Summary of the invention
For solving the problems of the technologies described above, the embodiment of the invention provides a kind of telecommunications network alarm method and system, and to realize the taking all factors into consideration purpose that full telecommunications network relation is alarmed, technical scheme is as follows:
A kind of telecommunications network alarm method, be applied in the telecommunications network warning system, described telecommunications network warning system is connected with telecommunications network five big professional systems respectively, described telecommunications network five big professional systems comprise: exchange professional system, data professional system, wireless professional system, transmission professional system and platform professional system, and described method comprises:
Business is monitored, and obtaining in the described telecommunications network five big professional systems should the related relevant service data of business;
Judge whether described service data satisfies the alarm conditions that set in advance, if then carry out alarming processing based on the influence relation between the relation of the influence between business in the telecommunications network five big professional system models of setting up in advance and professional each link.
Preferably, described telecommunications network five big professional system models comprise: business model, index model, alarm model and configuration data model,
Wherein, described configuration data model is used for depositing NE type information, network element grouping information, network element attribute information and the network element relation information of telecommunications network five big each network element of professional system;
Described index model is for the performance data of depositing telecommunications network five big each network element of professional system;
Described alarm model is for the alarm data of depositing telecommunications network five big each network element of professional system;
Described business model comprises: business process model and business support model,
Described business process model, each link and the flow process between each link that are used for the storage service flow process concern;
Described business support model is used for storage telecommunications network infrastructure, module and application to the supporting relation of business.
Preferably, described business is monitored, is obtained in the described telecommunications network five big professional systems step of should business related relevant service data, comprising:
Use thread pool that business is monitored, the mode by each thread in the poll thread pool obtains should the related relevant service data of business in the described telecommunications network five big professional systems.
Preferably, describedly carry out the step of alarming processing based on the influence relation between the relation of the influence between business in the telecommunications network five big professional system models of setting up in advance and professional each link, comprising:
Determine to satisfy link under the service data of the alarm conditions that set in advance and the business under this link, to the processing of reporting to the police of this link and this business;
According to the relation of the influence between each link in this business, determine affected each link in this business, affected each link in this business is carried out early warning handle;
According to the influence relation of this business to other business in the described telecommunications network five big professional system models, determine affected each business, affected each business is carried out early warning handle.
Preferably, describedly determine affected each link in this business according to the influence between each link relation in this business, affected each link in this business carried out the step that early warning handles comprise:
By warning root positioning analysis the fault point is positioned;
Determine to have other links of incidence relation with place, fault point link by association analysis;
Analyze localization of faults place link to the degree of influence of these other links according to alarm degree of influence;
Carrying out early warning according to described degree of influence handles.
Preferably, described influence to other business in the described telecommunications network five big professional system models concerns according to this business, determines affected each business, and affected each business is carried out the step that early warning is handled, and comprising:
By warning root positioning analysis the fault point is positioned;
Determine to have other business of incidence relation with place, fault point business by association analysis;
Analyze localization of faults place business to the degree of influence of these other business according to alarm degree of influence;
Carrying out early warning according to described degree of influence handles.
A kind of telecommunications network warning system, described telecommunications network warning system is connected with telecommunications network five big professional systems respectively, described telecommunications network five big professional systems comprise: exchange professional system, data professional system, wireless professional system, transmission professional system and platform professional system, described telecommunications network warning system comprises: monitoring unit, judging unit and Alarm Unit
Described monitoring unit is used for business is monitored, and obtaining in the described telecommunications network five big professional systems should the related relevant service data of business;
Described judging unit is used for judging whether described service data satisfies the alarm conditions that set in advance, if then trigger described Alarm Unit;
Described Alarm Unit is used for carrying out alarming processing based on the influence relation between the relation of the influence between the telecommunications network five big professional system model business of setting up in advance and professional each link.
Preferably, described telecommunications network five big professional system models comprise: business model, index model, alarm model and configuration data model,
Wherein, described configuration data model is used for depositing NE type information, network element grouping information, network element attribute information and the network element relation information of telecommunications network five big each network element of professional system;
Described index model is for the performance data of depositing telecommunications network five big each network element of professional system;
Described alarm model is for the alarm data of depositing telecommunications network five big each network element of professional system;
Described business model comprises: business process model and business support model,
Described business process model, each link and the flow process between each link that are used for the storage service flow process concern;
Described business support model is used for storage telecommunications network infrastructure, module and application to the supporting relation of business.
Preferably, described monitoring unit comprises: the thread monitor subelement, and be used for to use thread pool that business is monitored, the mode by each thread in the poll thread pool obtains should the related relevant service data of business in the described telecommunications network five big professional systems.
Preferably, described Alarm Unit comprises: warning subelement, link early warning subelement and professional early warning subelement,
Described warning subelement be used for to determine satisfies link under the service data of the alarm conditions that set in advance and the business under this link, to the processing of reporting to the police of this link and this business;
Described link early warning subelement is used for determining affected each link in this business according to the relation of the influence between each link of this business, affected each link in this business is carried out early warning handle;
Described professional early warning subelement is used for determining affected each business according to the influence relation of this business to described telecommunications network five big professional other business of system model, affected each business is carried out early warning handle.
By using above technical scheme, a kind of telecommunications network alarm method and system that the embodiment of the invention provides, unification is monitored the business in the five big professional systems, and carries out alarming processing based on the influence relation between the relation of the influence between business in the telecommunications network five big professional system models of setting up in advance and professional each link.The present invention can use the whole network warning system that whole communication network is carried out alarming processing, thereby has avoided occurring in the network phenomenon of a plurality of warning systems.The present invention has not only saved system resource, and the relation that can take all factors into consideration between the whole telecommunications network data alarms, and has improved the effectiveness of alarm.Owing to alarm according to influence relation, therefore can carry out early warning to the place link that goes wrong, professional other links and the business that has influence on, further improved the effectiveness of alarm, also perfect warning information.
Embodiment
In order to make those skilled in the art person understand technical scheme among the present invention better, below in conjunction with the accompanying drawing in the embodiment of the invention, technical scheme in the embodiment of the invention is clearly and completely described, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills should belong to the scope of protection of the invention not making the every other embodiment that obtains under the creative work prerequisite.
As shown in Figure 1, a kind of telecommunications network alarm method that the embodiment of the invention provides, be applied in the telecommunications network warning system, described telecommunications network warning system is connected with telecommunications network five big professional systems respectively, described telecommunications network five big professional systems comprise: exchange professional system, data professional system, wireless professional system, transmission professional system and platform professional system, and described method can comprise:
S100, business is monitored, obtaining in the described telecommunications network five big professional systems should the related relevant service data of business;
Wherein, described telecommunications network five big professional system models comprise: business model, index model, alarm model and configuration data model,
Wherein, described configuration data model is used for depositing NE type information, network element grouping information, network element attribute information and the network element relation information of telecommunications network five big each network element of professional system;
Described index model is for the performance data of depositing telecommunications network five big each network element of professional system;
Described alarm model is for the alarm data of depositing telecommunications network five big each network element of professional system;
Described business model comprises: business process model and business support model,
Described business process model, each link and the flow process between each link that are used for the storage service flow process concern;
Described business support model is used for storage telecommunications network infrastructure, module and application to the supporting relation of business.
Wherein, service data can comprise: infrastructure object data, application software object data and business object data.In actual applications, may need from a large amount of different equipment, to gather service data, and the data-interface mode that different equipment is supported may be not quite similar.Therefore, in actual applications, the interface of image data of the present invention can be set to support the form of several data interface, then the data-interface mode of using this object to support according to acquisition target.Concrete, the interface of image data of the present invention can be set to support the acquisition interface mode of several main flows such as CORBA, MML, Socket, SNMP, SHELL, FTP, SQL, MQ, Rmi.
Wherein, CORBA(Common Object Request Broker Architecture is Common Object Request Broker Architecture, is the object-oriented application program system standard by a kind of standard of OMG tissue formulation.
The MML:MML interface refers to man-machine access interface, in the telecommunication path business, and the business system interface in the support system that also refers to do business.
The Socket:Socket interface is the API of TCP/IP network, the Socket interface definition many functions or routine, the programmer can develop with them.
SNMP:Simple Network Management Protocol, Simple Network Management Protocol.
Shell: command analysis device.
FTP: file transfer protocol (FTP).
SQL: data base query language.
MQ: a kind of communication means of application program application programs, application program links them by writing and retrieving into communicating by letter at application's data (message) of lining up and need not special-purpose connection.
RMI: RMI.
Object for real time data acquisition is had relatively high expectations can directly arrange data acquisition module, to carry out the probe collection in by acquisition target.
S200, judge that whether described service data satisfies the alarm conditions that set in advance, if, execution in step S300 then;
In other embodiments of the invention, when described service data does not meet the alarm conditions that set in advance, can also continue execution in step S200, in this case, step S100 continues or periodically execution.
Wherein, alarm conditions can comprise: concern determined alarm conditions according to the influence between the different service datas.Judge whether described service data meets the preset alarm condition and can comprise: search at least one alarm conditions that matches according to the type of service data, judge whether described service data meets the alarm conditions that find.Because it is multiple that service data has, and also be not quite similar at the set alarm conditions of different service datas, therefore can the alarm conditions that service data is corresponding with it compare.
S300, carry out alarming processing based on the influence relation between the relation of the influence between business in the telecommunications network five big professional system models of setting up in advance and professional each link.
The telecommunications network five big professional system models of Jian Liing can be by choosing key object and key index thereof in the whole network in advance, sets up related between object and the index, between each object then, to set up telecommunications network five big professional system models.Wherein, key object can comprise: each professional resource occupying situation, hardware handles ability, business development situation, marketing activity situation and business demand change etc.Wherein, the preset alarm condition can be set up different alarm conditions at different objects respectively for a plurality of.As to the resource occupying situation, its alarm conditions can for: network traffics are not less than first threshold, then when certain professional network traffics is not less than first threshold, determine that this specialized network resource occupation is too high, may impact other professional network traffics, so alarm.
Certainly, in other embodiments of the invention, different alarm grades can also be set different alarm conditions, concrete, can be to some important object and the higher alarm grade of target setting thereof, to not too important object and the lower alarm grade of target setting thereof.Also can divide according to the system platform maintenance echelon, also can divide in conjunction with the scope that influences the user, also can need divide in conjunction with business development.
For the association between related and each object between each index of object, can judge incidence relation between them according to actual conditions, incidence relation can comprise: comprise, side by side, quote, derivation etc.
The mode of alarm can adopt the mode of sound, image or their combination to alarm for multiple.Concrete, the present invention can adopt the form of unified view, alarms with graph mode.The user can see needed data intuitively from chart like this.In other embodiments of the invention, the data in the predetermined amount of time all can be carried out chart and show that the user can see the development process of the state of affairs that data embody intuitively like this.
What need explanation a bit is that alarm conditions can adopt the mode of predetermined threshold value.In actual applications, this threshold value can be static, also can be dynamic change.Static threshold is readily appreciated that, repeats no more.A kind of mode of dynamic threshold is: according to the difference of time period, according to the size of preset rules modulation theresholds.For example: generally speaking, 10 o'clock to 22 o'clock is the more stages of network traffics, and all the other time periods are lower stages of network traffics, so just can set one with time dependent threshold value according to these two different stages.
Certainly, the threshold value that uses among the above embodiment can be real-time change.Concrete, can calculate the threshold value that makes new advances at the business of continuous variation.As: choose achievement data in the cycle according to the business activity cycle, calculate the threshold value that makes new advances by computational methods such as averaging method, weighted mean methods.Can certainly choose the historical achievement data of part in the cycle according to the business activity cycle, select different data predictions and fitting algorithm (as: regression model, moving average model(MA model), mixed model etc.) for use, the index value that prediction obtains is as threshold value.
