ignoring alarm conditions in b5, centralized maintenance center; And/or
B6, centralized maintenance center are replaced into predetermined alarm with the alarm of the satisfied alarm permutizer condition of its reception; And/or
B7, centralized maintenance center are summarised as at least one alarm type according to alarming the alarm of summary condition with its reception.
The described alarm conditions of ignoring comprise: filtercondition, rejection condition and time window extraction conditions, and described step b5 specifically comprises:
The alarm of satisfying filtercondition is chosen at the centralized maintenance center from the alarm of its reception;
The centralized maintenance center suppresses alarm its reception, in predetermined context according to rejection condition;
The alarm that it receives in window is at the fixed time extracted according to the time window extraction conditions in the centralized maintenance center;
Described alarm permutizer condition comprises: upgrading permutizer condition, subclass permutizer condition, and described step b6 specifically comprises:
The number of times of the identical alarm that it receives in is at interval at the fixed time determined according to the upgrading permutizer condition in the centralized maintenance center, and when described number of times reaches pre-determined number, described each identical alarm is replaced into a high level alarm;
The centralized maintenance center is replaced into the subclass alarm with alarm its reception, that satisfy the subclass permutizer condition.
The present invention also provides a kind of many equipment Centralized Maintenance System For, comprising: a plurality of system equipments, alarm collection system and centralized maintenance center, and the alarm collection system transfers to the centralized maintenance center with the alarm of system equipment, and described centralized maintenance center also is provided with:
Alarm management unit: according to predetermined alarm filtering condition the alarm that the centralized maintenance center receives is screened, and the alarm that will obtain after will screening transfers to the centralized maintenance unit;
The centralized maintenance unit: the alarm according to its reception is safeguarded system equipment.
Described alarm management unit comprises:
Initial logic incidence relation memory module: concern the alarm initial association analytical information that is provided with according to the logic association between the difference alarm based on temporal correlation and dependence on parameter, and storage;
Logic association analysis module 1: according to the alarm initial association analytical information of storing in the initial logic incidence relation memory module alarm that the centralized maintenance center receives is constructed as at least one alarm association relational tree, and transmits it to the centralized maintenance unit.
Described alarm management unit comprises:
Specific logical incidence relation memory module: concern the alarm particular associative analytical information that is provided with according to the logic association between the difference alarm based on data mining, and storage;
Logic association analysis module 2: according to the alarm initial association analytical information of storing in the specific logical incidence relation memory module alarm that the centralized maintenance center receives is constructed as at least one alarm association relational tree, and transmits it to the centralized maintenance unit.
Described alarm management unit comprises: alarm compression analysis module, ignore the alert analysis module, one or more in the analysis module are summarized in displacement alert analysis module and alarm;
Alarm compression analysis module: according to repeating to alarm contractive condition the identical alarm that the centralized maintenance center repeatedly receives in is at interval at the fixed time transferred to the centralized maintenance unit as once alarming, and the reception number of times of described identical alarm is transferred to the centralized maintenance unit;
Ignore the alert analysis module: choose alarm according to ignoring alarm conditions, and the alarm that will choose transfers to the centralized maintenance unit;
Displacement alert analysis module: the alarm of satisfying permutizer condition that the centralized maintenance center is received according to the alarm permutizer condition is replaced into predetermined alarm, and will be scheduled to alarm and transfer to the centralized maintenance unit;
Analysis module is summarized in alarm: according to alarm summary condition the alarm that the centralized maintenance center receives is summarised as at least one alarm type, and with the alarm type message transmission to the centralized maintenance unit.
The described alert analysis module of ignoring comprises:
Alarm filter is analyzed submodule: the alarm of satisfying filtercondition that the centralized maintenance center is received transfers to the centralized maintenance unit;
Alarm inhibition analysis submodule: the alarm of satisfying rejection condition that the centralized maintenance center is received suppresses, and the alarm that will not satisfy rejection condition transfers to the centralized maintenance unit;
Analyze submodule association in time: the centralized maintenance center is received, the alarm in the window transfers to the centralized maintenance unit at the fixed time;
Described displacement alert analysis module comprises:
Warning count is analyzed submodule: the number of times of determining the identical alarm that it receives at interval at the fixed time according to the upgrading permutizer condition, and when described number of times reaches pre-determined number, described each identical alarm is replaced into a high level alarm, and described high level alarm transfers to the centralized maintenance unit;
Submodule is analyzed in the alarm refinement: the alarm that receive, that satisfy the subclass permutizer condition of centralized maintenance center is replaced into the subclass alarm, and the subclass alarm is transferred to the centralized maintenance unit.
Description by technique scheme as can be known, the present invention makes the centralized maintenance center can determine valuable alarm fast by predetermined alarm filtering condition is set; Predetermined alarm filtering condition can be the physical interconnection relation information, as repeat to alarm contractive condition, ignore alarm conditions, alarm permutizer condition, alarm summary condition etc., not only avoided the warning information of unnecessary redundancy, the centralized maintenance center can warning information is clearly, coherent be presented, thereby different alarm observed latitudes is provided, effectively holds the ruuning situation of each system equipment; Predetermined alarm filtering condition also can be the logic association relation information, logic association relation information of the present invention has been introduced alarm initial association analytical information and alarm particular associative analytical information, concern by the logic association that utilizes alarm particular associative analytical information further to excavate between the different alarms, alarm makes the centralized maintenance center alarm of its reception can be constructed as the logic association relational tree, make the centralized maintenance center can determine the root of alarm fast, avoided processing procedure to the alarm that is associated with Root alarm, make the centralized maintenance center carry out fault location fast and accurately, make the centralized maintenance center carry out effective maintenance management each system equipment; Thereby realized improving the purpose of the maintainability of system equipment by technical scheme provided by the invention.
Description of drawings
Fig. 1 is many equipment Centralized Maintenance System For schematic diagram;
Fig. 2 is many equipment Centralized Maintenance System For schematic diagram of the present invention;
Fig. 3 is an alarm association relational tree schematic diagram one of the present invention;
Fig. 4 is an alarm association relational tree engine process chart of the present invention;
Fig. 5 is a logic association relational tree schematic diagram two of the present invention.
Embodiment
The core of many equipment centralized maintenance method and system of the present invention all is: the alarm collection system transfers to the centralized maintenance center with the alarm of each system equipment, screen the alarm of its reception according to predetermined alarm filtering condition at the centralized maintenance center, and according to the alarm that obtains after the screening each system equipment is safeguarded.
Based on core concept of the present invention technical scheme provided by the invention is further described below.
By the alarm of system equipment can exist repeatedly report, alarm level there are differences, exist between alarming and cause alarm or the like phenomenon, so, the present invention need screen the alarm that centralized maintenance center in many equipment Centralized Maintenance System For receives, make alarm after the screening can be by different level, sub-category presenting.Centralized maintenance of the present invention center can comprise two-layer to the screening process of alarming, i.e. physical interconnection analyzing and processing and logic association analyzing and processing.By the physical interconnection analyzing and processing, make the centralized maintenance center can filter out some redundant warning information, by the logic association analyzing and processing, make the centralized maintenance center can determine main alarm fast and accurately and from alarm, thereby can carry out fault location fast and accurately, make the centralized maintenance center carry out effective maintenance management each system equipment.
Describe below in conjunction with 1 pair of many equipment Centralized Maintenance System For provided by the invention of accompanying drawing and method.
Among Fig. 1, the alarm of each system equipment of alarm collection system acquisition, and transmit it to the centralized maintenance center, the alarm that the centralized maintenance center can be come the alarm collection system transmissions shows in real time with the form of alarm sequence.
The alarm sequence that is transferred to the centralized maintenance center need at first pass through the physical interconnection analyzing and processing, and the function of physical interconnection analyzing and processing is realized by alarm management unit.The characteristics of the physical interconnection of alarm are: the incidence relation of alarm does not rely on network model, and do not need to understand the relation of interdependence between the various alarms, only parameter, attribute, the classification of alarm are analyzed, thereby make the centralized maintenance center that different alarm observed latitudes can be provided, effectively hold the ruuning situation of each system equipment.
The method that physical interconnection is analyzed mainly comprises: the alarm compression is analyzed, alarm filter is analyzed, the alarm inhibition analysis, warning count is analyzed, analysis is summarized in alarm, alarm refinement analysis and alarm time association analysis, the function that is alarm management unit is mainly by alarm compression analysis module, ignore the alert analysis module, displacement alert analysis module and alarm are summarized analysis module and are realized, wherein, ignoring the alert analysis module mainly comprises: alarm filter is analyzed submodule, alarm inhibition analysis submodule, analyze submodule association in time, displacement alert analysis module mainly comprises: warning count analyzes submodule and submodule is analyzed in the alarm refinement.
The function of each physical interconnection analytical method and module, submodule is as shown in table 1.
Table 1
Analytical method General introduction Form of presentation Application scenarios
The alarm compression is analyzed The identical alarm of looking repeatedly generation is for once being an alarm For time window [T1, T2] interior alarm [A, A, A], we can boil down to an alarm A[n] .n is frequency Repeatedly the event alarm of Chu Xianing can reduce the time alarm of frequent appearance greatly, alarms as OOF
Alarm filter is analyzed Neglect the alarm of not satisfying specified criteria Alarm do not satisfy specified criteria [A, p (A)]=>do not show this alarm The signaling link flash alarm is handled the relaying flash alarm
The alarm inhibition analysis In specific context, some alarm is suppressed, as when the high alarm of rank takes place, ignoring the low alarm of rank For alarm sequence [A1, A2, A3, B], A1A2 A3 ∈ B, [A1, A2 so, A3, B]=>B During single board default, suppress cell failure alarm in the plate.
Warning count is analyzed It is a newtype alarm that displacement specifies number the identical alarm that repeats [nxA]=>B When alarm occurs repeatedly, the rank that just needs the upgrading alarm is dodged when disconnected as: repeat circuit is frequent, though the sudden strain of a muscle break time is very short, also can influence business, therefore, the alarm level that report and upgrade.
Analysis is summarized in alarm Classify, the dimension of observation is provided High severity alarm [A1, A2, B, C] significant alarm [A3, A4, C1] minor alarm [A5, A6, B2] prompt alarm [A7, B4, C4] Show according to order of severity classification according to alarm webmaster classification of type
Alarm refinement analysis Be the inverse process of alarming processing, alarm with more concrete subclass and replace certain alarm B=>[A1, A2] Check the preceding information of alarming processing, single board default is general notion, and the fault of concrete components and parts is to cause the true cause of alarm in the veneer.
Analyze association in time The generation of alarm has local temporal correlation For extract in the time window [T1, T2] alarm [A, B, C ...] The precedence relationship that different faults alarm and initiation alarm thereof occur is generally fixed, be all alarms in a period of time before and after the observation fault association in time, so that find out the clue of fault.
As can be seen from Table 1, the redundant information that has effectively reduced alarm is analyzed by physical interconnection in the centralized maintenance center, and alarm can be carried out statistic of classification, makes warning information can clearly, coherent be presented in the centralized maintenance center.
The logic association analysis need be proceeded to the warning information after the physical interconnection analyzing and processing in the centralized maintenance center, the logic association analysis of alarm can be carried out deep warning association analysis on the basis that physical interconnection is analyzed, obtain the promptly main alarm of root alarm in each alarm, thereby determine the fault rootstock of system equipment.
