WO2016201812A1 - 告警的方法及装置 - Google Patents

告警的方法及装置 Download PDF

Info

Publication number
WO2016201812A1
WO2016201812A1 PCT/CN2015/090182 CN2015090182W WO2016201812A1 WO 2016201812 A1 WO2016201812 A1 WO 2016201812A1 CN 2015090182 W CN2015090182 W CN 2015090182W WO 2016201812 A1 WO2016201812 A1 WO 2016201812A1
Authority
WO
WIPO (PCT)
Prior art keywords
alarm information
dispatch
alarm
parent
sub
Prior art date
Application number
PCT/CN2015/090182
Other languages
English (en)
French (fr)
Inventor
唐鹏
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2016201812A1 publication Critical patent/WO2016201812A1/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0604Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
    • H04L41/0622Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on time
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Definitions

  • the present invention relates to the field of network operation and maintenance technologies, and in particular, to a method and an apparatus for alarming.
  • the number of alarm information is very large and complex.
  • the personnel who maintain the alarm system must select the network equipment that needs to be repaired from thousands or even more alarm information.
  • the workload is large and the accuracy is not good.
  • the automatic dispatch rule is derived.
  • the automatic dispatch rule is characterized by the alarm information system that meets certain conditions, and the automatic alarm is sent to the alarm system.
  • the number of eligible alarms is still large. The problem has not been solved effectively.
  • an embodiment of the present invention provides a method for alerting, where the method for alerting includes:
  • the alarm system adds the received alarm information to the dispatch delay queue
  • the step of assigning the alarm information that is not automatically recovered includes:
  • the parent alarm information is sent.
  • the parent alarm information of the sub-alarm information in the dispatch delay queue is searched, and the found parent alarm information is sent.
  • the step of assigning the alarm information that is not automatically recovered further includes:
  • the method further includes:
  • the automatically recovered alarm information is removed from the dispatch delay queue.
  • the method further includes:
  • the method for alarming further includes:
  • the delay time is modified according to the modification instruction.
  • an embodiment of the present invention further provides an apparatus for alerting, where the apparatus for alerting includes:
  • the dispatching single module is set to send the alarm information that is not automatically recovered when the alarm information is not automatically restored when the alarm information is in the state of the dispatch delay.
  • the dispatch module includes:
  • the determining unit is configured to determine, when the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, determining whether the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information;
  • the first dispatch unit is configured to send a parent to the parent alarm information if the parent alarm information is set;
  • the second dispatch unit is configured to: if it is a sub-alarm information, search for the parent alarm information of the sub-alarm information in the dispatch delay queue, and send a dispatch to the found parent alarm information.
  • the dispatch module further includes:
  • the recovery unit is configured to search for the sub-alarm information associated with the parent alarm information in the dispatch delay queue, and restore the associated sub-alarm information.
  • the device for alerting further includes:
  • the culling module is configured to remove the automatically recovered alarm information from the dispatch delay queue when the alarm information is automatically restored.
  • the device for alerting further includes:
  • the modification module is configured to modify the delay time according to the modification instruction when receiving the modification instruction.
  • the alarm system receives an indeterminate alarm information such as a large number of repeated alarms, flashing alarms, associative alarms, and alarm storms generated by the network device, if the alarm system sends the alarms If the information is sent, the number of dispatched orders is very large. Therefore, the alarm system adds the received alarm information to the dispatch delay queue, enters the waiting state, and does not immediately send it. During the delay waiting time, some alarm information It may recover naturally, and after the delay time is reached, the alarm system only dispatches the unrecovered alarm information.
  • the embodiment of the invention further improves the scheme of automatically dispatching a large number of orders, greatly reducing the number of dispatch orders, and improving the efficiency of network operation and maintenance.
  • FIG. 1 is a schematic flowchart of a first embodiment of a method for alerting according to an embodiment of the present invention
  • FIG. 2 is a schematic diagram showing a refinement process of the first embodiment of the dispatching of the alarm information that is not automatically recovered in FIG. 1;
  • FIG. 3 is a schematic diagram showing a refinement process of the second embodiment of the non-automatically recovered alarm information in FIG. 1;
  • FIG. 4 is a schematic flowchart of a second embodiment of a method for alerting according to an embodiment of the present invention.
  • FIG. 5 is a schematic diagram of functional modules of a first embodiment of an apparatus for alerting according to an embodiment of the present invention
  • FIG. 6 is a schematic diagram of a refinement function module of the first embodiment of the dispatch module of FIG. 5;
  • FIG. 7 is a schematic diagram of a refinement function module of the second embodiment of the dispatch module of FIG. 5;
  • FIG. 8 is a schematic diagram of functional modules of a second embodiment of an apparatus for alerting according to an embodiment of the present invention.
  • An embodiment of the present invention provides a method for alerting.
  • the method includes:
  • Step S101 the alarm system adds the received alarm information to the dispatch delay queue
  • the alarm system when the alarm system receives the alarm information, it does not directly add it to the dispatch queue to automatically send the dispatch, but adds it to the dispatch delay queue, and the delay of the dispatch delay queue.
  • the time is a reasonable delay time, that is, some alarm information that can be automatically recovered can have a recovery buffer time.
  • the alarm system once the alarm system receives the alarm information, it is added to the dispatch delay queue, so that there is more alarm information in the dispatch delay queue.
  • Step S102 When the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, the alarm information that is not automatically restored is sent.
  • the waiting time is entered according to the delay time described above. Do not send it to the order.
  • the alarm system determines whether the alarm information is automatically restored. If some of the alarm information is automatically restored, for example, the alarm information may be repeated alarm information, flashing alarm information, or Alarms, etc., these alarms can be automatically recovered or do not need to be alarmed. For example, when the alarm information is in the state of dispatch delay, the alarm is reported to be recovered after the alarm is restored and the alarm is restored. In the case of alarm recovery, etc., the corresponding alarm information does not need to be assigned.
  • the alarm information is dispatched.
  • the alarm system receives a large number of repeated alarms, flashing alarms, associative alarms, and alarm storms generated by the network device. If the alarm system sends the alarm information, the number of dispatched orders is sent. Very large, therefore, the alarm system adds the received alarm information to the dispatch delay queue, enters the waiting state and does not immediately send it. During the delay waiting time, some alarm information may naturally recover, and the delay is reached. After the time, the alarm system only sends the unrecovered alarm information.
  • This embodiment further improves the scheme of automatically dispatching a large number of orders, greatly reducing the number of dispatch orders, and improving the efficiency of network operation and maintenance.
  • the foregoing step S102 includes:
  • step S1021 when the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, it is determined whether the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information;
  • Step S1022 If the parent alarm information is used, the parent alarm information is sent;
  • step S1023 if the sub-alarm information is used, the parent alarm information of the sub-alarm information in the dispatch delay queue is searched, and the found parent alarm information is sent.
  • the alarm information when the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, it is determined whether the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information, and if it is the parent alarm information, the arrival is reached.
  • the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information
  • the arrival is reached.
  • sending a single delay it will send a single order; if it is a sub-alarm information, it will not assign a sub-alarm information, but will find the parent alarm information in the dispatch delay queue through the association relationship. In this way, it is possible to avoid the repeated dispatch of orders and further reduce the number of dispatch orders.
  • the foregoing step S102 further includes:
  • Step S1024 Search for the sub-alarm information associated with the parent alarm information in the dispatch delay queue, and restore the associated sub-alarm information.
  • step S1022 after the parent alarm information is dispatched, all the child alarm information of the parent alarm information is searched in the dispatch delay queue according to the association relationship, and then the found sub-alarm information is restored.
  • step S1023 after the dispatched parent alarm information is dispatched, all the child alarm information of the parent alarm information is also searched in the dispatch delay queue according to the association relationship, and then the found sub-alarm information is restored. In this way, the recovered sub-alarm information no longer judges the parent-child alarm information, and will not be assigned to it. In this way, it can be further reduced. The number of fewer orders.
  • the method further includes:
  • Step S103 When the alarm information is automatically restored, the automatically recovered alarm information is removed from the dispatch delay queue.
  • the alarm system after the alarm system adds the received alarm information to the dispatch delay queue, it determines whether the alarm information is automatically restored during the delay waiting process. If the alarm information is automatically restored, the alarm system automatically recovers. The alarm information is removed from the dispatch delay queue, so that only the alarm information that is not automatically recovered is left in the dispatch delay queue, so that the alarm system can further filter the alarm information that is not automatically recovered, and determine which ones are not. Automatically recovering alarm information requires a dispatch.
  • the method for alerting further includes: setting a delay time of the dispatch delay queue.
  • the delay time of the dispatch delay queue is set.
  • the delay time may be 120 seconds, and the delay time is persistently stored.
  • the delay time can be modified to other time to improve the flexibility of network operation and maintenance.
  • the apparatus for the alarm includes:
  • the module 101 is added, and the alarm system is configured to add the received alarm information to the dispatch delay queue;
  • the alarm system when the alarm system receives the alarm information, it does not directly add it to the dispatch queue to automatically send the dispatch, but adds it to the dispatch delay queue, and the delay of the dispatch delay queue.
  • the time is a reasonable delay time, that is, some alarm information that can be automatically recovered can have a recovery buffer time.
