CN104283725A - Warning message processing method and system in network management system - Google Patents
Warning message processing method and system in network management system Download PDFInfo
- Publication number
- CN104283725A CN104283725A CN201410629299.7A CN201410629299A CN104283725A CN 104283725 A CN104283725 A CN 104283725A CN 201410629299 A CN201410629299 A CN 201410629299A CN 104283725 A CN104283725 A CN 104283725A
- Authority
- CN
- China
- Prior art keywords
- alarm
- reprocessing
- queue
- buffer memory
- database
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a warning message processing method in a network management system. The warning message processing method comprises the following steps of receiving an alarm reported by a managed network element, and carrying out alarm pretreatment; storing the alarm messages after alarm pretreatment sequentially into a database; sending newly increased alarms in the database to users; meanwhile, caching the newly increased alarms in the database in a first-in first-out mode to an alarm aftertreatment queue, and issuing a alarm aftertreatment queue change notice; extracting the alarms which are cached in the alarm aftertreatment queue when the alarm aftertreatment queue change notice is received, then carrying out alarm aftertreatment until no cached alarms exist in the alarm aftertreatment queue. The alarm treatment process is divided into the alarm pretreatment process and the alarm aftertreatment process, after the alarm pretreatment and storage are completed, the alarm notification is sent and the alarm aftertreatment process is carried out at the same time, so that the alarm processing time from receiving the alarm to informing the alarm can be shortened effectively, the alarm information processing bottleneck problem is solved, and the time delay of the alarm notification is shortened obviously.
Description
Technical field
The present invention relates to technical field of network management, be specifically related to alarm information processing method and system in a kind of network management system.
Background technology
The warning information handling process that in network management system, industry generally adopts is: webmaster can process warning information after receiving the alarm that managed element reports, and then the warning information after process is saved to database, finally by alarm notification user.
Along with becoming increasingly abundant of network element and webmaster self function, processing procedure and the complexity of alarm are also more and more higher, network management system needs to expend the more time and processes alarm, have a strong impact on the efficiency of network management system process alarm, become the bottleneck of alarming processing, cause user to receive time of alarm notification seriously delayed.
Summary of the invention
The technical problem to be solved in the present invention is: provide alarm information processing method and system in a kind of network management system, effectively can shorten and receive alarming processing time between alarm notification from alarm, improves alarming processing efficiency.
The present invention for solving the problems of the technologies described above taked technical scheme is: alarm information processing method in network management system, is characterized in that: it comprises the following steps:
Receive the alarm that managed element reports, carry out alarm pre-treatment to the alarm received, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
By the warning information after alarm pre-treatment, be saved to database successively;
The alarm increased newly in database is sent to user; Simultaneously by the alarm that increases newly in database by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
When receiving alarm reprocessing queue Notification of Changes, extract the alarm of buffer memory in alarm reprocessing queue, carry out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue, the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
As stated above, when extracting the alarm of buffer memory in alarm reprocessing queue, adopt that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
Warning information treatment system in network management system, is characterized in that: it comprises with lower module:
Alarm receiver module, for receiving the alarm that managed element reports;
Alarm pre-processing module, for carrying out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
Alarm persistence module, for by the warning information after alarm pre-treatment, is saved to database successively;
Alarm notification module, for sending to user by the alarm increased newly in database;
Alarm reprocessing queue, for the alarm that will increase newly in database by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
Alarm post-processing module, for when receiving alarm reprocessing queue Notification of Changes, the alarm of buffer memory is extracted from alarm reprocessing queue, carry out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue, when alarm without buffer memory in alarm reprocessing queue, alarm post-processing module is in resting state, and the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
By said system, described alarm post-processing module, when extracting the alarm of buffer memory, adopts that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
Beneficial effect of the present invention is:
1, by alarming processing process is split as alarm pretreatment process and alarm reprocessing, after completing alarm pre-treatment and warehouse-in, while sending alarm notification, parallel carries out alarm last handling process, effectively can shorten and receive alarming processing time between alarm notification from alarm, solve warning information process bottleneck problem, obviously reduce the time delay of alarm notification.
2, during alarm reprocessing, adopt that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue, make full use of the parallel processing capability of (multi-CPU/multinuclear/multithreading) computer hardware, effectively improve the efficiency of alarm reprocessing.
Accompanying drawing explanation
Fig. 1 is the system architecture diagram of one embodiment of the invention.
Fig. 2 is the method flow diagram of one embodiment of the invention.
Fig. 3 is the flow chart of alarm reprocessing.
Embodiment
Below in conjunction with instantiation, the present invention will be further described.
Fig. 1 is system architecture diagram of the present invention, comprises with lower module:
Alarm receiver module, for receiving the alarm that managed element reports;
Alarm pre-processing module, for carrying out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
Alarm persistence module, for by the alarm after alarm pre-treatment, is saved to database successively;
Alarm notification module, for sending to user by the alarm increased newly in database;
Alarm reprocessing queue, carries out buffer memory for the alarm will increased newly in database by the mode of first-in first-out, concurrent cloth alarm reprocessing queue Notification of Changes;
Alarm post-processing module, for when receiving alarm reprocessing queue Notification of Changes, extract the alarm of buffer memory in alarm reprocessing queue, batch carries out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue.When alarm without buffer memory in alarm reprocessing queue, alarm post-processing module is in resting state, and the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
Fig. 2 is method flow diagram of the present invention, and it comprises the following steps:
Receive the alarm that managed element reports, carry out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
By the warning information after alarm pre-treatment, be saved to database successively;
Alarm in being increased newly by database sends to user; Alarm in simultaneously database being increased newly by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
When receiving alarm reprocessing queue Notification of Changes, extracting the alarm of buffer memory, carry out alarm reprocessing from alarm reprocessing queue, until without the alarm of buffer memory in alarm reprocessing queue, the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
As shown in Figure 3, in the present embodiment, alarm post-processing module is in resting state usually, just be activated when receiving alarm reprocessing queue Notification of Changes, employing separate threads mode is asynchronous once extracts whole alarm from alarm reprocessing queue, and now alarm reprocessing queue is cleared, the all alarms of alarm post-processing module batch process, whether the quantity then continuing to detect warning information in alarm reprocessing queue is greater than zero, if then continue batch processing, then enters resting state if not.
The present invention is by being split as alarm pretreatment process and alarm last handling process by alarming processing process, alarm pretreatment process is generally the necessary processing procedure that impact is saved to warning information content in database, such as alarm validation verification, alarm shield process, alarm forward processing, the process of alarm data cooperating measure etc.In order to ensure timing, alarm pretreatment process must adopt single-threaded serial mode to perform; Alarm last handling process is generally the associated data analytic process not affecting warning information content warehouse-in, and such as alarm association analyzing and processing, alarm impact analysis process etc., alarm last handling process is generally consuming time longer, can adopt multithreading parallel processing.
Above embodiment is only for illustration of design philosophy of the present invention and feature, and its object is to enable those skilled in the art understand content of the present invention and implement according to this, protection scope of the present invention is not limited to above-described embodiment.So all equivalent variations of doing according to disclosed principle, mentality of designing or modification, all within protection scope of the present invention.
Claims (4)
1. alarm information processing method in network management system, is characterized in that: it comprises the following steps:
Receive the alarm that managed element reports, carry out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
By the warning information after alarm pre-treatment, be saved to database successively;
The alarm increased newly in database is sent to user; Simultaneously by the alarm that increases newly in database by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
When receiving alarm reprocessing queue Notification of Changes, extracting the alarm of buffer memory, carry out alarm reprocessing from alarm reprocessing queue, until without the alarm of buffer memory in alarm reprocessing queue, the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
2. alarm information processing method in network management system according to claim 1, is characterized in that: when extracting the alarm of buffer memory, adopts that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
3. warning information treatment system in network management system, is characterized in that: it comprises with lower module:
Alarm receiver module, for receiving the alarm that managed element reports;
Alarm pre-processing module, for carrying out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
Alarm persistence module, for by the warning information after alarm pre-treatment, is saved to database successively;
Alarm notification module, sends to user for the alarm in being increased newly by database;
Alarm reprocessing queue, carries out buffer memory for the alarm will increased newly in database by the mode of first-in first-out, concurrent cloth alarm reprocessing queue Notification of Changes;
Alarm post-processing module, for when receiving alarm reprocessing queue Notification of Changes, extract the alarm of buffer memory in alarm reprocessing queue, batch carries out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue; When alarm without buffer memory in alarm reprocessing queue, alarm post-processing module is in resting state, and the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
4. warning information treatment system in network management system according to claim 3, it is characterized in that: described alarm post-processing module, when extracting the alarm of buffer memory, adopts that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410629299.7A CN104283725B (en) | 2014-11-10 | 2014-11-10 | alarm information processing method and system in network management system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410629299.7A CN104283725B (en) | 2014-11-10 | 2014-11-10 | alarm information processing method and system in network management system |
Publications (2)
Publication Number | Publication Date |
---|---|
CN104283725A true CN104283725A (en) | 2015-01-14 |
CN104283725B CN104283725B (en) | 2018-06-29 |
Family
ID=52258233
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201410629299.7A Expired - Fee Related CN104283725B (en) | 2014-11-10 | 2014-11-10 | alarm information processing method and system in network management system |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN104283725B (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105450445A (en) * | 2015-11-17 | 2016-03-30 | 武汉日电光通信工业有限公司 | High-performance alarm processing system under large capacity packet transmission system and method thereof |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1992632A (en) * | 2005-12-28 | 2007-07-04 | 大唐软件技术有限责任公司 | Communication network warning method and warning system |
CN101018163A (en) * | 2007-02-08 | 2007-08-15 | 华为技术有限公司 | Alarm processing method and background management device |
CN102118275A (en) * | 2009-12-30 | 2011-07-06 | 大唐移动通信设备有限公司 | Alarm storm processing method and processing device |
CN102546216A (en) * | 2010-12-30 | 2012-07-04 | ***通信集团山东有限公司 | Method for processing alarm messages in network management system and network management system |
-
2014
- 2014-11-10 CN CN201410629299.7A patent/CN104283725B/en not_active Expired - Fee Related
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1992632A (en) * | 2005-12-28 | 2007-07-04 | 大唐软件技术有限责任公司 | Communication network warning method and warning system |
CN101018163A (en) * | 2007-02-08 | 2007-08-15 | 华为技术有限公司 | Alarm processing method and background management device |
CN102118275A (en) * | 2009-12-30 | 2011-07-06 | 大唐移动通信设备有限公司 | Alarm storm processing method and processing device |
CN102546216A (en) * | 2010-12-30 | 2012-07-04 | ***通信集团山东有限公司 | Method for processing alarm messages in network management system and network management system |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105450445A (en) * | 2015-11-17 | 2016-03-30 | 武汉日电光通信工业有限公司 | High-performance alarm processing system under large capacity packet transmission system and method thereof |
Also Published As
Publication number | Publication date |
---|---|
CN104283725B (en) | 2018-06-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN109918141A (en) | Thread execution method, device, terminal and storage medium | |
US20150106342A1 (en) | System and method of detecting cache inconsistencies | |
US20180212986A1 (en) | Network attack detection method and device | |
CN107833051B (en) | Data statistical method and system | |
CN114338188B (en) | Intelligent cloud detection system for malicious software based on process behavior sequence segmentation | |
US9727406B2 (en) | Mitigating crashes of an application server executing a monitoring agent | |
CN106227583A (en) | A kind of multiple thread video Real-time Data Processing Method and device | |
CN113190623B (en) | Data processing method, device, server and storage medium | |
CN104283725A (en) | Warning message processing method and system in network management system | |
CN108665241A (en) | A kind of mobile video analysis system towards police criminal detection | |
CN103019865A (en) | Virtual machine monitoring method and system | |
CN116645082A (en) | System inspection method, device, equipment and storage medium | |
CN105446707B (en) | Data conversion method | |
CN109245919A (en) | Mobile network comprehensive alarm management system | |
CN107589907B (en) | Data processing method, electronic device and computer readable storage medium | |
CN103746991A (en) | Security event analysis method and system in cloud computing network | |
CN115600607A (en) | Log detection method and device, electronic equipment and medium | |
CN112702227B (en) | Heartbeat event detection method, device, equipment and computer readable storage medium | |
CN110225025B (en) | Method and device for acquiring abnormal network data behavior model, electronic equipment and storage medium | |
US11659071B2 (en) | Packet processing | |
CN115242799B (en) | Data reporting method, device, equipment, storage medium and program product | |
CN116090382B (en) | Time sequence report generation method and device | |
CN113641506B (en) | Multi-cooperative synchronization barrier method and device based on Golang language | |
CN114064741B (en) | Method, device and equipment for acquiring prepositive data and storage medium | |
CN105354105B (en) | Software anomaly processing system and method |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
CB02 | Change of applicant information |
Address after: 430074 Kanto science and Technology Industrial Zone, East Lake New Technology Development Zone, Hubei, Wuhan Applicant after: Wuhan leading technology Co., Ltd. Address before: Three road 430074 Hubei city of Wuhan province Wuchang Guanshan Applicant before: Wuhan NEC Fiber Optic Communications Industry Co., Ltd. |
|
CB02 | Change of applicant information | ||
GR01 | Patent grant | ||
GR01 | Patent grant | ||
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20180629 Termination date: 20191110 |
|
CF01 | Termination of patent right due to non-payment of annual fee |