The logic association analytical method can realize by the mode that generates the alarm association relational tree.The centralized maintenance center can generate the alarm association relational tree according to alarm initial association analytical information and alarm particular associative analytical information.
The centralized maintenance center can concern according to the logic association based on temporal correlation and dependence on parameter between the difference alarm to be provided with alarms the initial association analytical information, and the initial association analytical information is stored in the initial logic incidence relation memory module.
Initial logic incidence relation and the specific logical incidence relation of introducing below can be referred to as the expert knowledge library among Fig. 1.
Alarm initial association analytical information in the expert knowledge library mainly comprises: the parameter corresponding relation and the particular associative of alarm identifier, related alarm identifier, the related upper limit of alarm time, the related lower limit of alarm time, interrelated alarm are analyzed indication information, for ease of troubleshooting of faults, the alarm initial association analytical information in the expert knowledge library can also comprise: alarm produces reason, recovers suggestion, alarms the information such as influence that produce.
When the parameter that the alarm of the alarm of alarm identifier representative and the representative of related alarm identifier is satisfied the related related lower limit with alarm time of the upper limit of alarm time and these two alarms at the generation time of alarm satisfies the parameter corresponding relation simultaneously, can determine that promptly these two alarms are the alarm that is mutually related.
Particular associative is analyzed alarm that indication information is used to indicate the alarm identifier representative and can also be existed with it related alarm of further profound level is arranged.
The relation of equality that the parameter corresponding relation of interrelated alarm exists between can the parameter for two interrelated alarms, the calculated relationship that exists between also can parameter for two interrelated alarms.
Table 2 is examples of an initial association analytical information in the concrete expert knowledge library.
Table 2
Index Alarm ID Related ID Association in time the upper limit Association in time lower limit Parameter 1 Parameter 2 Parameter 3 Parameter 4 Parameter 5 Parameter 6 Parameter 7 Particular associative ID Produce reason Recover suggestion Influence
1 Alarm 1 Alarm 2 1 1 1 2 3 4 Empty Empty Empty Empty XXX XXX XX
2 Alarm 1 Alarm 3 2 2 F 1 F 1 Empty Empty Empty Empty Empty Empty XXX XXX XX
3 Alarm 1 Alarm 5 3 2 Empty Empty 1 2 Empty Empty Empty Empty XXX XXX XX
4 Alarm 2 Alarm 2 Empty Empty Empty Empty Empty Empty Empty Empty Empty 13 XXX XXX XX
In the table 2, there is logic association relation in alarm 1 with alarm 2, alarm 3, alarm 5 respectively, to alarm 1 and to alarm that logic association between 2 closes be that example describes the logic association relation between the difference alarm.Alarm 1 and alarm 2 comprise 4 parameters respectively, and alarm 1 parameter 1 and the parameter 1 of alarm 2 and equate, alarm 1 parameter 2 and the parameter 2 of alarming 2 and equate, alarm 1 parameter 3 and the parameter 3 of alarming 2 and equate, alarm 1 parameter 4 and equate with the parameter 4 of alarming 2.Alarm 1 and alarm 2 upper limit association in time, association in time, lower limit was 1, promptly alarm 1 and alarm 2 generation time should be identical.
There is calculated relationship in the parameter 1 of alarm 1 in the table 2 with the parameter 1 of alarm 3, and calculated relationship is a formula F 1.
Alarm after logic association analysis module 1 can will be analyzed through physical interconnection by alarm association relational tree analysis engine according to the initial association analytical information in the expert knowledge library generates at least one alarm association relational tree.Initial association analytical information and alarm association relational tree analysis engine are relatively independent in the heart in centralized maintenance.The alarm association relational tree that the present invention generates according to the initial association analytical information can be for having only the tree of a root node, i.e. this alarm does not have the alarm of logical relation with it, this alarm does not cause other alarm, and at this moment, this root node can be called isolated node.
In the incidence relation between the difference alarm, logical relation between some alarm is very complicated, can not analyze out by the logic association of alarm time and alarm parameter simply, the alarm that alarm that this part logical relation is very complicated such as network element external interface device cause, the alarm that the network element internal communication unit causes, the signal relation of different transmission mediums etc. specifically are classified as follows:
External interface is analyzed: as the office direction signaling link correlation analysis of MSC, office direction circuit correlation analysis;
Equipment control the superior and the subordinate administrative structure fault relationship is analyzed;
Speech path system warning association analysis: comprise the transformational relation of light path and speech channel etc.;
The intercom system warning association analysis;
The service logic association analysis.
When the logic association analysis is carried out in this part alarm, except the initial association analytical information of needs employing based on property association in time and parameter association, also need to comprise the method for planning as a whole, its parameter association analysis is much also complicated, to carry out alternate analysis to a plurality of attributes of two kinds of alarms, as to certain MSC office direction, the circuit/link of this office direction/trunk group/trunking all is the attribute of this office direction, all will carry out association analysis.
For further finding the further logic association relation between the different alarms, the centralized maintenance center can also concern the particular associative analytical information that alarm is set according to the logic association based on data mining between the difference alarm.The particular associative analytical information is stored in the specific logical incidence relation memory module.Initial association analytical information and particular associative analytical information are the important component parts in the expert knowledge library.The particular associative analytical information mainly comprises: alarm identifier, related alarm identifier, contingency table number, system configuration table name claim, input parameter, input field, output parameter, output field etc.
The particular associative analysis is based on formula and the algorithm that defines in the expert knowledge library, by the relationship analysis of alarm parameter in the system configuration base being judged its incidence relation.The contingency table numerical table shows alarm is carried out particular associative when analyzing, and needs the system configuration table number of inquiry.Input field and output field are generally algorithmic formula, and input parameter is represented the alarm parameter that it is corresponding, are N as input parameter, then represent N parameter of its corresponding alarm.Output parameter is represented the alarm parameter that it is corresponding, is M as output parameter, then represents M parameter of its corresponding alarm.Input parameter needs the substitution input field and claims to inquire about in the corresponding table at the system configuration table name, output field needs the substitution output field, when the record that obtains when the input field Query Result meets certain algorithm with output field, represent that then the alarm of two alarm identifier correspondences has special alarm association to concern.If output field is default, when representing that then the record that obtains when the input field Query Result is identical with output parameter M, the alarm of two alarm identifier correspondences has special alarm association relation.If have only field name in the output field, then expression is when the content of the output field field name in the record that the input field Query Result obtains is identical with output parameter M, and the alarm of two alarm identifier correspondences has special alarm association to concern.Input parameter can have one or more, and output parameter also can have one or more.
Can define the complex logic relation of repeatedly tabling look-up in the expertise table.When the contingency table number greater than 1 the time, expression need repeatedly be tabled look-up.
Table 3 is examples of a particular associative analytical information in the concrete expert knowledge library.Be that example is described the process of utilizing the particular associative analytical information to carry out special warning association analysis with table 3 below.
Table 3
Related ID Alarm ID The contingency table number Tables of data 1 Input parameter 1 Input field 1 。。 Related ID Output parameter 1 Output field 1 。。
13 471 1 SpmBoardModule 1 IModuleNo=%d 302 5 iLogicalBoardNo
14 354 1 OffTkgCirElRel 4 IFrameNum=%d 354 6 OfficeIndex
15 402 1 SpmMHIBoardCfg 7 iMHIBoardGrpN o=FLOOR(%d/2) 282 101 iSubBoardLogNo
In the table 3, every a pair of alarm that needs to judge the particular associative relation of record representative, as the 1st record in the table, judge exactly Alarm ID is that 471 alarm and Alarm ID are whether 302 alarm has incidence relation, the concrete process of judging that particular associative concerns is: because input parameter 1 is 1, so, need be with 471 the 1st parameter P1 that alarm as input IModuleNo=P1 condition query tables of data SpmBoardModule, if the value of iLogicalBoardNo equals the 5th parameter P5 of 302 alarms in the matched record that obtains, then 302 alarms are child nodes of 471 alarms, that is to say that 471 alarms and 302 alarms have the particular associative relation.
Alarm after logic association analysis module 1 and logic association analysis module 2 will be analyzed through physical interconnection by alarm association relational tree analysis engine according to the initial association analytical information in the expert knowledge library, particular associative analytical information together generates at least one alarm association relational tree.Particular associative analytical information and alarm association relational tree analysis engine are relatively independent in the heart in centralized maintenance.The alarm association relational tree that the present invention generates according to initial association analytical information, particular associative analytical information can be for having only the tree of a root node, i.e. this alarm does not have the alarm of logical relation with it, this alarm does not cause other alarm, and at this moment, this root node can be called isolated node.
Accompanying drawing 3 is object lessons of the alarm association relational tree that obtains by the logic association analysis.
Among Fig. 3, alarm 2 is root alarms, is alarm 21 and alarm 22 with the alarm of alarming 2 logic associations, promptly alarms 2 initiation alarm 21 and alarms 22.Be alarm 211 and alarm 212 with the alarm of alarm 21 logic associations, promptly alarm 21 and cause alarm 211 and alarm 212.
Logic association analysis module 1 and logic association analysis module 2 can transfer to the centralized maintenance unit with the alarm association relational tree that generates, perhaps directly the root alarm is transferred to the centralized maintenance unit, make the centralized maintenance unit can be rapidly, accurately judge guilty culprit, so that fault is got rid of rapidly according to root alarm or alarm association relational tree.
Because may there be alarm identifier in some related alarming node in system, promptly there is not Alarm ID, circuit or link as same office direction are unusual, or the urgent call of jack per line etc., when setting up the alarm association relational tree, may give rise to trouble or cause and opening relationships to set, therefore, the present invention has introduced the notion of dummy node, so that make logic association analysis module 1 and logic association analysis module 2 generate the alarm association relational tree according to expert knowledge library by alarm association relational tree analysis engine.
Dummy node is made of virtual alarm, and virtual alarm is derived by normal alarm, has virtual alarm identifier information such as virtual Alarm ID, and virtual Alarm ID is outside normal Alarm ID scope, so that distinguish.Virtual alarm is obtained by normal alert analysis, as alarms such as certain office direction relaying E1 faults.
Above-mentioned alarm association relational tree also can be expressed as following form:
Fake root node (0 layer)
|---alarm 1 (1 layer)
| |--------may cause alarm 2 (2 layers)
| | |--------temporal correlation is described
| | |--------dependence on parameter is described
| | |--------other descriptions
| |--------may cause alarm 3 (2 layers)
| | |--------temporal correlation is described
| | |--------dependence on parameter is described
| | |--------other descriptions
|---alarm 2 (1 layers)
|---alarm 3 (1 layers)
Wherein, 0 layer of fake root node is meant experience or the expert knowledge library self-defining alarm of user according to oneself.Arrange in order for all Alarm ID for 1 layer, 2 layers is the Alarm ID that 1 layer alarm may cause, 3 layers of parametric description for the alarm that is mutually related, time describe and other associated description, 3 layers content is the Rule of judgment of interrelated alarm, and independent alarm is distributed in 1 layer the node that does not have child node.
From foregoing description as can be seen, expert knowledge library of the present invention can be divided into two parts, and a part is the initial association analytical information, and a part is the particular associative analytical information, and these two parts are cores of expert knowledge library.Information in the expert knowledge library is to be formulated through the strict analysis verification to ALM by the expert of system, is the important evidence of the logic association analysis of alarm.Alarm initial association information definition the incidence relation on alarm time, alarm parameter etc. between two different alarms.The particular associative analytical information is the parameters relationship complexity between two alarms, can not express by simple algorithm, and the configuration database that needs system supports that the time uses, be a kind of information of setting up by data digging method, by the particular associative analytical information relation between the table of the parameter of system configuration base is analyzed, can be obtained between two alarms whether the alarm initiation relationship being arranged.
By the logic association relationship analysis being carried out in the alarm that each system equipment produces according to expert knowledge library, each alarm is added classification display in the alarm association relational tree, the alarm of each system equipment can be constructed as one or more alarm association relational trees, the root alarm of each alarm association relational tree is main alarm, there is the alarm of logic association relation should be tributary alarm below this root alarm or leaf alarm with this root alarm, the centralized maintenance center can be to any processing of leaf node alarm carrying out, only alarm is handled to root, only need recover the Root alarm on the root node, leaf node alarm nature can recover, thereby make the centralized maintenance center can be rapid, find guilty culprit accurately, effective recovery suggestion is provided simultaneously, so that fix a breakdown, the restorer operation.
Expert knowledge library can real time modifying, renewal, expert knowledge library that can be different according to different system customizations.
Be described by the flow process that alarm association relational tree analysis engine generates the alarm association relational tree according to expert knowledge library below in conjunction with 4 couples of the present invention of accompanying drawing.
Among Fig. 4, in step 400, need be with the n among the alarm sequence An alarm: alarm A1 generates the alarm association relational tree to alarming An.The initial value that i is set is 0, and the initial value of k is 0.K represents the number of the branch node of alarm association relational tree.
To step 410, whether judge i less than n, if be not less than, to step 411, the process that generates the alarm association relational tree finishes, the alarm association relational tree that output generates.
In step 410, if i less than n, to step 420, gets one and do not carry out the alarm that the alarm association relational tree is handled from alarm sequence An.
To step 430, from alarm sequence An, choose the alarm that the logic association relation may be arranged with this alarm according to expert knowledge library, can there be the alarm of logic association relation to set up the serial Bm of related alarm according to these, comprise m alarm in this sequence, promptly alarm B1 to alarming Bm, the initial value that j is set is 0.
To step 440, judge whether the value of m is 0, promptly judge in the related alarm sequence whether relevant alarm, if m is 0, to step 441, the alarm that will choose from An is as isolated node, to step 442, the value of i increase by 1.To step 410.
In step 440, if the value of m is not 0, to step 450, judge that whether j is less than m, judge promptly whether the association alarm in the related alarm sequence has all finished dealing with, if j is not less than m, represent that the association alarm in the related alarm sequence has all been finished dealing with, to step 451, whether the value of judging k is 0, judge promptly whether the alarm association relational tree exists branch node, if the value of k is 0, there is not branch node in expression alarm association relational tree, to step 441, the alarm that to choose from An is as isolated node, and to step 442, the value of i increases by 1.To step 410.
In step 451, if the value of k is not 0, there is branch node in expression alarm association relational tree, does not need to create isolated node, and to step 442, the value of i increases by 1.To step 410.
In step 450, if the value of j less than m, to step 460, is got an association alarm of not handling from related alarm sequence.
To step 470,480, judge respectively according to expert knowledge library whether the alarm parameter of two alarms, alarm time satisfy relevant related condition, if all satisfy, then can directly arrive step 490, judge whether the value of i is 0, if the value of i is 0, root node is not also created in expression, and to step 491, the alarm of choosing from the An alarm sequence is set to root node, the alarm of choosing from Bm is set to branch node, and the value of k increases by 1.To step 493, the value of j increases by 1.To step 450.
In step 490, if the value of i is not 0, the root node of logic association relational tree has been created in expression, and to step 492, the alarm of choosing in the Bm sequence is set to branch node, and the value of k increases by 1.To step 493, the value of j increases by 1.To step 450.
In step 470,480, if the alarm parameter of two alarms, alarm time all satisfy relevant related condition, also can arrive step 481, judge that whether being provided with particular associative in the initial association analytical information of the alarm correspondence of choosing in the An sequence in the expert knowledge library analyzes indication information, if being set, particular associative do not analyze indication information, to step 493, the value of j increases by 1.To step 450.
In step 481, analyze indication information if be provided with particular associative,, the particular associative analysis is carried out in two alarms choosing from An and Bm according to the particular associative analytical information in the expert knowledge library to step 482, if when determining to exist particular associative to analyze, to step 490; If when determining not exist particular associative to analyze, to step 493, the value of j increases by 1.To step 450.
Alarm among the alarm sequence An can be constructed as one or more alarm association relational trees according to above-mentioned flow process.Be that the alarm association relational tree that example, 2 couples of the present invention of associative list set up describes with a concrete alarm sequence below.
The alarm sequence that setting transfers to the centralized maintenance center is: { alarm 1, alarm 2, alarm 3, alarm 4, alarm 5}.
Alarm 1 is chosen at the centralized maintenance center from alarm sequence, determine alarm 2, the alarm 3 in the alarm sequence and alarm 5 and may have the logic association relation with alarm 1 according to table 1.
When the centralized maintenance center determines that according to parameter, the alarm time of the parameter in the table 1, the alarm time upper limit, alarm time lower limit, alarm 1, alarm 2, alarm 3, alarm 5 alarm 2, alarm 3, alarm 5 exist logic association to concern with alarm 1, to alarm 2, alarm 3, alarm 5 leaf nodes as alarm 1, because there is not the logic association relation in alarm 1 with alarm 4 in the table 1, be isolated node so alarm 4, promptly alarming 4 is a logic association relational tree that root node is only arranged.Two logical relation trees that alarm 1, alarm 2, alarm 3, alarm 4, alarm 5 generate as shown in Figure 5.
Though described the present invention by embodiment, those of ordinary skills know, the present invention has many distortion and variation and do not break away from spirit of the present invention, and the claim of application documents of the present invention comprises these distortion and variation.

Claims (13)

1, a kind of many equipment centralized maintenance method comprises:
A, alarm collection system all transfer to the centralized maintenance center with the alarm of each system equipment;
Screen the alarm of its reception according to predetermined alarm filtering condition at b, centralized maintenance center;
Safeguard system equipment according to the alarm that obtains after screening at c, centralized maintenance center.
2, a kind of many equipment centralized maintenance method as claimed in claim 1, it is characterized in that, described predetermined filtering condition comprises: concern the alarm initial association analytical information that is provided with according to the logic association based on temporal correlation and dependence on parameter between the difference alarm, and described step b comprises specifically:
B1, centralized maintenance center are constructed as at least one alarm association relational tree according to alarming the alarm of initial association analytical information with its reception.
3, a kind of many equipment centralized maintenance method as claimed in claim 2, it is characterized in that described alarm initial association analytical information comprises: the parameter corresponding relation of alarm identifier, related alarm identifier, the related upper limit of alarm time, the related lower limit of alarm time, interrelated alarm.
4, a kind of many equipment centralized maintenance method as claimed in claim 3 is characterized in that, described alarm initial association analytical information also comprises: one or more in the influence that alarm produces reason, recovers suggestion, alarm produces.
5, a kind of many equipment centralized maintenance method as claimed in claim 1, it is characterized in that, described predetermined filtering condition comprises: concern the alarm particular associative analytical information that is provided with according to the logic association based on data mining between the difference alarm, and described step b comprises:
B2, centralized maintenance center are constructed as at least one alarm association relational tree according to alarming the alarm of particular associative analytical information with its reception.
6, as the described a kind of many equipment centralized maintenance method of arbitrary claim in the claim 1 to 5, it is characterized in that, when described predetermined filtering condition comprises: when alarm initial association analytical information and alarm particular associative analytical information, alarm initial association analytical information also comprises: particular associative is analyzed indication information, and described step b specifically comprises:
B3, centralized maintenance center analyze indication information utilization alarm initial association analytical information and alarm particular associative analytical information according to the special relationship in the alarm initial association analytical information alarm of its reception are constructed as at least one alarm association relational tree.
7, a kind of many equipment centralized maintenance method as claimed in claim 1, it is characterized in that, described predetermined alarm filtering condition comprises: repeat to alarm contractive condition, ignore alarm conditions, one or more in the alarm permutizer condition, alarm summary condition, and described step b comprises:
B4, centralized maintenance center according to repeat to alarm contractive condition with its identical alarm that repeatedly receives at interval at the fixed time as once alarming; And/or
Alarm is chosen according to ignoring alarm conditions in b5, centralized maintenance center; And/or
B6, centralized maintenance center are replaced into predetermined alarm with the alarm of the satisfied alarm permutizer condition of its reception; And/or
B7, centralized maintenance center are summarised as at least one alarm type according to alarming the alarm of summary condition with its reception.
8, a kind of many equipment centralized maintenance method as claimed in claim 7 is characterized in that:
The described alarm conditions of ignoring comprise: filtercondition, rejection condition and time window extraction conditions, and described step b5 specifically comprises:
The alarm of satisfying filtercondition is chosen at the centralized maintenance center from the alarm of its reception;
The centralized maintenance center suppresses alarm its reception, in predetermined context according to rejection condition;
The alarm that it receives in window is at the fixed time extracted according to the time window extraction conditions in the centralized maintenance center;
Described alarm permutizer condition comprises: upgrading permutizer condition, subclass permutizer condition, and described step b6 specifically comprises:
The number of times of the identical alarm that it receives in is at interval at the fixed time determined according to the upgrading permutizer condition in the centralized maintenance center, and when described number of times reaches pre-determined number, described each identical alarm is replaced into a high level alarm;
The centralized maintenance center is replaced into the subclass alarm with alarm its reception, that satisfy the subclass permutizer condition.
9, a kind of many equipment Centralized Maintenance System For comprises: a plurality of system equipments, alarm collection system and centralized maintenance center, and the alarm collection system transfers to the centralized maintenance center with the alarm of system equipment, it is characterized in that, and described centralized maintenance center also is provided with:
Alarm management unit: according to predetermined alarm filtering condition the alarm that the centralized maintenance center receives is screened, and the alarm that will obtain after will screening transfers to the centralized maintenance unit;
The centralized maintenance unit: the alarm according to its reception is safeguarded system equipment.
10, a kind of many equipment Centralized Maintenance System For as claimed in claim 9 is characterized in that described alarm management unit comprises:
Initial logic incidence relation memory module: concern the alarm initial association analytical information that is provided with according to the logic association between the difference alarm based on temporal correlation and dependence on parameter, and storage;
Logic association analysis module 1: according to the alarm initial association analytical information of storing in the initial logic incidence relation memory module alarm that the centralized maintenance center receives is constructed as at least one alarm association relational tree, and transmits it to the centralized maintenance unit.
11, a kind of many equipment Centralized Maintenance System For as claimed in claim 9 is characterized in that described alarm management unit comprises:
Specific logical incidence relation memory module: concern the alarm particular associative analytical information that is provided with according to the logic association between the difference alarm based on data mining, and storage;
Logic association analysis module 2: according to the alarm initial association analytical information of storing in the specific logical incidence relation memory module alarm that the centralized maintenance center receives is constructed as at least one alarm association relational tree, and transmits it to the centralized maintenance unit.
12, as claim 9 or 10 or 11 described a kind of many equipment Centralized Maintenance System For, it is characterized in that, described alarm management unit comprises: alarm compression analysis module, ignore the alert analysis module, one or more in the analysis module are summarized in displacement alert analysis module and alarm;
Alarm compression analysis module: according to repeating to alarm contractive condition the identical alarm that the centralized maintenance center repeatedly receives in is at interval at the fixed time transferred to the centralized maintenance unit as once alarming, and the reception number of times of described identical alarm is transferred to the centralized maintenance unit;
Ignore the alert analysis module: choose alarm according to ignoring alarm conditions, and the alarm that will choose transfers to the centralized maintenance unit;
Displacement alert analysis module: the alarm of satisfying permutizer condition that the centralized maintenance center is received according to the alarm permutizer condition is replaced into predetermined alarm, and will be scheduled to alarm and transfer to the centralized maintenance unit;
Analysis module is summarized in alarm: according to alarm summary condition the alarm that the centralized maintenance center receives is summarised as at least one alarm type, and with the alarm type message transmission to the centralized maintenance unit.
13, a kind of many equipment Centralized Maintenance System For as claimed in claim 12 is characterized in that: the described alert analysis module of ignoring comprises:
Alarm filter is analyzed submodule: the alarm of satisfying filtercondition that the centralized maintenance center is received transfers to the centralized maintenance unit;
Alarm inhibition analysis submodule: the alarm of satisfying rejection condition that the centralized maintenance center is received suppresses, and the alarm that will not satisfy rejection condition transfers to the centralized maintenance unit;
Analyze submodule association in time: the centralized maintenance center is received, the alarm in the window transfers to the centralized maintenance unit at the fixed time;
Described displacement alert analysis module comprises:
Warning count is analyzed submodule: the number of times of determining the identical alarm that it receives at interval at the fixed time according to the upgrading permutizer condition, and when described number of times reaches pre-determined number, described each identical alarm is replaced into a high level alarm, and described high level alarm transfers to the centralized maintenance unit;
Submodule is analyzed in the alarm refinement: the alarm that receive, that satisfy the subclass permutizer condition of centralized maintenance center is replaced into the subclass alarm, and the subclass alarm is transferred to the centralized maintenance unit.
CNB2006100838300A 2006-06-01 2006-06-01 Integral maintaining method and system for multi-equipment Expired - Fee Related CN100479385C (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CNB2006100838300A CN100479385C (en) 2006-06-01 2006-06-01 Integral maintaining method and system for multi-equipment
PCT/CN2007/070076 WO2007143943A1 (en) 2006-06-01 2007-06-01 Method, system and network device of centralized maintenance of multiple devices

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2006100838300A CN100479385C (en) 2006-06-01 2006-06-01 Integral maintaining method and system for multi-equipment

Publications (2)

Publication Number Publication Date
CN101047556A true CN101047556A (en) 2007-10-03
CN100479385C CN100479385C (en) 2009-04-15

Family

ID=38771805

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2006100838300A Expired - Fee Related CN100479385C (en) 2006-06-01 2006-06-01 Integral maintaining method and system for multi-equipment

Country Status (2)

Country Link
CN (1) CN100479385C (en)
WO (1) WO2007143943A1 (en)

Cited By (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101958803A (en) * 2010-09-09 2011-01-26 中兴通讯股份有限公司 Alarm compression system and method based on communication network
CN102195791A (en) * 2010-03-05 2011-09-21 华为技术有限公司 Alarm analysis method, device and system
CN102236340A (en) * 2010-04-26 2011-11-09 北大方正集团有限公司 Multi-equipment management method and device
CN102468979A (en) * 2010-11-12 2012-05-23 国际商业机器公司 Associated contact information work management system and method
CN102546274A (en) * 2010-12-20 2012-07-04 中国移动通信集团广西有限公司 Alarm monitoring method and alarm monitoring equipment in communication service
CN102540899A (en) * 2010-12-31 2012-07-04 上海可鲁系统软件有限公司 Configurable activity alarm method for industrial automation system
CN103067045A (en) * 2011-10-18 2013-04-24 国家电网公司 Waste circuit identification method of electric power communication system and apparatus thereof
CN103428017A (en) * 2012-05-21 2013-12-04 中兴通讯股份有限公司 Method and device for alert forwarding
CN104021195A (en) * 2014-06-13 2014-09-03 中国民航信息网络股份有限公司 Warning association analysis method based on knowledge base
CN104038375A (en) * 2014-06-30 2014-09-10 成都广达电子股份有限公司 Alarm processing analysis system and method of broadcasting and TV access network
CN104424078A (en) * 2013-08-28 2015-03-18 鸿富锦精密工业(深圳)有限公司 Method and system for reducing floating alarm information
US9002954B2 (en) 2009-11-30 2015-04-07 International Business Machines Corporation Task management system associating with contact information and method thereof
CN104753861A (en) * 2013-12-27 2015-07-01 中国电信股份有限公司 Security event handling method and device
CN105099752A (en) * 2015-05-22 2015-11-25 杭州华三通信技术有限公司 Recommendation method and device for associated alarm data
CN105450444A (en) * 2015-11-16 2016-03-30 成都科来软件有限公司 Network parameter alarm configuration system and network parameter alarm evaluation system based on network data
CN105790972A (en) * 2014-12-18 2016-07-20 中兴通讯股份有限公司 Controller and alarm correlation processing method
CN106250288A (en) * 2016-07-29 2016-12-21 浪潮软件集团有限公司 Root alarm analysis and identification method based on data mining
CN106713017A (en) * 2016-12-08 2017-05-24 国网北京市电力公司 Alarm information processing method and apparatus
CN106789138A (en) * 2015-11-23 2017-05-31 中国移动通信集团广西有限公司 A kind of method and device of network alarm association analysis
CN107181604A (en) * 2016-03-09 2017-09-19 华为技术有限公司 A kind of generation method, alarm compression method and the device of alarm association rule
CN107395392A (en) * 2017-06-07 2017-11-24 成都视达科信息技术有限公司 A kind of alert analysis method and system
CN108073611A (en) * 2016-11-14 2018-05-25 国网江苏省电力公司镇江供电公司 The filter method and device of a kind of warning information
CN109327331A (en) * 2018-09-18 2019-02-12 北京邮电大学 Fault Locating Method and device in communication network
CN109615817A (en) * 2018-10-30 2019-04-12 珠海派诺科技股份有限公司 Monitoring system combines alarm method, device, electronic equipment and storage medium
CN110120146A (en) * 2019-04-25 2019-08-13 新浪网技术(中国)有限公司 It is a kind of based on platform system in the alarm method of platform system in alarm and alarm
CN110601898A (en) * 2019-09-20 2019-12-20 平安科技(深圳)有限公司 Abnormity early warning method, abnormity early warning device, server and storage medium
CN112380090A (en) * 2020-11-11 2021-02-19 深圳供电局有限公司 Data center-based comprehensive self-healing method and system for alarm event
CN115512503A (en) * 2022-08-01 2022-12-23 四川通信科研规划设计有限责任公司 Perimeter intrusion behavior early warning method and device for high-speed rail line

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102111296A (en) * 2011-01-10 2011-06-29 浪潮通信信息系统有限公司 Mining method for communication alarm association rule based on maximal frequent item set
CN110932875B (en) * 2018-09-19 2022-11-22 中兴通讯股份有限公司 Alarm device and method in big data cloud computing environment
CN112152829B (en) * 2019-06-27 2022-08-02 烽火通信科技股份有限公司 Alarm shielding method and system
CN110460478B (en) * 2019-08-28 2022-06-07 瑞斯康达科技发展股份有限公司 Alarm test method, alarm test system, alarm manufacturing equipment and network management system
CN111106972B (en) * 2020-01-22 2022-04-01 中国人民解放军61623部队 Cross-professional alarm correlation method and system for program control and transmission
CN113904920B (en) * 2021-09-14 2023-10-03 上海纽盾科技股份有限公司 Network security defense method, device and system based on collapse equipment
CN113890814B (en) * 2021-09-22 2023-09-19 联通(广东)产业互联网有限公司 Fault perception model construction and fault perception method and system, equipment and medium
CN114024828B (en) * 2021-10-15 2023-05-23 烽火通信科技股份有限公司 Platform side alarm suppression method, device and storage medium

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005523518A (en) * 2002-04-19 2005-08-04 コンピュータ アソシエイツ シンク,インコーポレイテッド System and method for monitoring computer applications
CN100394457C (en) * 2003-12-30 2008-06-11 上海贝尔阿尔卡特股份有限公司 Universal multi-hierarchy alarm processing method
US7084752B2 (en) * 2004-05-12 2006-08-01 Cisco Technology, Inc. Method and apparatus for triage of network alarms
US7493300B2 (en) * 2004-09-30 2009-02-17 International Business Machines Corporation Model and system for reasoning with N-step lookahead in policy-based system management

Cited By (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9002954B2 (en) 2009-11-30 2015-04-07 International Business Machines Corporation Task management system associating with contact information and method thereof
CN102195791A (en) * 2010-03-05 2011-09-21 华为技术有限公司 Alarm analysis method, device and system
CN102236340A (en) * 2010-04-26 2011-11-09 北大方正集团有限公司 Multi-equipment management method and device
CN102236340B (en) * 2010-04-26 2014-12-03 北大方正集团有限公司 Multi-equipment management method and device
CN101958803A (en) * 2010-09-09 2011-01-26 中兴通讯股份有限公司 Alarm compression system and method based on communication network
CN102468979B (en) * 2010-11-12 2016-03-30 国际商业机器公司 The Work management system of association contact details and method thereof
CN102468979A (en) * 2010-11-12 2012-05-23 国际商业机器公司 Associated contact information work management system and method
CN102546274A (en) * 2010-12-20 2012-07-04 中国移动通信集团广西有限公司 Alarm monitoring method and alarm monitoring equipment in communication service
CN102540899A (en) * 2010-12-31 2012-07-04 上海可鲁系统软件有限公司 Configurable activity alarm method for industrial automation system
CN103067045A (en) * 2011-10-18 2013-04-24 国家电网公司 Waste circuit identification method of electric power communication system and apparatus thereof
CN103067045B (en) * 2011-10-18 2015-02-18 国家电网公司 Waste circuit identification method of electric power communication system and apparatus thereof
CN103428017A (en) * 2012-05-21 2013-12-04 中兴通讯股份有限公司 Method and device for alert forwarding
CN104424078A (en) * 2013-08-28 2015-03-18 鸿富锦精密工业(深圳)有限公司 Method and system for reducing floating alarm information
CN104753861A (en) * 2013-12-27 2015-07-01 中国电信股份有限公司 Security event handling method and device
CN104021195B (en) * 2014-06-13 2017-04-26 中国民航信息网络股份有限公司 Warning association analysis method based on knowledge base
CN104021195A (en) * 2014-06-13 2014-09-03 中国民航信息网络股份有限公司 Warning association analysis method based on knowledge base
CN104038375A (en) * 2014-06-30 2014-09-10 成都广达电子股份有限公司 Alarm processing analysis system and method of broadcasting and TV access network
CN105790972A (en) * 2014-12-18 2016-07-20 中兴通讯股份有限公司 Controller and alarm correlation processing method
CN105790972B (en) * 2014-12-18 2020-09-29 南京中兴软件有限责任公司 Controller and alarm correlation processing method
CN105099752A (en) * 2015-05-22 2015-11-25 杭州华三通信技术有限公司 Recommendation method and device for associated alarm data
CN105450444A (en) * 2015-11-16 2016-03-30 成都科来软件有限公司 Network parameter alarm configuration system and network parameter alarm evaluation system based on network data
CN106789138A (en) * 2015-11-23 2017-05-31 中国移动通信集团广西有限公司 A kind of method and device of network alarm association analysis
CN106789138B (en) * 2015-11-23 2019-10-15 中国移动通信集团广西有限公司 A kind of method and device of network alarm association analysis
CN107181604A (en) * 2016-03-09 2017-09-19 华为技术有限公司 A kind of generation method, alarm compression method and the device of alarm association rule
CN106250288A (en) * 2016-07-29 2016-12-21 浪潮软件集团有限公司 Root alarm analysis and identification method based on data mining
CN108073611A (en) * 2016-11-14 2018-05-25 国网江苏省电力公司镇江供电公司 The filter method and device of a kind of warning information
CN106713017A (en) * 2016-12-08 2017-05-24 国网北京市电力公司 Alarm information processing method and apparatus
CN106713017B (en) * 2016-12-08 2020-06-19 国网北京市电力公司 Alarm information processing method and device
CN107395392A (en) * 2017-06-07 2017-11-24 成都视达科信息技术有限公司 A kind of alert analysis method and system
CN109327331A (en) * 2018-09-18 2019-02-12 北京邮电大学 Fault Locating Method and device in communication network
CN109615817A (en) * 2018-10-30 2019-04-12 珠海派诺科技股份有限公司 Monitoring system combines alarm method, device, electronic equipment and storage medium
CN110120146A (en) * 2019-04-25 2019-08-13 新浪网技术(中国)有限公司 It is a kind of based on platform system in the alarm method of platform system in alarm and alarm
CN110601898A (en) * 2019-09-20 2019-12-20 平安科技(深圳)有限公司 Abnormity early warning method, abnormity early warning device, server and storage medium
CN110601898B (en) * 2019-09-20 2022-05-17 平安科技(深圳)有限公司 Abnormity early warning method, abnormity early warning device, server and storage medium
CN112380090A (en) * 2020-11-11 2021-02-19 深圳供电局有限公司 Data center-based comprehensive self-healing method and system for alarm event
CN112380090B (en) * 2020-11-11 2023-03-03 深圳供电局有限公司 Comprehensive self-healing method and system for alarm event based on data center
CN115512503A (en) * 2022-08-01 2022-12-23 四川通信科研规划设计有限责任公司 Perimeter intrusion behavior early warning method and device for high-speed rail line
CN115512503B (en) * 2022-08-01 2023-07-11 四川通信科研规划设计有限责任公司 Perimeter intrusion behavior early warning method and device for high-speed railway line

Also Published As

Publication number Publication date
CN100479385C (en) 2009-04-15
WO2007143943A1 (en) 2007-12-21

Similar Documents

Publication Publication Date Title
CN101047556A (en) Integral maintaining method and system for multi-equipment
CN1531829A (en) Method and system for checking configuration of nodes in telecommunications network
CN1160907C (en) Network mangement method and network management system thereof
CN1379573A (en) Quick restoring mechanism and method for determining minimum restoring capacity in transmission net
CN1943190A (en) Flooding suppression method
CN101047535A (en) Method for filtering alarm between network management system and network element management system
CN101035027A (en) Network management interface information interaction method, device and notice reporting method
CN101043656A (en) Method and system for monitoring suspicious user of rubbish SMS
CN1741460A (en) Method and system for realizing telecommunication network universal performance management
CN101039209A (en) Method for analyzing root warning for multi-manufacturer DWDM network management system
CN1889741A (en) Method and apparatus for realizing scheduled operation in equipment management
CN101047523A (en) Server and method for providing on-line person state
CN1567851A (en) A method for monitoring user behavior in network management system
CN1901467A (en) Method and system for quick processing warning
CN1722682A (en) Network monitoring system
CN1852153A (en) Fault/alarm management system and method based on simple network management protocol
CN1812397A (en) Network management interface adapter and information interacting method
CN101056210A (en) An event processing system and method of network central management platform
CN101064636A (en) Method for filtering alarm between network administration system and network element administrative system
CN1299200C (en) Unified converting method for interface data in telecommunication network management system and its system
CN1852133A (en) Alarm reporting method
CN1851693A (en) Method for realizing system resources management
CN1889059A (en) Automatic excavating method for integer overflow loophole
CN1713588A (en) Alarm data process and its processor in network system
CN1652509A (en) Method for implementing intelligent network flexible authority management

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090415

Termination date: 20170601