Alarm storm processing method and alarm storm processing system

Abstract

The invention relates to an alarm storm processing system and an alarm storm processing method. The alarm storm processing system comprises an alarm receiving module for receiving alarm information transmitted by one or more application systems, an alarm filtering module for receiving the alarm information from the alarm receiving module, setting an alarm buffer area for each application system respectively, and judging whether or not to forward the alarm information to an alarm display module according to the alarm information, an alarm forwarding module for checking the alarm buffer area of the alarm filtering module at specified intervals, and forwarding the alarm information satisfying a specified conditions to the alarm display module, and the alarm display module for displaying the alarm information from the alarm filtering module and the alarm forwarding module on a terminal in a readable way. Through adoption of the alarm storm processing system and the alarm storm processing method, an alarm information receiving end can combine the alarm information under the condition that a large number of alarms are made in the application system, so that over high performance pressure on an alarm receiving end can be avoided.

Description

technical field [0001] The invention relates to network management technology, in particular to a network management technology for filtering and processing alarm information. Background technique [0002] Collecting and processing the alarm information generated by the network is an important task of the network management system in the network. Under normal circumstances, the number of alarm information generated by the network per unit time will not be very large. However, when the network scale is large and some specific faults occur, the network may generate a large number of alarm information in a short period of time and report To the network management system in the network, reporting a large amount of alarm information in a short period of time is called an alarm storm. [0003] Alarm storms can have many negative effects. For example, due to the limitation of the processing speed of the network management system, the alarm information reported to the network mana...

AI Technical Summary

Problems solved by technology

With this blacklist-style processing method, with the operation of the system, the number of records in the blacklist will gradually increase, and the search for the blacklist table will also become slower and slower.

In addition, when some applications are abnormal and an alarm storm occurs, the performance pressure on the alarm collection end is extremely high, which may cause the alarm collection end to discard the alarm information of other normal applications, and the system operation and maintenance personnel cannot find the alarm information in the massive alarm information. information that needs attention

Images