Alarm analysis method, device and system

Abstract

The embodiment of the invention discloses an alarm analysis method, a device and a system, and relates to the field of network management. When the structure of an information system has changed, time and energy that spent by technical staff in a network management system can be minimized, and alarm analysis performance of the network management system can be raised to some extent. The method comprises the following steps: alarm information is obtained, and the alarm information is classified; frequency of occurrence of the alarm information of the same kind is obtained, and correlation between the alarm information of different kinds is determined according to the frequency of occurrence of the alarm information of each kind; and causality between the alarm information of different kinds is determined according to the correlation between the alarm information of different kinds, and the causality is indicated as an association rule for alarm analysis. The method is suitable for the scene of analysis of alarm information.

Description

technical field [0001] The invention relates to the field of network management, in particular to an alarm analysis method, device and system. Background technique [0002] Faults often occur in information systems. In order to facilitate the management of information systems, fault points are often located through fault alarms. However, with the increase of equipment in information systems, the structure of information systems is becoming more and more complex. In practical applications In the network management system, the network management system receives a large amount of alarm information from the information system, and among the large amount of alarm information, only a small amount of alarm information is the root cause alarm information, but it is difficult for technicians to find the root cause alarm information among the large amount of alarm information, so It is also difficult to accurately and quickly repair the fault corresponding to the root cause alarm info...

AI Technical Summary

Problems solved by technology

[0003] However, the update or upgrade of the information system often needs to change the structure of the information system, and the network management system relies on the structure of the information system to pre-set association rules, so when the structure of the information system changes, technicians need to spend a lot of time and energy Redesign and build network management system model according to MOM

Moreover, the updated or upgraded information system usually reports new alarm information, and the association rules involving the new alarm information have not been set in the network management system, so the required root cause alarm information cannot be accurately obtained, resulting in The alarm analysis performance of the network management system is low

Images