  • the alarm system once the alarm system receives the alarm information, it is added to the dispatch delay queue, so that there is more alarm information in the dispatch delay queue.
  • the dispatching module 102 is configured to, when the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, the dispatching information is not sent automatically.
  • the waiting time is entered according to the delay time described above without placing a dispatch.
  • the alarm system determines whether the alarm information is automatically restored. If some of the alarm information is automatically restored, for example, the alarm information may be repeated alarm information, flashing alarm information, or Alarms, etc., these alarms can be automatically recovered or do not need to be alarmed. For example, when the alarm information is in the state of dispatch delay, the alarm is reported to be recovered after the alarm is restored and the alarm is restored. In the case of alarm recovery, etc., the corresponding alarm information does not need to be assigned.
  • the alarm information is dispatched.
  • the alarm system receives a large number of repeated alarms, flashing alarms, associative alarms, and alarm storms generated by the network device. If the alarm system sends the alarm information, the number of dispatched orders is sent. Very large, therefore, the alarm system adds the received alarm information to the dispatch delay queue, enters the waiting state and does not immediately send it. During the delay waiting time, some alarm information may naturally recover, and the delay is reached. After the time, the alarm system only sends the unrecovered alarm information.
  • This embodiment further improves the scheme of automatically dispatching a large number of orders, greatly reducing the number of dispatch orders, and improving the efficiency of network operation and maintenance.
  • the dispatch module 102 includes:
  • the determining unit 1021 is configured to determine, when the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, determine whether the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information;
  • the first dispatch unit 1022 is configured to send a parent to the parent alarm information if the parent alarm information is set;
  • the second dispatch unit 1023 is configured to: if it is the sub-alarm information, search for the parent alarm information of the sub-alarm information in the dispatch delay queue, and send a dispatch to the found parent alarm information.
  • the alarm information when the alarm information is in the state of the dispatch delay, when the alarm information is not automatically restored, it is determined whether the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information, and if it is the parent alarm information, the arrival is reached.
  • the alarm information that is not automatically recovered is the parent alarm information or the sub-alarm information
  • the arrival is reached.
  • sending a single delay it will send a single order; if it is a sub-alarm information, it will not assign a sub-alarm information, but will find the parent alarm information in the dispatch delay queue through the association relationship. In this way, it is possible to avoid the repeated dispatch of orders and further reduce the number of dispatch orders.
  • the dispatch module 102 further includes: a recovery unit 1024, configured to search for the dispatch delay queue and The sub-alarm information associated with the parent alarm information, and the associated sub-alarm information is restored.
  • the first dispatch unit 1022 assigns the parent alarm information
  • all the child alarm information of the parent alarm information is searched in the dispatch delay queue according to the association relationship, and then the found sub-alarm is restored.
  • the second dispatch unit 1023 assigns the found parent alarm information, it also searches for all the sub-alarm information of the parent alarm information in the dispatch delay queue according to the association relationship, and then restores the found sub-information.
  • the alarm information is such that the recovered sub-alarm information no longer judges the parent-child alarm information, and does not assign a bill to it. In this way, the number of dispatch orders can be further reduced.
  • the device for alerting further includes:
  • the culling module 103 is configured to remove the automatically recovered alarm information from the dispatch delay queue when the alarm information is automatically restored.
  • the delay waits. During the process, it is determined whether the alarm information is automatically restored. If the alarm information is automatically restored, the alarm system automatically recovers the alarm information from the dispatch delay queue, so that only the alarms that are not automatically recovered are left in the dispatch delay queue.
  • the information in this way, can facilitate the alarm system to further filter the alarm information that is not automatically recovered, and determine which alarm information that is not automatically recovered needs to be dispatched.
  • the device for alerting further includes: a setting module, configured to set a delay time of the dispatch delay queue; and a modification module, configured to When the modification instruction is received, the delay time is modified according to the modification instruction.
  • the delay time of the dispatch delay queue is set.
  • the delay time may be 120 seconds, and the delay time is persistently stored.
  • the delay time can be modified to other time to improve the flexibility of network operation and maintenance.
  • the embodiment of the present invention improves the scheme of automatically dispatching a large number of orders, greatly reducing the number of dispatch orders, and improving the efficiency of network operation and maintenance.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Alarm Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本发明公开了一种告警的方法及装置,所述告警的方法包括:告警***将接收到的告警信息加入至派单延时队列;在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。本发明针对自动派单数量多的方案进一步改进,大大减少派单的数量,提升了网络运维的效率。

