Method and system for analyzing fault root cause

Abstract

The invention provides a method and a system for analyzing a fault root cause. The method comprises the following steps that: according to the time attribute of each piece of data in a dataset, carrying out sorting, and segmenting the dataset according to a preset time window to obtain multiple groups of sub-datasets; according to an Apriori algorithm, obtaining a frequent item set and an association rule in the dataset, wherein the frequent item set contains a certain quantity of data with a strong association relationship; and according to the time attributes of the data in the frequent itemset, carrying out sorting, matching the data which ranks higher with adjoint warning cause data pre-stored in a warning cause database in sequence, if the data which ranks higher is successfully matched with the adjoint warning cause data pre-stored in the warning cause database, removing the data which ranks higher from the dataset, and continuously carrying out comparison from a next data itemuntil the data which fails to be matched and ranks higher is taken as the root cause of the data of which the time sequence ranks at the bottom in the frequent item set. The method is suitable for thefull-dimension monitoring scene of an IT (Information Technology) system, the pressure of operation and maintenance personnel is released, and the quality requirements of the operation and maintenance personnel are lowered.

Description

technical field [0001] The present invention relates to the technical field of data mining, and more specifically, to a method and system for analyzing root causes of faults. Background technique [0002] Under the development trend of informatization and digitalization, the complexity of IT systems is increasing day by day, and the IT architecture is also becoming more and more complex. The current IT architecture includes at least: hardware, virtual machines, containers, middleware, databases, applications, business, etc. Once the business In the event of a fault, a large number or even a large amount of alarm / event information will be reported, making it difficult for maintenance personnel to accurately locate the fault in the face of a large number of alarm / event data, and the fault location requires high quality maintenance personnel, which requires rich operation and maintenance personnel. and development experience. [0003] The method of fault analysis root cause ba...

AI Technical Summary

Problems solved by technology

Existing fault analysis mostly adopts the threshold value judgment. It is allowed to set the threshold value or threshold range threshold on the KPI. If the threshold is exceeded, an alarm will be reported. This kind of judgment is not very suitable for the performance problem analysis of the IT system, because If the user’s response is slow due to network or other reasons, a large number of response time limit alarms will be reported. Since these are not failures that can affect users’ use of the IT system, most users will bear it and think that the system is normal again, and they will not pay attention or Complaints, however, once users complain, there will be a lot of performance alarms, and it is difficult to analyze

Images