Alarm transmission mode based alarm correlation analysis system and analysis method thereof

Abstract

The invention relates to an alarm transmission mode based alarm correlation analysis system and an analysis method thereof. The method comprises the steps of conducting normalization processing and conversion on all alarms in a uniform format; combining network configuration information to establish a directed graph containing all logic and physical nodes and relations of an event management system (EMS) for a single EMS; positioning alarms on related nodes on the directed graph and judging correlations of alarms according to accessible relations of nodes; and conducting mode matching analysis on homologous alarms by using an improved event tree model to derive the source alarm. By the aid of the system and the method, the problem that the prior art can not conduct alarm correlation analysis comprehensively is effectively solved, the accuracy, the high efficiency and the adaptability of alarm correlation analysis are enhanced, operation and maintenance costs and the operation difficulty are reduced, the system and the method are convenient to popularize and implement, and the system and the method are particularly suitable for current network conditions of the growing complexity and using habits of users.

Description

technical field [0001] The invention relates to an alarm correlation analysis system and an analysis method thereof, belonging to the technical field of communication. Background technique [0002] In the communication network, when a communication device fails, the alarm will be propagated to the upstream and downstream devices according to the connection relationship and inclusion relationship, generating a large number of derivative alarms, which increases the workload and difficulty of the operation and maintenance personnel. In order to help operation and maintenance personnel accurately locate faults, it is necessary to efficiently and accurately find out the original alarm sent by the faulty device and analyze the derived alarms contained in it. This original alarm is called a root alarm, and the process of finding the root cause and including derived alarms is called alarm correlation analysis. [0003] Regarding alarm correlation analysis, cutting-edge technologies...

AI Technical Summary

Problems solved by technology

[0004] During the research process, it was found that the analysis model based on the event tree has the following problems: (1) The alarm events are distinguished by the alarm name. Since each equipment manufacturer names the alarm events differently and there are many alarm names, it is necessary to Maintaining a set of specific rules according to the manufacturer increases the cost and difficulty of operation and maintenance, which is not convenient for large-scale promotion and rapid implementation, and also reduces the accuracy and adaptability of alarm correlation analysis; (2) described The pattern matching criteria of the system are too strict, that is, strict matching is not applicable to the current increasingly complex network situation and user habits; (3) There is a causal relationship between network configuration information and alarms, but the system does not combine network Analysis and calculation based on topological relationship and circuit routing relationship, lack of comprehensiveness

Images