Description

告警的方法及装置 技术领域
本发明涉及网络运维技术领域,尤其涉及一种告警的方法及装置。
背景技术
在网络管理运维中,如果网络设备出现故障,会发出告警信息并将其发送至专业的告警***中,维护告警***的人员看到这些告警信息时,将其提交给运维人员,由运维人员根据这些告警信息的故障单到现场去维修网络设备。
在实际应用中,告警信息数量非常多且复杂,维护告警***的人员要从成千上万甚至更多的告警信息中选出需要进行维修的网络设备,工作量很大,准确性也得不到有效的保障,因此衍生出了自动派单规则,自动派单规则的特点是满足一定条件的告警信息告警***对其自动派单,但符合条件的告警信息仍然很多,派单数量仍很大,问题未能有效地得到解决。
上述内容仅用于辅助理解本发明的技术方案,并不代表承认上述内容是现有技术。
发明内容
本发明的目的在于提供一种告警的方法及装置,旨在解决自动派单时派单数量大的技术问题。
为实现上述目的,本发明实施例提供一种告警的方法,所述告警的方法包括:
告警***将接收到的告警信息加入至派单延时队列;
在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。
可选地,所述在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单的步骤包括:
在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,判断所述未自动恢复的告警信息是父告警信息还是子告警信息;
若为父告警信息,则对所述父告警信息进行派单;
若为子告警信息,则查找所述派单延时队列中所述子告警信息的父告警信息,对查找到的父告警信息进行派单。
可选地,所述在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单的步骤进一步包括:
查找所述派单延时队列中与所述父告警信息关联的子告警信息,并恢复所述关联的子告警信息。
可选地,所述告警***将接收到的告警信息加入至派单延时队列之后还包括:
当所述告警信息自动恢复时,将所述自动恢复的告警信息从所述派单延时队列中剔除。
可选地,所述告警***将接收到的告警信息加入至派单延时队列之前还包括:
设置所述派单延时队列的延时时间;
所述告警的方法还包括:
当接收到修改指令时,根据所述修改指令修改所述延时时间。
此外,为实现上述目的,本发明实施例还提供一种告警的装置,所述告警的装置包括:
加入模块,设置为告警***将接收到的告警信息加入至派单延时队列;
派单模块,设置为在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。
可选地,所述派单模块包括:
判断单元,设置为在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,判断所述未自动恢复的告警信息是父告警信息还是子告警信息;
第一派单单元,设置为若为父告警信息,则对所述父告警信息进行派单;
第二派单单元,设置为若为子告警信息,则查找所述派单延时队列中所述子告警信息的父告警信息,对查找到的父告警信息进行派单。
可选地,所述派单模块还包括:
恢复单元,设置为查找所述派单延时队列中与所述父告警信息关联的子告警信息,并恢复所述关联的子告警信息。
可选地,所述告警的装置还包括:
剔除模块,设置为当所述告警信息自动恢复时,将所述自动恢复的告警信息从所述派单延时队列中剔除。
可选地,所述告警的装置还包括:
设置模块,设置为设置所述派单延时队列的延时时间;
修改模块,设置为当接收到修改指令时,根据所述修改指令修改所述延时时间。
本发明实施例的一种告警的方法及装置,告警***会接收到网络设备产生的大量重复告警、闪断告警、关联性告警、告警风暴等不确定的告警信息,如果告警***都将这些告警信息派单,则派单数量很大,因此,告警***将接收到的告警信息加入至派单延时队列,进入等待状态而不立即将其派单,在延时等待时间内,有些告警信息可能自然恢复,而达到延时时间后,告警***仅仅将未恢复的告警信息派单。本发明实施例针对自动派单数量多的方案进一步改进,大大减少派单的数量,提升了网络运维的效率。
附图说明
图1为本发明实施例告警的方法第一实施例的流程示意图;
图2为图1中对未自动恢复的告警信息进行派单第一实施例的细化流程示意图;
图3为图1中对未自动恢复的告警信息进行派单第二实施例的细化流程示意图;
图4为本发明实施例告警的方法第二实施例的流程示意图;
图5为本发明实施例告警的装置第一实施例的功能模块示意图;
图6为图5中派单模块第一实施例的细化功能模块示意图;
图7为图5中派单模块第二实施例的细化功能模块示意图;
图8为本发明实施例告警的装置第二实施例的功能模块示意图。
本发明目的的实现、功能特点及优点将结合实施例,参照附图做进一步说明。
具体实施方式
应当理解,此处所描述的具体实施例仅仅用以解释本发明,并不用于限定本发明。
本发明实施例提供一种告警的方法,参照图1,在一实施例中,该告警的方法包括:
步骤S101,告警***将接收到告警信息加入至派单延时队列;
本实施例中,当告警***接收到告警信息时,并不直接将其加入至派单队列中自动进行派单,而是将其加入至派单延时队列,该派单延时队列的延时时间为合理的延时时间,即可以让某些能够自动恢复的告警信息能够有恢复的缓冲时间。
本实施例中,告警***一旦接收到告警信息即将其加入至派单延时队列中,这样派单延时队列中会有较多的告警信息。
步骤S102,在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。
本实施例中,在告警信息处于派单时延的状态时,按照上述的延时时间进入等待状态而 不将其进行派单。
本实施例中,在告警信息处于派单时延的状态时,告警***判断这些告警信息是否自动恢复,如果部分告警信息自动恢复,例如这些告警信息可能是重复的告警信息、闪断告警信息或者告警风暴等等,这些告警信息是可以自动恢复的或者不需要进行告警的,例如,在告警信息处于派单时延的状态时,下级上报告警恢复、闪断处理后设为告警恢复、人工告警恢复等情况下,对应的告警信息不需要进行派单。
本实施例中,如果判断告警信息未自动恢复,则才将该告警信息进行派单。
本实施例中,告警***会接收到网络设备产生的大量重复告警、闪断告警、关联性告警、告警风暴等不确定的告警信息,如果告警***都将这些告警信息派单,则派单数量很大,因此,告警***将接收到的告警信息加入至派单延时队列,进入等待状态而不立即将其派单,在延时等待时间内,有些告警信息可能自然恢复,而达到延时时间后,告警***仅仅将未恢复的告警信息派单。本实施例针对自动派单数量多的方案进一步改进,大大减少派单的数量,提升了网络运维的效率。
在一优选的实施例中,如图2所示,在上述图1的实施例的基础上,上述步骤S102包括:
步骤S1021,在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,判断所述未自动恢复的告警信息是父告警信息还是子告警信息;
步骤S1022,若为父告警信息,则对所述父告警信息进行派单;
步骤S1023,若为子告警信息,则查找所述派单延时队列中所述子告警信息的父告警信息,对查找到的父告警信息进行派单。
本实施例中,在告警信息处于派单时延的状态时,当告警信息未自动恢复时,判断未自动恢复的告警信息是父告警信息还是子告警信息,如果是父告警信息,则在到达派单延时时对其进行派单;如果是子告警信息,则不会对子告警信息派单,而是通过关联关系在派单延时队列中查找到父告警信息,在到达派单延时时对查找到的父告警信息派单,通过这种方式,可以避免重复派单,进一步减少派单的数量。
在一优选的实施例中,如图3所示,在上述图2的实施例的基础上,上述步骤S102进一步包括:
步骤S1024,查找所述派单延时队列中与所述父告警信息关联的子告警信息,并恢复所述关联的子告警信息。
本实施例中,在步骤S1022之后,在对父告警信息进行派单后,根据关联关系在派单延时队列中查找该父告警信息的所有子告警信息,然后恢复所查找到的子告警信息;在步骤S1023之后,在对查找到的父告警信息进行派单后,同样根据关联关系在派单延时队列中查找该父告警信息的所有子告警信息,然后恢复所查找到的子告警信息,这样,恢复后的子告警信息不再进行父子告警信息的判断,且也不会对其进行派单,通过这种方式,能够进一步减 少派单的数量。
在一优选的实施例中,如图4所示,在上述图1的实施例的基础上,在上述步骤S101之后还包括:
步骤S103,当所述告警信息自动恢复时,将所述自动恢复的告警信息从所述派单延时队列中剔除。
本实施例中,在告警***将接收到的告警信息加入至派单延时队列后,在延时等待的过程中,判断告警信息是否自动恢复,如果告警信息自动恢复,则告警***将自动恢复的告警信息从派单延时队列中剔除掉,这样派单延时队列中仅仅留下未自动恢复的告警信息,这样,能够方便告警***进一步对未自动恢复的告警信息进行筛选,判断哪些未自动恢复的告警信息需要进行派单。
在一优选的实施例中,在上述图1的实施例的基础上,该告警的方法还包括:设置所述派单延时队列的延时时间。
本实施例设置派单延时队列的延时时间,例如,该延时时间可以是120秒,并将该延时时间进行持久化存储。
另外,如果运维人员需要对延时时间进行修改时,也可以将该延时时间修改为其他的时间,提高网络运维的灵活性。
本发明实施例还提供一种告警的装置,如图5所示,在一实施例中,该告警的装置包括:
加入模块101,设置为告警***将接收到的告警信息加入至派单延时队列;
本实施例中,当告警***接收到告警信息时,并不直接将其加入至派单队列中自动进行派单,而是将其加入至派单延时队列,该派单延时队列的延时时间为合理的延时时间,即可以让某些能够自动恢复的告警信息能够有恢复的缓冲时间。
本实施例中,告警***一旦接收到告警信息即将其加入至派单延时队列中,这样派单延时队列中会有较多的告警信息。
派单模块102,设置为在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。
本实施例中,在告警信息处于派单时延的状态时,按照上述的延时时间进入等待状态而不将其进行派单。
本实施例中,在告警信息处于派单时延的状态时,告警***判断这些告警信息是否自动恢复,如果部分告警信息自动恢复,例如这些告警信息可能是重复的告警信息、闪断告警信息或者告警风暴等等,这些告警信息是可以自动恢复的或者不需要进行告警的,例如,在告警信息处于派单时延的状态时,下级上报告警恢复、闪断处理后设为告警恢复、人工告警恢复等情况下,对应的告警信息不需要进行派单。
本实施例中,如果判断告警信息未自动恢复,则才将该告警信息进行派单。
本实施例中,告警***会接收到网络设备产生的大量重复告警、闪断告警、关联性告警、告警风暴等不确定的告警信息,如果告警***都将这些告警信息派单,则派单数量很大,因此,告警***将接收到的告警信息加入至派单延时队列,进入等待状态而不立即将其派单,在延时等待时间内,有些告警信息可能自然恢复,而达到延时时间后,告警***仅仅将未恢复的告警信息派单。本实施例针对自动派单数量多的方案进一步改进,大大减少派单的数量,提升了网络运维的效率。
在一优选的实施例中,如图6所示,在上述图5的实施例的基础上,所述派单模块102包括:
判断单元1021,设置为在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,判断所述未自动恢复的告警信息是父告警信息还是子告警信息;
第一派单单元1022,设置为若为父告警信息,则对所述父告警信息进行派单;
第二派单单元1023,设置为若为子告警信息,则查找所述派单延时队列中所述子告警信息的父告警信息,对查找到的父告警信息进行派单。
本实施例中,在告警信息处于派单时延的状态时,当告警信息未自动恢复时,判断未自动恢复的告警信息是父告警信息还是子告警信息,如果是父告警信息,则在到达派单延时时对其进行派单;如果是子告警信息,则不会对子告警信息派单,而是通过关联关系在派单延时队列中查找到父告警信息,在到达派单延时时对查找到的父告警信息派单,通过这种方式,可以避免重复派单,进一步减少派单的数量。
在一优选的实施例中,如图7所示,在上述图6的实施例的基础上,所述派单模块102还包括:恢复单元1024,设置为查找所述派单延时队列中与所述父告警信息关联的子告警信息,并恢复所述关联的子告警信息。
本实施例中,在第一派单单元1022对父告警信息进行派单后,根据关联关系在派单延时队列中查找该父告警信息的所有子告警信息,然后恢复所查找到的子告警信息;在第二派单单元1023对查找到的父告警信息进行派单后,同样根据关联关系在派单延时队列中查找该父告警信息的所有子告警信息,然后恢复所查找到的子告警信息,这样,恢复后的子告警信息不再进行父子告警信息的判断,且也不会对其进行派单,通过这种方式,能够进一步减少派单的数量。
在一优选的实施例中,如图8所示,在上述图5的实施例的基础上,所述告警的装置还包括:
剔除模块103,设置为当所述告警信息自动恢复时,将所述自动恢复的告警信息从所述派单延时队列中剔除。
本实施例中,在告警***将接收到的告警信息加入至派单延时队列后,在延时等待的过 程中,判断告警信息是否自动恢复,如果告警信息自动恢复,则告警***将自动恢复的告警信息从派单延时队列中剔除掉,这样派单延时队列中仅仅留下未自动恢复的告警信息,这样,能够方便告警***进一步对未自动恢复的告警信息进行筛选,判断哪些未自动恢复的告警信息需要进行派单。
在一优选的实施例中,在上述图5的实施例的基础上,所述告警的装置还包括:设置模块,设置为设置所述派单延时队列的延时时间;修改模块,设置为当接收到修改指令时,根据所述修改指令修改所述延时时间。
本实施例设置派单延时队列的延时时间,例如,该延时时间可以是120秒,并将该延时时间进行持久化存储。
另外,如果运维人员需要对延时时间进行修改时,也可以将该延时时间修改为其他的时间,提高网络运维的灵活性。
工业实用性:本发明实施例针对自动派单数量多的方案进行改进,大大减少派单的数量,提升了网络运维的效率。
以上仅为本发明的优选实施例,并非因此限制本发明的专利范围,凡是利用本发明说明书及附图内容所作的等效结构或等效流程变换,或直接或间接运用在其他相关的技术领域,均同理包括在本发明的专利保护范围内。

Claims (10)

  1. 一种告警的方法,所述告警的方法包括:
    告警***将接收到的告警信息加入至派单延时队列;
    在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。
  2. 如权利要求1所述的告警的方法,其中,所述在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单的步骤包括:
    在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,判断所述未自动恢复的告警信息是父告警信息还是子告警信息;
    若为父告警信息,则对所述父告警信息进行派单;
    若为子告警信息,则查找所述派单延时队列中所述子告警信息的父告警信息,对查找到的父告警信息进行派单。
  3. 如权利要求2所述的告警的方法,其中,所述在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单的步骤进一步包括:
    查找所述派单延时队列中与所述父告警信息关联的子告警信息,并恢复所述关联的子告警信息。
  4. 如权利要求1至3任一项所述的告警的方法,其中,所述告警***将接收到的告警信息加入至派单延时队列之后还包括:
    当所述告警信息自动恢复时,将所述自动恢复的告警信息从所述派单延时队列中剔除。
  5. 如权利要求1至3任一项所述的告警的方法,其中,所述告警***将接收到的告警信息加入至派单延时队列之前还包括:
    设置所述派单延时队列的延时时间;
    所述告警的方法还包括:
    当接收到修改指令时,根据所述修改指令修改所述延时时间。
  6. 一种告警的装置,所述告警的装置包括:
    加入模块,设置为告警***将接收到的告警信息加入至派单延时队列;
    派单模块,设置为在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,对未自动恢复的告警信息进行派单。
  7. 如权利要求6所述的告警的装置,其中,所述派单模块包括:
    判断单元,设置为在告警信息处于派单时延的状态时,当所述告警信息未自动恢复时,判断所述未自动恢复的告警信息是父告警信息还是子告警信息;
    第一派单单元,设置为若为父告警信息,则对所述父告警信息进行派单;
    第二派单单元,设置为若为子告警信息,则查找所述派单延时队列中所述子告警信息的父告警信息,对查找到的父告警信息进行派单。
  8. 如权利要求7所述的告警的装置,其中,所述派单模块还包括:
    恢复单元,设置为查找所述派单延时队列中与所述父告警信息关联的子告警信息,并恢复所述关联的子告警信息。
  9. 如权利要求6-8任一项所述的告警的装置,其中,所述告警的装置还包括:
    剔除模块,设置为当所述告警信息自动恢复时,将所述自动恢复的告警信息从所述派单延时队列中剔除。
  10. 如权利要求6-8任一项所述的告警的装置,其中,所述告警的装置还包括:
    设置模块,设置为设置所述派单延时队列的延时时间;
    修改模块,设置为当接收到修改指令时,根据所述修改指令修改所述延时时间。
PCT/CN2015/090182 2015-06-19 2015-09-21 告警的方法及装置 WO2016201812A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510346814.5 2015-06-19
CN201510346814.5A CN106330490A (zh) 2015-06-19 2015-06-19 告警的方法及装置

Publications (1)

Publication Number Publication Date
WO2016201812A1 true WO2016201812A1 (zh) 2016-12-22

Family

ID=57545029

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/090182 WO2016201812A1 (zh) 2015-06-19 2015-09-21 告警的方法及装置

Country Status (2)

Country Link
CN (1) CN106330490A (zh)
WO (1) WO2016201812A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109993390A (zh) * 2017-12-31 2019-07-09 ***通信集团湖北有限公司 告警关联及派单优化方法、装置、设备及介质
CN111028121A (zh) * 2019-12-25 2020-04-17 中国银行股份有限公司 报警信息的处理方法及装置

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020134783A1 (zh) * 2018-12-26 2020-07-02 中兴通讯股份有限公司 告警派单方法、装置、***及计算机可读存储介质
CN110349388B (zh) * 2019-07-12 2021-06-29 贵州壹零壹科技有限公司 一种自流程化的报警应急调度处理方法
CN114430562B (zh) * 2022-02-10 2023-08-08 中盈优创资讯科技有限公司 一种5g告警实时清除与延时清除方法及装置

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070147260A1 (en) * 2005-12-19 2007-06-28 Bernd Schwarzmann Method for loading a list of alarms by means of an alarm application
CN101222742A (zh) * 2007-11-22 2008-07-16 ***通信集团山东有限公司 移动通信网管***中告警自定位和自处理的方法及***
CN101257694A (zh) * 2007-11-22 2008-09-03 ***通信集团山东有限公司 基于信息支撑***的移动通信网管智能派单方法
CN101425924A (zh) * 2008-06-12 2009-05-06 广东高新兴通信股份有限公司 一种对集中监控***的告警数据的处理方法
CN102238598A (zh) * 2010-05-04 2011-11-09 中兴通讯股份有限公司 网络自动化管理方法、***、网络管理***及网元管理***
CN103260180A (zh) * 2012-02-17 2013-08-21 北京亿阳信通科技有限公司 一种告警关联的方法和装置

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070147260A1 (en) * 2005-12-19 2007-06-28 Bernd Schwarzmann Method for loading a list of alarms by means of an alarm application
CN101222742A (zh) * 2007-11-22 2008-07-16 ***通信集团山东有限公司 移动通信网管***中告警自定位和自处理的方法及***
CN101257694A (zh) * 2007-11-22 2008-09-03 ***通信集团山东有限公司 基于信息支撑***的移动通信网管智能派单方法
CN101425924A (zh) * 2008-06-12 2009-05-06 广东高新兴通信股份有限公司 一种对集中监控***的告警数据的处理方法
CN102238598A (zh) * 2010-05-04 2011-11-09 中兴通讯股份有限公司 网络自动化管理方法、***、网络管理***及网元管理***
CN103260180A (zh) * 2012-02-17 2013-08-21 北京亿阳信通科技有限公司 一种告警关联的方法和装置

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109993390A (zh) * 2017-12-31 2019-07-09 ***通信集团湖北有限公司 告警关联及派单优化方法、装置、设备及介质
CN109993390B (zh) * 2017-12-31 2021-06-25 ***通信集团湖北有限公司 告警关联及派单优化方法、装置、设备及介质
CN111028121A (zh) * 2019-12-25 2020-04-17 中国银行股份有限公司 报警信息的处理方法及装置
CN111028121B (zh) * 2019-12-25 2023-06-06 中国银行股份有限公司 报警信息的处理方法及装置

Also Published As

Publication number Publication date
CN106330490A (zh) 2017-01-11

Similar Documents

Publication Publication Date Title
WO2016201812A1 (zh) 告警的方法及装置
CN101958804B (zh) 提升告警处理效率的方法、服务器及***
CN111475804A (zh) 一种告警预测方法及***
US8429662B2 (en) Passing initiative in a multitasking multiprocessor environment
CN106789141B (zh) 一种网关设备故障处理方法及装置
WO2015039461A1 (zh) 告警处理优先级确定方法、***及计算机存储介质
CN104252401A (zh) 一种基于权重的设备状态判断方法及其***
CN104765672B (zh) 错误码监控方法、装置及设备
CN104408892A (zh) 安防***及应急***及发送装置及接收装置及方法
CN100499497C (zh) 一种快速处理告警的方法和***
CN105871787A (zh) 云虚拟网络中的入侵防御方法、装置、网络设备和***
CN104536770A (zh) 一种支持并行作业断点恢复的作业提交和恢复方法
CN103730000A (zh) 自动记录突发事件反应速度的方法及***
CN115102838B (zh) 服务器宕机风险的应急处理方法和装置、电子设备
JP2012256193A (ja) システムの管理装置、システムの管理方法及びシステムの管理プログラム
CN114500229B (zh) 基于时空信息的网络告警定位及分析方法
US9959163B2 (en) Processing main cause errors and sympathetic errors in devices in a system
JP7423274B2 (ja) 施設管制装置および施設管制方法
CN105447637A (zh) 一种政务数据管理***及处理方法
JPWO2018138793A1 (ja) 攻撃・異常検知装置、攻撃・異常検知方法、および攻撃・異常検知プログラム
CN101971562A (zh) 控制自动运行过程执行的方法、装置及***
CN104462581A (zh) 基于微通道内存映射和Smart-Slice的极速文件指纹提取***及方法
TWI820961B (zh) 基於微服務及公雲元件處理情資的電子裝置及方法
CN115442310B (zh) 基于物联网卡的应用程序流量消耗级别划分方法及装置
CN114116142A (zh) 标识生成方法、装置、电子设备及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15895385

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15895385

Country of ref document: EP

Kind code of ref document: A1