CN107547262A - Generation method, device and the Network Management Equipment of alarm level - Google Patents
Generation method, device and the Network Management Equipment of alarm level Download PDFInfo
- Publication number
- CN107547262A CN107547262A CN201710614810.XA CN201710614810A CN107547262A CN 107547262 A CN107547262 A CN 107547262A CN 201710614810 A CN201710614810 A CN 201710614810A CN 107547262 A CN107547262 A CN 107547262A
- Authority
- CN
- China
- Prior art keywords
- alarm
- property parameters
- assignment
- event
- association
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Alarm Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Present disclose provides a kind of generation method of alarm level, device and Network Management Equipment;Wherein, this method includes:Obtain multiple property parameters of alarm event to be analyzed;According to the property parameters and the corresponding relation of assignment prestored, for each property parameters assignment;Calculate the summation of the assignment of each property parameters;Alarm level corresponding with the summation is generated for the alarm event.The disclosure is by the way that each property parameters for influenceing alarm level are represented with the form of assignment, assignment summation generation alarm level based on each property parameters corresponding to alarm event, simplify operation, and it can more objectively obtain the alarm level of the alarm event, alarm level is had more reference value, enhance the practicality of alarm level.
Description
Technical field
This disclosure relates to Internet technical field, more particularly, to a kind of generation method of alarm level, device and webmaster
Equipment.
Background technology
As internet scale increases increasingly, and the rapid increase of IT business amount, caused announcement during the network operation
Police is also more and more numerous and more jumbled.In order to ensure the stability of the network operation, webmaster personnel need to choose urgent journey from substantial amounts of alarm
The alarm that degree is high or coverage is big, carries out priority treatment.
In order to set the priority of alarm, generally alarm type and alarm source are set as the property parameters of alarm event
Alarm level.For example, being alerted for A classes, when its alarm source is M equipment, the priority of alarm is important, and its alarm source sets for N
When standby, the priority of alarm is secondary;Alerted for B classes, when its alarm source is M equipment, the priority of alarm is secondary, and it is accused
When alert source is N equipment, the priority of alarm is important.
, it is necessary to set alert priority respectively on different alarm sources for same type of alarm in aforesaid way,
When alarm type in network and more alarm source, workload is huge.And this static alert priority is difficult to truly
Reflect the significance level of alarm, its reference value is relatively low, and practicality is poor.
The content of the invention
In view of this, the purpose of the disclosure is to provide a kind of generation method of alarm level, device and Network Management Equipment, with
The flexibility that alarm level is set is improved, simplifies mode of operation, while strengthen the practicality of alarm level.
To achieve these goals, the technical scheme that the disclosure uses is as follows:
In a first aspect, present disclose provides a kind of generation method of alarm level, including:Obtain alarm event to be analyzed
Multiple property parameters;It is each property parameters assignment according to the property parameters and the corresponding relation of assignment prestored;Calculate
The summation of the assignment of each property parameters;Alarm level corresponding with summation is generated for alarm event.
Second aspect, present disclose provides a kind of generating means of alarm level, including:Parameter acquisition module, for obtaining
Take multiple property parameters of alarm event to be analyzed;Parameter assignment module, for according to the property parameters and tax prestored
The corresponding relation of value, it is each property parameters assignment;Summation computing module, for calculate each property parameters assignment it is total
With;Alarm level generation module, for generating alarm level corresponding with summation for alarm event.
The third aspect, present disclose provides a kind of Network Management Equipment, including memory and processor;Wherein, memory is used for
One or more computer instruction is stored, one or more computer instruction is executed by processor, to realize the above method.
Fourth aspect, present disclose provides a kind of machinable medium, machinable medium is stored with machine
Executable instruction, for machine-executable instruction when being called and being performed by processor, machine-executable instruction promotes processor to realize
The above method.
Generation method, device, Network Management Equipment and the machinable medium of above-mentioned alarm level, by for alarm event
The independent assignment of each property parameters, the summation of the assignment based on each property parameters obtains the alarm level of the alarm event,
It is this that alert level is obtained otherwise with the assignment summation of each property parameters, it is not necessary to match somebody with somebody respectively for each property parameters in advance
Alarm level is put, compared with different multiple alarm levels are corresponded to the different property parameters of same equipment, the side in the disclosure
Method, an alarm level is finally only embodied for multiple property parameters of same equipment, thus simplify mode of operation.Together
When, can be more objective by the way that each property parameters for influenceing alarm level are represented into implementation is flexible with the form of assignment
Obtain the alarm level of the alarm event with seeing, alarm level is had more reference value, enhance the practicality of alarm level.
Other feature and advantage of the disclosure will illustrate in the following description, or, Partial Feature and advantage can be with
Deduce from specification or unambiguously determine, or the above-mentioned technology by implementing the disclosure can be learnt.
To enable the above objects, features and advantages of the present invention to become apparent, preferred embodiment cited below particularly, and coordinate
Appended accompanying drawing, is described in detail below.
Brief description of the drawings
, below will be to specific in order to illustrate more clearly of disclosure embodiment or technical scheme of the prior art
The required accompanying drawing used is briefly described in embodiment or description of the prior art, it should be apparent that, in describing below
Accompanying drawing is some embodiments of the disclosure, for those of ordinary skill in the art, before creative work is not paid
Put, other accompanying drawings can also be obtained according to these accompanying drawings.
Fig. 1 is the generation method flow chart for the first alarm level that the embodiment of the present disclosure provides;
Fig. 2 is the generation method flow chart for second of alarm level that the embodiment of the present disclosure provides;
Fig. 3 is the generation method flow chart for the third alarm level that the embodiment of the present disclosure provides;
Fig. 4 is the generation method flow chart for the 4th kind of alarm level that the embodiment of the present disclosure provides;
Fig. 5 is the generating means structural representation for the first alarm level that the embodiment of the present disclosure provides;
Fig. 6 is the structural representation of the generating means for second of alarm level that the embodiment of the present disclosure provides;
Fig. 7 is a kind of structural representation for Network Management Equipment that the embodiment of the present disclosure provides.
Embodiment
To make the purpose, technical scheme and advantage of the embodiment of the present disclosure clearer, below in conjunction with accompanying drawing to the disclosure
Technical scheme be clearly and completely described, it is clear that described embodiment is disclosure part of the embodiment, rather than
Whole embodiments.Based on the embodiment in the disclosure, those of ordinary skill in the art are not making creative work premise
Lower obtained every other embodiment, belong to the scope of disclosure protection.
In order that webmaster personnel rapidly identify significant alarm, it is necessary to using more flexible, accurate from substantial amounts of alarm
Alarm level generating mode so that webmaster personnel can in time know and solve important network failure;Based on the purpose,
The embodiment of the present disclosure provides a kind of generation method of alarm level, device, Network Management Equipment and machinable medium.The skill
Art can be widely used in the Network Management Equipment of wireless access class business, can also be applied to the net of a variety of large enterprises such as bank
In tube apparatus, and in the equipment such as other servers for needing configuration alarm to remind;The technology can use related software or
Hardware is realized, is described below by embodiment.
Embodiment one:
The generation method flow chart of the first alarm level shown in Figure 1, this method can apply to Network Management Equipment
In, this method comprises the following steps:
Step S102, obtain multiple property parameters of alarm event to be analyzed;
Wherein, the property parameters can comprise at least following two:Alarm type, alarm source, alarm time, alarm produce
Number and alarm association;
Above-mentioned alarm event can obtain in several ways, for example, in equipment operation, network management or running software mistake
Meeting generation system daily record, the system journal can reflect the operation conditions of the network equipment, software and network in journey;By the system day
Will is matched with corresponding rule base, and thing is alerted according to corresponding to matching result judges whether to need to generate the system journal
Part;For another example, in SNMP (Simple Network Management Protocol, Simple Network Management Protocol), equipment, net
The objects such as network send unsolicited message by TRAP (port numbers) to Network Management Equipment, are occurred with expressing a certain event, non-by this
OID (Object identifier, object identifier) value in request message judges whether the message belongs to alarm event.
When actually realizing, for a certain alarm event, whole property parameters of the alarm event can be obtained, also may be used
To obtain a part of property parameters of the alarm event;In order to ensure the objectivity of the alarm level of generation and referring to property, lead to
Often at least obtain two attribute parameters of the alarm event.
Step S104, it is each property parameters assignment according to the property parameters and the corresponding relation of assignment prestored;
The assignment procedure can use following two kinds of embodiments:
A kind of optional embodiment is:User passes through according to the property parameters prestored and the corresponding relation of assignment
Interactive interface is each property parameters assignment of current alarm event, and Network Management Equipment receives and preserves each property parameters assignment;
Another optional embodiment is:Network Management Equipment can be based on the property parameters prestored and pair of assignment
It should be related to, be the parameters assignment of current alarm event by way of searching, comparing;The property parameters prestored and
The corresponding relation of assignment can be stored in table form, and assignment can be represented with numerical value, assignment corresponding to each property parameters
Size can also can directly replicate the property parameters and the corresponding relation of assignment according to statistics experience setting from miscellaneous equipment,
The present invention is to this without limiting.
Step S106, calculate the summation of the assignment of each above-mentioned property parameters;For example, the assignment phase by each property parameters
Add, obtain summation;
Step S108, alarm level corresponding with above-mentioned summation is generated for the alarm event.
Alarm level in the present embodiment is to embody the importance of alarm severity, and the value of summation is bigger, corresponding alarm
Rank is more important, based on this, can the summation of property parameters assignment according to corresponding to alarm event will alert and position different level
Not, such as:Summation is Level 1Alarming 0~30, and summation alerts 31~60 for two level, summation being accused for three-level higher than 60
It is alert.
In the generation method for the alarm level that the embodiment of the present disclosure provides, pass through each property parameters list for alarm event
Only assignment, the summation of the assignment based on each property parameters obtains the alarm level of the alarm event, this to be joined with each attribute
Several assignment summations obtain alert level otherwise, it is not necessary to alarm level is respectively configured for each property parameters in advance, it is and same
The different property parameters of one equipment correspond to different multiple alarm levels and compared, the method in the disclosure, for same equipment
Multiple property parameters finally only embody an alarm level, thus simplify mode of operation.Meanwhile by will influence to alert
Each property parameters of rank represent that implementation is flexible with the form of assignment, can more objectively obtain the alarm thing
The alarm level of part, alarm level is had more reference value, enhance the practicality of alarm level.
Embodiment two:
The generation method flow chart of second of alarm level shown in Figure 2, wherein, if property parameters include alarm
Type, then property parameters and the corresponding relation of assignment comprise at least:Initially divide corresponding to each alarm type and default urgent
Increment point corresponding to alarm type, wherein, the critical alarm type and the business association of operation;
If property parameters include alarm source, the corresponding relation of property parameters and assignment comprises at least:Each network element conduct
Equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram associate;
If property parameters include alarm time, the corresponding relation of property parameters and assignment comprises at least:Each operation industry
Business is in the time corresponding to preset time period point;
If property parameters produce number including alerting, the corresponding relation of property parameters and assignment comprises at least:Alarm
Produce number point corresponding to number;
If property parameters include alarm association, the corresponding relation of property parameters and assignment comprises at least:Alarm is closed
Parent alarm, subclass alarm, fraternal class alert association point corresponding to difference in connection property.
Method provided in this implementation includes alarm type, alarm source, alarm time, alarm generation time with property parameters
Illustrated exemplified by number and alarm association, this method comprises the following steps:
Step S202, current untreated alarm event is defined as alarm event to be analyzed.
The alarm event may come from the network element device in network, and these network element devices are by Network Management Equipment management and prison
Control;When alarm event occurs for network, first alarm event can be preserved into an alarm event table, then one by one in the table
Each alarm event generation alarm level;The specific form of the alarm event table may be referred to correlation technique realization, for example, should
Table includes:Alarm event mark, receive the elements such as time.
When which is particularly applicable to network side within a very short time while a large amount of alarm events occurs, it is impossible in time
In the case of alarm level being generated for each alarm event.
Step S204, alarm type, alarm source, alarm time are obtained from alarm event;From alarm event record sheet
The alarm for obtaining alarm event produces number;According to the relation of alarm event in alarm event record sheet and other alarm events,
Determine the alarm association of alarm event.
Specifically, when a certain alarm event reaches, the alarm event carries alarm type, alarm source, alarm in itself
The information such as time;Wherein, the alarm type includes the polytypes such as interface down, equipment is unreachable;Alarm source is usually network
Inside break down or abnormal equipment;Alarm time can be the time that alarm occurs, or receive the alarm event
Time.
When alarm event is not solved, it is generally held in a pending list, passes through statistics and current alarm
The sum of event identical alarm time, the alarm that can obtain the alarm event produce number;Further, due in network
Annexation and data communications context between equipment be present, thus association is also usually there will be between each alarm event, for example,
When a certain alarm event occurs, another alarm event occurs immediately;Therefore, the alarm between alarm event and other alarm events
Relevance, influence degree of the alarm event to network operation situation can be reacted to a certain extent.
Step S206, using each property parameters, the property parameters prestored and the corresponding relation of assignment are searched respectively,
Obtain the assignment of each property parameters.
The property parameters and the corresponding relation of assignment include:
(1) initial point and the corresponding increment point of default critical alarm type corresponding to each alarm type;Wherein, this is tight
Anxious alarm type and the business association of operation;
For example, for wireless access business, equipment inaccessible alarm could be arranged to critical alarm type;For banking
Business, access class alarm could be arranged to critical alarm type.In assignment, initial point can be set corresponding to each alarm type
For 5 points, increment point corresponding to critical alarm type could be arranged to 5 points, thus, it is entered as 10 corresponding to critical alarm type
Point.
In addition, according to the needs of specific transactions pattern, webmaster personnel can also be to the alarm of the business model quite sensitive
The higher score value of type set, for example, being entered as 20 points corresponding to the alarm type that Link State changes.
(2) each network element associates as equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram;
Generally, the equipment point of the network element of key position is higher than the equipment point of the network element positioned at marginal position in network;
For example, when the network element as alarm source is located at the position at edge the most, equipment is divided into a basis point;When network element sets for gateway
When standby, equipment is divided into twice of basis point;When network element is two-layer equipment or three-layer equipment, equipment is divided into three times basis point;Work as net
When member is located at network topology key point, equipment is divided into four times of bases and graded.Pipe one of often being received when actually realizing, in network is newly set
Standby, webmaster personnel need position and other features of the equipment, set the equipment point of the equipment.
(3) respectively operation business is divided in the time corresponding to preset time period;
According to the demand of business model, is set to each period the time point;For example, in the working time of webmaster personnel
Interior, the time point of alarm event is relatively low;Within the non-working time of webmaster personnel, the time point of alarm event is higher;Specifically,
Between during the day in section, the time point can be 5 points;In night hours section, the time point can be 10 points;Or on weekdays,
Time point can be 5 points;At weekend, the time point can be 10 points, etc..For another example, in current business pattern, business busy,
The time of alarm event point is higher;Business idle, the time point of alarm event are relatively low.
(4) alarm produces number point corresponding to number;
For example, identical alarm generation is more frequent, the number point of alarm event is higher;Or close type or alarm source
Similar alarm generation is more frequent, and the number point of alarm event is higher.Specifically, alarm number often increases once, and number point can
With 5 points of increase.
(5) parent alarm, subclass alarm, the alarm of fraternal class corresponding association point respectively in alarm association.
For example, when alarm A occurs, necessarily draw and alert B;Wherein, the parent alarm that A is alarm B is alerted;Alert B
To alert the alarm of A subclass;For another example, although alarm C and alarm D always occurs without causality, now, alerts C simultaneously
With alarm D fraternal class alarms each other.The alarm event of above-mentioned alarm association is typically, there are, it associates to divide to be higher than to be not present and accused
The alarm event of alert relevance;The association point of parent alarm alerts higher than subclass;The pass of the alarm event of fraternal class alarm each other
It is same to join split-phase.Specifically, when alarm alerts for parent, association point can be 10 points;When alarm alerts for fraternal class, association
Dividing can be 5 points.
Step S208, calculate the summation of the assignment of above-mentioned multiple property parameters;
Step S210, alarm level corresponding with summation is generated for alarm event.
By the above method, the alarm level of current untreated each alarm event can be obtained, for the ease of user
Check, these alarm events can be shown according to the alarm level of each alarm event.
In the generation method for the alarm level that the embodiment of the present disclosure provides, pass through the alarm type for alarm event, alarm
Source, alarm time, alarm produce the independent assignment of the parameter such as number and alarm association, and the assignment summation based on multiple parameters obtains
The alarm level of the alarm event, which need not be respectively configured alarm level for each property parameters in advance, be set with same
Standby different property parameters correspond to different multiple alarm levels and compared, the method in the disclosure, for the more of same equipment
Individual property parameters finally only embody an alarm level, thus simplify mode of operation.Meanwhile by the way that alarm level will be influenceed
Each property parameters represent that implementation is flexible with the form of assignment, can more objectively obtain the alarm event
Alarm level, alarm level is had more reference value, enhance the practicality of alarm level.
Embodiment three:
The generation method flow chart of the third alarm level shown in Figure 3, this method still include police with property parameters
Type, alarm source, alarm time, alarm illustrate exemplified by producing number and alarm association, and this method comprises the following steps:
Step S302, the alarm event being currently received is defined as to alarm event to be analyzed, it is clear in order to describe, will
The alarm event is referred to as current alarm event.
When alarm event occurs for network, alarm level can be identified to the alarm event in real time;Which can be applied
Alarm event negligible amounts occur in network side, in the case of alarm level can be generated in time for each alarm event.
Step S304, alarm type, alarm source, alarm time are obtained from current alarm event;Recorded from alarm event
The alarm that current alarm event is obtained in table produces number.
There can be relevance with another alarm event in view of the alarm event, such as set membership, brotherhood, because
This, alarm association corresponding to the alarm event includes:Parent alarm, subclass alarm, the alarm of fraternal class;The alarm of the present embodiment
Event is the event being currently received, and when only subsequently receiving new alarm event again, just can determine that current alarm event is
It is no to be alerted for parent, specifically, determining whether current alarm event is that parent alarm can use existing embodiment, this reality
Example repeats no more.The present embodiment to current alarm event whether be another kind of alarm event subclass alarm or fraternal class alert into
Row explanation, it is specific as follows.
Step S306, judge the current alarm event whether be another alarm event subclass alarm;If it is, perform step
Rapid S308;If not, perform step S310.
If current alarm event alerts for the subclass of another alarm event, another alarm event is because the current alarm
The appearance of event, assignment can also be updated corresponding to its alarm association, more to tally with the actual situation, based on this, this reality
Apply the update mode that example provides following steps S308.
Step S308, the assignment of the alarm association of another alarm event is updated according to association point corresponding to parent alarm,
And the alarm level of another alarm event.
It is performed as described above described in example, the property parameters and the corresponding relation of assignment that can be prestored by lookup, obtains every
The assignment of individual property parameters., can also be from above-mentioned for association point corresponding to the parent alarm in alarm association in this step
Found in corresponding relation.Citing:Current alarm event is a events, and a events are the child alarms of A events, it is assumed that a do not occur
During event, A events and the equal onrelevant of any alarm event, its alarm association are entered as 0;And when there are a events, and a things
Part is the child alarm event of A events, according to the property parameters and the corresponding relation of assignment prestored, finds the tax of parent alarm
Value, it is assumed that be 10, therefore be now updated to the alarm association assignment of A events, i.e., be updated to 10 by original 0.It is based on
This, the summation of property parameters assignment corresponding to A events is also required to add 10, and after summation change, the alarm level of A events can basis
New summation is updated.
Step S310, judge the current alarm event whether be another alarm event fraternal class alarm;If it is, perform
Step S312;If not, perform step S314.
Step S312, according to the tax of the alarm association of another alarm event of association point renewal corresponding to the alarm of fraternal class
Value, and the alarm level of another alarm event.
The renewal operation of this step may be referred to above-mentioned steps S308 implementation process.Citing:Current alarm event is b things
Part, b events are the fraternal class alarms of B events, it is assumed that when there are not b events, the alarm association of B events is entered as 20, goes out
After existing b events, and fraternal class is alerted b events each other with B events, and corresponding according to the property parameters and assignment prestored is closed
System, find the assignment of fraternal class alarm, it is assumed that be 5, therefore now the alarm association assignment of B events be updated, i.e., by
20 originally are updated to 25.Based on this, the summation of property parameters assignment corresponding to B events is also required to add 5, after summation change, B things
The alarm level of part can be updated according to new summation.
Step S314, using each property parameters of above-mentioned current alarm event, the attribute ginseng prestored is searched respectively
The corresponding relation of number and assignment, obtains the assignment of each property parameters.
For above-mentioned alarm event, property parameters are except the alarm type, alarm source, the alarm time that are obtained in step S304
Produced with alarm outside number, if judging that the subclass that the alarm event is another alarm event alerts by step S306,
Above-mentioned property parameters also include:Subclass alarm in alarm association, based on this, above-mentioned assignment is also included corresponding to subclass alarm
Association point;If judge that the fraternal class that the alarm event is another alarm event alerts by step S310, above-mentioned property parameters
Also include:Fraternal class alarm in alarm association, based on this, above-mentioned assignment also includes association point corresponding to the alarm of fraternal class.
Step S316, calculate the summation of the assignment of above-mentioned property parameters.
Step S318, alarm level corresponding with the summation is generated for the current alarm event.
For example, the corresponding alert priority that summation is 1-30 points is not Level 1Alarming;Summation is divided corresponding for 31-60
Alert priority Wei not two level alarm;Summation Wei three-level alarm higher than alert priority corresponding to 60 points;Generally, can be by three
Level alarm is arranged to the alarm level of highest priority.
In the generation method for the alarm level that the embodiment of the present disclosure provides, for police's type of alarm event, alarm source, alarm
Time, alarm produce the independent assignment of parameter such as number;When judge the alarm event be other alarm events subclass alarm or
During fraternal class alarm, the assignment of the alarm association of current alarm event is divided into according to corresponding association, and is updated associated therewith
The assignment and alarm level of the alarm association of another alarm event of connection;Which need not be in advance each property parameters
Alarm level is respectively configured in combination, compared with different multiple alarm levels are corresponded to the different property parameters of same equipment, this
Method in open, an alarm level is finally only embodied for multiple property parameters of same equipment, thus simplify behaviour
Make mode.Meanwhile by the way that each property parameters for influenceing alarm level are represented into implementation is flexible with the form of assignment,
The alarm level of the alarm event can be more objectively obtained, alarm level is had more reference value, enhances alert level
Other practicality.
Example IV:
The flow chart of the generation method of 4th kind of alarm level shown in Figure 4, this method provide in embodiment two
Realized on the basis of the generation method of alarm level, this method comprises the following steps:
Step S402, current untreated alarm event is defined as alarm event to be analyzed, or, will currently it receive
To alarm event be defined as alarm event to be analyzed;Initialize the assignment sum of zero of current alarm event;
Step S404, obtains alarm type from alarm event, and corresponding from the property parameters and assignment prestored is closed
Initial point and increment point corresponding to the alarm type are searched by system, and this initial point and increment point are included in above-mentioned assignment summation;
Step S406, obtains alarm source from alarm event, from the property parameters and the corresponding relation of assignment prestored
Equipment corresponding to the alarm source point is searched, the equipment point is added up in above-mentioned assignment summation;
Step S408, obtains alarm time from alarm event, and corresponding from the property parameters and assignment prestored is closed
The time point corresponding to the alarm time is searched by system, and the time point is added up in above-mentioned assignment summation;
Step S410, the alarm that alarm event is obtained from alarm event record sheet produces number, from the category prestored
Property parameter and the corresponding relation of assignment search the alarm and produce number point corresponding to number, the number point is added up into above-mentioned assignment
In summation;
Step S412, alarm level corresponding with above-mentioned assignment summation is generated for alarm event;
Step S414, according to the relation of alarm event in above-mentioned alarm event record sheet and other alarm events, it is determined that accusing
The alarm association of alert event, parent in the alarm association is searched from the property parameters and the corresponding relation of assignment prestored
Alarm, subclass alarm, the alarm of fraternal class corresponding association point respectively, it is total according to the assignment of the association point renewal current alarm event
With and alarm level, generate the final alarm level of the alarm event.
The embodiment of the present disclosure provide alarm level generation method in, by alarm event in itself and alarm event note
Record table obtains many kinds of parameters attribute of the alarm event, often obtains a kind of parameter attribute, i.e., according to the assignment of the parameter attribute more
The assignment summation of the new alarm event, the alarm level of alarm event is then generated further according to final assignment summation;Which
Alarm level need not be respectively configured for the combination of each property parameters in advance, the different property parameters from same equipment are corresponding
Different multiple alarm levels are compared, the method in the disclosure, are finally only embodied for multiple property parameters of same equipment
One alarm level, thus simplify mode of operation.Meanwhile by the way that each property parameters for influenceing alarm level are used into assignment
Form represent, implementation is flexible, can more objectively obtain the alarm level of the alarm event, have more alarm level
There is reference value, enhance the practicality of alarm level.
Embodiment five:
Corresponding to above method embodiment, the structural representation of the generating means of the first alarm level shown in Figure 5
Figure, the device include such as lower part:
Parameter acquisition module 50, for obtaining multiple property parameters of alarm event to be analyzed;
Parameter assignment module 51, for being each attribute according to the property parameters and the corresponding relation of assignment prestored
Parameter assignment;
Summation computing module 52, the summation of the assignment for calculating each property parameters;
Alarm level generation module 53, for generating alarm level corresponding with summation for alarm event.
The structural representation of the generating means of second of alarm level shown in Figure 6;The device is in the announcement shown in Fig. 5
Realized on the basis of the generating means of alert rank;Further, above-mentioned parameter acquisition module includes:
First parameter acquiring unit 501, if including alarm type, alarm source and alarm time for property parameters, from
Alarm type, alarm source and alarm time are obtained in alarm event;
Second parameter acquiring unit 502, if including alarm for property parameters produces number, from alarm event record sheet
The middle alarm for obtaining alarm event produces number;
3rd parameter acquiring unit 503, if including alarm association for property parameters, according to alarm event record sheet
The relation of middle alarm event and other alarm events, determine the alarm association of alarm event.
The device also includes with lower module:
First update module 60, for when subclass alarm of the alarm event for another alarm event, being alerted according to parent
The assignment of the alarm association of another alarm event of corresponding association point renewal, and the alarm level of another alarm event;
Second update module 61, for when alarm event for another alarm event fraternal class alarm when, according to fraternal class
The assignment of the alarm association of another alarm event of association point renewal corresponding to alarm, and the alert level of another alarm event
Not.
Optionally, parameter assignment module 51 is specifically used for using following property parameters and the corresponding relation of assignment for each category
Property parameter assignment:
If the property parameters include alarm type, the corresponding relation of the property parameters and assignment comprises at least:
Initial point and the corresponding increment point of default critical alarm type corresponding to each alarm type, wherein, the critical alarm class
Type and the business association of operation;
If the property parameters include alarm source, the corresponding relation of the property parameters and assignment comprises at least:Respectively
Network element associates as equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram;
If the property parameters include alarm time, the corresponding relation of the property parameters and assignment comprises at least:
Each operation business is in the time corresponding to preset time period point;
If the property parameters produce number including alerting, the corresponding relation of the property parameters and assignment at least wraps
Include:Alarm produces number point corresponding to number;
If the property parameters include alarm association, the corresponding relation of the property parameters and assignment at least wraps
Include:Parent alarm, subclass alarm, the alarm of fraternal class corresponding association point respectively in alarm association.
In the generating means of above-mentioned alarm level, the implementation and effect of modules may be referred to above method implementation
Example, is repeated no more here.
The generating means for the alarm level that the embodiment of the present disclosure provides, by independent for each property parameters of alarm event
Assignment, the summation of the assignment based on each property parameters obtains the alarm level of the alarm event, this with each property parameters
Assignment summation obtain alert level otherwise, it is not necessary to alarm level is respectively configured in the combination for each property parameters in advance,
Compared with different multiple alarm levels are corresponded to the different property parameters of same equipment, the method in the disclosure, for same
Multiple property parameters of equipment finally only embody an alarm level, thus simplify mode of operation.Meanwhile by that will influence
Each property parameters of alarm level represent that implementation is flexible with the form of assignment, can more objectively obtain the announcement
The alarm level of alert event, makes alarm level have more reference value, enhances the practicality of alarm level.
A kind of structural representation of Network Management Equipment shown in Figure 7;The equipment includes memory 70 and processor 71;Its
In, memory 70 is used to store one or more computer instruction, and one or more computer instruction is executed by processor, with reality
The generation method of existing above-mentioned alarm level.
Further, the Network Management Equipment shown in Fig. 7 also includes bus 72 and communication interface 73, processor 71, communication interface 73
Connected with memory 70 by bus 72.
Wherein, memory 70 may include high-speed random access memory (RAM, Random Access Memory),
Non-labile memory (non-volatile memory), for example, at least a magnetic disk storage may also be included.By extremely
A few communication interface 73 (can be wired or wireless) is realized logical between the system network element and at least one other network element
Letter connection, can use internet, wide area network, LAN, Metropolitan Area Network (MAN) etc..Bus 72 can be isa bus, pci bus or
Eisa bus etc..The bus can be divided into address bus, data/address bus, controlling bus etc..For ease of representing, only used in Fig. 7
One four-headed arrow represents, it is not intended that an only bus or a type of bus.
Processor 71 is probably a kind of IC chip, has the disposal ability of signal.In implementation process, above-mentioned side
Each step of method can be completed by the integrated logic circuit of the hardware in processor 71 or the instruction of software form.Above-mentioned
Processor 71 can be general processor, including central processing unit (Central Processing Unit, abbreviation CPU), network
Processor (Network Processor, abbreviation NP) etc.;It can also be digital signal processor (Digital Signal
Processing, abbreviation DSP), application specific integrated circuit (Application Specific Integrated Circuit, referred to as
ASIC), ready-made programmable gate array (Field-Programmable Gate Array, abbreviation FPGA) or other are programmable
Logical device, discrete gate or transistor logic, discrete hardware components.It can realize or perform in the embodiment of the present invention
Disclosed each method, step and logic diagram.General processor can be microprocessor or the processor can also be appointed
What conventional processor etc..The step of method with reference to disclosed in the embodiment of the present invention, can be embodied directly in hardware decoding processing
Device performs completion, or performs completion with the hardware in decoding processor and software module combination.Software module can be located at
Machine memory, flash memory, read-only storage, programmable read only memory or electrically erasable programmable memory, register etc. are originally
In the ripe storage medium in field.The storage medium is located at memory 70, and processor 71 reads the information in memory 70, with reference to
Its hardware completes the step of method of previous embodiment.
Further, the embodiment of the present invention additionally provides a kind of machinable medium, and the machinable medium is deposited
Machine-executable instruction is contained, when being called and being performed by processor, machine-executable instruction promotes the machine-executable instruction
Processor realizes the generation method of above-mentioned alarm level.
The computer program production of the generation method of the alarm level that the embodiment of the present disclosure is provided, device and Network Management Equipment
Product, including the machinable medium of program code is stored, the instruction that described program code includes can be used for before execution
Method described in embodiment of the method, specific implementation can be found in embodiment of the method, will not be repeated here.
If the function is realized in the form of SFU software functional unit and is used as independent production marketing or in use, can be with
It is stored in a computer read/write memory medium.Based on such understanding, the technical scheme of the disclosure is substantially in other words
The part to be contributed to prior art or the part of the technical scheme can be embodied in the form of software product, the meter
Calculation machine software product is stored in a storage medium, including some instructions are causing a computer equipment (can be
People's computer, server, or network equipment etc.) perform each embodiment methods described of the disclosure all or part of step.
And foregoing storage medium includes:USB flash disk, mobile hard disk, read-only storage (ROM, Read-Only Memory), arbitrary access are deposited
Reservoir (RAM, Random Access Memory), magnetic disc or CD etc. are various can be with the medium of store program codes.
Finally it should be noted that:The embodiment of embodiment described above, the only disclosure, to illustrate the disclosure
Technical scheme, rather than its limitations, the protection domain of the disclosure is not limited thereto, although with reference to the foregoing embodiments to this public affairs
Open and be described in detail, it will be understood by those within the art that:Any one skilled in the art
In the technical scope that the disclosure discloses, it can still modify to the technical scheme described in previous embodiment or can be light
Change is readily conceivable that, or equivalent substitution is carried out to which part technical characteristic;And these modifications, change or replacement, do not make
The essence of appropriate technical solution departs from the spirit and scope of embodiment of the present disclosure technical scheme, should all cover the protection in the disclosure
Within the scope of.Therefore, the protection domain of the disclosure described should be defined by scope of the claims.
Claims (12)
- A kind of 1. generation method of alarm level, it is characterised in that including:Obtain multiple property parameters of alarm event to be analyzed;According to the property parameters and the corresponding relation of assignment prestored, for each property parameters assignment;Calculate the summation of the assignment of each property parameters;Alarm level corresponding with the summation is generated for the alarm event.
- 2. according to the method for claim 1, it is characterised in that the property parameters comprise at least following two:Alert class Type, alarm source, alarm time, alarm produce number and alarm association.
- 3. according to the method for claim 2, it is characterised in that the multiple attributes ginseng for obtaining alarm event to be analyzed Several steps, including:If the property parameters include alarm type, alarm source and alarm time, alarm class is obtained from the alarm event Type, alarm source and alarm time;If the property parameters, which include alarm, produces number, the alarm of the alarm event is obtained from alarm event record sheet Produce number;If the property parameters include alarm association, the alarm event according to the alarm event record sheet with it is other The relation of alarm event, determine the alarm association of the alarm event.
- 4. according to the method for claim 1, it is characterised in thatIf the property parameters include alarm type, the corresponding relation of the property parameters and assignment comprises at least:Each Increment point corresponding to initial point and default critical alarm type corresponding to alarm type, wherein, the critical alarm type with The business association of operation;If the property parameters include alarm source, the corresponding relation of the property parameters and assignment comprises at least:Each network element As equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram associates;If the property parameters include alarm time, the corresponding relation of the property parameters and assignment comprises at least:Each fortune Industry business is in the time corresponding to preset time period point;If the property parameters produce number including alerting, the corresponding relation of the property parameters and assignment comprises at least: Alarm produces number point corresponding to number;If the property parameters include alarm association, the corresponding relation of the property parameters and assignment comprises at least:Accuse Parent alarm, subclass alarm, fraternal class alert association point corresponding to difference in alert relevance.
- 5. according to the method for claim 4, it is characterised in that methods described also includes:When subclass alarm of the alarm event for another alarm event, according to association point renewal corresponding to parent alarm The assignment of the alarm association of another alarm event, and the alarm level of another alarm event;When fraternal class alarm of the alarm event for another alarm event, according to association point corresponding to the fraternal class alarm Update the assignment of the alarm association of another alarm event, and the alarm level of another alarm event.
- A kind of 6. generating means of alarm level, it is characterised in that including:Parameter acquisition module, for obtaining multiple property parameters of alarm event to be analyzed;Parameter assignment module, for according to the property parameters and the corresponding relation of assignment prestored, joining for each attribute Number assignment;Summation computing module, the summation of the assignment for calculating each property parameters;Alarm level generation module, for generating alarm level corresponding with the summation for the alarm event.
- 7. device according to claim 6, it is characterised in that the property parameters comprise at least following two:Alert class Type, alarm source, alarm time, alarm produce number and alarm association.
- 8. device according to claim 7, it is characterised in that the parameter acquisition module includes:First parameter acquiring unit, if including alarm type, alarm source and alarm time for the property parameters, from described Alarm type, alarm source and alarm time are obtained in alarm event;Second parameter acquiring unit, if including alarm for the property parameters produces number, from alarm event record sheet The alarm for obtaining the alarm event produces number;3rd parameter acquiring unit, if including alarm association for the property parameters, recorded according to the alarm event The relation of alarm event described in table and other alarm events, determine the alarm association of the alarm event.
- 9. device according to claim 6, it is characterised in that the parameter assignment module is specifically used for using following attributes The corresponding relation of parameter and assignment is each property parameters assignment, wherein,If the property parameters include alarm type, the corresponding relation of the property parameters and assignment comprises at least:Each Increment point corresponding to initial point and default critical alarm type corresponding to alarm type, wherein, the critical alarm type with The business association of operation;If the property parameters include alarm source, the corresponding relation of the property parameters and assignment comprises at least:Each network element As equipment corresponding to alarm source point, position of the equipment point with network element in network topological diagram associates;If the property parameters include alarm time, the corresponding relation of the property parameters and assignment comprises at least:Each fortune Industry business is in the time corresponding to preset time period point;If the property parameters produce number including alerting, the corresponding relation of the property parameters and assignment comprises at least: Alarm produces number point corresponding to number;If the property parameters include alarm association, the corresponding relation of the property parameters and assignment comprises at least:Accuse Parent alarm, subclass alarm, fraternal class alert association point corresponding to difference in alert relevance.
- 10. device according to claim 9, it is characterised in that described device also includes:First update module, for when subclass alarm of the alarm event for another alarm event, being accused according to the parent The assignment of the alarm association of association point renewal another alarm event corresponding to alert, and the announcement of another alarm event Alert rank;Second update module, for when the alarm event for another alarm event fraternal class alarm when, according to the brother The assignment of the alarm association of association point renewal another alarm event corresponding to class alarm, and another alarm event Alarm level.
- 11. a kind of Network Management Equipment, it is characterised in that including memory and processor;Wherein, the memory is used to store one Or a plurality of computer instruction, one or more computer instruction is by the computing device, to realize claim 1 to 5 Method described in any one.
- 12. a kind of machinable medium, it is characterised in that the machinable medium is stored with the executable finger of machine Order, for the machine-executable instruction when being called and being performed by processor, the machine-executable instruction promotes the processor Realize the method described in any one of claim 1 to 5.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201710614810.XA CN107547262B (en) | 2017-07-25 | 2017-07-25 | Method and device for generating alarm level and network management equipment |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201710614810.XA CN107547262B (en) | 2017-07-25 | 2017-07-25 | Method and device for generating alarm level and network management equipment |
Publications (2)
Publication Number | Publication Date |
---|---|
CN107547262A true CN107547262A (en) | 2018-01-05 |
CN107547262B CN107547262B (en) | 2021-07-06 |
Family
ID=60970782
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201710614810.XA Active CN107547262B (en) | 2017-07-25 | 2017-07-25 | Method and device for generating alarm level and network management equipment |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN107547262B (en) |
Cited By (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108829794A (en) * | 2018-06-04 | 2018-11-16 | 北京交通大学 | Alert analysis method based on interval graph |
CN109412852A (en) * | 2018-10-29 | 2019-03-01 | 京信通信***(中国)有限公司 | Alarm method, device, computer equipment and storage medium |
CN109639500A (en) * | 2018-12-30 | 2019-04-16 | 博立信(洛阳)科技有限公司 | The Real-time Alarm generation method of internet of things oriented Application in Sensing |
CN109669836A (en) * | 2018-09-25 | 2019-04-23 | 平安普惠企业管理有限公司 | Intelligent IT O&M analysis method, device, equipment and readable storage medium storing program for executing |
CN110633274A (en) * | 2018-06-22 | 2019-12-31 | 北京神州泰岳软件股份有限公司 | Alarm management method and device |
CN110932901A (en) * | 2019-11-29 | 2020-03-27 | 深圳市计通智能技术有限公司 | Alarm level adjusting method and system |
CN111191937A (en) * | 2019-12-31 | 2020-05-22 | 深圳市计通智能技术有限公司 | Alarm hazard assessment method and system and terminal equipment |
CN111564027A (en) * | 2020-05-08 | 2020-08-21 | 北京深演智能科技股份有限公司 | Alarm information processing method and device |
CN111669282A (en) * | 2019-03-08 | 2020-09-15 | 华为技术有限公司 | Method, device and computer storage medium for identifying suspected root cause alarm |
WO2020215217A1 (en) * | 2019-04-23 | 2020-10-29 | 西门子(中国)有限公司 | Warning evaluation method for device failure in baggage sorting system, apparatus, and computer readable medium |
CN111915857A (en) * | 2020-07-24 | 2020-11-10 | 杭州海康威视***技术有限公司 | Alarm level determination method and device, electronic equipment and storage medium |
CN113949621A (en) * | 2021-12-22 | 2022-01-18 | 北京微步在线科技有限公司 | Alarm correlation method and device for intrusion event, electronic equipment and storage medium |
CN113949590A (en) * | 2021-12-21 | 2022-01-18 | 济南市康养事业发展中心 | Method, system and terminal for determining safety alarm event level |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101192962A (en) * | 2006-11-24 | 2008-06-04 | 中兴通讯股份有限公司 | Generation and recovery method for adhesion value alarm in telecom network management system |
CN101277218A (en) * | 2008-05-04 | 2008-10-01 | 中兴通讯股份有限公司 | Dynamic analysis system and method for network alarm |
US20090199045A1 (en) * | 2008-02-01 | 2009-08-06 | Dainippon Screen Mfg. Co., Ltd. | Software fault management apparatus, test management apparatus, fault management method, test management method, and recording medium |
CN102333002A (en) * | 2011-11-04 | 2012-01-25 | 迈普通信技术股份有限公司 | Method and device for sorting alarms |
CN104468166A (en) * | 2013-09-18 | 2015-03-25 | 中兴通讯股份有限公司 | A method and system for determining alarm processing priority |
US9652972B1 (en) * | 2015-03-26 | 2017-05-16 | Sprint Communications Company L.P. | Maintenance of telecommunications network infrastructure based on alarm scoring |
-
2017
- 2017-07-25 CN CN201710614810.XA patent/CN107547262B/en active Active
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101192962A (en) * | 2006-11-24 | 2008-06-04 | 中兴通讯股份有限公司 | Generation and recovery method for adhesion value alarm in telecom network management system |
US20090199045A1 (en) * | 2008-02-01 | 2009-08-06 | Dainippon Screen Mfg. Co., Ltd. | Software fault management apparatus, test management apparatus, fault management method, test management method, and recording medium |
CN101277218A (en) * | 2008-05-04 | 2008-10-01 | 中兴通讯股份有限公司 | Dynamic analysis system and method for network alarm |
CN102333002A (en) * | 2011-11-04 | 2012-01-25 | 迈普通信技术股份有限公司 | Method and device for sorting alarms |
CN104468166A (en) * | 2013-09-18 | 2015-03-25 | 中兴通讯股份有限公司 | A method and system for determining alarm processing priority |
US9652972B1 (en) * | 2015-03-26 | 2017-05-16 | Sprint Communications Company L.P. | Maintenance of telecommunications network infrastructure based on alarm scoring |
Cited By (19)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108829794A (en) * | 2018-06-04 | 2018-11-16 | 北京交通大学 | Alert analysis method based on interval graph |
CN108829794B (en) * | 2018-06-04 | 2022-04-12 | 北京交通大学 | Alarm analysis method based on interval graph |
CN110633274A (en) * | 2018-06-22 | 2019-12-31 | 北京神州泰岳软件股份有限公司 | Alarm management method and device |
CN110633274B (en) * | 2018-06-22 | 2022-07-15 | 北京神州泰岳软件股份有限公司 | Alarm management method and device |
CN109669836A (en) * | 2018-09-25 | 2019-04-23 | 平安普惠企业管理有限公司 | Intelligent IT O&M analysis method, device, equipment and readable storage medium storing program for executing |
CN109412852A (en) * | 2018-10-29 | 2019-03-01 | 京信通信***(中国)有限公司 | Alarm method, device, computer equipment and storage medium |
CN109639500A (en) * | 2018-12-30 | 2019-04-16 | 博立信(洛阳)科技有限公司 | The Real-time Alarm generation method of internet of things oriented Application in Sensing |
CN111669282A (en) * | 2019-03-08 | 2020-09-15 | 华为技术有限公司 | Method, device and computer storage medium for identifying suspected root cause alarm |
CN111669282B (en) * | 2019-03-08 | 2023-10-24 | 华为技术有限公司 | Method, device and computer storage medium for identifying suspected root cause alarm |
WO2020215217A1 (en) * | 2019-04-23 | 2020-10-29 | 西门子(中国)有限公司 | Warning evaluation method for device failure in baggage sorting system, apparatus, and computer readable medium |
CN110932901A (en) * | 2019-11-29 | 2020-03-27 | 深圳市计通智能技术有限公司 | Alarm level adjusting method and system |
CN110932901B (en) * | 2019-11-29 | 2022-11-15 | 深圳市计通智能技术有限公司 | Alarm level adjusting method and system |
CN111191937A (en) * | 2019-12-31 | 2020-05-22 | 深圳市计通智能技术有限公司 | Alarm hazard assessment method and system and terminal equipment |
CN111191937B (en) * | 2019-12-31 | 2023-12-29 | 深圳市计通智能技术有限公司 | Alarm hazard assessment method, system and terminal equipment |
CN111564027A (en) * | 2020-05-08 | 2020-08-21 | 北京深演智能科技股份有限公司 | Alarm information processing method and device |
CN111915857A (en) * | 2020-07-24 | 2020-11-10 | 杭州海康威视***技术有限公司 | Alarm level determination method and device, electronic equipment and storage medium |
CN113949590A (en) * | 2021-12-21 | 2022-01-18 | 济南市康养事业发展中心 | Method, system and terminal for determining safety alarm event level |
CN113949621A (en) * | 2021-12-22 | 2022-01-18 | 北京微步在线科技有限公司 | Alarm correlation method and device for intrusion event, electronic equipment and storage medium |
CN113949621B (en) * | 2021-12-22 | 2022-03-29 | 北京微步在线科技有限公司 | Alarm correlation method and device for intrusion event, electronic equipment and storage medium |
Also Published As
Publication number | Publication date |
---|---|
CN107547262B (en) | 2021-07-06 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN107547262A (en) | Generation method, device and the Network Management Equipment of alarm level | |
WO2017165018A1 (en) | Automated event id field analysis on heterogeneous logs | |
CN104391934A (en) | Data calibration method and device | |
CN109086182A (en) | The method and terminal device of database auto-alarming | |
US20230040635A1 (en) | Graph-based impact analysis of misconfigured or compromised cloud resources | |
CN112148733A (en) | Method, device, electronic device and computer readable medium for determining fault type | |
CN111258798A (en) | Fault positioning method and device for monitoring data, computer equipment and storage medium | |
CN111177398B (en) | Method and device for updating organization architecture | |
CN115203435A (en) | Entity relation generation method and data query method based on knowledge graph | |
CN113313280A (en) | Cloud platform inspection method, electronic equipment and nonvolatile storage medium | |
CN112559291A (en) | Resource monitoring method and device, electronic equipment and storage medium | |
CN115514558A (en) | Intrusion detection method, device, equipment and medium | |
CN111652658A (en) | Portrait fusion method, apparatus, electronic device and computer readable storage medium | |
CN114610372A (en) | Processing method and device for review file, storage medium, processor and terminal | |
CN106304084B (en) | Information processing method and device | |
Mercian et al. | Mind the semantic gap: Policy intent inference from network metadata | |
US20210158835A1 (en) | Intent-based network validation | |
CN106407212B (en) | A kind of classification of network account determines method, clustering objects method and device | |
CN116483707A (en) | Test method, test device, test apparatus, test program, and test program | |
CN109284828A (en) | A kind of hyper parameter tuning method, device and equipment | |
CN113238748B (en) | Direct current control and protection program page modification and verification method, device, terminal and medium | |
CN107743155A (en) | IP mask methods, device, electronic equipment and storage medium | |
CN110019321A (en) | Problem delimits method, device and equipment | |
JP2010072876A (en) | Rule creation program, rule creation method, and rule creation device | |
CN107800553A (en) | A kind of method and apparatus of management equipment failure |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |