CN109150572A - Realize the method, apparatus and computer readable storage medium of alarm association - Google Patents
Realize the method, apparatus and computer readable storage medium of alarm association Download PDFInfo
- Publication number
- CN109150572A CN109150572A CN201710507468.3A CN201710507468A CN109150572A CN 109150572 A CN109150572 A CN 109150572A CN 201710507468 A CN201710507468 A CN 201710507468A CN 109150572 A CN109150572 A CN 109150572A
- Authority
- CN
- China
- Prior art keywords
- alarm
- stored
- information
- attribute information
- incidence relation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/065—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving logical or physical relationship, e.g. grouping and hierarchies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0686—Additional information in the notification, e.g. enhancement of specific meta-data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/40—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/40—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本公开提供了一种实现告警关联的方法、装置以及计算机可读存储介质，属于通信技术领域。方法包括：在接收到一条告警后，获取告警的数据查询脚本；调用数据查询脚本，向VNF发送针对该告警的数据查询请求，该数据查询请求中至少包括告警指示的第一告警对象的第一标识信息；接收VNF返回的针对第一告警对象的第一属性信息；根据第一告警对象的第一属性信息，在至少一条已存储告警中进行轮询查找，得到与该告警存在关联关系的目标已存储告警。由于本公开实现告警关联无需依赖关联脚本，因此大大减少了人工编写以及维护实现告警关联的关联脚本的工作量，省时省力。即便面对告警类型数量多、关系复杂的通信系统，也可较为简单地完成告警之间的关联。
The present disclosure provides a method, an apparatus and a computer-readable storage medium for realizing alarm correlation, which belong to the technical field of communication. The method includes: after receiving an alarm, obtaining a data query script of the alarm; invoking the data query script, and sending a data query request for the alarm to the VNF, the data query request including at least the first part of the first alarm object indicated by the alarm. identification information; receiving the first attribute information for the first alarm object returned by the VNF; according to the first attribute information of the first alarm object, polling and searching in at least one stored alarm to obtain a target that is associated with the alarm Alarms are stored. Since the present disclosure does not need to rely on an association script to realize alarm association, the workload of manually writing and maintaining an association script for realizing alarm association is greatly reduced, saving time and effort. Even in the face of a communication system with a large number of alarm types and complex relationships, the correlation between alarms can be completed relatively simply.
Description
Technical field
This disclosure relates to field of communication technology, in particular to a kind of method, apparatus for realizing alarm association and computer
Readable storage medium storing program for executing.
Background technique
Occur usually to be reported by way of report and alarm information when hardware and software failure in a communications system.Wherein,
Alarm object would generally be indicated when reporting a warning information, i.e., explanation is that failure has occurred in which object, furthermore one
Also typically included in alarm time of failure, alarm level (such as be divided into it is fatal, serious, general, prompt etc.), alarm object
Attribute information.Wherein, attribute information may include information, failure cause, the failure influence etc. about alarm object.Citing comes
It says, the attribute information of virtual machine port failure alarm may include that virtual machine title, port name, alarm cause and abort situation are retouched
It states.
At present each alarm is shown usually in a manner of list, i.e., arranged all alarms generated at one
It is shown in table.But communication system has levels, the software or hardware module of bottom break down and would generally lead
Cause one or more software of upper layer or hardware module failure.The display mode of this list can not be obviously presented between alarm
Incidence relation, also need which alarm instruction additional manual analysis have is the most fundamental failure, excessively complicated.For this purpose, in ability
Domain also proposed the concept of alarm tree, i.e., is presented the incidence relation between each alarm with tree-like mode.Such root
The indicated failure of node alarm is to lead to the basic reason of leaf node alarm thereon.It has repaired indicated by root node alarm
Leaf node thereon can be alerted indicated failure and repaired together by failure.
Wherein, alarm tree is generated by way of preset script at present.For giving one example, such as developer's needle
The script of such one section of realization alarm association is write to the alarm of object A: in case of the alarm for being directed to object A, then just core
It looks into the presence or absence of the alarm for object B；If there is the alarm for being directed to object B, it is determined that object B's identifies whether equal to needle
To the value of parameter X in the alarm of object A；If be equal to, by the son for the alarm of object A as the alarm for object B
Alarm.
In implementing the present disclosure, the inventor finds that the existing technology has at least the following problems:
The script of above-mentioned realization alarm association needs manual compiling, takes time and effort, especially for complicated communication system
For, not only quantity is more for alarm type, and relationship is complicated, thus this kind generate alarm tree mode equally exist it is excessively cumbersome
With complicated defect.Alarm such as object A may be as caused by many reasons, this is just needed for for object A
Alarm write realize alarm association script, with inquire it is a variety of alarm whether be its root alarm.In addition, newly being alerted out when one
Now, it is associated with if the alarm exists with other a large amount of alarms, can also be related to a large amount of script modification.In addition, real
The entrained parameter of existing alarm association heavy dependence alarm.Such as carrying parameter X is had in the alarm of object A, if not
Carry the alarm that just can not be associated with for object B.
Summary of the invention
In order to solve the problems, such as that prior art alarm association realizes that complicated and dependence is strong, the embodiment of the present disclosure provides one
Kind realizes the method, apparatus and computer readable storage medium of alarm association.The technical solution is as follows:
In a first aspect, providing a kind of method for realizing alarm association, which comprises
After receiving an alarm, the data query script of the alarm is obtained；
The data query script is called, is sent to virtual network function (Virtual Network Function, VNF)
The first alarm pair of the alarm instruction is included at least for the data inquiry request of the alarm, in the data inquiry request
The first identifier information of elephant；
Receive the first attribute information for first alarm object that the VNF is returned, first attribute information
By the VNF after receiving the data inquiry request according to the first identifier acquisition of information to；
According to the first attribute information of first alarm object, stores to be polled in alarm at least one and look into
Look for, obtain with it is described alarm there are the targets of incidence relation to have stored alarm.
Wherein, after receiving an alarm, in the poll for having been stored alarm, following two ways can be divided into:
In the first possible implementation of the first aspect, first attribute according to first alarm object
Information, at least one stored alarm in be polled lookups, obtain with it is described alert there are the targets of incidence relation to have deposited
Storage alarm, comprising:
The each in alarm has been stored for described at least one and has stored alarm, if described stored what alarm indicated
The second identifier information of second alarm object matches with an attribute information in first attribute information,
And the alarm level for having stored alarm is greater than the alarm level of the alarm, then the alarm is determined as institute
State the child alarm for having stored alarm.
It is how to judge that this alarm has stored the child alarm of alarm for other for aforesaid way.
With reference to first aspect, in the second possible implementation of the first aspect, described according to first alarm
First attribute information of object has stored in alarm at least one and has been polled lookup, obtains being associated with alarm presence
The target of relationship has stored alarm, comprising:
The each stored in alarm for described at least one alerts, if second announcement for having stored alarm instruction
An attribute information and the first identifier information of first alarm object match in second attribute information of alert object,
And the alarm level of the alarm is greater than the alarm level for having stored alarm, then the alarm is determined as institute
State the root alarm for having stored alarm.
It is how to judge that this alarm has stored the root alarm of alarm for other for aforesaid way.
