An Efficient Correlation Method for Alarm Logs

Abstract

The invention discloses a method for efficiently associating alarm logs. The steps include: 1. Serialize alarm information logs to obtain a time period-event set table; Time period set table; 3. Iterative calculation of frequent itemsets; 4. Push some alarm information with the highest importance. The present invention can efficiently process massive alarm information and push alarm entries that cause alarm storms, thereby greatly reducing the workload of operation and maintenance personnel and providing a reliable method for distributed alarm log processing.

Description

technical field [0001] The invention belongs to the field of operation and maintenance system optimization, in particular to an efficient association method of alarm logs. Background technique [0002] Currently, in the era of data explosion, different companies have their own operation and maintenance systems. These operation and maintenance systems are responsible for maintaining and ensuring the high availability of the entire service. At the same time, the system architecture is continuously optimized to improve deployment efficiency, resource utilization and overall ROI. . The most important link in the operation and maintenance system is the generation and push of alarms. Due to the particularity of system failures, an error in a certain module of the system will often generate storm-like alarm information, which has caused great difficulties for the operation and maintenance personnel to troubleshoot system failures. The experience of operation and maintenance person...

AI Technical Summary

Problems solved by technology

The most important link in the operation and maintenance system is the generation and push of alarms. Due to the particularity of system failures, an error in a certain module of the system will often generate storm-like alarm information, which has caused great difficulties for the operation and maintenance personnel to troubleshoot system failures. Great difficulties, the experience of operation and maintenance personnel has become the key to improving the efficiency of troubleshooting, which has caused huge troubles for enterprises with complex IT infrastructure and the increasing scale and complexity of information communication operation and maintenance objects

These factors have led to the fact that the IT infrastructure operation and maintenance experience of the Internet in the past can no longer meet today's needs. It is necessary to design proprietary methods and technologies according to the characteristics of the current enterprise architecture.

[0003] Some existing alarm information optimization methods often use the traditional Apriori algorithm, which cannot be processed in a distributed manner, but also generates orders of magnitude of data, which is obviously not applicable to enterprises with increasingly large alarm logs

Images