CN104283725A - Warning message processing method and system in network management system - Google Patents

Warning message processing method and system in network management system Download PDF

Info

Publication number
CN104283725A
CN104283725A CN201410629299.7A CN201410629299A CN104283725A CN 104283725 A CN104283725 A CN 104283725A CN 201410629299 A CN201410629299 A CN 201410629299A CN 104283725 A CN104283725 A CN 104283725A
Authority
CN
China
Prior art keywords
alarm
reprocessing
queue
buffer memory
database
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201410629299.7A
Other languages
Chinese (zh)
Other versions
CN104283725B (en
Inventor
王虎
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wuhan NEC Fiber Optic Communications Industry Co Ltd
Original Assignee
Wuhan NEC Fiber Optic Communications Industry Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wuhan NEC Fiber Optic Communications Industry Co Ltd filed Critical Wuhan NEC Fiber Optic Communications Industry Co Ltd
Priority to CN201410629299.7A priority Critical patent/CN104283725B/en
Publication of CN104283725A publication Critical patent/CN104283725A/en
Application granted granted Critical
Publication of CN104283725B publication Critical patent/CN104283725B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention provides a warning message processing method in a network management system. The warning message processing method comprises the following steps of receiving an alarm reported by a managed network element, and carrying out alarm pretreatment; storing the alarm messages after alarm pretreatment sequentially into a database; sending newly increased alarms in the database to users; meanwhile, caching the newly increased alarms in the database in a first-in first-out mode to an alarm aftertreatment queue, and issuing a alarm aftertreatment queue change notice; extracting the alarms which are cached in the alarm aftertreatment queue when the alarm aftertreatment queue change notice is received, then carrying out alarm aftertreatment until no cached alarms exist in the alarm aftertreatment queue. The alarm treatment process is divided into the alarm pretreatment process and the alarm aftertreatment process, after the alarm pretreatment and storage are completed, the alarm notification is sent and the alarm aftertreatment process is carried out at the same time, so that the alarm processing time from receiving the alarm to informing the alarm can be shortened effectively, the alarm information processing bottleneck problem is solved, and the time delay of the alarm notification is shortened obviously.

Description

Alarm information processing method and system in network management system
Technical field
The present invention relates to technical field of network management, be specifically related to alarm information processing method and system in a kind of network management system.
Background technology
The warning information handling process that in network management system, industry generally adopts is: webmaster can process warning information after receiving the alarm that managed element reports, and then the warning information after process is saved to database, finally by alarm notification user.
Along with becoming increasingly abundant of network element and webmaster self function, processing procedure and the complexity of alarm are also more and more higher, network management system needs to expend the more time and processes alarm, have a strong impact on the efficiency of network management system process alarm, become the bottleneck of alarming processing, cause user to receive time of alarm notification seriously delayed.
Summary of the invention
The technical problem to be solved in the present invention is: provide alarm information processing method and system in a kind of network management system, effectively can shorten and receive alarming processing time between alarm notification from alarm, improves alarming processing efficiency.
The present invention for solving the problems of the technologies described above taked technical scheme is: alarm information processing method in network management system, is characterized in that: it comprises the following steps:
Receive the alarm that managed element reports, carry out alarm pre-treatment to the alarm received, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
By the warning information after alarm pre-treatment, be saved to database successively;
The alarm increased newly in database is sent to user; Simultaneously by the alarm that increases newly in database by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
When receiving alarm reprocessing queue Notification of Changes, extract the alarm of buffer memory in alarm reprocessing queue, carry out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue, the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
As stated above, when extracting the alarm of buffer memory in alarm reprocessing queue, adopt that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
Warning information treatment system in network management system, is characterized in that: it comprises with lower module:
Alarm receiver module, for receiving the alarm that managed element reports;
Alarm pre-processing module, for carrying out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
Alarm persistence module, for by the warning information after alarm pre-treatment, is saved to database successively;
Alarm notification module, for sending to user by the alarm increased newly in database;
Alarm reprocessing queue, for the alarm that will increase newly in database by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
Alarm post-processing module, for when receiving alarm reprocessing queue Notification of Changes, the alarm of buffer memory is extracted from alarm reprocessing queue, carry out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue, when alarm without buffer memory in alarm reprocessing queue, alarm post-processing module is in resting state, and the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
By said system, described alarm post-processing module, when extracting the alarm of buffer memory, adopts that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
Beneficial effect of the present invention is:
1, by alarming processing process is split as alarm pretreatment process and alarm reprocessing, after completing alarm pre-treatment and warehouse-in, while sending alarm notification, parallel carries out alarm last handling process, effectively can shorten and receive alarming processing time between alarm notification from alarm, solve warning information process bottleneck problem, obviously reduce the time delay of alarm notification.
2, during alarm reprocessing, adopt that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue, make full use of the parallel processing capability of (multi-CPU/multinuclear/multithreading) computer hardware, effectively improve the efficiency of alarm reprocessing.
Accompanying drawing explanation
Fig. 1 is the system architecture diagram of one embodiment of the invention.
Fig. 2 is the method flow diagram of one embodiment of the invention.
Fig. 3 is the flow chart of alarm reprocessing.
Embodiment
Below in conjunction with instantiation, the present invention will be further described.
Fig. 1 is system architecture diagram of the present invention, comprises with lower module:
Alarm receiver module, for receiving the alarm that managed element reports;
Alarm pre-processing module, for carrying out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
Alarm persistence module, for by the alarm after alarm pre-treatment, is saved to database successively;
Alarm notification module, for sending to user by the alarm increased newly in database;
Alarm reprocessing queue, carries out buffer memory for the alarm will increased newly in database by the mode of first-in first-out, concurrent cloth alarm reprocessing queue Notification of Changes;
Alarm post-processing module, for when receiving alarm reprocessing queue Notification of Changes, extract the alarm of buffer memory in alarm reprocessing queue, batch carries out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue.When alarm without buffer memory in alarm reprocessing queue, alarm post-processing module is in resting state, and the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
Fig. 2 is method flow diagram of the present invention, and it comprises the following steps:
Receive the alarm that managed element reports, carry out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
By the warning information after alarm pre-treatment, be saved to database successively;
Alarm in being increased newly by database sends to user; Alarm in simultaneously database being increased newly by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
When receiving alarm reprocessing queue Notification of Changes, extracting the alarm of buffer memory, carry out alarm reprocessing from alarm reprocessing queue, until without the alarm of buffer memory in alarm reprocessing queue, the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
As shown in Figure 3, in the present embodiment, alarm post-processing module is in resting state usually, just be activated when receiving alarm reprocessing queue Notification of Changes, employing separate threads mode is asynchronous once extracts whole alarm from alarm reprocessing queue, and now alarm reprocessing queue is cleared, the all alarms of alarm post-processing module batch process, whether the quantity then continuing to detect warning information in alarm reprocessing queue is greater than zero, if then continue batch processing, then enters resting state if not.
The present invention is by being split as alarm pretreatment process and alarm last handling process by alarming processing process, alarm pretreatment process is generally the necessary processing procedure that impact is saved to warning information content in database, such as alarm validation verification, alarm shield process, alarm forward processing, the process of alarm data cooperating measure etc.In order to ensure timing, alarm pretreatment process must adopt single-threaded serial mode to perform; Alarm last handling process is generally the associated data analytic process not affecting warning information content warehouse-in, and such as alarm association analyzing and processing, alarm impact analysis process etc., alarm last handling process is generally consuming time longer, can adopt multithreading parallel processing.
Above embodiment is only for illustration of design philosophy of the present invention and feature, and its object is to enable those skilled in the art understand content of the present invention and implement according to this, protection scope of the present invention is not limited to above-described embodiment.So all equivalent variations of doing according to disclosed principle, mentality of designing or modification, all within protection scope of the present invention.

Claims (4)

1. alarm information processing method in network management system, is characterized in that: it comprises the following steps:
Receive the alarm that managed element reports, carry out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
By the warning information after alarm pre-treatment, be saved to database successively;
The alarm increased newly in database is sent to user; Simultaneously by the alarm that increases newly in database by the mode buffer memory of first-in first-out to alarm reprocessing queue, concurrent cloth alarm reprocessing queue Notification of Changes;
When receiving alarm reprocessing queue Notification of Changes, extracting the alarm of buffer memory, carry out alarm reprocessing from alarm reprocessing queue, until without the alarm of buffer memory in alarm reprocessing queue, the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
2. alarm information processing method in network management system according to claim 1, is characterized in that: when extracting the alarm of buffer memory, adopts that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
3. warning information treatment system in network management system, is characterized in that: it comprises with lower module:
Alarm receiver module, for receiving the alarm that managed element reports;
Alarm pre-processing module, for carrying out alarm pre-treatment, the concrete processing mode of alarm pre-treatment is formulated according to actual conditions;
Alarm persistence module, for by the warning information after alarm pre-treatment, is saved to database successively;
Alarm notification module, sends to user for the alarm in being increased newly by database;
Alarm reprocessing queue, carries out buffer memory for the alarm will increased newly in database by the mode of first-in first-out, concurrent cloth alarm reprocessing queue Notification of Changes;
Alarm post-processing module, for when receiving alarm reprocessing queue Notification of Changes, extract the alarm of buffer memory in alarm reprocessing queue, batch carries out alarm reprocessing, until without the alarm of buffer memory in alarm reprocessing queue; When alarm without buffer memory in alarm reprocessing queue, alarm post-processing module is in resting state, and the concrete processing mode of alarm reprocessing is formulated according to actual conditions.
4. warning information treatment system in network management system according to claim 3, it is characterized in that: described alarm post-processing module, when extracting the alarm of buffer memory, adopts that separate threads mode is asynchronous once to be extracted whole alarm and carry out batch process from alarm reprocessing queue.
CN201410629299.7A 2014-11-10 2014-11-10 alarm information processing method and system in network management system Expired - Fee Related CN104283725B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410629299.7A CN104283725B (en) 2014-11-10 2014-11-10 alarm information processing method and system in network management system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410629299.7A CN104283725B (en) 2014-11-10 2014-11-10 alarm information processing method and system in network management system

Publications (2)

Publication Number Publication Date
CN104283725A true CN104283725A (en) 2015-01-14
CN104283725B CN104283725B (en) 2018-06-29

Family

ID=52258233

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410629299.7A Expired - Fee Related CN104283725B (en) 2014-11-10 2014-11-10 alarm information processing method and system in network management system

Country Status (1)

Country Link
CN (1) CN104283725B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105450445A (en) * 2015-11-17 2016-03-30 武汉日电光通信工业有限公司 High-performance alarm processing system under large capacity packet transmission system and method thereof

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1992632A (en) * 2005-12-28 2007-07-04 大唐软件技术有限责任公司 Communication network warning method and warning system
CN101018163A (en) * 2007-02-08 2007-08-15 华为技术有限公司 Alarm processing method and background management device
CN102118275A (en) * 2009-12-30 2011-07-06 大唐移动通信设备有限公司 Alarm storm processing method and processing device
CN102546216A (en) * 2010-12-30 2012-07-04 ***通信集团山东有限公司 Method for processing alarm messages in network management system and network management system

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1992632A (en) * 2005-12-28 2007-07-04 大唐软件技术有限责任公司 Communication network warning method and warning system
CN101018163A (en) * 2007-02-08 2007-08-15 华为技术有限公司 Alarm processing method and background management device
CN102118275A (en) * 2009-12-30 2011-07-06 大唐移动通信设备有限公司 Alarm storm processing method and processing device
CN102546216A (en) * 2010-12-30 2012-07-04 ***通信集团山东有限公司 Method for processing alarm messages in network management system and network management system

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105450445A (en) * 2015-11-17 2016-03-30 武汉日电光通信工业有限公司 High-performance alarm processing system under large capacity packet transmission system and method thereof

Also Published As

Publication number Publication date
CN104283725B (en) 2018-06-29

Similar Documents

Publication Publication Date Title
CN109918141A (en) Thread execution method, device, terminal and storage medium
US20150106342A1 (en) System and method of detecting cache inconsistencies
US20180212986A1 (en) Network attack detection method and device
CN107833051B (en) Data statistical method and system
CN114338188B (en) Intelligent cloud detection system for malicious software based on process behavior sequence segmentation
US9727406B2 (en) Mitigating crashes of an application server executing a monitoring agent
CN106227583A (en) A kind of multiple thread video Real-time Data Processing Method and device
CN113190623B (en) Data processing method, device, server and storage medium
CN104283725A (en) Warning message processing method and system in network management system
CN108665241A (en) A kind of mobile video analysis system towards police criminal detection
CN103019865A (en) Virtual machine monitoring method and system
CN116645082A (en) System inspection method, device, equipment and storage medium
CN105446707B (en) Data conversion method
CN109245919A (en) Mobile network comprehensive alarm management system
CN107589907B (en) Data processing method, electronic device and computer readable storage medium
CN103746991A (en) Security event analysis method and system in cloud computing network
CN115600607A (en) Log detection method and device, electronic equipment and medium
CN112702227B (en) Heartbeat event detection method, device, equipment and computer readable storage medium
CN110225025B (en) Method and device for acquiring abnormal network data behavior model, electronic equipment and storage medium
US11659071B2 (en) Packet processing
CN115242799B (en) Data reporting method, device, equipment, storage medium and program product
CN116090382B (en) Time sequence report generation method and device
CN113641506B (en) Multi-cooperative synchronization barrier method and device based on Golang language
CN114064741B (en) Method, device and equipment for acquiring prepositive data and storage medium
CN105354105B (en) Software anomaly processing system and method

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information

Address after: 430074 Kanto science and Technology Industrial Zone, East Lake New Technology Development Zone, Hubei, Wuhan

Applicant after: Wuhan leading technology Co., Ltd.

Address before: Three road 430074 Hubei city of Wuhan province Wuchang Guanshan

Applicant before: Wuhan NEC Fiber Optic Communications Industry Co., Ltd.

CB02 Change of applicant information
GR01 Patent grant
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20180629

Termination date: 20191110

CF01 Termination of patent right due to non-payment of annual fee