It should be noted that in addition to it is above-mentioned stored alarm in be polled determining associated alarm other than, the disclosure also mentions
A kind of fuzzy text analyzing ability based on artificial intelligence is supplied, there are associated doubtful alarms for the alarm for carrying out and receiving
Inquiry.And support the doubtful alarm inquired carrying out push mark, for manually being confirmed.
With reference to first aspect, in a third possible implementation of the first aspect, the method also includes:
For each attribute information in first attribute information, by the attribute information and at least one alarm pair
At least one identification information of elephant carries out fuzzy comparison, at least one described alarm object and described at least one has stored alarm
It is corresponding；
If between the identification information of any of the attribute information and at least one alarm object alarm object
Similarity is greater than preset threshold, then is determined as being associated with alarm presence by the corresponding alarm of any one described alarm object
The doubtful alarm of system.
In the third possible implementation with reference to first aspect, in the 4th kind of possible implementation of first aspect
In, the method also includes:
The identification information of the type information of the doubtful alarm, the doubtful alarm is shown, and shows and is directed to institute
State the incidence relation confirmation prompting message of doubtful alarm；
After receiving the incidence relation confirmation operation for the doubtful alarm, the alarm and the doubtful announcement are stored
Incidence relation between police.
With reference to first aspect, the first or second of possible implementation of first aspect, the 5th of first aspect the
In the possible implementation of kind, the method also includes:
After obtaining having stored alarm there are at least one target of incidence relation with the alarm, by the class of the alarm
Type information, the first identifier information, first attribute information, the alarm have stored alarm at least one target
Incidence relation stored；
The type information of the alarm, the first identifier information, the alarm have been deposited at least one target
The incidence relation of storage alarm is shown.
Second aspect provides a kind of device for realizing alarm association, and described device is for realizing above-mentioned first aspect institute
The method for the realization alarm association stated.
The third aspect provides a kind of computer readable storage medium, at least one finger is stored in the storage medium
Enable, at least one section of program, code set or instruction set, at least one instruction, at least one section of program, the code set or
Instruction set is loaded by the processor and is executed to realize the side such as the described in any item realization alarm associations of above-mentioned first aspect
Method.
Fourth aspect, provides a kind of device for realizing alarm association, and described device includes processor and memory, described
At least one instruction, at least one section of program, code set or instruction set are stored in memory, described at least one instructs, is described
At least one section of program, the code set or instruction set is loaded by the processor and is executed to realize as above-mentioned first aspect is any
The method of realization alarm association described in.
The technical solution that the embodiment of the present disclosure provides has the benefit that
After association analysis module receives an alarm, the data inquiry request for being directed to the alarm can be sent to VNF, with
The whole attribute informations for the alarm object that the alarm indicates are got from VNF, the basis of association analysis module meeting later is got
Whole attribute informations, alarm library at least one stored alarm in be polled lookups, thus obtain and the alarm storage
The storage of incidence relation alerts, since the embodiment of the present disclosure realizes that alarm association without relying on associated script, subtracts significantly
Lack the workload of the associated script of manual compiling and maintenance realization alarm association, it is time saving and energy saving.Even if facing alarm type
Quantity is more, relationship complexity communication system, can also complete the association between alarm relatively simplely.
In addition, the embodiment of the present disclosure is whole attribute informations towards VNF query warning object, and use the announcement inquired
The attribute information of alert object carries out alarm association, therefore is not in realize that alarm association heavy dependence alerts entrained parameter
Situation.That is, specified parameter whether is carried in the alarm no matter newly received, it can be by it with there are the announcements of incidence relation with it
Police is associated.
Detailed description of the invention
Fig. 1 is a kind of system architecture diagram for NFV that the embodiment of the present disclosure provides；
Fig. 2 is the composition of module involved by a kind of method for realizing alarm association of embodiment of the present disclosure offer and work
Make flow diagram；
Fig. 3 is a kind of method flow diagram for realizing alarm association that the embodiment of the present disclosure provides；
Fig. 4 is a kind of flow diagram for realizing alarm association that the embodiment of the present disclosure provides；
Fig. 5 is associated schematic diagram between a kind of alarm of embodiment of the present disclosure offer；
Fig. 6 is a kind of example schematic for realizing alarm association that the embodiment of the present disclosure provides；
Fig. 7 is a kind of structural schematic diagram for device for realizing alarm association that the embodiment of the present disclosure provides；
Fig. 8 is a kind of structural schematic diagram for device for realizing alarm association that the embodiment of the present disclosure provides；
Fig. 9 is a kind of structural schematic diagram for device for realizing alarm association that the embodiment of the present disclosure provides.
Specific embodiment
To keep the purposes, technical schemes and advantages of the disclosure clearer, below in conjunction with attached drawing to disclosure embodiment party
Formula is described in further detail.
Before to the embodiment of the present disclosure carrying out that explanation is explained in detail, first to a kind of realization of embodiment of the present disclosure offer
Application scenarios involved in the method for alarm association and implementation environment are briefly described.
Wherein, a kind of method for realizing alarm association that the embodiment of the present disclosure provides is applied to be virtualized in network function
Under (Network Function Virtualization, NFV) system architecture.Once briefly it is situated between to NFV technology first
It continues.
It is well known that traditional telecommunication system is by various dedicated hardware device compositions, different applications is using different
Hardware device.However, system becomes increasingly complex with the growth of network size, many challenges, including newly-increased industry are brought
Online, system O&M, resource utilization etc. are developed in business.In order to cope with these challenges and utilize information technology
The virtualization technology and cloud computing technology of (Information Technology, IT) industry, held on October 22nd, 2012
" SDN and OpenFlow World Congress " meeting on, main 13 telecom operators in the whole world, which combine, to issue
NFV white paper, and announce to set up NFV ISG in ETSI, the demand and technological frame of NFV are formulated, the development of NFV is pushed.
Wherein, NFV technology can be simply interpreted as the function of each network element used in telecommunication network from current
In specialized hardware platform migration to general commercial goods shelf products (Commercial Off The Shelf, COTS) server.
Each network element used in telecommunication network is transformed into independent application by NFV technology, it can be with flexible deployment based on mark
On the unified Infrastructure platform of the other equipment such as quasi- server, storage and interchanger building, and pass through virtualization technology,
To infra structure hardware facility resource pool and virtualization, virtual resource is provided to upper layer application, realizes application, hardware decoupling,
So that each application can quickly increase virtual resource to realize the purpose of Quick Extended power system capacity, or can quickly subtract
Lack virtual resource to realize the purpose of pinch system capacity, greatly promotes the elasticity of network.Using general COTS server group
At shared resource pool, business newly developed does not need individually to dispose hardware device, greatly shortens new business on-line time.
The basis of NFV technology includes cloud computing technology and virtualization technology.General COTS calculating/storage/network etc. is hard
Part equipment can be decomposed into a variety of virtual resources by virtualization technology, for upper layer it is various using.By virtualizing skill
Art realizes application and the decoupling between hardware, so that virtual resource feed speed greatly increases；It, can be with by cloud computing technology
It realizes the elastic telescopic of application, realizes that virtual resource matches with traffic load, not only improve the utilization efficiency of virtual resource,
And improve the speed of response of system.
Explanation is introduced in each component part and framework of the NFV system provided below the embodiment of the present disclosure.
Fig. 1 is the system architecture diagram of NFV, and the NFV system 100 can use in various networks, such as in a number
It is realized according to central site network, carrier network or local area network.The NFV system 100 includes a NFV management and arranging system
101, NFV infrastructure layer (NFV (NFV Management and Orchestration, NFV MANO)
Infrastructure, NFVI) 130, it is multiple virtual network functions (Virtual Network Function, VNF) 108, more
A NE management (Element Management, EM) 122, network service, VNF and infrastructure describe (Network
Service, VNF and Infrastructure Description) 126 and business support management system
(Operation-Support System/Business Support System,OSS/BSS)124.Wherein, NFV management and
Arranging system 101 includes NFV composer (NFV Orchestrator, NFVO) 102, one or more VNF manager (VNF
Manager, VNFM) 104 and virtualized infrastructure manager (Virtualized Infrastructure Manager,
VIM)106.NFVI 130 includes computing hardware 112, storage hardware 114, the network hardware 116, virtualization layer
(Virtualization Layer), virtual computing 110, virtual memory 118 and virtual network 120.Network services, VNF and base
Infrastructure, which describes 126 and OSS/BSS 124, has further discussion in ETSI GS NFV 002V1.1.1 standard.
NFV management and arranging system (NFV MANO) 101 are used to execute monitoring and the pipe to VNF 108 and NFVI 130
Reason.The network service (such as L2 and L3VPN service) on NFVI130 may be implemented in NFVO102, can also execute from one or
The resource association requests of multiple VNFM104 send configuration information to VNFM104, and collect the status information of VNF 108.In addition,
NFVO102 can be communicated with VIM106, to realize the distribution and/or reserved and exchange virtualization hardware resource configuration of resource
And status information.The VNFM104 can manage one or more VNF108.VNFM104 can execute various management functions, such as
Instantiation, update, inquiry, scaling and/or termination VNF108 etc..VIM106 can execute the function of resource management, such as manage
The distribution (such as increasing resource to virtual container) of infrastructure resources and operating function (as collected NFVI fault message).It is described
VNFM104 and VIM106 can be in communication with each other the configuration and status information for carrying out resource allocation and exchanging virtualization hardware resource.
The NFVI130 includes the combination of hardware resource, software resource or both to complete the deployment of virtualized environment.It changes
Sentence is talked about, and hardware resource and virtualization layer are used to provide the resource virtualized, such as the virtual of virtual machine and other forms
Container is used for VNF108.Hardware resource includes computing hardware 112, storage hardware 114 and the network hardware 116.Computing hardware 112
It can be ready-made in the market hardware and/or customized hardware, for providing processing and computing resource.Storage hardware 114
The memory capacity provided in network or the memory capacity (sheet in server for residing in storage hardware 114 itself are provided
Ground memory).In an implementation, the resource of computing hardware 112 and storage hardware 114 can be brought together.Net
Network hardware 116 can be interchanger, router and/or be configured to any other network equipment with function of exchange.Network is hard
Part 116 can be across multiple domains, and may include multiple networks interconnected by one or more transmission networks.
Virtualization layer inside NFVI130 can be abstracted from physical layer hardware resource and decoupling VNF108, so as to
VNF108 provides virtualization resource.Virtual resource layer includes virtual computing 110, virtual memory 118 and virtual network 120.It is empty
Quasi- calculating 110 and virtual memory 118 can be supplied to VNF 108 in the form of virtual machine, and/or other virtual containers.For example,
One or more VNF 108 can be deployed on a virtual machine (Virtual Machine).Virtualization layer is abstracted net
For network hardware 116 to form virtual network 120, virtual network 120 may include virtual switch (Virtual Switch), institute
Virtual switch is stated to be used to provide the connection between virtual machine and other virtual machines.In addition, the transmission network in the network hardware 116
Network, can be using centerized fusion plane and individual Forwarding plane (such as software defined network, a SDN) virtualization.
As shown in Figure 1, VNFM104 can be interacted with VNF108 and EM122 being managed to the life cycle of VNF and
Exchange configuration and status information.VNF108 can be configured as at least one the network function executed by a physical network device
The virtualization of energy.For example, the VNF108 can be by configuration to provide IP multimedia subsystem in an implementation
The function that different network elements in (IP Multimedia Subsystem, IMS) network have, such as agent call session control function
Energy (Proxy-Call Session Control Funtion, P-SCSCF), server call conversation control function
(Serving-Call Session Control Function, S-CSCF) or home signature user server (Home
Subscriber Server, HSS) network function etc..EM122 by configuration with to one or more VNF108 into
Row management.
Fig. 2 is the composition of module involved by a kind of method for realizing alarm association of embodiment of the present disclosure offer and work
Make flow diagram.As shown in Fig. 2, the embodiment of the present disclosure provide realization alarm association device include alarm receiving module,
Association analysis module, alarm memory module and alarm display module.
Referring to fig. 2, alarm receiving module be connected with association analysis module, association analysis module respectively with alarm memory module
And alarm display module is connected.
Wherein, alarm receiving module is used to receive the alarm (1) of VNF transmission, and the alarm received is transmitted to association
Analysis module (2).Association analysis module inquires each to VNF for using each to alert corresponding data query script
Alert the attribute information (3) of the alarm object of instruction.Wherein, data query script is specifically used for carrying out data extraction and inquiry.
In addition, association analysis module, is also used to carry out query warning according to the attribute information for the alarm received and deposit
It has been alerted in storage module, to be associated relationship analysis (4).Then, association analysis module ties the alarm and its association
Fruit storage is to alarm memory module (5) and is pushed to alarm display module (6).
Association between attribute information and each alarm of the alarm memory module for storing alarm, alarm object is closed
System.Alarm display module be used for operation and maintenance personnel show it is each alarm and and each alarm between incidence relation.
It should be noted that above-mentioned module is that can independently be used as an alarm management software work by software realization
Tool can also be added in the EM in NFV framework or MANO as a software function.In addition, illustrate there are also some needs
It is that (1) marked in above-mentioned steps (1) to (6) and Fig. 2 is corresponding to (6).
The device that the embodiment of the present disclosure provides can be directed to after association analysis module receives an alarm to VNF transmission
The data inquiry request of the alarm is associated with later with getting the whole attribute informations for the alarm object that the alarm indicates from VNF
Analysis module can be according to whole attribute informations for getting, and at least one has stored to be polled in alarm and look into alarm library
It looks for, so that the storage for obtaining storing incidence relation with the alarm alerts, since the embodiment of the present disclosure realizes that alarm association is not necessarily to
Associated script is relied on, therefore greatly reduces the workload of the associated script of manual compiling and maintenance realization alarm association, is saved
Shi Shengli.Even if more, relationship complexity communication system, can also complete between alarm in face of alarm type quantity relatively simplely
Association.
In addition, the embodiment of the present disclosure is whole attribute informations towards VNF query warning object, and use the announcement inquired
The attribute information of alert object carries out alarm association, therefore is not in realize that alarm association heavy dependence alerts entrained parameter
Situation.That is, specified parameter whether is carried in the alarm no matter newly received, it can be by it with there are the announcements of incidence relation with it
Police is associated.
