Network event correlation analysis and dynamic early-warning method

Abstract

The invention relates to a network event correlation analysis and dynamic early-warning method. The method is characterized in that a network event is subjected to correlation analysis pretreatment to form an alarm event according to the requirement of the network fault management, a priority reasoning method is selected by a reasoning method selector, the alarm event is treated by the priority reasoning method and a lower priority reasoning method sequentially until the treatment is successful; if the two reasoning methods fail in treatment, dynamic early-warning is provided to network operation and maintenance staff. The method can select the appropriate priority reasoning method in a self-adaption manner, the reasoning efficiency is greatly improved, the case library and the rule base can be optimized constantly in a network event treatment process and the technical requirements for the network operation and maintenance staff are reduced.

Description

Technical field [0001] The invention belongs to the field of network fault management, and specifically is a network event correlation analysis and dynamic early warning method. Background technique [0002] Network fault management can quickly and accurately detect, locate and eliminate faults, reduce losses caused by network faults, ensure network availability and reliability, and prevent faults to a certain extent. With the expansion of the network scale and the increasingly complex network environment, it is not feasible to manually process thousands of network events every day. In addition to a large number of events generated by network devices, hosts and application systems also generate a large number of event logs, some of which can help in fault diagnosis. Because of the causal relationship and timing relationship between these events, event correlation analysis technology must be used to solve fault management. While filtering redundant events, the event correlation ...

AI Technical Summary

Problems solved by technology

However, with the continuous expansion of the network scale, the existing technology is difficult to meet the needs of network fault management

Most of the existing network event processing methods adopt fixed case reasoning and rule reasoning sequence, and it is difficult to adaptively select a reasonable reasoning method according to the change of the network structure; Calculations are too complex

Images