In other embodiments of the invention, can also at first analyze in conjunction with the whole network model the service data of gathering, draw analysis result, judge whether to meet the preset alarm condition then, if, then alarm.Concrete, analytical method can comprise: unusual fluctuation analysis, trend analysis, comparative analysis, component analysis and chain rate are analyzed etc. on year-on-year basis.Below simple declaration is carried out in above five kinds of analyses:
Unusual fluctuation is analyzed: by the contrast to current business achievement data and historical achievement data or operational indicator prediction data, find the unusual of business activity, as the further starting point of analyzing of traffic issues.
Trend analysis: the historical data of key business index is carried out the trend analysis of specific period, the variation tendency of reflection key business link business activity quality.
Comparative analysis: realize to comparative analysis between Business Processing process key link index comparative analysis between related service processing procedure key link index.
Component analysis: in the operation flow, constituent relation (constituting as the overall average duration of the whole service process average duration by three Business Processing links) is arranged between some index, can find the composition of basically identical according to business experience, take place as the composition curve unusual, timely deployment analysis then.
Chain rate is analyzed on year-on-year basis: on year-on-year basis: in the different large periods to the key business index, the historical data of contemporaneity is analyzed, the change dynamics of reflection key business link business activity quality.Chain rate: the historical data of key business index is carried out the comparative analysis of adjacent periods, the change dynamics of reflection key business link business activity quality.
In actual applications, concrete alarm method can have multiple, as SMS notification, mail notification, alarm etc. by alarm equipment.
In other embodiments of the invention, can also comprise: use database that the service data that meets the preset alarm condition is stored.
The technical scheme that the embodiment of the invention provides can use the whole network warning system that whole communication network is carried out alarming processing, thereby has avoided occurring in the network phenomenon of a plurality of warning systems.The present invention has not only saved system resource, and the relation that can take all factors into consideration between the whole telecommunications network data alarms, and has improved the effectiveness of alarm.Owing to alarm according to influence relation, therefore can carry out early warning to the place link that goes wrong, professional other links and the business that has influence on, further improved the effectiveness of alarm, also perfect warning information.
As shown in Figure 2, in the another kind of telecommunications network alarm method that the embodiment of the invention provides, step S100 can comprise:
S110, use thread pool that business is monitored, the mode by each thread in the poll thread pool obtains should the related relevant service data of business in the described telecommunications network five big professional systems.
Thread pool is a kind of multithreading processing form, adds task to formation in the processing procedure, starts these tasks automatically then after creating thread.The thread pool thread all is background thread, and each thread uses the storehouse size of acquiescence, with the priority operation of acquiescence, and is in the multiple thread units.If certain thread is idle (as waiting for certain event) in Managed Code, then thread pool will insert another worker thread and make all processors maintenances busy.If it is busy that all thread pool threads all remain, but comprise the work of hang-up in the formation, then thread pool will be created another worker thread over time, but the number of thread surpasses maximum never.Surpassing peaked thread can line up, but they will wait until after other threads are finished and just start.
It will be appreciated by persons skilled in the art that and use thread pool that a plurality of business are monitored, can better manage, for example increase of monitored object, deletion, the modification of monitoring priority etc.
What need explanation a bit is, poll is a kind of handling process of obtaining the thread service data, and thread pool can obtain relevant service data to the thread in pond samsara successively, can so that the data of each thread can both in time be obtained.
As shown in Figure 3, in the another kind of telecommunications network alarm method that the embodiment of the invention provides, step S300 can comprise:
S310, determine to satisfy link under the service data of the alarm conditions that set in advance and the business under this link, to the processing of reporting to the police of this link and this business;
S320, according to the influence between each link relation in this business, determine affected each link in this business, affected each link in this business is carried out early warning handles;
S330, according to this business to the influence of other business in described telecommunications network five big professional system models relation, determine affected each business, affected each business is carried out early warning handles.
Describe below in conjunction with example:
As shown in Figure 4, certain product is made of three business of carrying out successively in the telecommunications network, be respectively first business 001, second professional the 002 and the 3rd business 003, wherein, second professional 002 needs to carry out after first professional 001 successful execution, and the 3rd business 003 need be carried out after second professional 002 successful execution.
Simultaneously, second business 002 is made up of five links, is respectively: first link 004, second link 005, the 3rd link 006, Fourth Ring joint 007 and five rings joint 008.Wherein, second link 005 needs just can obtain carrying out after first link, 004 successful execution, the 3rd link 006 obtains carrying out after second link, 005 successful execution and under first kind of situation, Fourth Ring joint 007 obtains carrying out after second link, 005 successful execution and under second kind of situation, first kind of situation and second kind of situation have comprised all possible situation, and 40%, the second kind of situation that first kind of situation occupies all situations occupies 60% of all situations; Five rings joint is carried out after saving 007 successful execution at the 3rd link 006 or Fourth Ring.
In the process that above-mentioned three business are monitored, problem has appearred in the service data of finding the 3rd link 006 of second business 002, therefore, can be at first at the processing of reporting to the police of the 3rd link 006 and second business 002, inform that the 3rd link 006 and second business 002 have been in the abnormal running state.
Simultaneously, because the 3rd link 006 only can have influence on five rings joint 008, only need that therefore five rings joint 008 is carried out early warning and handle, inform that five rings joint 008 will be in abnormal operating state.In addition, because the 3rd business 003 will be subjected to second professional 002 influence, therefore further can carry out early warning to the 3rd business 003 and handle, the 3rd business 003 of informing will be in abnormal operating state.
As shown in Figure 5, in the another kind of telecommunications network alarm method that the embodiment of the invention provides, step S320 can comprise:
S321, by warning root positioning analysis the fault point is positioned;
Be understandable that, after obtaining service data, just the fault point can be positioned according to the source of service data.Preferably, can be with localization of fault on corresponding underlying device, base station for example.
S322, determine to have other links of incidence relation with place, fault point link by association analysis;
Please refer to Fig. 4, when the underlying device of the 3rd link 006 goes wrong, because the 3rd link 006 and five rings joint 008 have incidence relation, can determine that therefore five rings joint 008 will be affected.Certainly, other links that share the underlying device that goes wrong with the 3rd link 006 also can be affected, and can determine by association analysis equally.
S323, according to the degree of influencing of alarm influence degree analysis localization of faults place link to these other links;
Still describing for example with shown in Figure 4, when the 3rd link 006 goes wrong, is 40% to the degree of influence of five rings joint 008.Certainly, the degree of influence in shown in Figure 4 the giving an example only calculates with probabilistic manner, in actual applications, can also determine degree of influence, for example influence time according to other modes.
S324, carry out early warning according to described degree of influence and handle.
Concrete, when carrying out early warning, can simultaneously influence degree be exported, for example export early warning information and be: the five rings is saved and will be in non operating state not keep this state 10 seconds after 5 seconds, possibility 40%, the combined influence degree is 2.
As shown in Figure 6, in the another kind of telecommunications network alarm method that the embodiment of the invention provides, step S330 can comprise:
S331, by warning root positioning analysis the fault point is positioned;
Be understandable that, after obtaining service data, just the fault point can be positioned according to the source of service data.Preferably, can be with localization of fault on corresponding underlying device, base station for example.
S332, determine to have other business of incidence relation with place, fault point business by association analysis;
Please refer to Fig. 4, when the underlying device of second business 002 goes wrong, because the 3rd professional 003 and second business 002 has incidence relation, therefore can determine that the 3rd business 003 will be affected.Certainly, also can be affected with second professional 002 other business that share the underlying device that goes wrong, can determine by association analysis equally.
S333, according to the degree of influencing of alarm influence degree analysis localization of faults place business to these other business;
In actual applications, can determine degree of influence according to factors such as the tightness degree between business or action times.
S334, carry out early warning according to described degree of influence and handle.
Fig. 5 and embodiment illustrated in fig. 6 can localization of faults place link, the degree of influence between professional and other links, the business, and carry out the early warning processing according to degree of influence, make that the early warning effect is more remarkable.
Corresponding to top method embodiment, the present invention also provides a kind of telecommunications network warning system.
A kind of telecommunications network warning system that the embodiment of the invention provides is connected with telecommunications network five big professional systems respectively, described telecommunications network five big professional systems comprise: exchange professional system, data professional system, wireless professional system, transmission professional system and platform professional system, as shown in Figure 7, described telecommunications network warning system can comprise: monitoring unit 100, judging unit 200 and Alarm Unit 300
Described monitoring unit 100 is used for business is monitored, and obtaining in the described telecommunications network five big professional systems should the related relevant service data of business;
Wherein, described telecommunications network five big professional system models comprise: business model, index model, alarm model and configuration data model,
Wherein, described configuration data model is used for depositing NE type information, network element grouping information, network element attribute information and the network element relation information of telecommunications network five big each network element of professional system;
Described index model is for the performance data of depositing telecommunications network five big each network element of professional system;
Described alarm model is for the alarm data of depositing telecommunications network five big each network element of professional system;
Described business model comprises: business process model and business support model,
Described business process model, each link and the flow process between each link that are used for the storage service flow process concern;
Described business support model is used for storage telecommunications network infrastructure, module and application to the supporting relation of business.
Wherein, service data can comprise: infrastructure object data, application software object data and business object data.In actual applications, may need from a large amount of different equipment, to gather service data, and the data-interface mode that different equipment is supported may be not quite similar.Therefore, in actual applications, the interface of image data of the present invention can be set to support the form of several data interface, then the data-interface mode of using this object to support according to acquisition target.Concrete, the interface of image data of the present invention can be set to support the acquisition interface mode of several main flows such as CORBA, MML, Socket, SNMP, SHELL, FTP, SQL, MQ, Rmi.
Object for real time data acquisition is had relatively high expectations can directly arrange data acquisition module, to carry out the probe collection in by acquisition target.
Described judging unit 200 is used for judging whether described service data satisfies the alarm conditions that set in advance, if then trigger described Alarm Unit 300;
Wherein, alarm conditions can comprise: concern determined alarm conditions according to the influence between the different service datas.Judge whether described service data meets the preset alarm condition and can comprise: search at least one alarm conditions that matches according to the type of service data, judge whether described service data meets the alarm conditions that find.Because it is multiple that service data has, and also be not quite similar at the set alarm conditions of different service datas, therefore can the alarm conditions that service data is corresponding with it compare.
Described Alarm Unit 300 is used for carrying out alarming processing based on the influence relation between the relation of the influence between the telecommunications network five big professional system model business of setting up in advance and professional each link.
The telecommunications network five big professional system models of Jian Liing can be by choosing key object and key index thereof in the whole network in advance, sets up related between object and the index, between each object then, to set up telecommunications network five big professional system models.Wherein, key object can comprise: each professional resource occupying situation, hardware handles ability, business development situation, marketing activity situation and business demand change etc.Wherein, the preset alarm condition can be set up different alarm conditions at different objects respectively for a plurality of.As to the resource occupying situation, its alarm conditions can for: network traffics are not less than first threshold, then when certain professional network traffics is not less than first threshold, determine that this specialized network resource occupation is too high, may impact other professional network traffics, so report to the police.
Certainly, in other embodiments of the invention, different alarm grades can also be set different alarm conditions, concrete, can be to some important object and the higher alarm grade of target setting thereof, to not too important object and the lower alarm grade of target setting thereof.Also can divide according to the system platform maintenance echelon, also can divide in conjunction with the scope that influences the user, also can need divide in conjunction with business development.
For the association between related and each object between each index of object, can judge incidence relation between them according to actual conditions, incidence relation can comprise: comprise, side by side, quote, derivation etc.
The mode of alarm can adopt the mode of sound, image or their combination to alarm for multiple.Concrete, the present invention can adopt the form of unified view, alarms with graph mode.The user can see needed data intuitively from chart like this.In other embodiments of the invention, the data in the predetermined amount of time all can be carried out chart and show that the user can see the development process of the state of affairs that data embody intuitively like this.
What need explanation a bit is that alarm conditions can adopt the mode of predetermined threshold value.In actual applications, this threshold value can be static, also can be dynamic change.Static threshold is readily appreciated that, repeats no more.A kind of mode of dynamic threshold is: according to the difference of time period, according to the size of preset rules modulation theresholds.For example: generally speaking, 10 o'clock to 22 o'clock is the more stages of network traffics, and all the other time periods are lower stages of network traffics, so just can set one with time dependent threshold value according to these two different stages.
Certainly, the threshold value that uses among the above embodiment can be real-time change.Concrete, can calculate the threshold value that makes new advances at the business of continuous variation.As: choose achievement data in the cycle according to the business activity cycle, calculate the threshold value that makes new advances by computational methods such as averaging method, weighted mean methods.Can certainly choose the historical achievement data of part in the cycle according to the business activity cycle, select different data predictions and fitting algorithm (as: regression model, moving average model(MA model), mixed model etc.) for use, the index value that prediction obtains is as threshold value.
In other embodiments of the invention, can also at first analyze in conjunction with the whole network model the service data of gathering, draw analysis result, judge whether to meet the preset alarm condition then, if, then alarm.Concrete, analytical method can comprise: unusual fluctuation analysis, trend analysis, comparative analysis, component analysis and chain rate are analyzed etc. on year-on-year basis.Below simple declaration is carried out in above five kinds of analyses:
Unusual fluctuation is analyzed: by the contrast to current business achievement data and historical achievement data or operational indicator prediction data, find the unusual of business activity, as the further starting point of analyzing of traffic issues.
Trend analysis: the historical data of key business index is carried out the trend analysis of specific period, the variation tendency of reflection key business link business activity quality.
Comparative analysis: realize to comparative analysis between Business Processing process key link index comparative analysis between related service processing procedure key link index.
Component analysis: in the operation flow, constituent relation (constituting as the overall average duration of the whole service process average duration by three Business Processing links) is arranged between some index, can find the composition of basically identical according to business experience, take place as the composition curve unusual, timely deployment analysis then.
Chain rate is analyzed on year-on-year basis: on year-on-year basis: in the different large periods to the key business index, the historical data of contemporaneity is analyzed, the change dynamics of reflection key business link business activity quality.Chain rate: the historical data of key business index is carried out the comparative analysis of adjacent periods, the change dynamics of reflection key business link business activity quality.
In actual applications, concrete alarm method can have multiple, as SMS notification, mail notification, alarm etc. by alarm equipment.
In other embodiments of the invention, can also comprise: use database that the service data that meets the preset alarm condition is stored.
The technical scheme that the embodiment of the invention provides can use the whole network warning system that whole communication network is carried out alarming processing, thereby has avoided occurring in the network phenomenon of a plurality of warning systems.The present invention has not only saved system resource, and the relation that can take all factors into consideration between the whole telecommunications network data alarms, and has improved the effectiveness of alarm.
As shown in Figure 8, in the another kind of telecommunications network warning system that the embodiment of the invention provides, described monitoring unit 100 can comprise: thread monitor subelement 110, be used for to use thread pool that business is monitored, the mode by each thread in the poll thread pool obtains should the related relevant service data of business in the described telecommunications network five big professional systems.
Thread pool is a kind of multithreading processing form, adds task to formation in the processing procedure, starts these tasks automatically then after creating thread.The thread pool thread all is background thread, and each thread uses the storehouse size of acquiescence, with the priority operation of acquiescence, and is in the multiple thread units.If certain thread is idle (as waiting for certain event) in Managed Code, then thread pool will insert another worker thread and make all processors maintenances busy.If it is busy that all thread pool threads all remain, but comprise the work of hang-up in the formation, then thread pool will be created another worker thread over time, but the number of thread surpasses maximum never.Surpassing peaked thread can line up, but they will wait until after other threads are finished and just start.
It will be appreciated by persons skilled in the art that and use thread pool that a plurality of business are monitored, can better manage, for example increase of monitored object, deletion, the modification of monitoring priority etc.
What need explanation a bit is, poll is a kind of handling process of obtaining the thread service data, and thread pool can obtain relevant service data to the thread in pond samsara successively, can so that the data of each thread can both in time be obtained.
As shown in Figure 9, in the another kind of telecommunications network warning system that the embodiment of the invention provides, described Alarm Unit 300 can comprise: warning subelement 310, link early warning subelement 320 and professional early warning subelement 330,
Described warning subelement 310 be used for to determine satisfies link under the service data of the alarm conditions that set in advance and the business under this link, to the processing of reporting to the police of this link and this business;
Described link early warning subelement 320 is used for determining affected each link in this business according to the relation of the influence between each link of this business, affected each link in this business is carried out early warning handle;
Described professional early warning subelement 330 is used for determining affected each business according to the influence relation of this business to described telecommunications network five big professional other business of system model, affected each business is carried out early warning handle.
For the convenience of describing, be divided into various unit with function when describing above the device and describe respectively.Certainly, when enforcement is of the present invention, can in same or a plurality of softwares and/or hardware, realize the function of each unit.
As seen through the above description of the embodiments, those skilled in the art can be well understood to the present invention and can realize by the mode that software adds essential general hardware platform.Based on such understanding, the part that technical scheme of the present invention contributes to prior art in essence in other words can embody with the form of software product, this computer software product can be stored in the storage medium, as ROM/RAM, magnetic disc, CD etc., comprise that some instructions are with so that a computer equipment (can be personal computer, server, the perhaps network equipment etc.) carry out the described method of some part of each embodiment of the present invention or embodiment.
Each embodiment in this specification all adopts the mode of going forward one by one to describe, and identical similar part is mutually referring to getting final product between each embodiment, and each embodiment stresses is difference with other embodiment.Especially, for system embodiment, because it is substantially similar in appearance to method embodiment, so describe fairly simplely, relevant part gets final product referring to the part explanation of method embodiment.System embodiment described above only is schematic, wherein said unit as the separating component explanation can or can not be physically to separate also, the parts that show as the unit can be or can not be physical locations also, namely can be positioned at a place, perhaps also can be distributed on a plurality of network element.Can select wherein some or all of module to realize the purpose of present embodiment scheme according to the actual needs.Those of ordinary skills namely can understand and implement under the situation of not paying creative work.
The present invention can be used in numerous general or special purpose computingasystem environment or the configuration.For example: personal computer, server computer, handheld device or portable set, plate equipment, multicomputer system, the system based on microprocessor, set top box, programmable consumer-elcetronics devices, network PC, minicom, mainframe computer, comprise distributed computing environment (DCE) of above any system or equipment etc.
The present invention can describe in the general context of the computer executable instructions of being carried out by computer, for example program module.Usually, program module comprises the routine carrying out particular task or realize particular abstract data type, program, object, assembly, data structure etc.Also can in distributed computing environment (DCE), put into practice the present invention, in these distributed computing environment (DCE), be executed the task by the teleprocessing equipment that is connected by communication network.In distributed computing environment (DCE), program module can be arranged in the local and remote computer-readable storage medium that comprises memory device.
Need to prove, in this article, relational terms such as first and second grades only is used for an entity or operation are made a distinction with another entity or operation, and not necessarily requires or hint and have the relation of any this reality or in proper order between these entities or the operation.
The above only is the specific embodiment of the present invention; should be pointed out that for those skilled in the art, under the prerequisite that does not break away from the principle of the invention; can also make some improvements and modifications, these improvements and modifications also should be considered as protection scope of the present invention.