Fig. 3 is a kind of method flow diagram for realizing alarm association that the embodiment of the present disclosure provides.The realization alarm association
The executing subject of method is above-mentioned association analysis module shown in Fig. 2.Association process is realized in an alarm as shown in connection with fig. 4
Process is executed, referring to Fig. 3, the method flow that the embodiment of the present disclosure provides includes:
301, after receiving an alarm, association analysis module obtains the data query script of the alarm, calls the number
According to query script, the data inquiry request for being directed to the alarm is sent to VNF, the alarm is included at least in the data inquiry request and refers to
The first identifier information for the first alarm object shown.
In the embodiments of the present disclosure, this alarm that association analysis module receives is that alarm receiving module forwards, i.e.,
After in NFV system software or hardware fault occur for VNF, alarm transmission can be carried out to alarm receiving module, and is alerted and received mould
The alarm that block is responsible for be collected into is transmitted to association analysis module and carries out subsequent incidence relation analysis.
Wherein, for each alarm, the embodiment of the present disclosure can be equally its preset script, this script is in this public affairs
It opens and is referred to as data query script in embodiment, can be used for the attribute information to VNF query warning object.That is, association analysis mould
Block can obtain the data query script of the alarm, and call after receiving the alarm that alarm receiving module is sent automatically
The data query script sends the data inquiry request for being directed to the alarm to VNF, to request VNF to return to the of this article alarm instruction
Whole attribute informations of one alarm object.
It should be noted that the data query script of the embodiment of the present disclosure be only in alarm carry out data extraction or
Person is only used for carrying out data extraction and data collection to the attribute information of VNF query warning object, this with use in the prior art
It is different in the script for realizing alarm association, without carrying out the setting about incidence relation between alarm.
In addition, the data query is asked in order to enable VNF specific, concrete should return to the attribute information of which alarm object
It will also include the first identifier information of the first alarm object of alarm instruction in asking.Wherein, the first mark of the first alarm object
Information is known for being identified to the first alarm object, and the first alarm object is distinguished with other alarm objects.For example,
First identifier information can be " link name=LNK01 ".
302, association analysis module receives the first attribute information for the first alarm object that VNF is returned.
As described in above-mentioned steps 301, the first attribute information be by VNF after receiving above-mentioned data inquiry request according to
What one identification information was got.Wherein, association analysis module can get first by sending above-mentioned data inquiry request to VNF
The most full attribute information of alarm object.Even if in this way, not by the first alarm pair in this alarm that association analysis module receives
The all properties information of elephant carries, for example only carries a small number of key property information, such as only carries the first alarm object
First identifier information, and the service parameter of the first alarm object itself, other objects of reference, calling resource etc. do not carry,
The case where cannot achieve alarm association will not occur, solve and realize that the alarm of alarm association heavy dependence is taken in the prior art
The problem of parameter of band.
In other words, the embodiment of the present disclosure is by way of the attribute information to VNF query warning object, to be alerted
Between incidence relation, alert self-contained parameter without relying on.In addition, realizing alarm association also compared with the prior art
Intensity relies on the mode of manual presetting script, and the embodiment of the present disclosure eliminates manual compiling and safeguards that this realizes alarm association
Script workload, realize the auto-associating of alarm.
In the embodiments of the present disclosure, for the attribute information of the first alarm object, it may include a plurality of attribute, and
Each attribute is made of Property Name+attribute value.For shown in Fig. 4, Fig. 4 gives an alarm and realizes association process
Execution process.In Fig. 4, after carrying out the first attribute information inquiry of the first alarm object, obtained the first attribute information
In may include such as Property Name 1+ attribute value 1, Property Name 2+ attribute value 2, Property Name 3+ attribute value 3 etc..Wherein, it accuses
The type of alert object is used to indicate which kind of failure corresponding alarm to belong to, for example the type of alarm object can be signaling link
Road, module, IP address etc., the embodiment of the present disclosure is to this without specifically limiting.
In conclusion above-mentioned steps 301 and step 302 complete the reception of alarm and the first of the first alarm object belongs to
Property information inquiry, next, as shown in figure 4, can according to inquire the first attribute information poll alarm library in having deposited
Storage alarm implements process referring to following step 303 with the association between being alerted.
303, association analysis module has stored in alarm according to the first attribute information of the first alarm object at least one
It is polled lookup, obtains that there are the targets of incidence relation to have stored alarm with the alarm.
Wherein, the embodiment of the present disclosure has stored alarm to the whole being stored in alarm memory module to alert library and has united
Claim.
In addition, one kind just receives in conjunction with Fig. 4 it is found that would ordinarily be encountered two kinds of situations when carrying out alarm association for this
The alarm arrived is the child alarm of other alarms, and another kind is the root alarm that the alarm that this has just been received is other alarms, therefore
When poll alarm library carries out alarm association, the embodiment of the present disclosure provides following two kinds of incidence relation methods of determination.
First way, this alarm have stored the child alarm of alarm as one.
Condition 1 for first way, in corresponding diagram 4.If the alarm meets following Rule of judgment, the alarm
Just the child alarm of alarm has been stored as one:
The each in alarm has been stored at least one and has stored alarm, if one has stored the second of alarm instruction
The second identifier information of alarm object matches with an attribute information in the first attribute information,
And this alarm level for having stored alarm is greater than the alarm level of this alarm just received, then by this announcement
Police is determined as this child alarm for having stored alarm.
In short, if second identifier information=first of second alarm object for having stored alarm is accused in alarm library
The Property Name X+ attribute value X of alert object, and this has stored alarm level >=this alarm alarm level of alarm,
This alarm has then been stored to the child alarm of alarm as this.
The second way, this alarm have stored the root alarm of alarm as one.
Condition 2 for the second way, in corresponding diagram 4.If the alarm meets following Rule of judgment, the alarm
Just the root alarm of alarm has been stored as one:
The each stored in alarm at least one alerts, if one has stored the second alarm pair of alarm instruction
An attribute information and the first identifier information of the first alarm object match in the second attribute information of elephant,
And the alarm level of this alarm is greater than this and has stored the alarm level of alarm, then this alarm is determined as this
Item has stored the root alarm of alarm.
In short, if alarm library in one stored alarm instruction the second alarm object Property Name Y+ attribute value
The first identifier information of the first alarm object of Y=, and this has stored alarm level≤this alarm alert level of alarm
Not, then this child alarm of the alarm as this alarm has been stored into.
It should be noted that alarm level is to be carried in each alarm as essential option, therefore receiving one
After item alarm, the alarm level of this alarm can be directly got in the content that it is carried.
In another embodiment, after the alarm of storage all in alarm library being finished in poll, embodiment of the present disclosure branch
Incidence relation between holding the attribute information that this is alerted to, is corresponded to alarm object and alerting is stored to alarm memory module,
And the incidence relation between this alarm and alarm is pushed into alarm display module, so that alarm display module accuses this
Incidence relation between alert and alarm is shown to operation and maintenance personnel.
In other words, association analysis module obtain with this alarm there are at least one targets of incidence relation to have stored
It, can also be by the type information of this alarm, first identifier information, the first attribute information, this alarm and at least one after alarm
The incidence relation that target has stored between alarm is stored to alarm memory module, and alerted this by alarm display module
It is aobvious in alarm that type information, first identifier information, this alarm and at least one target have stored the incidence relation between alarm
Show and is shown on interface.
In the above type information is signaling link, first identifier information is link name=LNK01, this alarm and alarm
A and alarm B is there are for incidence relation, then alarm memory module can take following column when storing to this alarm
The form of table stores it.
Table 1
Certainly other storage modes can be also taken, the embodiment of the present disclosure is to this without specifically limiting.For example, aobvious in alarm
Show on interface through the incidence relation between dendrogram display alarm.By taking this current alarm is alarm C as an example, then alerts A, accuses
Alert B and the incidence relation alerted between C can be shown by dendrogram shown in fig. 5.
In another embodiment, the above-mentioned association that operation and maintenance personnel can also automatically analyze out association analysis module
Relationship is modified, for example can veto the above-mentioned incidence relation that association analysis module automatically analyzes out, and association analysis module
The rejection of operation and maintenance personnel can be automatically recorded as a result, and being no longer associated the alarm vetoed.
In another embodiment, the embodiment of the present disclosure can also be compared and newly be connect by artificial intelligence fuzzy recognition technology
The attribute information of the alarm received and at least one has stored the identification information for alerting the alarm object of instruction, to find to alert it
Between doubtful incidence relation, and using the manual confirmation result of these doubtful incidence relations as associated rule next time.
That is, the embodiment of the present disclosure utilizes the text analyzing ability of artificial intelligence fuzzy recognition technology, this alarm is referred to
The mark of the Property Name and attribute value for the first alarm object shown, the alarm object for having stored alarm instruction at least one is believed
Breath carries out fuzzy comparison, and also as alerting with this, there are the doubtful announcements of incidence relation by the high alarm that stored of similarity
It is alert.
In addition, by doubtful alarm pushing to alarm display module after, alarm display module to these it is doubtful alert into
When row display, it can be distinguished with the above-mentioned alarm for being truly present incidence relation determined, such as by these doubtful alarms
Especially it is identified.In this way can by operation and maintenance personnel come manual confirmation between these doubtful alarms and this alarm it is whether true
Just there is incidence relation.And for alarm doubtful for a certain item, if this this doubtful for alerting and newly receiving of manual confirmation
There are incidence relations for item alarm, then alarm memory module can also store incidence relation between the two.
Wherein, the above process can be as follows with induction and conclusion:
For newly receive this alarm first attribute information in each attribute information, by the attribute information with
At least one identification information of at least one alarm object is fuzzy to be compared.Wherein, at least one alarm object at least one
Storage alarm is corresponding, i.e., at least one alarm object has stored alarm from least one.If the attribute information at least
Similarity between the identification information of any of one alarm object alarm object is greater than preset threshold, then alerts any one
Object it is corresponding alarm be determined as with this alarm there are the doubtful alarms of incidence relation.
Wherein, preset threshold can be 90% or 95% etc., and the embodiment of the present disclosure is to this without specifically limiting.Later, lead to
It crosses alarm display module to show the identification information of the type information of above-mentioned doubtful alarm, above-mentioned doubtful alarm, and shows
Prompting message is confirmed for the incidence relation of above-mentioned doubtful alarm；If subsequently received operation and maintenance personnel is directed to above-mentioned doubtful announcement
Alert incidence relation confirmation operation then stores this alarm and being associated between above-mentioned doubtful alarm by alarm memory module
System.
Referring to Fig. 6, it is illustrated below in method of the specific example to above-mentioned realization alarm association.
As shown in fig. 6, alarm receiving module receives the signaling link failure alarm of VNF transmission, and by this signaling
Link failure alarm is transmitted to association analysis module.
For association analysis module according to prefabricated data query script, the alarm object for extracting this alarm instruction is " letter
Enable link ", i.e. the type of alarm object be signaling link, alarm object identification information be " link name=LNK01 ", and structure
Build the attribute information of LST LNK order this link that link name is LNK01 into VNF inquiry signaling link.Referring to Fig. 6,
It include a series of Property Name and attribute value in link name=LNK01 attribute information.
Association analysis module finds a module alarm failure, the alarm object of alarm instruction in alarm memory module
Identification information be " module No.=8 ", equal to one of the link name=LNK01 attribute inquired " module No.=8 ", and mould
The alarm level of block fault warning >=signaling link failure alarm level, therefore this signaling link failure is alerted into conduct
The child alarm of the module alarm failure.It should be noted is that carrying one in each alarm about this alarm
The parameter of alarm level.Above-mentioned module alarm failure and signaling link failure can be known by the parameter association analysis module
The alarm level of alarm.
It is as follows for the doubtful alarm determination process based on artificial intelligence fuzzy recognition technology:
For example, for for above-mentioned alarm object " link name=LNK01 ", there is an attribute to be in attribute information
" local terminal IP address=172.25.10.130 ", and alert and stored alarm there are one in library, it is that IP conflicts that this, which has stored alarm,
Alarm, and the identification information of alarm object is " IP address=172.25.10.130 ".By comparing, discovery IP collision alert
" local terminal IP address=172.25.10.130 " is similar to both signaling link failure alarms " IP address=172.25.10.130 ",
Therefore doubtful alarm IP collision alert alerted as signaling link failure.Once by manual confirmation IP collision alert and letter
System failure alarm is enabled to be implicitly present in incidence relation, then alarm memory module will record it: signaling link failure alarm
The identification information of alarm object that is alerted with IP address conflict of Property Name " local terminal IP address " in " IP address " be consistent
's.If on the contrary do not confirmed manually, incidence relation is just not present between IP collision alert and signaling link failure alarm.
The method that the embodiment of the present disclosure provides can be directed to after association analysis module receives an alarm to VNF transmission
The data inquiry request of the alarm is associated with later with getting the whole attribute informations for the alarm object that the alarm indicates from VNF
Analysis module can be according to whole attribute informations for getting, and at least one has stored to be polled in alarm and look into alarm library
It looks for, so that the storage for obtaining storing incidence relation with the alarm alerts, since the embodiment of the present disclosure realizes that alarm association is not necessarily to
Associated script is relied on, therefore greatly reduces the workload of the associated script of manual compiling and maintenance realization alarm association, is saved
Shi Shengli.Even if more, relationship complexity communication system, can also complete between alarm in face of alarm type quantity relatively simplely
Association.
In addition, the embodiment of the present disclosure is whole attribute informations towards VNF query warning object, and use the announcement inquired
The attribute information of alert object carries out alarm association, therefore is not in realize that alarm association heavy dependence alerts entrained parameter
Situation.That is, specified parameter whether is carried in the alarm no matter newly received, it can be by it with there are the announcements of incidence relation with it
Police is associated.
It further, can also be in alarm library by the text analyzing ability based on artificial intelligence fuzzy recognition technology
Stored alarm in excavate with newly receive alarm there are the doubtful alarms of doubtful incidence relation, and by it is doubtful alert into
Row manual confirmation is established to do further incidence relation, therefore extends the mode of establishing of incidence relation, more intelligent.
Fig. 7 is a kind of structural schematic diagram for device for realizing alarm association that the embodiment of the present disclosure provides.It, should referring to Fig. 7
Device includes:
Receiving module 701 is alerted, for obtaining the data query script of the alarm after receiving an alarm；It adjusts
With the data query script, the data inquiry request for being directed to the alarm is sent to VNF, in the data inquiry request at least
The first identifier information of the first alarm object including the alarm instruction；Receive accusing for described first for the VNF return
First attribute information of alert object, first attribute information basis after receiving the data inquiry request by the VNF
The first identifier acquisition of information arrives；
Association analysis module 702 has been deposited for the first attribute information according to first alarm object at least one
Storage alarm in be polled lookups, obtain with it is described alert there are the targets of incidence relation to have stored alarm.
In another embodiment, the association analysis module 702, for having been stored in alarm for described at least one
Each stored alarm, if it is described stored alarm instruction the second alarm object second identifier information and described first
An attribute information matches in attribute information, and the alarm level for having stored alarm is greater than the alert level of the alarm
Not, then the alarm is determined as the child alarm for having stored alarm.
In another embodiment, the association analysis module 702, for having been stored in alarm for described at least one
Each alarm, if in the second attribute information of second alarm object for having stored alarm instruction attribute information with
The first identifier information of first alarm object matches, and the alarm level of the alarm has stored alarm greater than described
The alarm is then determined as the root for having stored alarm and alerted by alarm level.
In another embodiment, the association analysis module 702 is also used to for every in first attribute information
One attribute information, by least one identification information of the attribute information and at least one alarm object carry out it is fuzzy compare,
It is corresponding that at least one described alarm object with described at least one has stored alarm；If the attribute information and described at least one
Similarity between the identification information of any of a alarm object alarm object is greater than preset threshold, then will any one described announcement
The corresponding alarm of alert object is determined as that there are the doubtful alarms of incidence relation with the alarm.
In another embodiment, referring to Fig. 8, the device further include:
Alarm display module 703, for by the identification information of the type information of the doubtful alarm, the doubtful alarm into
Row display, and show that the incidence relation for the doubtful alarm confirms prompting message；
Alarm memory module 704, for storing after receiving the incidence relation confirmation operation for the doubtful alarm
Incidence relation between the alarm and the doubtful alarm.
In another embodiment, alarm memory module 704, for obtain with it is described alarm there are incidence relations extremely
After a few target has stored alarm, the type information of the alarm, the first identifier information, first attribute are believed
Breath, the incidence relation for having stored alarm at least one target that alerts are stored；
Alarm display module 703, for by the type information of the alarm, the first identifier information, it is described alarm with
The incidence relation that at least one target has stored alarm is shown.
The device that the embodiment of the present disclosure provides can be directed to after association analysis module receives an alarm to VNF transmission
The data inquiry request of the alarm is associated with later with getting the whole attribute informations for the alarm object that the alarm indicates from VNF
Analysis module can be according to whole attribute informations for getting, and at least one has stored to be polled in alarm and look into alarm library
It looks for, so that the storage for obtaining storing incidence relation with the alarm alerts, since the embodiment of the present disclosure realizes that alarm association is not necessarily to
Associated script is relied on, therefore greatly reduces the workload of the associated script of manual compiling and maintenance realization alarm association, is saved
Shi Shengli.Even if more, relationship complexity communication system, can also complete between alarm in face of alarm type quantity relatively simplely
Association.
In addition, the embodiment of the present disclosure is whole attribute informations towards VNF query warning object, and use the announcement inquired
The attribute information of alert object carries out alarm association, therefore is not in realize that alarm association heavy dependence alerts entrained parameter
Situation.That is, specified parameter whether is carried in the alarm no matter newly received, it can be by it with there are the announcements of incidence relation with it
Police is associated.
It further, can also be in alarm library by the text analyzing ability based on artificial intelligence fuzzy recognition technology
Stored alarm in excavate with newly receive alarm there are the doubtful alarms of doubtful incidence relation, and by it is doubtful alert into
Row manual confirmation is established to do further incidence relation, therefore extends the mode of establishing of incidence relation, more intelligent.
It should be understood that it is provided by the above embodiment realize alarm association device when realizing alarm association, only with
The division progress of above-mentioned each functional module can according to need and for example, in practical application by above-mentioned function distribution by not
Same functional module is completed, i.e., the internal structure of equipment is divided into different functional modules, to complete whole described above
Or partial function.In addition, the device provided by the above embodiment for realizing alarm association and the method for realizing alarm association are implemented
Example belongs to same design, and specific implementation process is detailed in embodiment of the method, and which is not described herein again.
Fig. 9 is a kind of structural schematic diagram for device 900 for realizing alarm association that the embodiment of the present disclosure provides.Referring to Fig. 9,
The device 900 includes processor, communication interface, memory and communication bus, can also include input/output interface, wherein place
Reason device, memory, input/output interface and communication interface complete mutual communication by communication bus.Memory storage
Have at least one instruction, at least one section of program, code set or instruction set, the processor for execute stored on memory to
Few an instruction, at least one section of program, code set or instruction set, realize the side that alarm association is realized described in above-described embodiment
Method.
In the exemplary embodiment, a kind of computer readable storage medium for being stored with computer program, example are additionally provided
It is such as stored with the memory of computer program, above-mentioned at least one instruction, at least one section of program, code set or instruction set are processed
Device realizes the method that alarm association is realized described in above-described embodiment when executing.For example, the computer readable storage medium can
Be read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM),
CD-ROM (Compact Disc Read-Only Memory, CD-ROM), tape, floppy disk and optical data storage devices etc..
Those of ordinary skill in the art will appreciate that realizing that all or part of the steps of above-described embodiment can pass through hardware
It completes, relevant hardware can also be instructed to complete by program, the program can store in a kind of computer-readable
In storage medium, storage medium mentioned above can be read-only memory, disk or CD etc..
The foregoing is merely the alternative embodiments of the disclosure, not to limit the disclosure, all spirit in the disclosure and
Within principle, any modification, equivalent replacement, improvement and so on be should be included within the protection scope of the disclosure.
Claims (13)
1. a kind of method for realizing alarm association, which is characterized in that the described method includes:
After receiving an alarm, the data query script of the alarm is obtained；
The data query script is called, the data inquiry request for being directed to the alarm is sent to virtual network function VNF, it is described
The first identifier information of the first alarm object of the alarm instruction is included at least in data inquiry request；
The first attribute information for first alarm object that the VNF is returned is received, first attribute information is by institute
VNF is stated to be arrived after receiving the data inquiry request according to the first identifier acquisition of information；
According to the first attribute information of first alarm object, stored in alarm and searched at least one, obtain with
There are the targets of incidence relation to have stored alarm for the alarm.
2. the method according to claim 1, wherein described believe according to the first attribute of first alarm object
Breath, at least one stored alarm in searched, obtain with it is described alarm there are the targets of incidence relation to have stored alarm,
Include:
The each in alarm has been stored for described at least one and has stored alarm, if described stored the second of alarm instruction
The second identifier information of alarm object matches with an attribute information in first attribute information,
And the alarm level for having stored alarm is greater than the alarm level of the alarm, then by the alarm be determined as it is described
Store the child alarm of alarm.
3. the method according to claim 1, wherein described believe according to the first attribute of first alarm object
Breath, at least one stored alarm in searched, obtain with it is described alarm there are the targets of incidence relation to have stored alarm,
Include:
The each stored in alarm for described at least one alerts, if second alarm pair for having stored alarm instruction
An attribute information and the first identifier information of first alarm object match in the second attribute information of elephant,
And the alarm level of the alarm is greater than the alarm level for having stored alarm, then by the alarm be determined as it is described
The root alarm of storage alarm.
4. the method according to claim 1, wherein the method also includes:
For each attribute information in first attribute information, by the attribute information and at least one alarm object
At least one identification information carries out fuzzy comparison, at least one described alarm object has stored alarm relatively with described at least one
It answers；
If similar between the identification information of any of the attribute information and at least one alarm object alarm object
Degree be greater than preset threshold, then by any one described alarm object it is corresponding alarm be determined as with it is described alarm there are incidence relations
Doubtful alarm.
5. according to the method described in claim 4, it is characterized in that, the method also includes:
The identification information of the type information of the doubtful alarm, the doubtful alarm is shown, and shows and is doubted for described
Prompting message is confirmed like the incidence relation of alarm；
After receiving the incidence relation confirmation operation for the doubtful alarm, the alarm and the doubtful alarm are stored
Between incidence relation.
6. according to claim 1 to method described in any bar claim in 3, which is characterized in that the method also includes:
After obtaining having stored alarm there are at least one target of incidence relation with the alarm, the type of the alarm is believed
Breath, the first identifier information, first attribute information, the alarm and at least one target have stored the pass of alarm
Connection relationship is stored；
The type information of the alarm, the first identifier information, the alarm announcement has been stored into at least one target
Alert incidence relation is shown.
7. a kind of device for realizing alarm association, which is characterized in that described device includes:
Receiving module is alerted, for obtaining the data query script of the alarm after receiving an alarm；Call the number
According to query script, the data inquiry request for being directed to the alarm is sent to virtual network function VNF, in the data inquiry request
Including at least the first identifier information of the first alarm object of the alarm instruction；Receive that the VNF returns for described the
First attribute information of one alarm object, first attribute information is by the VNF after receiving the data inquiry request
It is arrived according to the first identifier acquisition of information；
Association analysis module has stored alarm at least one for the first attribute information according to first alarm object
In searched, obtain with it is described alarm there are the targets of incidence relation to have stored alarm.
8. device according to claim 7, which is characterized in that the association analysis module, for for described at least one
The each that item has stored in alarm has stored alarm, if the second identifier of second alarm object for having stored alarm instruction
Information matches with an attribute information in first attribute information, and the alarm level for having stored alarm is greater than described
The alarm is then determined as the child alarm for having stored alarm by the alarm level of alarm.
9. device according to claim 7, which is characterized in that the association analysis module, for for described at least one
Item has stored each alarm in alarm, if in the second attribute information of second alarm object for having stored alarm instruction
One attribute information and the first identifier information of first alarm object match, and the alarm level of the alarm is greater than institute
The alarm level for having stored alarm is stated, then the alarm is determined as the root for having stored alarm and alerted.
10. device according to claim 7, which is characterized in that the association analysis module is also used to for described first
Each attribute information in attribute information, by least one identification information of the attribute information and at least one alarm object
Carry out fuzzy comparison, it is corresponding that at least one described alarm object with described at least one has stored alarm；If the attribute letter
Similarity between any of breath and at least one alarm object identification information of alarm object is greater than preset threshold, then
By any one described alarm object it is corresponding alarm be determined as with it is described alarm there are the doubtful alarms of incidence relation.
11. device according to claim 10, which is characterized in that described device further include:
Alarm display module, for the identification information of the type information of the doubtful alarm, the doubtful alarm to be shown,
And show that the incidence relation for the doubtful alarm confirms prompting message；
Alarm memory module, for storing the announcement after receiving the incidence relation confirmation operation for the doubtful alarm
The alert incidence relation between the doubtful alarm.
12. according to device described in any bar claim in claim 7 to 9, which is characterized in that described device further include:
Alarm memory module, for obtain with it is described alarm stored alarm there are at least one target of incidence relation after,
By the type information of the alarm, the first identifier information, first attribute information, the alarm and described at least one
The incidence relation that target has stored alarm is stored；
Alarm display module, for by the type information of the alarm, the first identifier information, it is described alarm with it is described at least
The incidence relation that one target has stored alarm is shown.
13. a kind of computer readable storage medium, which is characterized in that be stored at least one instruction, extremely in the storage medium
Few one section of program, code set or instruction set, at least one instruction, at least one section of program, the code set or the instruction
Collection is loaded as the processor and is executed to realize the realization alarm association as described in any claim in claim 1 to 6
Method.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710507468.3A CN109150572B (en) | 2017-06-28 | 2017-06-28 | Method, device and computer readable storage medium for realizing alarm association |
| PCT/CN2018/091931 WO2019001312A1 (en) | 2017-06-28 | 2018-06-20 | Method and apparatus for realizing alarm association, and computer readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710507468.3A CN109150572B (en) | 2017-06-28 | 2017-06-28 | Method, device and computer readable storage medium for realizing alarm association |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109150572A true CN109150572A (en) | 2019-01-04 |
| CN109150572B CN109150572B (en) | 2020-07-24 |
Family
ID=64740370
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710507468.3A Active CN109150572B (en) | 2017-06-28 | 2017-06-28 | Method, device and computer readable storage medium for realizing alarm association |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN109150572B (en) |
| WO (1) | WO2019001312A1 (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111488997A (en) * | 2020-04-14 | 2020-08-04 | 中国联合网络通信集团有限公司 | Automatic operation and maintenance method, device, equipment and storage medium |
| CN112583643A (en) * | 2020-12-14 | 2021-03-30 | 浪潮云信息技术股份公司 | Cross-device alarm correlation method |
| CN113448809A (en) * | 2020-03-24 | 2021-09-28 | 伊姆西Ip控股有限责任公司 | Method, apparatus and computer program product for managing messages in an application system |
| CN114143165A (en) * | 2020-08-14 | 2022-03-04 | 北京达佳互联信息技术有限公司 | Service alarm method, device, server, storage medium and program product |
| CN117978516A (en) * | 2024-02-21 | 2024-05-03 | 北京火山引擎科技有限公司 | Alarm data processing method, device, medium and electronic equipment |
| CN118012661A (en) * | 2024-04-08 | 2024-05-10 | 杭州长川科技股份有限公司 | Test alarm monitoring device, method and test machine |
Families Citing this family (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109933582A (en) * | 2019-03-11 | 2019-06-25 | 国家电网有限公司 | Data processing method and device |
| JP7215342B2 (en) * | 2019-06-06 | 2023-01-31 | 富士通株式会社 | COMMUNICATION PROGRAM, COMMUNICATION METHOD, AND COMMUNICATION DEVICE |
| CN110209914B (en) * | 2019-06-13 | 2024-04-12 | 腾讯科技(成都)有限公司 | Information query method and related device |
| CN111756582B (en) * | 2020-07-07 | 2022-12-02 | 上海新炬网络技术有限公司 | Service chain monitoring method based on NFV log alarm |
| CN114721912B (en) * | 2021-01-04 | 2024-07-09 | 腾讯科技（深圳）有限公司 | Data analysis method, device, equipment and medium |
| CN113157536A (en) * | 2021-05-26 | 2021-07-23 | 中国银行股份有限公司 | Alarm analysis method, device, equipment and storage medium |
| CN114139597A (en) * | 2021-10-15 | 2022-03-04 | 杭州安恒信息安全技术有限公司 | Case similarity calculation method, system, readable storage medium and computer device |
| CN114094708B (en) * | 2021-11-25 | 2024-06-18 | 广东电网有限责任公司东莞供电局 | Power grid equipment association alarm method and system |
| CN114461506B (en) * | 2022-01-18 | 2025-06-13 | 北京爱奇艺科技有限公司 | Cluster alarm control method, device, electronic device and storage medium |
| CN115987894B (en) * | 2022-12-02 | 2025-05-30 | 中盈优创资讯科技有限公司 | Method, device and equipment for automatically detecting and processing homodromous congestion scene |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1740986A (en) * | 2004-08-24 | 2006-03-01 | 华为技术有限公司 | An alarm correlation shielding method |
| CN1992636A (en) * | 2005-12-29 | 2007-07-04 | 华为技术有限公司 | System and method for processing warning information |
| US20120011517A1 (en) * | 2010-07-08 | 2012-01-12 | Virginia Smith | Generation of operational policies for monitoring applications |
| CN105119736A (en) * | 2015-07-15 | 2015-12-02 | 华为技术有限公司 | Data check method and device in network function virtualization architecture |
| CN105337758A (en) * | 2014-08-15 | 2016-02-17 | 中兴通讯股份有限公司 | Alarm processing method and device, NMS, OSS, and EMS |
| CN105591784A (en) * | 2014-10-24 | 2016-05-18 | 中兴通讯股份有限公司 | Alarm processing method and device |
| CN105677759A (en) * | 2015-12-30 | 2016-06-15 | 国家电网公司 | Alarm correlation analysis method in communication network |
| WO2016127482A1 (en) * | 2015-02-12 | 2016-08-18 | 华为技术有限公司 | Alarm information processing method, relevant device and system |
| CN106250288A (en) * | 2016-07-29 | 2016-12-21 | 浪潮软件集团有限公司 | A Root Alarm Analysis and Recognition Method Based on Data Mining |
-
2017
- 2017-06-28 CN CN201710507468.3A patent/CN109150572B/en active Active
-
2018
- 2018-06-20 WO PCT/CN2018/091931 patent/WO2019001312A1/en active Application Filing
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1740986A (en) * | 2004-08-24 | 2006-03-01 | 华为技术有限公司 | An alarm correlation shielding method |
| CN1992636A (en) * | 2005-12-29 | 2007-07-04 | 华为技术有限公司 | System and method for processing warning information |
| US20120011517A1 (en) * | 2010-07-08 | 2012-01-12 | Virginia Smith | Generation of operational policies for monitoring applications |
| CN105337758A (en) * | 2014-08-15 | 2016-02-17 | 中兴通讯股份有限公司 | Alarm processing method and device, NMS, OSS, and EMS |
| CN105591784A (en) * | 2014-10-24 | 2016-05-18 | 中兴通讯股份有限公司 | Alarm processing method and device |
| WO2016127482A1 (en) * | 2015-02-12 | 2016-08-18 | 华为技术有限公司 | Alarm information processing method, relevant device and system |
| CN106170947A (en) * | 2015-02-12 | 2016-11-30 | 华为技术有限公司 | A kind of alarm information processing method, relevant device and system |
| CN105119736A (en) * | 2015-07-15 | 2015-12-02 | 华为技术有限公司 | Data check method and device in network function virtualization architecture |
| CN105677759A (en) * | 2015-12-30 | 2016-06-15 | 国家电网公司 | Alarm correlation analysis method in communication network |
| CN106250288A (en) * | 2016-07-29 | 2016-12-21 | 浪潮软件集团有限公司 | A Root Alarm Analysis and Recognition Method Based on Data Mining |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113448809A (en) * | 2020-03-24 | 2021-09-28 | 伊姆西Ip控股有限责任公司 | Method, apparatus and computer program product for managing messages in an application system |
| CN113448809B (en) * | 2020-03-24 | 2024-12-13 | 伊姆西Ip控股有限责任公司 | Method, device and computer program product for managing messages in an application system |
| CN111488997A (en) * | 2020-04-14 | 2020-08-04 | 中国联合网络通信集团有限公司 | Automatic operation and maintenance method, device, equipment and storage medium |
| CN114143165A (en) * | 2020-08-14 | 2022-03-04 | 北京达佳互联信息技术有限公司 | Service alarm method, device, server, storage medium and program product |
| CN112583643A (en) * | 2020-12-14 | 2021-03-30 | 浪潮云信息技术股份公司 | Cross-device alarm correlation method |
| CN117978516A (en) * | 2024-02-21 | 2024-05-03 | 北京火山引擎科技有限公司 | Alarm data processing method, device, medium and electronic equipment |
| US12328330B1 (en) | 2024-02-21 | 2025-06-10 | Beijing Volcano Engine Technology Co., Ltd. | Alarm data processing method, apparatus, medium and electronic device |
| CN118012661A (en) * | 2024-04-08 | 2024-05-10 | 杭州长川科技股份有限公司 | Test alarm monitoring device, method and test machine |
| CN118012661B (en) * | 2024-04-08 | 2024-08-02 | 杭州长川科技股份有限公司 | Test alarm monitoring device, method and test machine |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2019001312A1 (en) | 2019-01-03 |
| CN109150572B (en) | 2020-07-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109150572A (en) | Realize the method, apparatus and computer readable storage medium of alarm association | |
| CN105760214B (en) | A device state and resource information monitoring method, related device and system | |
| CN108134764B (en) | Distributed data sharing and exchanging method and system | |
| US10484265B2 (en) | Dynamic update of virtual network topology | |
| CN110535831A (en) | Cluster safety management method, device and storage medium based on Kubernetes and network domains | |
| CN110635987B (en) | Message transmission method, device, equipment and machine readable storage medium | |
| CN110531987A (en) | Management method, device and computer readable storage medium based on Kubernetes cluster | |
| CN111245916A (en) | Service invocation method, service orchestration method and device based on microservice gateway | |
| EP3413511B1 (en) | Vnfm determining method and network function virtualization orchestrator | |
| CN109412878A (en) | Multi-tenant service access implementation method, device and electronic equipment | |
| CN112788518B (en) | Location service processing method and related equipment | |
| CN108989399A (en) | A kind of cluster common data querying method, system, device and readable storage medium storing program for executing | |
| CN105100002B (en) | Attribute operation method and device | |
| CN105988886B (en) | Fault handling method and device during a kind of O＆M | |
| CN103701653B (en) | The processing method of a kind of interface hot plug configuration data and network configuration server | |
| CN104378364A (en) | Collaborative analysis method of information security operation centers | |
| CN104881749A (en) | Data management method and data storage system for multiple tenants | |
| CN109819023A (en) | Distributed transaction processing method and Related product | |
| US8224933B2 (en) | Method and apparatus for case-based service composition | |
| CN115866061A (en) | Service processing method, device, equipment and medium based on service cluster system | |
| CN110995489A (en) | Big data platform server management method, device, server and storage medium | |
| CN108900603A (en) | A kind of server discovery methods, devices and systems | |
| CN107862040A (en) | The update method of data, device and a kind of cluster in a kind of caching of application example | |
| CN107483518B (en) | Media server and media service method | |
| CN108154343B (en) | Emergency processing method and system for enterprise-level information system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |