CN113835961A - Alarm information monitoring method, device, server and storage medium - Google Patents
Alarm information monitoring method, device, server and storage medium Download PDFInfo
- Publication number
- CN113835961A CN113835961A CN202111118165.5A CN202111118165A CN113835961A CN 113835961 A CN113835961 A CN 113835961A CN 202111118165 A CN202111118165 A CN 202111118165A CN 113835961 A CN113835961 A CN 113835961A
- Authority
- CN
- China
- Prior art keywords
- alarm
- predicted
- time
- alarm information
- determining
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/3006—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3051—Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Mathematical Physics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Alarm Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a method, a device, a server and a storage medium for monitoring alarm information, wherein the method comprises the following steps: inputting the time to be predicted into an alarm amount prediction model to obtain a predicted alarm amount corresponding to the time to be predicted, and determining a dynamic time window according to the predicted alarm amount; and acquiring an actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determining an alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount. And predicting a dynamic time window corresponding to the time to be predicted through the trained alarm amount prediction model, obtaining the actual alarm amount corresponding to the time to be predicted through the dynamic time window, and judging the on-off result of the alarm information corresponding to the time to be predicted, so that the accuracy of on-off monitoring of the alarm information is improved.
Description
Technical Field
The present invention relates to the field of wireless communication technologies, and in particular, to a method, an apparatus, a server, and a storage medium for monitoring alarm information.
Background
The network operation system comprises a plurality of network elements, and the network management server is responsible for collecting alarm information of the network elements and forwarding the alarm information to the alarm information management server, so that the alarm information management server monitors the operation conditions of all the network elements in the network according to the collected alarm information.
In the prior art, in order to ensure the accuracy of network monitoring, a heartbeat monitoring mechanism on two sides of an interface is generally adopted to monitor the on-off condition of alarm information transmission. The method comprises the steps of sending heartbeat messages regularly and monitoring the receiving condition of messages of the other side through programs on two sides of interfaces of a network management server and an alarm information management server, generating corresponding alarms if the messages of the other side do not arrive according to a stipulated time interval or mode, and finding out faults of an alarm information transmission terminal in time.
However, in the prior art, in the network operation process, due to the hardware limitation of some network element devices, the network element devices cannot provide an interface dedicated to the heartbeat monitoring mechanism, so that the heartbeat monitoring mechanism cannot be used to monitor the interruption of the alarm information transmission on all network elements, and the accuracy of the on-off monitoring of the alarm information is affected.
Disclosure of Invention
The invention provides an alarm information monitoring method, an alarm information monitoring device, a server and a storage medium.
In a first aspect, the present invention provides an alarm information monitoring method, including:
inputting the time to be predicted into an alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted, wherein the alarm amount prediction model is obtained by training according to historical alarm data, and the historical alarm data comprises time identifiers and the alarm amount corresponding to each time identifier; determining a dynamic time window according to the predicted alarm amount; and acquiring the actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determining the on-off result of the alarm information corresponding to the time to be predicted according to the actual alarm amount.
In a possible design, the obtaining an actual alarm amount corresponding to the time to be predicted according to the dynamic time window includes: determining all prediction time periods according to the time to be predicted and the dynamic time window; acquiring the alarm amount corresponding to each prediction time period, and determining the actual alarm amount corresponding to the time to be predicted according to the alarm amounts corresponding to all the time periods; correspondingly, the determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount includes: and determining the on-off result of the alarm information of each predicted time period according to the alarm amount corresponding to each predicted time period.
In a possible design, the determining the alarm information on-off result of each predicted time period according to the alarm amount corresponding to each predicted time period includes: if the alarm amount corresponding to the prediction time period is not zero, judging that the on-off result of the alarm information of the prediction time period is normal; and if the alarm amount corresponding to the prediction time period is zero, judging that the on-off result of the alarm information of the prediction time period is abnormal.
In one possible design, before the inputting the time to be predicted into the alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted, the method further includes: obtaining a target alarm information type, and determining a target alarm amount prediction model corresponding to the target alarm information type; the inputting the time to be predicted into an alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted comprises the following steps: inputting the time to be predicted into the target alarm amount prediction model, and obtaining the predicted alarm amount corresponding to the target alarm information type, wherein the predicted alarm amount corresponds to the time to be predicted.
In a possible design, before the determining a target alarm amount prediction model corresponding to the target alarm information type, the method further includes: acquiring historical alarm data corresponding to the alarm information type from a database according to the alarm information type; and training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm amount prediction model corresponding to the alarm information type.
In one possible design, the alarm information type includes a general type field and a specific type field; the general type field comprises at least one of network element name, title, occurrence time and clearing time, and the specific type field comprises at least one of area identification, network element type, customer name and circuit number.
In one possible design, the determining a dynamic time window based on the predicted alarm amount includes: and determining a prediction alarm period according to the prediction alarm amount, and determining a dynamic time window according to the prediction alarm period.
In one possible design, the determining a dynamic time window according to the predicted alarm period includes: and determining a dynamic time window according to a preset percentage and the predicted alarm period.
In a possible design, after determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount, the method further includes: and sending the alarm information on-off result corresponding to the time to be predicted to a display terminal so that the display terminal generates a monitoring interface according to an interface definition rule, and a manager manages the on-off condition of alarm data according to the monitoring interface.
In a second aspect, the present invention provides an alarm information monitoring apparatus, including: the input module is used for inputting the time to be predicted into an alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted, the alarm amount prediction model is obtained according to historical alarm data through training, and the historical alarm data comprise time identifications and the alarm amount corresponding to each time identification; the determining module is used for determining a dynamic time window according to the predicted alarm amount; and the acquisition module is used for acquiring the actual alarm amount corresponding to the time to be predicted according to the dynamic time window and determining the on-off result of the alarm information corresponding to the time to be predicted according to the actual alarm amount.
In a third aspect, the present invention provides a server, comprising: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the alarm information monitoring method as described above in the first aspect and various possible designs of the first aspect.
In a fourth aspect, the present invention provides a computer storage medium, in which computer executable instructions are stored, and when a processor executes the computer executable instructions, the method for monitoring alarm information according to the first aspect and various possible designs of the first aspect is implemented.
According to the alarm information monitoring method, the alarm information monitoring device, the server and the storage medium, the prediction alarm amount corresponding to the time to be predicted is predicted through the trained alarm amount prediction model, the dynamic time window is determined according to the prediction alarm amount, the actual alarm amount corresponding to the time to be predicted is obtained through the dynamic time window, the on-off result of the alarm information corresponding to the time to be predicted is judged, and the accuracy of on-off monitoring of the alarm information is improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to these drawings without creative efforts.
Fig. 1 is a schematic view of an application scenario of an alarm information monitoring method according to an embodiment of the present invention;
fig. 2 is a first schematic flow chart of an alarm information monitoring method according to an embodiment of the present invention;
fig. 3 is a schematic flow chart of a warning information monitoring method according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of an alarm information monitoring apparatus according to an embodiment of the present invention;
fig. 5 is a schematic diagram of a hardware structure of a server according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The collection of alarm information in a network operation system usually passes through unified comprehensive network management and reverse processing. The alarm information collected by the comprehensive network management system is not only complex in source but also more in related hierarchy, and a typical network operation system structure comprises a plurality of network elements, a network management server and an alarm information management server from bottom to top. The network management server is responsible for collecting alarm information of the network elements and forwarding the alarm information to the alarm information management server, and the alarm information management server monitors the operation conditions of all the network elements in the network according to the collected alarm information. All links in the whole course have problems, and further the alarm collection of the problem link and the downstream equipment is interrupted. In the prior art, in order to find the on-off condition of an alarm in time, the current alarm on-off detection technology adopts a heartbeat detection mechanism on two sides of an interface, namely, programs on two sides of the interface send heartbeat messages regularly and monitor the receiving condition of messages of the other side, and if the messages of the other side do not arrive according to a stipulated time interval or mode, a corresponding alarm is generated. However, in the prior art, in the network operation process, due to the hardware limitation of some network element devices, the network element devices cannot provide an interface dedicated to the heartbeat monitoring mechanism, so that the heartbeat monitoring mechanism cannot be used to monitor all network elements for interruption of alarm information transmission, which affects the accuracy of network monitoring.
In order to solve the technical problems, the embodiment of the invention provides the following technical scheme that a predicted alarm amount corresponding to the time to be predicted is predicted through a trained alarm amount prediction model, a dynamic time window is determined according to the predicted alarm amount, an actual alarm amount corresponding to the time to be predicted is obtained through the dynamic time window, an alarm information on-off result corresponding to the time to be predicted is judged, and the accuracy of alarm information on-off monitoring is improved. The following examples are given for illustrative purposes.
Fig. 1 is a schematic view of an application scenario of an alarm information monitoring method according to an embodiment of the present invention. As shown in fig. 1, the network operation system includes a plurality of network elements, a network management server, and an alarm information management server. The network management server is responsible for collecting alarm information of the network elements and forwarding the alarm information to the alarm information management server, and the alarm information management server monitors the operation conditions of all the network elements in the network according to the collected alarm information.
Fig. 2 is a first schematic flow chart of an alarm information monitoring method according to an embodiment of the present invention, where an execution subject of the embodiment may be an alarm information management server in the embodiment shown in fig. 1, and the embodiment is not limited herein. As shown in fig. 2, the method includes:
s201: inputting the time to be predicted into an alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted, wherein the alarm amount prediction model is obtained by training according to historical alarm data, and the historical alarm data comprises time identifications and alarm amounts corresponding to the time identifications.
In the embodiment of the invention, the acquired historical data and the selected algorithm are used for establishing the machine learning model, so that the trained model can predict the acquired alarm amount. Specifically, the historical alarm data includes time identifiers and alarm amounts corresponding to the time identifiers. And inquiring a database, acquiring the alarm data volume of each 1 hour in 15 days in history, storing the alarm data volume as a data set as input data, namely generating 360 pieces of data as historical alarm data after the establishment is finished, and training a neural network model by using the historical alarm data. Specifically, the time mark is used as the characteristic of the model, and the actual alarm amount is used as the predicted label, so that the trained model can achieve the purpose of predicting the alarm amount at a specific moment. After the trained alarm amount prediction model is obtained, inputting the time to be predicted into the alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted.
S202: and determining a dynamic time window according to the predicted alarm amount.
In the embodiment of the present invention, for example, a dynamic time window corresponding to the predicted time may be determined according to the predicted alarm amount corresponding to the time to be predicted, that is, at least one piece of alarm information can be received in the dynamic time window. For example, a predicted alarm period may be determined based on the predicted alarm amount and a dynamic time window may be determined based on the predicted alarm period. Specifically, if the time to be predicted obtained according to S201 is 8: the alarm amount of 00 is 6, i.e. the predicted 8: 00 to 9: and the number of the alarm information within one hour of 00 is 6, the predicted alarm period can be determined to be 10 minutes, and the dynamic time window can be determined to be 10 minutes according to the predicted alarm period. If the dynamic time window is determined to be 10 minutes, it can be determined that if the transmission process of the alarm information has no problem, the time interval from 8: 00 can receive at least one warning message within 10 minutes of the beginning. Although the transmission of the alarm information is not necessarily transmitted at a plurality of moments in an evenly dispersed manner, the model trained according to the historical data of the alarm information transmission can match the rule and the characteristics of the alarm information transmission, that is, the dynamic time window determined according to the prediction model can be used for judging the on-off condition of the transmission of the alarm information, that is, the alarm information is not received in the dynamic time window, and the possibility that the current transmission of the alarm information has a fault is judged to be higher.
Illustratively, the dynamic time window is further determined according to the preset percentage and the predicted alarm period, and illustratively, if the preset percentage is set to 15%, the dynamic time window is determined to be 11 minutes and 30 seconds according to the preset percentage of 15% and the predicted alarm period of 10 minutes.
S203: and acquiring an actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determining an alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount.
In the embodiment of the present invention, exemplarily, all the prediction time periods are determined according to the time to be predicted and the dynamic time window; and acquiring the alarm amount corresponding to each prediction time period, and determining the actual alarm amount corresponding to the time to be predicted according to the alarm amounts corresponding to all the time periods. And determining the on-off result of the alarm information of each predicted time period according to the alarm amount corresponding to each predicted time period.
Specifically, from 8: 00, starting, monitoring the alarm amount received every 10 minutes, and counting, namely counting 8: 00 to 9: alarm volume in 6 dynamic time windows after 00. Exemplarily, if the alarm amount corresponding to the prediction time period is not zero, determining that the on-off result of the alarm information of the prediction time period is normal; and if the alarm amount corresponding to the prediction time period is zero, judging that the on-off result of the alarm information of the prediction time period is abnormal. If no alarm information is received in the dynamic time window, it is determined that the transmission of the current alarm information has a higher probability of failure.
According to the alarm information monitoring method provided by the embodiment, the prediction model capable of predicting the alarm amount is obtained through training according to historical alarm data, the time to be predicted is input into the alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted, the dynamic time window is determined according to the predicted alarm amount, the time window is the minimum time interval for collecting alarm information, namely the alarm information can be collected in the time interval by default, the actual alarm amount corresponding to the time to be predicted is obtained according to the dynamic time window, and finally the on-off result of the alarm information corresponding to the time to be predicted is determined according to the actual alarm amount, so that the accuracy of judging the on-off condition of the alarm information is improved.
Fig. 3 is a schematic flow chart of a warning information monitoring method according to an embodiment of the present invention. On the basis of the embodiment provided in fig. 2, the embodiment of the present invention describes in detail a specific implementation method of another alarm information monitoring method. As shown in fig. 3, the method includes:
s301: and acquiring historical alarm data corresponding to the alarm information type from the database according to the alarm information type.
Illustratively, the alarm information type includes a general type field and a specific type field; the general type field contains at least one of a network element name, a title, an occurrence time, and a clearing time, and the specific type field contains at least one of an area identification, a network element type, a customer name, and a circuit number.
In the embodiment of the invention, the meanings of the alarm information transmitted by different network elements are different. By counting the types of the alarm information, the early warning of the on-off conditions of various different alarm information can be realized. Illustratively, the alarm information type includes a general type field and a specific type field; the general type field contains at least one of a network element name, a title, an occurrence time, and a clearing time, and the specific type field contains at least one of an area identification, a network element type, a customer name, and a circuit number. The historical data stored in the database can be screened according to the alarm information type, and the historical alarm data corresponding to the alarm information type is obtained.
S302: and training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm amount prediction model corresponding to the alarm information type.
On the basis that the historical alarm data corresponding to different alarm information types are obtained in S301, the model is trained by using the historical alarm data corresponding to different alarm information types, and alarm amount prediction models corresponding to different alarm information types are obtained.
S303: and obtaining the type of the target alarm information, and determining a target alarm amount prediction model corresponding to the type of the target alarm information.
In the embodiment of the present invention, for example, an upper computer interface is set in the client device, and is used to receive a target alarm information type corresponding to a network element to be monitored, which is input by a user. After the alarm amount prediction models corresponding to all the alarm information types are obtained, the target alarm information type to be monitored sent by the client equipment is received, and the target alarm amount prediction model corresponding to the target alarm information type is determined.
S304: and inputting the time to be predicted into a target alarm amount prediction model to obtain a predicted alarm amount corresponding to the target alarm information type, wherein the predicted alarm amount corresponds to the time to be predicted.
S305: and determining a dynamic time window according to the predicted alarm amount.
S306: and acquiring an actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determining an alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount.
In the embodiment of the present invention, the steps of S304 to S306 correspond to the steps of S201 to S203, and are not described herein again.
According to the alarm information monitoring method provided by the embodiment, the model is trained by using the historical alarm data corresponding to different alarm information types, the alarm amount prediction models corresponding to different alarm information types are obtained, the on-off conditions of different alarm information can be predicted by using the alarm amount prediction models corresponding to different alarm information types, and the universality of the alarm information monitoring method is improved.
In a possible implementation manner, the on-off result of the alarm information corresponding to the time to be predicted is sent to the display terminal, so that the display terminal generates a monitoring interface according to the interface definition rule, and a manager manages the on-off condition of the alarm data according to the monitoring interface.
Specifically, if the alarm amount corresponding to the prediction time period is not zero, displaying a green icon on the monitoring interface to indicate that the on-off result of the alarm information of the prediction time period is normal; and if the alarm amount corresponding to the prediction time period is zero, displaying a red icon on the monitoring interface, wherein the red icon represents that the on-off result of the alarm information of the prediction time period is abnormal, and the transmission of the current alarm information has a fault.
According to the alarm information monitoring method provided by the embodiment, the on-off result of the alarm information is represented by the icons with different colors on the monitoring interface, so that the monitoring interface for monitoring the visual alarm information is provided, and the efficiency of monitoring the alarm information is improved.
Fig. 4 is a schematic structural diagram of an alarm information monitoring apparatus according to an embodiment of the present invention. As shown in fig. 4, the warning information monitoring apparatus includes: an input module 401, a determination module 402 and an acquisition module 403.
An input module 401, configured to input a time to be predicted into an alarm amount prediction model to obtain a predicted alarm amount corresponding to the time to be predicted, where the alarm amount prediction model is obtained by training according to historical alarm data, where the historical alarm data includes time identifiers and alarm amounts corresponding to each time identifier;
a determining module 402, configured to determine all target base stations included in each target grid according to a preset grid map and the N target grid identifiers, acquire base station information of all target base stations, and determine all base stations to be turned on included in each grid according to the base station information of each target base station, where the preset grid map is a map including M square grids, and M is a positive integer;
an obtaining module 403, configured to obtain an actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determine an alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount.
In a possible implementation manner, the obtaining module 403 is specifically configured to determine all the prediction time periods according to the time to be predicted and the dynamic time window; and acquiring the alarm amount corresponding to each prediction time period, determining the actual alarm amount corresponding to the time to be predicted according to the alarm amount corresponding to all the time periods, and determining the alarm information on-off result of each prediction time period according to the alarm amount corresponding to each prediction time period.
In a possible implementation manner, the obtaining module 403 is specifically configured to determine that the on-off result of the alarm information in the predicted time period is normal if the alarm amount corresponding to the predicted time period is not zero; and if the alarm amount corresponding to the prediction time period is zero, judging that the on-off result of the alarm information of the prediction time period is abnormal.
In a possible implementation manner, the alarm information monitoring apparatus further includes an obtaining module, where the obtaining module is specifically configured to obtain a target alarm information type and determine a target alarm amount prediction model corresponding to the target alarm information type, and correspondingly, the input module 401 is specifically configured to input a time to be predicted into the target alarm amount prediction model to obtain a predicted alarm amount corresponding to the target alarm information type, where the predicted alarm amount corresponds to the time to be predicted.
In a possible implementation manner, the alarm information monitoring apparatus further includes a training module, where the training module is specifically configured to obtain, from a database, historical alarm data corresponding to an alarm information type according to the alarm information type; and training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm amount prediction model corresponding to the alarm information type.
In a possible implementation manner, the determining module 402 is specifically configured to determine a predicted alarm period according to the predicted alarm amount, and determine a dynamic time window according to the predicted alarm period.
In a possible implementation manner, the determining module 402 is specifically configured to determine a dynamic time window according to a preset percentage and the predicted alarm period.
In a possible implementation manner, the alarm information monitoring device further includes a sending module, where the sending module is specifically configured to send an alarm information on-off result corresponding to the time to be predicted to a display terminal, so that the display terminal generates a monitoring interface according to an interface definition rule, and a manager manages on-off conditions of alarm data according to the monitoring interface.
The apparatus provided in this embodiment may be used to implement the technical solutions of the above method embodiments, and the implementation principles and technical effects are similar, which are not described herein again.
Fig. 5 is a schematic diagram of a hardware structure of a server according to an embodiment of the present invention. As shown in fig. 5, the server of the present embodiment includes: a processor 501 and a memory 502; wherein
A memory 502 for storing computer-executable instructions;
the processor 501 is configured to execute computer-executable instructions stored in the memory to implement the steps performed by the server in the above embodiments. Reference may be made in particular to the description relating to the method embodiments described above.
Alternatively, the memory 502 may be separate or integrated with the processor 501.
When the memory 502 is provided separately, the server further includes a bus 503 for connecting the memory 502 and the processor 501.
The embodiment of the invention also provides a computer storage medium, wherein a computer execution instruction is stored in the computer storage medium, and when a processor executes the computer execution instruction, the alarm information monitoring method is realized.
An embodiment of the present invention further provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the method for monitoring alarm information as described above is implemented.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described device embodiments are merely illustrative, and for example, the division of the modules is only one logical division, and other divisions may be realized in practice, for example, a plurality of modules may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or modules, and may be in an electrical, mechanical or other form.
The modules described as separate parts may or may not be physically separate, and parts displayed as modules may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to implement the solution of the present embodiment.
In addition, functional modules in the embodiments of the present invention may be integrated into one processing unit, or each module may exist alone physically, or two or more modules are integrated into one unit. The unit formed by the modules can be realized in a hardware form, and can also be realized in a form of hardware and a software functional unit.
The integrated module implemented in the form of a software functional module may be stored in a computer-readable storage medium. The software functional module is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) or a processor to execute some steps of the methods described in the embodiments of the present application.
It should be understood that the Processor may be a Central Processing Unit (CPU), other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of a method disclosed in connection with the present invention may be embodied directly in a hardware processor, or in a combination of the hardware and software modules within the processor.
The memory may comprise a high-speed RAM memory, and may further comprise a non-volatile storage NVM, such as at least one disk memory, and may also be a usb disk, a removable hard disk, a read-only memory, a magnetic or optical disk, etc.
The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended ISA (Extended Industry Standard Architecture) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, the buses in the figures of the present application are not limited to only one bus or one type of bus.
The storage medium may be implemented by any type or combination of volatile or non-volatile memory devices, such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disks. A storage media may be any available media that can be accessed by a general purpose or special purpose computer.
An exemplary storage medium is coupled to the processor such the processor can read information from, and write information to, the storage medium. Of course, the storage medium may also be integral to the processor. The processor and the storage medium may reside in an Application Specific Integrated Circuits (ASIC). Of course, the processor and the storage medium may reside as discrete components in an electronic device or host device.
Those of ordinary skill in the art will understand that: all or a portion of the steps of implementing the above-described method embodiments may be performed by hardware associated with program instructions. The program may be stored in a computer-readable storage medium. When executed, the program performs steps comprising the method embodiments described above; and the aforementioned storage medium includes: various media that can store program codes, such as ROM, RAM, magnetic or optical disks.
Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.
Claims (12)
1. An alarm information monitoring method is characterized by comprising the following steps:
inputting the time to be predicted into an alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted, wherein the alarm amount prediction model is obtained by training according to historical alarm data, and the historical alarm data comprises time identifiers and the alarm amount corresponding to each time identifier;
determining a dynamic time window according to the predicted alarm amount;
and acquiring the actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determining the on-off result of the alarm information corresponding to the time to be predicted according to the actual alarm amount.
2. The method according to claim 1, wherein the obtaining the actual alarm amount corresponding to the time to be predicted according to the dynamic time window comprises:
determining all prediction time periods according to the time to be predicted and the dynamic time window;
acquiring the alarm amount corresponding to each prediction time period, and determining the actual alarm amount corresponding to the time to be predicted according to the alarm amounts corresponding to all the time periods;
correspondingly, the determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount includes:
and determining the on-off result of the alarm information of each predicted time period according to the alarm amount corresponding to each predicted time period.
3. The method according to claim 2, wherein the determining the alarm information on-off result of each prediction time period according to the alarm amount corresponding to each prediction time period comprises:
if the alarm amount corresponding to the prediction time period is not zero, judging that the on-off result of the alarm information of the prediction time period is normal;
and if the alarm amount corresponding to the prediction time period is zero, judging that the on-off result of the alarm information of the prediction time period is abnormal.
4. The method according to claim 1, before the inputting the time to be predicted into the alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted, further comprising:
obtaining a target alarm information type, and determining a target alarm amount prediction model corresponding to the target alarm information type;
the inputting the time to be predicted into an alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted comprises the following steps:
inputting the time to be predicted into the target alarm amount prediction model, and obtaining the predicted alarm amount corresponding to the target alarm information type, wherein the predicted alarm amount corresponds to the time to be predicted.
5. The method according to claim 4, further comprising, before the determining a target alarm amount prediction model corresponding to the target alarm information type,:
acquiring historical alarm data corresponding to the alarm information type from a database according to the alarm information type;
and training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm amount prediction model corresponding to the alarm information type.
6. The method of claim 5, wherein the alarm information type comprises a general type field and a specific type field;
the general type field comprises at least one of network element name, title, occurrence time and clearing time, and the specific type field comprises at least one of area identification, network element type, customer name and circuit number.
7. The method of claim 1, wherein determining a dynamic time window based on the predicted alarm amount comprises:
and determining a prediction alarm period according to the prediction alarm amount, and determining a dynamic time window according to the prediction alarm period.
8. The method of claim 7, wherein determining a dynamic time window based on the predicted alarm period comprises:
and determining a dynamic time window according to a preset percentage and the predicted alarm period.
9. The method according to any one of claims 1 to 8, wherein after determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount, the method further comprises:
and sending the alarm information on-off result corresponding to the time to be predicted to a display terminal so that the display terminal generates a monitoring interface according to an interface definition rule, and a manager manages the on-off condition of alarm data according to the monitoring interface.
10. An alarm information monitoring apparatus, comprising:
the input module is used for inputting the time to be predicted into an alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted, the alarm amount prediction model is obtained according to historical alarm data through training, and the historical alarm data comprise time identifications and the alarm amount corresponding to each time identification;
the determining module is used for determining a dynamic time window according to the predicted alarm amount;
and the acquisition module is used for acquiring the actual alarm amount corresponding to the time to be predicted according to the dynamic time window and determining the on-off result of the alarm information corresponding to the time to be predicted according to the actual alarm amount.
11. A server, comprising: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing computer-executable instructions stored by the memory causes the at least one processor to perform the alert information monitoring method of any of claims 1 to 9.
12. A computer storage medium having computer executable instructions stored therein, which when executed by a processor, implement the alarm information monitoring method of any one of claims 1 to 9.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111118165.5A CN113835961B (en) | 2021-09-23 | 2021-09-23 | Alarm information monitoring method, device, server and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111118165.5A CN113835961B (en) | 2021-09-23 | 2021-09-23 | Alarm information monitoring method, device, server and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113835961A true CN113835961A (en) | 2021-12-24 |
| CN113835961B CN113835961B (en) | 2023-05-16 |
Family
ID=78969675
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111118165.5A Active CN113835961B (en) | 2021-09-23 | 2021-09-23 | Alarm information monitoring method, device, server and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113835961B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117455209A (en) * | 2023-12-26 | 2024-01-26 | 山东智慧云通网络科技有限公司 | Intelligent traffic police management service system and method based on geographic position |
Citations (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2006277115A (en) * | 2005-03-28 | 2006-10-12 | Fujitsu Ten Ltd | Abnormality detection program and abnormality detection method |
| CN101557384A (en) * | 2008-04-09 | 2009-10-14 | 北京闻言科技有限公司 | Flexible application program exception management method |
| US20120198569A1 (en) * | 2011-01-31 | 2012-08-02 | Bank Of America Corporation | Associated with abnormal application-specific activity monitoring in a computing network |
| CN106034051A (en) * | 2015-03-12 | 2016-10-19 | 腾讯科技（深圳）有限公司 | Network monitoring data processing method and network monitoring data processing device |
| WO2016166900A1 (en) * | 2015-04-17 | 2016-10-20 | 三菱電機株式会社 | Information processing device, information processing method, and information processing program |
| CN107402835A (en) * | 2017-07-25 | 2017-11-28 | 广东欧珀移动通信有限公司 | Abnormality eliminating method, device and the storage medium and mobile terminal of application program |
| CN107741902A (en) * | 2016-12-23 | 2018-02-27 | 腾讯科技（深圳）有限公司 | Program application detection method and program application detection means |
| CN110083476A (en) * | 2019-04-23 | 2019-08-02 | 努比亚技术有限公司 | Application control method, terminal and computer readable storage medium |
| US20190332513A1 (en) * | 2017-04-26 | 2019-10-31 | Tencent Technology (Shenzhen) Company Limited | Method and apparatus for dealing with abnormality of application program and storage medium |
| CN111124840A (en) * | 2019-12-02 | 2020-05-08 | 北京天元创新科技有限公司 | Method and device for predicting alarm in business operation and maintenance and electronic equipment |
| WO2020259421A1 (en) * | 2019-06-28 | 2020-12-30 | 深圳前海微众银行股份有限公司 | Method and apparatus for monitoring service system |
| WO2021003923A1 (en) * | 2019-07-08 | 2021-01-14 | 平安科技（深圳）有限公司 | Freeswitch monitoring method, device, storage medium, and apparatus |
-
2021
- 2021-09-23 CN CN202111118165.5A patent/CN113835961B/en active Active
Patent Citations (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2006277115A (en) * | 2005-03-28 | 2006-10-12 | Fujitsu Ten Ltd | Abnormality detection program and abnormality detection method |
| CN101557384A (en) * | 2008-04-09 | 2009-10-14 | 北京闻言科技有限公司 | Flexible application program exception management method |
| US20120198569A1 (en) * | 2011-01-31 | 2012-08-02 | Bank Of America Corporation | Associated with abnormal application-specific activity monitoring in a computing network |
| CN106034051A (en) * | 2015-03-12 | 2016-10-19 | 腾讯科技（深圳）有限公司 | Network monitoring data processing method and network monitoring data processing device |
| WO2016166900A1 (en) * | 2015-04-17 | 2016-10-20 | 三菱電機株式会社 | Information processing device, information processing method, and information processing program |
| CN107741902A (en) * | 2016-12-23 | 2018-02-27 | 腾讯科技（深圳）有限公司 | Program application detection method and program application detection means |
| US20190332513A1 (en) * | 2017-04-26 | 2019-10-31 | Tencent Technology (Shenzhen) Company Limited | Method and apparatus for dealing with abnormality of application program and storage medium |
| CN107402835A (en) * | 2017-07-25 | 2017-11-28 | 广东欧珀移动通信有限公司 | Abnormality eliminating method, device and the storage medium and mobile terminal of application program |
| CN110083476A (en) * | 2019-04-23 | 2019-08-02 | 努比亚技术有限公司 | Application control method, terminal and computer readable storage medium |
| WO2020259421A1 (en) * | 2019-06-28 | 2020-12-30 | 深圳前海微众银行股份有限公司 | Method and apparatus for monitoring service system |
| WO2021003923A1 (en) * | 2019-07-08 | 2021-01-14 | 平安科技（深圳）有限公司 | Freeswitch monitoring method, device, storage medium, and apparatus |
| CN111124840A (en) * | 2019-12-02 | 2020-05-08 | 北京天元创新科技有限公司 | Method and device for predicting alarm in business operation and maintenance and electronic equipment |
Non-Patent Citations (1)
| Title |
|---|
| 李晓晖;: "基于Zabbix的应用监控***", 价值工程 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117455209A (en) * | 2023-12-26 | 2024-01-26 | 山东智慧云通网络科技有限公司 | Intelligent traffic police management service system and method based on geographic position |
| CN117455209B (en) * | 2023-12-26 | 2024-03-12 | 山东智慧云通网络科技有限公司 | Intelligent traffic police management service system and method based on geographic position |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113835961B (en) | 2023-05-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111294217B (en) | Alarm analysis method, device, system and storage medium | |
| CN112712113B (en) | Alarm method, device and computer system based on index | |
| CN104796273A (en) | Method and device for diagnosing root of network faults | |
| CN109088775B (en) | Abnormity monitoring method and device and server | |
| CN113687969A (en) | Alarm information generation method and device, electronic equipment and readable storage medium | |
| CN112395156A (en) | Fault warning method and device, storage medium and electronic equipment | |
| CN109992473A (en) | Monitoring method, device, equipment and the storage medium of application system | |
| CN112380089A (en) | Data center monitoring and early warning method and system | |
| CN108923422A (en) | Internet of Things proxy data processing method, system and electric network terminal equipment monitoring system | |
| CN115860729A (en) | IT operation and maintenance integrated management system | |
| CN113037562A (en) | Gateway fault assessment method and device and server | |
| CN110673973B (en) | Abnormality determination method and device for application programming interface API | |
| CN116482598A (en) | Power consumption data monitoring method and device | |
| CN113835961B (en) | Alarm information monitoring method, device, server and storage medium | |
| CN109818808B (en) | Fault diagnosis method and device and electronic equipment | |
| CN115185794A (en) | Analysis method and device of service call chain and electronic equipment | |
| CN106878096B (en) | VNF state detection notification method, device and system | |
| CN111465045B (en) | AP monitoring method, monitoring server and monitoring system | |
| CN117061335A (en) | Cloud platform equipment health management and control method and device, storage medium and electronic equipment | |
| CN112416896A (en) | Data abnormity warning method and device, storage medium and electronic device | |
| CN111062503A (en) | Power grid monitoring alarm processing method, system, terminal and storage medium | |
| CN116843314A (en) | Monitoring terminal operation and maintenance management method, system, equipment and storage medium | |
| CN114327988B (en) | Visual network fault relation determination method and device | |
| EP2764597A1 (en) | Processing data of a technical system comprising several assets | |
| CN114358655A (en) | Method and device for generating recommendation scheme |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |