CN102487334A - Method and device for determining associated alarm information - Google Patents
Method and device for determining associated alarm information Download PDFInfo
- Publication number
- CN102487334A CN102487334A CN2010105743604A CN201010574360A CN102487334A CN 102487334 A CN102487334 A CN 102487334A CN 2010105743604 A CN2010105743604 A CN 2010105743604A CN 201010574360 A CN201010574360 A CN 201010574360A CN 102487334 A CN102487334 A CN 102487334A
- Authority
- CN
- China
- Prior art keywords
- warning information
- confirms
- binomial
- time length
- preceding paragraph
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a method and a device for determining associated alarm information. The method comprises the following steps of: acquiring the alarm information generated within scheduled time; determining alarm information two-item sets satisfying preset conditions, wherein each alarm information two-item set comprises front item alarm information and back item alarm information; for each determined alarm information two-item set, determining the probability that the condition of the back item alarm information is generated under the condition that the front item alarm information is generated; and for the alarm information two-item set of which the determined condition probability is not less than a first scheduled threshold, determining the back item alarm information as the associated alarm information of the front item alarm information. Through the technical scheme, the problem that the accuracy in determination of the associated alarm information is relatively low in the prior art is solved.
Description
Technical field
The present invention relates to communication technical field, relate in particular to a kind of definite method and device of related warning information.
Background technology
Along with developing rapidly of communication network technology, communication service is more and more abundanter, from initial telegram, telephone service, develops into business such as Internet protocol (IP, Internet Protocol), multimedia.For business support system; Along with supporting network and professional complexity and diversity are strengthened gradually; The monitoring coverage rate is more and more wider, and the monitoring granularity is also more and more thinner, and the quantity of consequent warning information is more and more; Particularly during online implementing, maintenance and daily important operation, the quantity of warning information is very big.If can in the warning information of magnanimity, determine inter-related warning information, then can carry out association analysis to warning information, so just can find the basic reason of fault rapidly, in time the normal operation of restoring communication network.
At present, generally adopt following two kinds of methods to confirm related warning information, be specially:
First method; Alarm association system based on expert knowledge library confirms related warning information; The knowledge base of this type systematic is generally set up through the method for initiatively adding by the knowledgeable expert of O&M; But this method seriously relies on expert's O&M experience, because the knowledgeable expert of O&M possibly only be absorbed in a certain field or a certain type operation system, this related warning information that just causes adopting this method to determine is inaccurate;
Second method confirms that based on the alarm association system of resource correlation model related warning information, this type systematic generally are is the basis with the resource model; Through setting up the incidence relation of principal and subordinate's entity in advance; In conjunction with specific indexes, generate the alarm association relation, this method will be the basis with the resource correlation model; But the resource correlation model still will be provided by the veteran expert of O&M, therefore also has the above-mentioned inaccurate problem of determining of related warning information.
Summary of the invention
The embodiment of the invention provides a kind of definite method and device of related warning information, in order to solve the lower problem of accuracy of the definite related warning information that exists in the prior art.
Embodiment of the invention technical scheme is following:
A kind of definite method of related warning information, the method comprising the steps of: the warning information that obtains generation in the stipulated time length; According to the warning information that obtains, confirm to satisfy pre-conditioned warning information binomial collection, wherein each warning information binomial is concentrated and is comprised preceding paragraph warning information and consequent warning information; To each warning information binomial collection of determining, confirm under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information; Be not less than the warning information binomial collection of first defined threshold to the conditional probability of determining, consequent warning information confirmed as the related warning information of preceding paragraph warning information.
A kind of definite device of related warning information comprises: the first acquisition unit is used to obtain the interior warning information that produces of stipulated time length; First confirms the unit, is used for the warning information according to the acquisition of the first acquisition unit, confirms to satisfy pre-conditioned warning information binomial collection, and wherein each warning information binomial is concentrated and comprised preceding paragraph warning information and consequent warning information; Second confirms the unit, is used for being directed against first and confirms each warning information binomial collection that the unit is determined, and confirms under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information; The 3rd confirms the unit, is used for being not less than to the conditional probability that second definite unit is determined the warning information binomial collection of first defined threshold, consequent warning information is confirmed as the related warning information of preceding paragraph warning information.
In the embodiment of the invention technical scheme, at first obtain the warning information of generation in the stipulated time length, then according to the warning information that obtains; Confirm to satisfy pre-conditioned warning information binomial collection, wherein each warning information binomial is concentrated and is comprised preceding paragraph warning information and consequent warning information, to each warning information binomial collection of determining; Confirm under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information, be not less than the warning information binomial collection of first defined threshold to the conditional probability of determining; Consequent warning information is confirmed as the related warning information of preceding paragraph warning information; Therefore, in the technical scheme that the embodiment of the invention provides, no longer be to confirm related warning information according to expert's O&M knowledge; But according under the condition that produces a certain warning information; Produce the probability of another one warning information, confirm whether two warning information are related, thereby improved the accuracy of definite related warning information effectively.
Description of drawings
Fig. 1 is in the embodiment of the invention, definite method flow sketch map of related warning information;
Fig. 2 is in the embodiment of the invention, the concrete realization flow sketch map of definite method of related warning information;
Fig. 3 is in the embodiment of the invention, definite apparatus structure sketch map of related warning information.
Embodiment
At length set forth to the main realization principle of embodiment of the invention technical scheme, embodiment and to the beneficial effect that should be able to reach below in conjunction with each accompanying drawing.
As shown in Figure 1, be definite method flow diagram of related warning information in the embodiment of the invention, its concrete handling process is following:
When the network element device in network broke down, the equipment that produces warning information to the fault information data that meets alarm conditions, produced and sends warning information according to the preset alarm judgment rule.
The embodiment of the invention when confirming related warning information, can but confirm that this time span can be provided with in advance in the warning information that is not limited in some time spans, produce, for example be set to one day, a week, one month etc.
In the embodiment of the invention, confirm to satisfy pre-conditioned warning information binomial collection and comprise following four kinds of performances, be specially:
First kind of performance; Any two warning information by in the warning information that obtains are formed a warning information binomial collection; The warning information binomial collection of forming is and satisfies pre-conditioned warning information binomial collection, comprises warning information I in the warning information that for example obtains
1With warning information I
2, warning information I
1With warning information I
2Can form warning information binomial collection { I
1, I
2And { I
2, I
1;
Second kind of performance, preferably, in order to reduce the workload of confirming related warning information; Can concentrate at the warning information binomial of being made up of any two warning information, determine high frequency warning information binomial collection, high frequency warning information binomial collection is and satisfies pre-conditioned warning information binomial collection; According to the preset time interval, the afore mentioned rules time span is divided at least one sub-time length earlier, the wherein above-mentioned time interval can be provided with in advance; For example can be provided with according to the quantity of the warning information that produces in the afore mentioned rules time span, if quantity is bigger, then can with the time interval be provided with less; If quantity is less, then can with the time interval be provided with bigger, according to the warning information that obtains; Determine each candidate's high frequency warning information binomial collection, wherein each candidate's high frequency warning information binomial is concentrated and is comprised preceding paragraph warning information and consequent warning information, again to each candidate's high frequency warning information binomial collection; Determine first quantity of the sub-time length that produces preceding paragraph warning information and consequent warning information simultaneously; Select candidate's high frequency warning information binomial collection that first quantity is not less than second defined threshold, candidate's high frequency warning information binomial collection of selecting is high frequency warning information binomial collection, also for satisfying pre-conditioned warning information binomial collection; For example, candidate's high frequency warning information binomial collection { I
1, I
2And { I
3, I
4, produce I simultaneously
1And I
2The quantity of sub-time length be 1, produce I simultaneously
3And I
4The quantity of sub-time length be 3, and the second preset defined threshold is 2, then { I
3, I
4Be high frequency warning information binomial collection, also for satisfying pre-conditioned warning information binomial collection;
The third performance, preferably, in order to reduce the workload of confirming related warning information; Can earlier in a large amount of warning information that obtain, select some warning information, and then according to confirming to satisfy pre-conditioned warning information binomial collection in the warning information of selecting; Earlier according to the preset time interval; The afore mentioned rules time span is divided at least one sub-time length, confirms second quantity of the sub-time length of each warning information of generation, select the warning information that second quantity of determining is not less than the 3rd defined threshold then; The warning information of selecting is confirmed as the high frequency warning information; Form a warning information binomial collection by any two high frequency warning information, the warning information binomial collection of composition is and satisfies pre-conditioned warning information binomial collection, for example warning information I
1, I
2, I
3, I
4In, produce warning information I
1The quantity of sub-time length be 1, produce warning information I
2The quantity of sub-time length be 1, produce warning information I
3The quantity of sub-time length be 2, produce warning information I
4The quantity of sub-time length be 2, and the 3rd defined threshold is 2, then warning information I
3With warning information I
4Be the high frequency warning information, therefore satisfying pre-conditioned warning information binomial collection is { I
3, I
4And { I
4, I
3;
The 4th kind of performance, more preferably, in order to reduce the workload of confirming related warning information; Can earlier in a large amount of warning information that obtain, select some warning information, concentrate at the warning information binomial of forming by any two warning information of selecting then; Determine high frequency warning information binomial collection; High frequency warning information binomial collection is and satisfies pre-conditioned warning information binomial collection, according to the preset time interval, the afore mentioned rules time span is divided at least one sub-time length earlier; Confirm second quantity of the sub-time length of each warning information of generation; Select the warning information that second quantity of determining is not less than the 3rd defined threshold then, the warning information of selecting is confirmed as the high frequency warning information, form candidate's high frequency warning information binomial collection by any two high frequency warning information; To each candidate's high frequency warning information binomial collection; Determine first quantity of the sub-time length that produces preceding paragraph warning information and consequent warning information simultaneously, select candidate's high frequency warning information binomial collection that first quantity is not less than second defined threshold, candidate's high frequency warning information binomial collection of selecting is high frequency warning information binomial collection; Also be to satisfy pre-conditioned warning information binomial collection, the warning information I that is for example obtaining
1, I
2, I
3, I
4In, determining the high frequency warning information is I
3And I
4, candidate's high frequency warning information binomial collection of composition is { I
3, I
4And { I
4, I
4, produce I simultaneously
3And I
4The quantity of sub-time length be 3, and the second preset defined threshold is 2, then { I
3, I
4And { I
4, I
4Be high frequency warning information binomial collection, also for satisfying pre-conditioned warning information binomial collection.
In the embodiment of the invention, under the condition that produces the preceding paragraph warning information, produce the conditional probability of consequent warning information, also can be called the confidence level between preceding paragraph warning information and the consequent warning information, concrete definite method is following:
At first according to the preset time interval; The afore mentioned rules time span is divided at least one sub-time length, definite the 3rd quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously, definite the 4th quantity that produces the sub-time length of preceding paragraph warning information; The 3rd quantity that to determine then and the ratio of the 4th quantity; Confirm as under the condition that produces the preceding paragraph warning information, produce the conditional probability of consequent warning information, i.e. confidence level between preceding paragraph warning information and the consequent warning information; For example, to satisfying pre-conditioned warning information binomial collection { I
1, I
2, produce preceding paragraph warning information I simultaneously
1With consequent warning information I
2The quantity of sub-time length be 2, produce preceding paragraph warning information I
1The quantity of sub-time length be 2, so preceding paragraph warning information I
1With consequent warning information I
2Between confidence level be 2/2=100%, promptly producing preceding paragraph warning information I
1Condition under, produce consequent warning information I
2Conditional probability be 100%.
If first defined threshold that is provided with in advance is 70%, and satisfies pre-conditioned warning information binomial collection { I
1, I
2In confidence level between preceding paragraph warning information and the consequent warning information be 100%, so consequent warning information I
2Can confirm as preceding paragraph warning information I
1Related warning information.
Can determine the warning information that is mutually related according to the method described above.When the follow-up warning information of handling to need carries out analyzing and processing; Can determine the related warning information of this warning information earlier; And then this warning information carried out association process with the related warning information of determining, thereby can find the basic reason of fault rapidly, the normal operation of restoring communication network in time; Wherein after determining the related warning information of this warning information, can but be not limited to that the related warning information with this of this warning information is carried out merger and show and operation such as shielding grade in batches.
Can know by above-mentioned processing procedure, in the embodiment of the invention technical scheme, at first obtain the warning information that produces in the stipulated time length; According to the warning information that obtains, confirm to satisfy pre-conditioned warning information binomial collection then, wherein each warning information binomial is concentrated and is comprised preceding paragraph warning information and consequent warning information; To each warning information binomial collection of determining, confirm under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information; Be not less than the warning information binomial collection of first defined threshold to the conditional probability of determining, consequent warning information is confirmed as the related warning information of preceding paragraph warning information, therefore; In the technical scheme that the embodiment of the invention provides; No longer be to confirm related warning information, but, produce the probability of another one warning information according under the condition that produces a certain warning information according to expert's O&M knowledge; Confirm whether two warning information are related, thereby improved the accuracy of definite related warning information effectively.
Provide more concrete execution mode below.
As shown in Figure 2, be the concrete realization flow figure of definite method of related warning information in the embodiment of the invention, its concrete processing procedure is following:
Step 21 obtains interior all warning information that produce of stipulated time length Δ T, and the warning information that wherein produces in the stipulated time length Δ T comprises I
1, I
2, I
3, I
4And I
5
Step 22 in the time interval according to preset, is divided into a plurality of sub-time length Δ T with stipulated time length Δ T
1, Δ T
1, Δ T
2, Δ T
3With Δ T
4
Step 23 is confirmed the warning information that produces in each sub-time length, can but be not limited to as shown in table 1:
Table 1:
| Sub-time length | Warning information |
| ΔT 1 | I 1、I 4 |
| ΔT 2 | I 2、I 3、I 4 |
| ΔT 3 | I 5 |
| ΔT 4 | I 3、I 4、I 5 |
Step 24 to each warning information, confirm to produce the quantity of the sub-time length of this warning information, i.e. the support of this warning information, can but be not limited to as shown in table 2:
Table 2:
| Warning information | Support |
| I 1 | 1 |
| I 2 | 1 |
| I 3 | 2 |
| I 4 | 3 |
| I 5 | 2 |
Step 25 is not less than 2 warning information with the support of determining, and confirms as the high frequency warning information, i.e. I
3, I
4And I
5Be the high frequency warning information;
Step 26 according to the high frequency warning information of determining, is confirmed candidate's high frequency warning information binomial collection, according to high frequency warning information I
3, I
4And I
5, can determine candidate's high frequency warning information binomial collection { I
3, I
4, { I
4, I
3, { I
3, I
5, { I
5, I
3, { I
4, I
5, { I
5, I
4;
Step 27 to each candidate's high frequency warning information binomial collection, confirms to produce simultaneously the quantity of the sub-time length of preceding paragraph warning information and consequent warning information, i.e. the support of this candidate's high frequency warning information binomial collection, can but be not limited to as shown in table 3:
Table 3:
| Candidate's high frequency warning information binomial collection | Support |
| {I 3，I 4} | 2 |
| {I 4，I 3} | 2 |
| {I 3，I 5} | 1 |
| {I 5，I 3} | 1 |
| {I 4，I 5} | 1 |
| {I 5，I 4} | 1 |
Step 28 is not less than candidate's high frequency warning information binomial collection of 2 with the support of determining, and confirms as high frequency warning information binomial collection, i.e. { I
3, I
4And { I
4, I
3It is high frequency warning information binomial collection;
Step 29 to each high frequency warning information binomial collection, is confirmed the confidence level between preceding paragraph warning information and the consequent warning information, can but be not limited to as shown in table 4:
Table 4:
| High frequency warning information binomial collection | Confidence level |
| {I 3，I 4} | 100％ |
| {I 4，I 3} | 66.6％ |
Step 210 is not less than 70% high frequency warning information binomial collection to confidence level, and consequent warning information is confirmed as the related warning information of preceding paragraph warning information, promptly consequent warning information I
4Be preceding paragraph warning information I
3Related warning information.
Accordingly, the embodiment of the invention also provides a kind of definite device of related warning information, and is as shown in Figure 3, comprises 31, first 32, second definite unit 33, definite unit and the 3rd definite unit 34, the first acquisition unit, wherein:
The first acquisition unit 31 is used to obtain the interior warning information that produces of stipulated time length;
First confirms unit 32, is used for the warning information according to 31 acquisitions of the first acquisition unit, confirms to satisfy pre-conditioned warning information binomial collection, and wherein each warning information binomial is concentrated and comprised preceding paragraph warning information and consequent warning information;
Second confirms unit 33, is used for being directed against first and confirms each warning information binomial collection that unit 32 is determined, and confirms under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information;
The 3rd confirms unit 34, is used for being not less than to the conditional probability that second definite unit 33 is determined the warning information binomial collection of first defined threshold, consequent warning information is confirmed as the related warning information of preceding paragraph warning information.
Preferably, first confirms that unit 32 comprises that specifically first divides subelement, first definite subelement, second definite subelement and the 3rd definite subelement, wherein:
First divides subelement, is used for according to the preset time interval said stipulated time length being divided at least one sub-time length;
First confirms subelement, is used for the warning information according to 31 acquisitions of the first acquisition unit, confirms candidate's high frequency warning information binomial collection, and wherein each candidate's high frequency warning information binomial is concentrated and comprised preceding paragraph warning information and consequent warning information;
Second confirms subelement, is used for confirming each candidate's high frequency warning information binomial collection that subelement is determined, definite first quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously to first;
The 3rd confirms subelement, is used for first quantity that second definite subelement is determined is not less than candidate's high frequency warning information binomial collection of second defined threshold, confirms as and satisfies pre-conditioned warning information binomial collection.
More preferably, first confirms that subelement specifically comprises first determination module, second determination module and the 3rd determination module, wherein:
First determination module is used for each warning information to 31 acquisitions of the first acquisition unit, confirms second quantity of the sub-time length of this warning information of generation;
Second determination module is used for second quantity that first determination module is determined is not less than the warning information of the 3rd defined threshold, confirms as the high frequency warning information;
The 3rd determination module is used for warning information binomial collection that the high frequency warning information of being determined by second determination module is formed, confirms as candidate's high frequency warning information binomial collection.
Preferably, second confirms that unit 33 comprises that specifically second divides subelement, the 4th definite subelement, the 5th definite subelement and the 6th definite subelement, wherein:
Second divides subelement, is used for according to the preset time interval said stipulated time length being divided at least one sub-time length;
The 4th confirms subelement, is used for confirming each warning information binomial collection that unit 32 is determined, definite the 3rd quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously to first;
The 5th confirms subelement, is used for confirming each warning information binomial collection that unit 32 is determined, definite the 4th quantity that produces the sub-time length of preceding paragraph warning information to first;
The 6th confirms subelement; Be used for confirming each warning information binomial collection that unit 32 is determined to first; With the 4th confirm the 4th quantity that the 3rd quantity that subelement determines and the 5th definite subelement are determined ratio; Confirm as under the condition that produces the preceding paragraph warning information, produce the conditional probability of consequent warning information.
Preferably, also comprise the second acquisition unit, the 4th definite unit and association process unit, wherein:
The second acquisition unit is used to obtain the warning information that need are handled;
The 4th confirms the unit, is used for the related warning information of the warning information of definite second acquisition unit acquisition;
The association process unit, the warning information that the need that are used for that the second acquisition unit is obtained are handled and the 4th confirms that the related warning information that the unit is determined carries out association process.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, belong within the scope of claim of the present invention and equivalent technologies thereof if of the present invention these are revised with modification, then the present invention also is intended to comprise these changes and modification interior.
Claims (10)
1. definite method of a related warning information is characterized in that, comprising:
Obtain the warning information of generation in the stipulated time length;
According to the warning information that obtains, confirm to satisfy pre-conditioned warning information binomial collection, wherein each warning information binomial is concentrated and is comprised preceding paragraph warning information and consequent warning information;
To each warning information binomial collection of determining, confirm under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information;
Be not less than the warning information binomial collection of first defined threshold to the conditional probability of determining, consequent warning information confirmed as the related warning information of preceding paragraph warning information.
2. definite method of related warning information as claimed in claim 1 is characterized in that, confirms to satisfy pre-conditioned warning information binomial collection, specifically comprises:
In the time interval according to preset, said stipulated time length is divided at least one sub-time length;
According to the warning information that obtains, confirm candidate's high frequency warning information binomial collection, wherein each candidate's high frequency warning information binomial is concentrated and is comprised preceding paragraph warning information and consequent warning information;
To each candidate's high frequency warning information binomial collection, definite first quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously;
First quantity of determining is not less than candidate's high frequency warning information binomial collection of second defined threshold, confirms as and satisfy pre-conditioned warning information binomial collection.
3. definite method of related warning information as claimed in claim 2 is characterized in that, confirms candidate's high frequency warning information binomial collection, specifically comprises:
To each warning information that obtains, confirm second quantity of the sub-time length of this warning information of generation;
Second quantity of determining is not less than the warning information of the 3rd defined threshold, confirms as the high frequency warning information;
The warning information binomial collection that to be made up of the high frequency warning information is confirmed as candidate's high frequency warning information binomial collection.
4. definite method of related warning information as claimed in claim 1 is characterized in that, confirms under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information, specifically comprises:
In the time interval according to preset, said stipulated time length is divided at least one sub-time length;
Definite the 3rd quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously;
Confirm the 4th quantity of the sub-time length of generation preceding paragraph warning information;
With the ratio of the 3rd quantity of determining and the 4th quantity, confirm as under the condition that produces the preceding paragraph warning information, produce the conditional probability of consequent warning information.
5. definite method of related warning information as claimed in claim 1 is characterized in that, also comprises:
Need to obtain the warning information of processing;
Determine the related warning information of this warning information;
The warning information that the need that obtain are handled carries out association process with the related warning information of determining.
6. definite device of a related warning information is characterized in that, comprising:
The first acquisition unit is used to obtain the interior warning information that produces of stipulated time length;
First confirms the unit, is used for the warning information according to the acquisition of the first acquisition unit, confirms to satisfy pre-conditioned warning information binomial collection, and wherein each warning information binomial is concentrated and comprised preceding paragraph warning information and consequent warning information;
Second confirms the unit, is used for being directed against first and confirms each warning information binomial collection that the unit is determined, and confirms under the condition that produces the preceding paragraph warning information, to produce the conditional probability of consequent warning information;
The 3rd confirms the unit, is used for being not less than to the conditional probability that second definite unit is determined the warning information binomial collection of first defined threshold, consequent warning information is confirmed as the related warning information of preceding paragraph warning information.
7. definite device of related warning information as claimed in claim 6 is characterized in that, first confirms that the unit specifically comprises:
First divides subelement, is used for according to the preset time interval said stipulated time length being divided at least one sub-time length;
First confirms subelement, is used for the warning information according to the acquisition of the first acquisition unit, confirms candidate's high frequency warning information binomial collection, and wherein each candidate's high frequency warning information binomial is concentrated and comprised preceding paragraph warning information and consequent warning information;
Second confirms subelement, is used for confirming each candidate's high frequency warning information binomial collection that subelement is determined, definite first quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously to first;
The 3rd confirms subelement, is used for first quantity that second definite subelement is determined is not less than candidate's high frequency warning information binomial collection of second defined threshold, confirms as and satisfies pre-conditioned warning information binomial collection.
8. definite device of related warning information as claimed in claim 7 is characterized in that, first confirms that subelement specifically comprises:
First determination module is used for each warning information to the acquisition of the first acquisition unit, confirms second quantity of the sub-time length of this warning information of generation;
Second determination module is used for second quantity that first determination module is determined is not less than the warning information of the 3rd defined threshold, confirms as the high frequency warning information;
The 3rd determination module is used for warning information binomial collection that the high frequency warning information of being determined by second determination module is formed, confirms as candidate's high frequency warning information binomial collection.
9. definite device of related warning information as claimed in claim 6 is characterized in that, second confirms that the unit specifically comprises:
Second divides subelement, is used for according to the preset time interval said stipulated time length being divided at least one sub-time length;
The 4th confirms subelement, is used for confirming each warning information binomial collection that the unit is determined, definite the 3rd quantity that produces the sub-time length of preceding paragraph warning information and consequent warning information simultaneously to first;
The 5th confirms subelement, is used for confirming each warning information binomial collection that the unit is determined, definite the 4th quantity that produces the sub-time length of preceding paragraph warning information to first;
The 6th confirms subelement; Be used for confirming each warning information binomial collection that the unit is determined to first; With the 4th confirm the 4th quantity that the 3rd quantity that subelement determines and the 5th definite subelement are determined ratio; Confirm as under the condition that produces the preceding paragraph warning information, produce the conditional probability of consequent warning information.
10. definite device of related warning information as claimed in claim 6 is characterized in that, also comprises:
The second acquisition unit is used to obtain the warning information that need are handled;
The 4th confirms the unit, is used for the related warning information of the warning information of definite second acquisition unit acquisition;
The association process unit, the warning information that the need that are used for that the second acquisition unit is obtained are handled and the 4th confirms that the related warning information that the unit is determined carries out association process.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201010574360.4A CN102487334B (en) | 2010-12-06 | 2010-12-06 | Method and device for determining associated alarm information |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201010574360.4A CN102487334B (en) | 2010-12-06 | 2010-12-06 | Method and device for determining associated alarm information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102487334A true CN102487334A (en) | 2012-06-06 |
| CN102487334B CN102487334B (en) | 2014-12-10 |
Family
ID=46152790
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201010574360.4A Active CN102487334B (en) | 2010-12-06 | 2010-12-06 | Method and device for determining associated alarm information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102487334B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107690774A (en) * | 2016-12-28 | 2018-02-13 | 深圳中兴力维技术有限公司 | Alert processing method and device |
| CN109687999A (en) * | 2018-12-11 | 2019-04-26 | 山东中创软件商用中间件股份有限公司 | A kind of association analysis method of alarm failure, device and equipment |
| CN112887310A (en) * | 2021-01-27 | 2021-06-01 | 华南理工大学 | Method, device and medium for improving network attack risk assessment efficiency |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101188523A (en) * | 2007-12-10 | 2008-05-28 | 中兴通讯股份有限公司 | Generation method and generation system of alarm association rules |
| EP1981211A1 (en) * | 2006-01-23 | 2008-10-15 | Huawei Technologies Co., Ltd. | A method for processing the tandem connection monitoring failure dependency of different levels and an equipment thereof |
| CN101808015A (en) * | 2009-02-18 | 2010-08-18 | 普天信息技术研究院有限公司 | Analytical method and device for relevance of alarm information |
-
2010
- 2010-12-06 CN CN201010574360.4A patent/CN102487334B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP1981211A1 (en) * | 2006-01-23 | 2008-10-15 | Huawei Technologies Co., Ltd. | A method for processing the tandem connection monitoring failure dependency of different levels and an equipment thereof |
| CN101188523A (en) * | 2007-12-10 | 2008-05-28 | 中兴通讯股份有限公司 | Generation method and generation system of alarm association rules |
| CN101808015A (en) * | 2009-02-18 | 2010-08-18 | 普天信息技术研究院有限公司 | Analytical method and device for relevance of alarm information |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107690774A (en) * | 2016-12-28 | 2018-02-13 | 深圳中兴力维技术有限公司 | Alert processing method and device |
| WO2018119776A1 (en) * | 2016-12-28 | 2018-07-05 | 深圳中兴力维技术有限公司 | Alarm processing method and device |
| CN107690774B (en) * | 2016-12-28 | 2019-01-15 | 深圳力维智联技术有限公司 | Alert processing method and device |
| CN109687999A (en) * | 2018-12-11 | 2019-04-26 | 山东中创软件商用中间件股份有限公司 | A kind of association analysis method of alarm failure, device and equipment |
| CN112887310A (en) * | 2021-01-27 | 2021-06-01 | 华南理工大学 | Method, device and medium for improving network attack risk assessment efficiency |
| CN112887310B (en) * | 2021-01-27 | 2022-09-20 | 华南理工大学 | Method, device and medium for improving network attack risk assessment efficiency |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102487334B (en) | 2014-12-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10680875B2 (en) | Automatic customer complaint resolution | |
| CN102340415B (en) | Server cluster system and monitoring method thereof | |
| CN102790699B (en) | A kind of analysis method and device of network service quality | |
| CN106454437B (en) | A kind of streaming media service rate prediction method and device | |
| US8972308B2 (en) | Combining multivariate time-series prediction with motif discovery | |
| CN106210124B (en) | A kind of unified cloud data center monitoring system | |
| CN104820663A (en) | Method and device for discovering low performance structural query language (SQL) statements, and method and device for forecasting SQL statement performance | |
| CN103279895A (en) | Method and system for monitoring power failure | |
| CN102546205B (en) | Method and device for generating fault relation and determining fault | |
| CN102487334B (en) | Method and device for determining associated alarm information | |
| CN103248522B (en) | A kind of report method of performance data and device | |
| CN106575254B (en) | Log analysis device, Log Analysis System, log analysis method and storage medium | |
| CN104657437A (en) | Monitoring method and monitoring device for promotion status data | |
| CN104320285A (en) | Website running status monitoring method and device | |
| CN104268201A (en) | GIS (Geographic Information System) platform based spatial massive multivariate data unified index method | |
| CN108777870B (en) | LTE high-load cell discrimination method and system based on Pearson coefficient | |
| CN110245120B (en) | Stream type computing system and log data processing method thereof | |
| CN111082956B (en) | Event stream processing method, electronic device and readable storage medium | |
| CN103279816A (en) | Active window-based terminal work efficiency statistical method and system | |
| CN106161058B (en) | Alarm classification method and device | |
| CN101988941B (en) | Method, device and system for monitoring power quality | |
| CN111314177A (en) | Work and rest time period identification method based on wireless signals and related device | |
| CN109102083A (en) | A kind of the quantity configuration method and relevant device of maintenance of equipment | |
| CN104394539A (en) | Configurable network element capacity evaluation method | |
| CN114490091A (en) | Method and device for monitoring rule engine performance in industrial data acquisition management system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |