CN107547262A - Generation method, device and the Network Management Equipment of alarm level - Google Patents

Generation method, device and the Network Management Equipment of alarm level Download PDF

Info

Publication number
CN107547262A
CN107547262A CN201710614810.XA CN201710614810A CN107547262A CN 107547262 A CN107547262 A CN 107547262A CN 201710614810 A CN201710614810 A CN 201710614810A CN 107547262 A CN107547262 A CN 107547262A
Authority
CN
China
Prior art keywords
alarm
property parameters
assignment
event
association
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710614810.XA
Other languages
Chinese (zh)
Other versions
CN107547262B (en
Inventor
冯林蛟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New H3C Technologies Co Ltd
Original Assignee
New H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by New H3C Technologies Co Ltd filed Critical New H3C Technologies Co Ltd
Priority to CN201710614810.XA priority Critical patent/CN107547262B/en
Publication of CN107547262A publication Critical patent/CN107547262A/en
Application granted granted Critical
Publication of CN107547262B publication Critical patent/CN107547262B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Alarm Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Present disclose provides a kind of generation method of alarm level, device and Network Management Equipment;Wherein, this method includes:Obtain multiple property parameters of alarm event to be analyzed;According to the property parameters and the corresponding relation of assignment prestored, for each property parameters assignment;Calculate the summation of the assignment of each property parameters;Alarm level corresponding with the summation is generated for the alarm event.The disclosure is by the way that each property parameters for influenceing alarm level are represented with the form of assignment, assignment summation generation alarm level based on each property parameters corresponding to alarm event, simplify operation, and it can more objectively obtain the alarm level of the alarm event, alarm level is had more reference value, enhance the practicality of alarm level.

Description

Generation method, device and the Network Management Equipment of alarm level
Technical field
This disclosure relates to Internet technical field, more particularly, to a kind of generation method of alarm level, device and webmaster Equipment.
Background technology
As internet scale increases increasingly, and the rapid increase of IT business amount, caused announcement during the network operation Police is also more and more numerous and more jumbled.In order to ensure the stability of the network operation, webmaster personnel need to choose urgent journey from substantial amounts of alarm The alarm that degree is high or coverage is big, carries out priority treatment.
In order to set the priority of alarm, generally alarm type and alarm source are set as the property parameters of alarm event Alarm level.For example, being alerted for A classes, when its alarm source is M equipment, the priority of alarm is important, and its alarm source sets for N When standby, the priority of alarm is secondary;Alerted for B classes, when its alarm source is M equipment, the priority of alarm is secondary, and it is accused When alert source is N equipment, the priority of alarm is important.
, it is necessary to set alert priority respectively on different alarm sources for same type of alarm in aforesaid way, When alarm type in network and more alarm source, workload is huge.And this static alert priority is difficult to truly Reflect the significance level of alarm, its reference value is relatively low, and practicality is poor.
The content of the invention
In view of this, the purpose of the disclosure is to provide a kind of generation method of alarm level, device and Network Management Equipment, with The flexibility that alarm level is set is improved, simplifies mode of operation, while strengthen the practicality of alarm level.
To achieve these goals, the technical scheme that the disclosure uses is as follows:
In a first aspect, present disclose provides a kind of generation method of alarm level, including:Obtain alarm event to be analyzed Multiple property parameters;It is each property parameters assignment according to the property parameters and the corresponding relation of assignment prestored;Calculate The summation of the assignment of each property parameters;Alarm level corresponding with summation is generated for alarm event.
Second aspect, present disclose provides a kind of generating means of alarm level, including:Parameter acquisition module, for obtaining Take multiple property parameters of alarm event to be analyzed;Parameter assignment module, for according to the property parameters and tax prestored The corresponding relation of value, it is each property parameters assignment;Summation computing module, for calculate each property parameters assignment it is total With;Alarm level generation module, for generating alarm level corresponding with summation for alarm event.
The third aspect, present disclose provides a kind of Network Management Equipment, including memory and processor;Wherein, memory is used for One or more computer instruction is stored, one or more computer instruction is executed by processor, to realize the above method.
Fourth aspect, present disclose provides a kind of machinable medium, machinable medium is stored with machine Executable instruction, for machine-executable instruction when being called and being performed by processor, machine-executable instruction promotes processor to realize The above method.
Generation method, device, Network Management Equipment and the machinable medium of above-mentioned alarm level, by for alarm event The independent assignment of each property parameters, the summation of the assignment based on each property parameters obtains the alarm level of the alarm event, It is this that alert level is obtained otherwise with the assignment summation of each property parameters, it is not necessary to match somebody with somebody respectively for each property parameters in advance Alarm level is put, compared with different multiple alarm levels are corresponded to the different property parameters of same equipment, the side in the disclosure Method, an alarm level is finally only embodied for multiple property parameters of same equipment, thus simplify mode of operation.Together When, can be more objective by the way that each property parameters for influenceing alarm level are represented into implementation is flexible with the form of assignment Obtain the alarm level of the alarm event with seeing, alarm level is had more reference value, enhance the practicality of alarm level.
Other feature and advantage of the disclosure will illustrate in the following description, or, Partial Feature and advantage can be with Deduce from specification or unambiguously determine, or the above-mentioned technology by implementing the disclosure can be learnt.
To enable the above objects, features and advantages of the present invention to become apparent, preferred embodiment cited below particularly, and coordinate Appended accompanying drawing, is described in detail below.
Brief description of the drawings
, below will be to specific in order to illustrate more clearly of disclosure embodiment or technical scheme of the prior art The required accompanying drawing used is briefly described in embodiment or description of the prior art, it should be apparent that, in describing below Accompanying drawing is some embodiments of the disclosure, for those of ordinary skill in the art, before creative work is not paid Put, other accompanying drawings can also be obtained according to these accompanying drawings.
Fig. 1 is the generation method flow chart for the first alarm level that the embodiment of the present disclosure provides;
Fig. 2 is the generation method flow chart for second of alarm level that the embodiment of the present disclosure provides;
Fig. 3 is the generation method flow chart for the third alarm level that the embodiment of the present disclosure provides;
Fig. 4 is the generation method flow chart for the 4th kind of alarm level that the embodiment of the present disclosure provides;
Fig. 5 is the generating means structural representation for the first alarm level that the embodiment of the present disclosure provides;
Fig. 6 is the structural representation of the generating means for second of alarm level that the embodiment of the present disclosure provides;
Fig. 7 is a kind of structural representation for Network Management Equipment that the embodiment of the present disclosure provides.
Embodiment
To make the purpose, technical scheme and advantage of the embodiment of the present disclosure clearer, below in conjunction with accompanying drawing to the disclosure Technical scheme be clearly and completely described, it is clear that described embodiment is disclosure part of the embodiment, rather than Whole embodiments.Based on the embodiment in the disclosure, those of ordinary skill in the art are not making creative work premise Lower obtained every other embodiment, belong to the scope of disclosure protection.
In order that webmaster personnel rapidly identify significant alarm, it is necessary to using more flexible, accurate from substantial amounts of alarm Alarm level generating mode so that webmaster personnel can in time know and solve important network failure;Based on the purpose, The embodiment of the present disclosure provides a kind of generation method of alarm level, device, Network Management Equipment and machinable medium.The skill Art can be widely used in the Network Management Equipment of wireless access class business, can also be applied to the net of a variety of large enterprises such as bank In tube apparatus, and in the equipment such as other servers for needing configuration alarm to remind;The technology can use related software or Hardware is realized, is described below by embodiment.
Embodiment one:
The generation method flow chart of the first alarm level shown in Figure 1, this method can apply to Network Management Equipment In, this method comprises the following steps:
Step S102, obtain multiple property parameters of alarm event to be analyzed;
Wherein, the property parameters can comprise at least following two:Alarm type, alarm source, alarm time, alarm produce Number and alarm association;
Above-mentioned alarm event can obtain in several ways, for example, in equipment operation, network management or running software mistake Meeting generation system daily record, the system journal can reflect the operation conditions of the network equipment, software and network in journey;By the system day Will is matched with corresponding rule base, and thing is alerted according to corresponding to matching result judges whether to need to generate the system journal Part;For another example, in SNMP (Simple Network Management Protocol, Simple Network Management Protocol), equipment, net The objects such as network send unsolicited message by TRAP (port numbers) to Network Management Equipment, are occurred with expressing a certain event, non-by this OID (Object identifier, object identifier) value in request message judges whether the message belongs to alarm event.
When actually realizing, for a certain alarm event, whole property parameters of the alarm event can be obtained, also may be used To obtain a part of property parameters of the alarm event;In order to ensure the objectivity of the alarm level of generation and referring to property, lead to Often at least obtain two attribute parameters of the alarm event.
Step S104, it is each property parameters assignment according to the property parameters and the corresponding relation of assignment prestored;
The assignment procedure can use following two kinds of embodiments:
A kind of optional embodiment is:User passes through according to the property parameters prestored and the corresponding relation of assignment Interactive interface is each property parameters assignment of current alarm event, and Network Management Equipment receives and preserves each property parameters assignment;
Another optional embodiment is:Network Management Equipment can be based on the property parameters prestored and pair of assignment It should be related to, be the parameters assignment of current alarm event by way of searching, comparing;The property parameters prestored and The corresponding relation of assignment can be stored in table form, and assignment can be represented with numerical value, assignment corresponding to each property parameters Size can also can directly replicate the property parameters and the corresponding relation of assignment according to statistics experience setting from miscellaneous equipment, The present invention is to this without limiting.
Step S106, calculate the summation of the assignment of each above-mentioned property parameters;For example, the assignment phase by each property parameters Add, obtain summation;
Step S108, alarm level corresponding with above-mentioned summation is generated for the alarm event.
Alarm level in the present embodiment is to embody the importance of alarm severity, and the value of summation is bigger, corresponding alarm Rank is more important, based on this, can the summation of property parameters assignment according to corresponding to alarm event will alert and position different level Not, such as:Summation is Level 1Alarming 0~30, and summation alerts 31~60 for two level, summation being accused for three-level higher than 60 It is alert.
In the generation method for the alarm level that the embodiment of the present disclosure provides, pass through each property parameters list for alarm event Only assignment, the summation of the assignment based on each property parameters obtains the alarm level of the alarm event, this to be joined with each attribute Several assignment summations obtain alert level otherwise, it is not necessary to alarm level is respectively configured for each property parameters in advance, it is and same The different property parameters of one equipment correspond to different multiple alarm levels and compared, the method in the disclosure, for same equipment Multiple property parameters finally only embody an alarm level, thus simplify mode of operation.Meanwhile by will influence to alert Each property parameters of rank represent that implementation is flexible with the form of assignment, can more objectively obtain the alarm thing The alarm level of part, alarm level is had more reference value, enhance the practicality of alarm level.
Embodiment two:
The generation method flow chart of second of alarm level shown in Figure 2, wherein, if property parameters include alarm Type, then property parameters and the corresponding relation of assignment comprise at least:Initially divide corresponding to each alarm type and default urgent Increment point corresponding to alarm type, wherein, the critical alarm type and the business association of operation;
If property parameters include alarm source, the corresponding relation of property parameters and assignment comprises at least:Each network element conduct Equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram associate;
If property parameters include alarm time, the corresponding relation of property parameters and assignment comprises at least:Each operation industry Business is in the time corresponding to preset time period point;
If property parameters produce number including alerting, the corresponding relation of property parameters and assignment comprises at least:Alarm Produce number point corresponding to number;
If property parameters include alarm association, the corresponding relation of property parameters and assignment comprises at least:Alarm is closed Parent alarm, subclass alarm, fraternal class alert association point corresponding to difference in connection property.
Method provided in this implementation includes alarm type, alarm source, alarm time, alarm generation time with property parameters Illustrated exemplified by number and alarm association, this method comprises the following steps:
Step S202, current untreated alarm event is defined as alarm event to be analyzed.
The alarm event may come from the network element device in network, and these network element devices are by Network Management Equipment management and prison Control;When alarm event occurs for network, first alarm event can be preserved into an alarm event table, then one by one in the table Each alarm event generation alarm level;The specific form of the alarm event table may be referred to correlation technique realization, for example, should Table includes:Alarm event mark, receive the elements such as time.
When which is particularly applicable to network side within a very short time while a large amount of alarm events occurs, it is impossible in time In the case of alarm level being generated for each alarm event.
Step S204, alarm type, alarm source, alarm time are obtained from alarm event;From alarm event record sheet The alarm for obtaining alarm event produces number;According to the relation of alarm event in alarm event record sheet and other alarm events, Determine the alarm association of alarm event.
Specifically, when a certain alarm event reaches, the alarm event carries alarm type, alarm source, alarm in itself The information such as time;Wherein, the alarm type includes the polytypes such as interface down, equipment is unreachable;Alarm source is usually network Inside break down or abnormal equipment;Alarm time can be the time that alarm occurs, or receive the alarm event Time.
When alarm event is not solved, it is generally held in a pending list, passes through statistics and current alarm The sum of event identical alarm time, the alarm that can obtain the alarm event produce number;Further, due in network Annexation and data communications context between equipment be present, thus association is also usually there will be between each alarm event, for example, When a certain alarm event occurs, another alarm event occurs immediately;Therefore, the alarm between alarm event and other alarm events Relevance, influence degree of the alarm event to network operation situation can be reacted to a certain extent.
Step S206, using each property parameters, the property parameters prestored and the corresponding relation of assignment are searched respectively, Obtain the assignment of each property parameters.
The property parameters and the corresponding relation of assignment include:
(1) initial point and the corresponding increment point of default critical alarm type corresponding to each alarm type;Wherein, this is tight Anxious alarm type and the business association of operation;
For example, for wireless access business, equipment inaccessible alarm could be arranged to critical alarm type;For banking Business, access class alarm could be arranged to critical alarm type.In assignment, initial point can be set corresponding to each alarm type For 5 points, increment point corresponding to critical alarm type could be arranged to 5 points, thus, it is entered as 10 corresponding to critical alarm type Point.
In addition, according to the needs of specific transactions pattern, webmaster personnel can also be to the alarm of the business model quite sensitive The higher score value of type set, for example, being entered as 20 points corresponding to the alarm type that Link State changes.
(2) each network element associates as equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram;
Generally, the equipment point of the network element of key position is higher than the equipment point of the network element positioned at marginal position in network; For example, when the network element as alarm source is located at the position at edge the most, equipment is divided into a basis point;When network element sets for gateway When standby, equipment is divided into twice of basis point;When network element is two-layer equipment or three-layer equipment, equipment is divided into three times basis point;Work as net When member is located at network topology key point, equipment is divided into four times of bases and graded.Pipe one of often being received when actually realizing, in network is newly set Standby, webmaster personnel need position and other features of the equipment, set the equipment point of the equipment.
(3) respectively operation business is divided in the time corresponding to preset time period;
According to the demand of business model, is set to each period the time point;For example, in the working time of webmaster personnel Interior, the time point of alarm event is relatively low;Within the non-working time of webmaster personnel, the time point of alarm event is higher;Specifically, Between during the day in section, the time point can be 5 points;In night hours section, the time point can be 10 points;Or on weekdays, Time point can be 5 points;At weekend, the time point can be 10 points, etc..For another example, in current business pattern, business busy, The time of alarm event point is higher;Business idle, the time point of alarm event are relatively low.
(4) alarm produces number point corresponding to number;
For example, identical alarm generation is more frequent, the number point of alarm event is higher;Or close type or alarm source Similar alarm generation is more frequent, and the number point of alarm event is higher.Specifically, alarm number often increases once, and number point can With 5 points of increase.
(5) parent alarm, subclass alarm, the alarm of fraternal class corresponding association point respectively in alarm association.
For example, when alarm A occurs, necessarily draw and alert B;Wherein, the parent alarm that A is alarm B is alerted;Alert B To alert the alarm of A subclass;For another example, although alarm C and alarm D always occurs without causality, now, alerts C simultaneously With alarm D fraternal class alarms each other.The alarm event of above-mentioned alarm association is typically, there are, it associates to divide to be higher than to be not present and accused The alarm event of alert relevance;The association point of parent alarm alerts higher than subclass;The pass of the alarm event of fraternal class alarm each other It is same to join split-phase.Specifically, when alarm alerts for parent, association point can be 10 points;When alarm alerts for fraternal class, association Dividing can be 5 points.
Step S208, calculate the summation of the assignment of above-mentioned multiple property parameters;
Step S210, alarm level corresponding with summation is generated for alarm event.
By the above method, the alarm level of current untreated each alarm event can be obtained, for the ease of user Check, these alarm events can be shown according to the alarm level of each alarm event.
In the generation method for the alarm level that the embodiment of the present disclosure provides, pass through the alarm type for alarm event, alarm Source, alarm time, alarm produce the independent assignment of the parameter such as number and alarm association, and the assignment summation based on multiple parameters obtains The alarm level of the alarm event, which need not be respectively configured alarm level for each property parameters in advance, be set with same Standby different property parameters correspond to different multiple alarm levels and compared, the method in the disclosure, for the more of same equipment Individual property parameters finally only embody an alarm level, thus simplify mode of operation.Meanwhile by the way that alarm level will be influenceed Each property parameters represent that implementation is flexible with the form of assignment, can more objectively obtain the alarm event Alarm level, alarm level is had more reference value, enhance the practicality of alarm level.
Embodiment three:
The generation method flow chart of the third alarm level shown in Figure 3, this method still include police with property parameters Type, alarm source, alarm time, alarm illustrate exemplified by producing number and alarm association, and this method comprises the following steps:
Step S302, the alarm event being currently received is defined as to alarm event to be analyzed, it is clear in order to describe, will The alarm event is referred to as current alarm event.
When alarm event occurs for network, alarm level can be identified to the alarm event in real time;Which can be applied Alarm event negligible amounts occur in network side, in the case of alarm level can be generated in time for each alarm event.
Step S304, alarm type, alarm source, alarm time are obtained from current alarm event;Recorded from alarm event The alarm that current alarm event is obtained in table produces number.
There can be relevance with another alarm event in view of the alarm event, such as set membership, brotherhood, because This, alarm association corresponding to the alarm event includes:Parent alarm, subclass alarm, the alarm of fraternal class;The alarm of the present embodiment Event is the event being currently received, and when only subsequently receiving new alarm event again, just can determine that current alarm event is It is no to be alerted for parent, specifically, determining whether current alarm event is that parent alarm can use existing embodiment, this reality Example repeats no more.The present embodiment to current alarm event whether be another kind of alarm event subclass alarm or fraternal class alert into Row explanation, it is specific as follows.
Step S306, judge the current alarm event whether be another alarm event subclass alarm;If it is, perform step Rapid S308;If not, perform step S310.
If current alarm event alerts for the subclass of another alarm event, another alarm event is because the current alarm The appearance of event, assignment can also be updated corresponding to its alarm association, more to tally with the actual situation, based on this, this reality Apply the update mode that example provides following steps S308.
Step S308, the assignment of the alarm association of another alarm event is updated according to association point corresponding to parent alarm, And the alarm level of another alarm event.
It is performed as described above described in example, the property parameters and the corresponding relation of assignment that can be prestored by lookup, obtains every The assignment of individual property parameters., can also be from above-mentioned for association point corresponding to the parent alarm in alarm association in this step Found in corresponding relation.Citing:Current alarm event is a events, and a events are the child alarms of A events, it is assumed that a do not occur During event, A events and the equal onrelevant of any alarm event, its alarm association are entered as 0;And when there are a events, and a things Part is the child alarm event of A events, according to the property parameters and the corresponding relation of assignment prestored, finds the tax of parent alarm Value, it is assumed that be 10, therefore be now updated to the alarm association assignment of A events, i.e., be updated to 10 by original 0.It is based on This, the summation of property parameters assignment corresponding to A events is also required to add 10, and after summation change, the alarm level of A events can basis New summation is updated.
Step S310, judge the current alarm event whether be another alarm event fraternal class alarm;If it is, perform Step S312;If not, perform step S314.
Step S312, according to the tax of the alarm association of another alarm event of association point renewal corresponding to the alarm of fraternal class Value, and the alarm level of another alarm event.
The renewal operation of this step may be referred to above-mentioned steps S308 implementation process.Citing:Current alarm event is b things Part, b events are the fraternal class alarms of B events, it is assumed that when there are not b events, the alarm association of B events is entered as 20, goes out After existing b events, and fraternal class is alerted b events each other with B events, and corresponding according to the property parameters and assignment prestored is closed System, find the assignment of fraternal class alarm, it is assumed that be 5, therefore now the alarm association assignment of B events be updated, i.e., by 20 originally are updated to 25.Based on this, the summation of property parameters assignment corresponding to B events is also required to add 5, after summation change, B things The alarm level of part can be updated according to new summation.
Step S314, using each property parameters of above-mentioned current alarm event, the attribute ginseng prestored is searched respectively The corresponding relation of number and assignment, obtains the assignment of each property parameters.
For above-mentioned alarm event, property parameters are except the alarm type, alarm source, the alarm time that are obtained in step S304 Produced with alarm outside number, if judging that the subclass that the alarm event is another alarm event alerts by step S306, Above-mentioned property parameters also include:Subclass alarm in alarm association, based on this, above-mentioned assignment is also included corresponding to subclass alarm Association point;If judge that the fraternal class that the alarm event is another alarm event alerts by step S310, above-mentioned property parameters Also include:Fraternal class alarm in alarm association, based on this, above-mentioned assignment also includes association point corresponding to the alarm of fraternal class.
Step S316, calculate the summation of the assignment of above-mentioned property parameters.
Step S318, alarm level corresponding with the summation is generated for the current alarm event.
For example, the corresponding alert priority that summation is 1-30 points is not Level 1Alarming;Summation is divided corresponding for 31-60 Alert priority Wei not two level alarm;Summation Wei three-level alarm higher than alert priority corresponding to 60 points;Generally, can be by three Level alarm is arranged to the alarm level of highest priority.
In the generation method for the alarm level that the embodiment of the present disclosure provides, for police's type of alarm event, alarm source, alarm Time, alarm produce the independent assignment of parameter such as number;When judge the alarm event be other alarm events subclass alarm or During fraternal class alarm, the assignment of the alarm association of current alarm event is divided into according to corresponding association, and is updated associated therewith The assignment and alarm level of the alarm association of another alarm event of connection;Which need not be in advance each property parameters Alarm level is respectively configured in combination, compared with different multiple alarm levels are corresponded to the different property parameters of same equipment, this Method in open, an alarm level is finally only embodied for multiple property parameters of same equipment, thus simplify behaviour Make mode.Meanwhile by the way that each property parameters for influenceing alarm level are represented into implementation is flexible with the form of assignment, The alarm level of the alarm event can be more objectively obtained, alarm level is had more reference value, enhances alert level Other practicality.
Example IV:
The flow chart of the generation method of 4th kind of alarm level shown in Figure 4, this method provide in embodiment two Realized on the basis of the generation method of alarm level, this method comprises the following steps:
Step S402, current untreated alarm event is defined as alarm event to be analyzed, or, will currently it receive To alarm event be defined as alarm event to be analyzed;Initialize the assignment sum of zero of current alarm event;
Step S404, obtains alarm type from alarm event, and corresponding from the property parameters and assignment prestored is closed Initial point and increment point corresponding to the alarm type are searched by system, and this initial point and increment point are included in above-mentioned assignment summation;
Step S406, obtains alarm source from alarm event, from the property parameters and the corresponding relation of assignment prestored Equipment corresponding to the alarm source point is searched, the equipment point is added up in above-mentioned assignment summation;
Step S408, obtains alarm time from alarm event, and corresponding from the property parameters and assignment prestored is closed The time point corresponding to the alarm time is searched by system, and the time point is added up in above-mentioned assignment summation;
Step S410, the alarm that alarm event is obtained from alarm event record sheet produces number, from the category prestored Property parameter and the corresponding relation of assignment search the alarm and produce number point corresponding to number, the number point is added up into above-mentioned assignment In summation;
Step S412, alarm level corresponding with above-mentioned assignment summation is generated for alarm event;
Step S414, according to the relation of alarm event in above-mentioned alarm event record sheet and other alarm events, it is determined that accusing The alarm association of alert event, parent in the alarm association is searched from the property parameters and the corresponding relation of assignment prestored Alarm, subclass alarm, the alarm of fraternal class corresponding association point respectively, it is total according to the assignment of the association point renewal current alarm event With and alarm level, generate the final alarm level of the alarm event.
The embodiment of the present disclosure provide alarm level generation method in, by alarm event in itself and alarm event note Record table obtains many kinds of parameters attribute of the alarm event, often obtains a kind of parameter attribute, i.e., according to the assignment of the parameter attribute more The assignment summation of the new alarm event, the alarm level of alarm event is then generated further according to final assignment summation;Which Alarm level need not be respectively configured for the combination of each property parameters in advance, the different property parameters from same equipment are corresponding Different multiple alarm levels are compared, the method in the disclosure, are finally only embodied for multiple property parameters of same equipment One alarm level, thus simplify mode of operation.Meanwhile by the way that each property parameters for influenceing alarm level are used into assignment Form represent, implementation is flexible, can more objectively obtain the alarm level of the alarm event, have more alarm level There is reference value, enhance the practicality of alarm level.
Embodiment five:
Corresponding to above method embodiment, the structural representation of the generating means of the first alarm level shown in Figure 5 Figure, the device include such as lower part:
Parameter acquisition module 50, for obtaining multiple property parameters of alarm event to be analyzed;
Parameter assignment module 51, for being each attribute according to the property parameters and the corresponding relation of assignment prestored Parameter assignment;
Summation computing module 52, the summation of the assignment for calculating each property parameters;
Alarm level generation module 53, for generating alarm level corresponding with summation for alarm event.
The structural representation of the generating means of second of alarm level shown in Figure 6;The device is in the announcement shown in Fig. 5 Realized on the basis of the generating means of alert rank;Further, above-mentioned parameter acquisition module includes:
First parameter acquiring unit 501, if including alarm type, alarm source and alarm time for property parameters, from Alarm type, alarm source and alarm time are obtained in alarm event;
Second parameter acquiring unit 502, if including alarm for property parameters produces number, from alarm event record sheet The middle alarm for obtaining alarm event produces number;
3rd parameter acquiring unit 503, if including alarm association for property parameters, according to alarm event record sheet The relation of middle alarm event and other alarm events, determine the alarm association of alarm event.
The device also includes with lower module:
First update module 60, for when subclass alarm of the alarm event for another alarm event, being alerted according to parent The assignment of the alarm association of another alarm event of corresponding association point renewal, and the alarm level of another alarm event;
Second update module 61, for when alarm event for another alarm event fraternal class alarm when, according to fraternal class The assignment of the alarm association of another alarm event of association point renewal corresponding to alarm, and the alert level of another alarm event Not.
Optionally, parameter assignment module 51 is specifically used for using following property parameters and the corresponding relation of assignment for each category Property parameter assignment:
If the property parameters include alarm type, the corresponding relation of the property parameters and assignment comprises at least: Initial point and the corresponding increment point of default critical alarm type corresponding to each alarm type, wherein, the critical alarm class Type and the business association of operation;
If the property parameters include alarm source, the corresponding relation of the property parameters and assignment comprises at least:Respectively Network element associates as equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram;
If the property parameters include alarm time, the corresponding relation of the property parameters and assignment comprises at least: Each operation business is in the time corresponding to preset time period point;
If the property parameters produce number including alerting, the corresponding relation of the property parameters and assignment at least wraps Include:Alarm produces number point corresponding to number;
If the property parameters include alarm association, the corresponding relation of the property parameters and assignment at least wraps Include:Parent alarm, subclass alarm, the alarm of fraternal class corresponding association point respectively in alarm association.
In the generating means of above-mentioned alarm level, the implementation and effect of modules may be referred to above method implementation Example, is repeated no more here.
The generating means for the alarm level that the embodiment of the present disclosure provides, by independent for each property parameters of alarm event Assignment, the summation of the assignment based on each property parameters obtains the alarm level of the alarm event, this with each property parameters Assignment summation obtain alert level otherwise, it is not necessary to alarm level is respectively configured in the combination for each property parameters in advance, Compared with different multiple alarm levels are corresponded to the different property parameters of same equipment, the method in the disclosure, for same Multiple property parameters of equipment finally only embody an alarm level, thus simplify mode of operation.Meanwhile by that will influence Each property parameters of alarm level represent that implementation is flexible with the form of assignment, can more objectively obtain the announcement The alarm level of alert event, makes alarm level have more reference value, enhances the practicality of alarm level.
A kind of structural representation of Network Management Equipment shown in Figure 7;The equipment includes memory 70 and processor 71;Its In, memory 70 is used to store one or more computer instruction, and one or more computer instruction is executed by processor, with reality The generation method of existing above-mentioned alarm level.
Further, the Network Management Equipment shown in Fig. 7 also includes bus 72 and communication interface 73, processor 71, communication interface 73 Connected with memory 70 by bus 72.
Wherein, memory 70 may include high-speed random access memory (RAM, Random Access Memory), Non-labile memory (non-volatile memory), for example, at least a magnetic disk storage may also be included.By extremely A few communication interface 73 (can be wired or wireless) is realized logical between the system network element and at least one other network element Letter connection, can use internet, wide area network, LAN, Metropolitan Area Network (MAN) etc..Bus 72 can be isa bus, pci bus or Eisa bus etc..The bus can be divided into address bus, data/address bus, controlling bus etc..For ease of representing, only used in Fig. 7 One four-headed arrow represents, it is not intended that an only bus or a type of bus.
Processor 71 is probably a kind of IC chip, has the disposal ability of signal.In implementation process, above-mentioned side Each step of method can be completed by the integrated logic circuit of the hardware in processor 71 or the instruction of software form.Above-mentioned Processor 71 can be general processor, including central processing unit (Central Processing Unit, abbreviation CPU), network Processor (Network Processor, abbreviation NP) etc.;It can also be digital signal processor (Digital Signal Processing, abbreviation DSP), application specific integrated circuit (Application Specific Integrated Circuit, referred to as ASIC), ready-made programmable gate array (Field-Programmable Gate Array, abbreviation FPGA) or other are programmable Logical device, discrete gate or transistor logic, discrete hardware components.It can realize or perform in the embodiment of the present invention Disclosed each method, step and logic diagram.General processor can be microprocessor or the processor can also be appointed What conventional processor etc..The step of method with reference to disclosed in the embodiment of the present invention, can be embodied directly in hardware decoding processing Device performs completion, or performs completion with the hardware in decoding processor and software module combination.Software module can be located at Machine memory, flash memory, read-only storage, programmable read only memory or electrically erasable programmable memory, register etc. are originally In the ripe storage medium in field.The storage medium is located at memory 70, and processor 71 reads the information in memory 70, with reference to Its hardware completes the step of method of previous embodiment.
Further, the embodiment of the present invention additionally provides a kind of machinable medium, and the machinable medium is deposited Machine-executable instruction is contained, when being called and being performed by processor, machine-executable instruction promotes the machine-executable instruction Processor realizes the generation method of above-mentioned alarm level.
The computer program production of the generation method of the alarm level that the embodiment of the present disclosure is provided, device and Network Management Equipment Product, including the machinable medium of program code is stored, the instruction that described program code includes can be used for before execution Method described in embodiment of the method, specific implementation can be found in embodiment of the method, will not be repeated here.
If the function is realized in the form of SFU software functional unit and is used as independent production marketing or in use, can be with It is stored in a computer read/write memory medium.Based on such understanding, the technical scheme of the disclosure is substantially in other words The part to be contributed to prior art or the part of the technical scheme can be embodied in the form of software product, the meter Calculation machine software product is stored in a storage medium, including some instructions are causing a computer equipment (can be People's computer, server, or network equipment etc.) perform each embodiment methods described of the disclosure all or part of step. And foregoing storage medium includes:USB flash disk, mobile hard disk, read-only storage (ROM, Read-Only Memory), arbitrary access are deposited Reservoir (RAM, Random Access Memory), magnetic disc or CD etc. are various can be with the medium of store program codes.
Finally it should be noted that:The embodiment of embodiment described above, the only disclosure, to illustrate the disclosure Technical scheme, rather than its limitations, the protection domain of the disclosure is not limited thereto, although with reference to the foregoing embodiments to this public affairs Open and be described in detail, it will be understood by those within the art that:Any one skilled in the art In the technical scope that the disclosure discloses, it can still modify to the technical scheme described in previous embodiment or can be light Change is readily conceivable that, or equivalent substitution is carried out to which part technical characteristic;And these modifications, change or replacement, do not make The essence of appropriate technical solution departs from the spirit and scope of embodiment of the present disclosure technical scheme, should all cover the protection in the disclosure Within the scope of.Therefore, the protection domain of the disclosure described should be defined by scope of the claims.

Claims (12)

  1. A kind of 1. generation method of alarm level, it is characterised in that including:
    Obtain multiple property parameters of alarm event to be analyzed;
    According to the property parameters and the corresponding relation of assignment prestored, for each property parameters assignment;
    Calculate the summation of the assignment of each property parameters;
    Alarm level corresponding with the summation is generated for the alarm event.
  2. 2. according to the method for claim 1, it is characterised in that the property parameters comprise at least following two:Alert class Type, alarm source, alarm time, alarm produce number and alarm association.
  3. 3. according to the method for claim 2, it is characterised in that the multiple attributes ginseng for obtaining alarm event to be analyzed Several steps, including:
    If the property parameters include alarm type, alarm source and alarm time, alarm class is obtained from the alarm event Type, alarm source and alarm time;
    If the property parameters, which include alarm, produces number, the alarm of the alarm event is obtained from alarm event record sheet Produce number;
    If the property parameters include alarm association, the alarm event according to the alarm event record sheet with it is other The relation of alarm event, determine the alarm association of the alarm event.
  4. 4. according to the method for claim 1, it is characterised in that
    If the property parameters include alarm type, the corresponding relation of the property parameters and assignment comprises at least:Each Increment point corresponding to initial point and default critical alarm type corresponding to alarm type, wherein, the critical alarm type with The business association of operation;
    If the property parameters include alarm source, the corresponding relation of the property parameters and assignment comprises at least:Each network element As equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram associates;
    If the property parameters include alarm time, the corresponding relation of the property parameters and assignment comprises at least:Each fortune Industry business is in the time corresponding to preset time period point;
    If the property parameters produce number including alerting, the corresponding relation of the property parameters and assignment comprises at least: Alarm produces number point corresponding to number;
    If the property parameters include alarm association, the corresponding relation of the property parameters and assignment comprises at least:Accuse Parent alarm, subclass alarm, fraternal class alert association point corresponding to difference in alert relevance.
  5. 5. according to the method for claim 4, it is characterised in that methods described also includes:
    When subclass alarm of the alarm event for another alarm event, according to association point renewal corresponding to parent alarm The assignment of the alarm association of another alarm event, and the alarm level of another alarm event;
    When fraternal class alarm of the alarm event for another alarm event, according to association point corresponding to the fraternal class alarm Update the assignment of the alarm association of another alarm event, and the alarm level of another alarm event.
  6. A kind of 6. generating means of alarm level, it is characterised in that including:
    Parameter acquisition module, for obtaining multiple property parameters of alarm event to be analyzed;
    Parameter assignment module, for according to the property parameters and the corresponding relation of assignment prestored, joining for each attribute Number assignment;
    Summation computing module, the summation of the assignment for calculating each property parameters;
    Alarm level generation module, for generating alarm level corresponding with the summation for the alarm event.
  7. 7. device according to claim 6, it is characterised in that the property parameters comprise at least following two:Alert class Type, alarm source, alarm time, alarm produce number and alarm association.
  8. 8. device according to claim 7, it is characterised in that the parameter acquisition module includes:
    First parameter acquiring unit, if including alarm type, alarm source and alarm time for the property parameters, from described Alarm type, alarm source and alarm time are obtained in alarm event;
    Second parameter acquiring unit, if including alarm for the property parameters produces number, from alarm event record sheet The alarm for obtaining the alarm event produces number;
    3rd parameter acquiring unit, if including alarm association for the property parameters, recorded according to the alarm event The relation of alarm event described in table and other alarm events, determine the alarm association of the alarm event.
  9. 9. device according to claim 6, it is characterised in that the parameter assignment module is specifically used for using following attributes The corresponding relation of parameter and assignment is each property parameters assignment, wherein,
    If the property parameters include alarm type, the corresponding relation of the property parameters and assignment comprises at least:Each Increment point corresponding to initial point and default critical alarm type corresponding to alarm type, wherein, the critical alarm type with The business association of operation;
    If the property parameters include alarm source, the corresponding relation of the property parameters and assignment comprises at least:Each network element As equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram associates;
    If the property parameters include alarm time, the corresponding relation of the property parameters and assignment comprises at least:Each fortune Industry business is in the time corresponding to preset time period point;
    If the property parameters produce number including alerting, the corresponding relation of the property parameters and assignment comprises at least: Alarm produces number point corresponding to number;
    If the property parameters include alarm association, the corresponding relation of the property parameters and assignment comprises at least:Accuse Parent alarm, subclass alarm, fraternal class alert association point corresponding to difference in alert relevance.
  10. 10. device according to claim 9, it is characterised in that described device also includes:
    First update module, for when subclass alarm of the alarm event for another alarm event, being accused according to the parent The assignment of the alarm association of association point renewal another alarm event corresponding to alert, and the announcement of another alarm event Alert rank;
    Second update module, for when the alarm event for another alarm event fraternal class alarm when, according to the brother The assignment of the alarm association of association point renewal another alarm event corresponding to class alarm, and another alarm event Alarm level.
  11. 11. a kind of Network Management Equipment, it is characterised in that including memory and processor;Wherein, the memory is used to store one Or a plurality of computer instruction, one or more computer instruction is by the computing device, to realize claim 1 to 5 Method described in any one.
  12. 12. a kind of machinable medium, it is characterised in that the machinable medium is stored with the executable finger of machine Order, for the machine-executable instruction when being called and being performed by processor, the machine-executable instruction promotes the processor Realize the method described in any one of claim 1 to 5.
CN201710614810.XA 2017-07-25 2017-07-25 Method and device for generating alarm level and network management equipment Active CN107547262B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710614810.XA CN107547262B (en) 2017-07-25 2017-07-25 Method and device for generating alarm level and network management equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710614810.XA CN107547262B (en) 2017-07-25 2017-07-25 Method and device for generating alarm level and network management equipment

Publications (2)

Publication Number Publication Date
CN107547262A true CN107547262A (en) 2018-01-05
CN107547262B CN107547262B (en) 2021-07-06

Family

ID=60970782

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710614810.XA Active CN107547262B (en) 2017-07-25 2017-07-25 Method and device for generating alarm level and network management equipment

Country Status (1)

Country Link
CN (1) CN107547262B (en)

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108829794A (en) * 2018-06-04 2018-11-16 北京交通大学 Alert analysis method based on interval graph
CN109412852A (en) * 2018-10-29 2019-03-01 京信通信***(中国)有限公司 Alarm method, device, computer equipment and storage medium
CN109639500A (en) * 2018-12-30 2019-04-16 博立信(洛阳)科技有限公司 The Real-time Alarm generation method of internet of things oriented Application in Sensing
CN109669836A (en) * 2018-09-25 2019-04-23 平安普惠企业管理有限公司 Intelligent IT O&M analysis method, device, equipment and readable storage medium storing program for executing
CN110633274A (en) * 2018-06-22 2019-12-31 北京神州泰岳软件股份有限公司 Alarm management method and device
CN110932901A (en) * 2019-11-29 2020-03-27 深圳市计通智能技术有限公司 Alarm level adjusting method and system
CN111191937A (en) * 2019-12-31 2020-05-22 深圳市计通智能技术有限公司 Alarm hazard assessment method and system and terminal equipment
CN111564027A (en) * 2020-05-08 2020-08-21 北京深演智能科技股份有限公司 Alarm information processing method and device
CN111669282A (en) * 2019-03-08 2020-09-15 华为技术有限公司 Method, device and computer storage medium for identifying suspected root cause alarm
WO2020215217A1 (en) * 2019-04-23 2020-10-29 西门子(中国)有限公司 Warning evaluation method for device failure in baggage sorting system, apparatus, and computer readable medium
CN111915857A (en) * 2020-07-24 2020-11-10 杭州海康威视***技术有限公司 Alarm level determination method and device, electronic equipment and storage medium
CN113949621A (en) * 2021-12-22 2022-01-18 北京微步在线科技有限公司 Alarm correlation method and device for intrusion event, electronic equipment and storage medium
CN113949590A (en) * 2021-12-21 2022-01-18 济南市康养事业发展中心 Method, system and terminal for determining safety alarm event level

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101192962A (en) * 2006-11-24 2008-06-04 中兴通讯股份有限公司 Generation and recovery method for adhesion value alarm in telecom network management system
CN101277218A (en) * 2008-05-04 2008-10-01 中兴通讯股份有限公司 Dynamic analysis system and method for network alarm
US20090199045A1 (en) * 2008-02-01 2009-08-06 Dainippon Screen Mfg. Co., Ltd. Software fault management apparatus, test management apparatus, fault management method, test management method, and recording medium
CN102333002A (en) * 2011-11-04 2012-01-25 迈普通信技术股份有限公司 Method and device for sorting alarms
CN104468166A (en) * 2013-09-18 2015-03-25 中兴通讯股份有限公司 A method and system for determining alarm processing priority
US9652972B1 (en) * 2015-03-26 2017-05-16 Sprint Communications Company L.P. Maintenance of telecommunications network infrastructure based on alarm scoring

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101192962A (en) * 2006-11-24 2008-06-04 中兴通讯股份有限公司 Generation and recovery method for adhesion value alarm in telecom network management system
US20090199045A1 (en) * 2008-02-01 2009-08-06 Dainippon Screen Mfg. Co., Ltd. Software fault management apparatus, test management apparatus, fault management method, test management method, and recording medium
CN101277218A (en) * 2008-05-04 2008-10-01 中兴通讯股份有限公司 Dynamic analysis system and method for network alarm
CN102333002A (en) * 2011-11-04 2012-01-25 迈普通信技术股份有限公司 Method and device for sorting alarms
CN104468166A (en) * 2013-09-18 2015-03-25 中兴通讯股份有限公司 A method and system for determining alarm processing priority
US9652972B1 (en) * 2015-03-26 2017-05-16 Sprint Communications Company L.P. Maintenance of telecommunications network infrastructure based on alarm scoring

Cited By (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108829794A (en) * 2018-06-04 2018-11-16 北京交通大学 Alert analysis method based on interval graph
CN108829794B (en) * 2018-06-04 2022-04-12 北京交通大学 Alarm analysis method based on interval graph
CN110633274A (en) * 2018-06-22 2019-12-31 北京神州泰岳软件股份有限公司 Alarm management method and device
CN110633274B (en) * 2018-06-22 2022-07-15 北京神州泰岳软件股份有限公司 Alarm management method and device
CN109669836A (en) * 2018-09-25 2019-04-23 平安普惠企业管理有限公司 Intelligent IT O&M analysis method, device, equipment and readable storage medium storing program for executing
CN109412852A (en) * 2018-10-29 2019-03-01 京信通信***(中国)有限公司 Alarm method, device, computer equipment and storage medium
CN109639500A (en) * 2018-12-30 2019-04-16 博立信(洛阳)科技有限公司 The Real-time Alarm generation method of internet of things oriented Application in Sensing
CN111669282A (en) * 2019-03-08 2020-09-15 华为技术有限公司 Method, device and computer storage medium for identifying suspected root cause alarm
CN111669282B (en) * 2019-03-08 2023-10-24 华为技术有限公司 Method, device and computer storage medium for identifying suspected root cause alarm
WO2020215217A1 (en) * 2019-04-23 2020-10-29 西门子(中国)有限公司 Warning evaluation method for device failure in baggage sorting system, apparatus, and computer readable medium
CN110932901A (en) * 2019-11-29 2020-03-27 深圳市计通智能技术有限公司 Alarm level adjusting method and system
CN110932901B (en) * 2019-11-29 2022-11-15 深圳市计通智能技术有限公司 Alarm level adjusting method and system
CN111191937A (en) * 2019-12-31 2020-05-22 深圳市计通智能技术有限公司 Alarm hazard assessment method and system and terminal equipment
CN111191937B (en) * 2019-12-31 2023-12-29 深圳市计通智能技术有限公司 Alarm hazard assessment method, system and terminal equipment
CN111564027A (en) * 2020-05-08 2020-08-21 北京深演智能科技股份有限公司 Alarm information processing method and device
CN111915857A (en) * 2020-07-24 2020-11-10 杭州海康威视***技术有限公司 Alarm level determination method and device, electronic equipment and storage medium
CN113949590A (en) * 2021-12-21 2022-01-18 济南市康养事业发展中心 Method, system and terminal for determining safety alarm event level
CN113949621A (en) * 2021-12-22 2022-01-18 北京微步在线科技有限公司 Alarm correlation method and device for intrusion event, electronic equipment and storage medium
CN113949621B (en) * 2021-12-22 2022-03-29 北京微步在线科技有限公司 Alarm correlation method and device for intrusion event, electronic equipment and storage medium

Also Published As

Publication number Publication date
CN107547262B (en) 2021-07-06

Similar Documents

Publication Publication Date Title
CN107547262A (en) Generation method, device and the Network Management Equipment of alarm level
WO2017165018A1 (en) Automated event id field analysis on heterogeneous logs
CN104391934A (en) Data calibration method and device
CN109086182A (en) The method and terminal device of database auto-alarming
US20230040635A1 (en) Graph-based impact analysis of misconfigured or compromised cloud resources
CN112148733A (en) Method, device, electronic device and computer readable medium for determining fault type
CN111258798A (en) Fault positioning method and device for monitoring data, computer equipment and storage medium
CN111177398B (en) Method and device for updating organization architecture
CN115203435A (en) Entity relation generation method and data query method based on knowledge graph
CN113313280A (en) Cloud platform inspection method, electronic equipment and nonvolatile storage medium
CN112559291A (en) Resource monitoring method and device, electronic equipment and storage medium
CN115514558A (en) Intrusion detection method, device, equipment and medium
CN111652658A (en) Portrait fusion method, apparatus, electronic device and computer readable storage medium
CN114610372A (en) Processing method and device for review file, storage medium, processor and terminal
CN106304084B (en) Information processing method and device
Mercian et al. Mind the semantic gap: Policy intent inference from network metadata
US20210158835A1 (en) Intent-based network validation
CN106407212B (en) A kind of classification of network account determines method, clustering objects method and device
CN116483707A (en) Test method, test device, test apparatus, test program, and test program
CN109284828A (en) A kind of hyper parameter tuning method, device and equipment
CN113238748B (en) Direct current control and protection program page modification and verification method, device, terminal and medium
CN107743155A (en) IP mask methods, device, electronic equipment and storage medium
CN110019321A (en) Problem delimits method, device and equipment
JP2010072876A (en) Rule creation program, rule creation method, and rule creation device
CN107800553A (en) A kind of method and apparatus of management equipment failure

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant