Alarm processing method and system

Abstract

The invention discloses an alarm processing method and an alarm processing system. The method comprises the following steps of: 202, judging whether a reported alarm is an event type alarm or a failure type alarm; and 204, setting a buffer queue according to a judgment result. Through the method and the system, the failure type alarm and the event type alarm are distinguished and different processing is performed according to judgment results respectively, so that the processing speed of a relative rule is increased for the failure type alarm, a flexible processing strategy is provided, alarm processing speed is increased, and alarm processing efficiency is improved.

Description

technical field [0001] The invention relates to an alarm processing method and system. Background technique [0002] Alarms are usually divided into two categories: fault alarms and event alarms. Among them, fault alarms are the focus of attention, with high accuracy and more directness, while event alarms are supplementary to fault alarms and have more numbers than fault alarms. Much, the ratio of the two is generally 10:1. [0003] Alarm is a module that operators focus on during normal operation. It is mainly used for dispatching orders and locating problems. Currently, fault alarms are used as a benchmark and event alarms are used as auxiliary references. [0004] figure 1 It is a diagram showing the system architecture of the operation and maintenance center of the base station subsystem. refer to figure 1 Describe the existing alarm process: base station or radio network controller (radio network controller, RNC for short) and other network elements generate an ala...

AI Technical Summary

Problems solved by technology

[0007] Defects in event alarm processing: Event alarms are characterized by a large number, which is basically 10 times that of fault alarms, but they are worse than fault alarms in reflecting equipment failures. These characteristics will lead to a heavier load on public platform servers for forwarding messages Large, which increases the load on the network, and the server processes alarms too frequently;

[0008] Insufficient ability to deal with alarm storms: Alarm storms are a large number of alarms reported in a short period of time. In the case of alarm storms, the system memory occupied by the alarm module will grow wildly, and the message queue will seriously accumulate, which will seriously delay the alarm processing time. , far exceeding the processing time required by China Mobile's specifications; and

[0009] Alarm rules are slow in processing alarms: alarm rules are applied at the server layer, and the server layer caches the alarms of all network elements, while rules such as correlation rules are specific to specific network elements, which causes alarm rules to The waste of times, that is, the number of comparison alarms is many times more than the number of real useful comparisons. For example, if the number of network elements is 10, it is 10 times

Images