Method, device and system for determining abnormal event associated object

Abstract

The invention discloses a method, device and system for determining an abnormal event associated object, and belongs to the technical field of networks. The method comprises the steps that a first device obtains a first abnormal event generated by the target network device; the first device extracts a target feature representing the first abnormal event from the first abnormal event according to the abnormal event template matching file corresponding to the target network device, wherein the abnormal event template matching file is used for indicating features representing one or more abnormal events corresponding to one type of network device to which the target network device belongs; and then, the first device determines a target associated object of the first abnormal event according to the target feature, wherein the type of the target associated object is a device, an interface, a protocol or a service. According to the method and the device, when the format or the content of the abnormal event changes, only the corresponding abnormal event template needs to be updated, codes do not need to be modified, and the maintenance difficulty and the maintenance cost are reduced.

Description

technical field [0001] The present application relates to the field of network technology, and in particular to a method, device and system for determining an object associated with an abnormal event. Background technique [0002] The scale of the current network is usually large. When the network fails, multiple network devices in the network may have alarm logs, key performance indicator (KPI) exceptions, or table item exceptions at the same time, resulting in multiple exceptions in the network. event. First of all, it is necessary to clarify which object or objects each abnormal event describes is abnormal, that is, it is necessary to determine the associated objects of the abnormal event, and then locate the root cause of the fault in the network based on the associated objects of each abnormal event. [0003] At present, it usually depends on expert experience to determine the associated objects of abnormal events. After the management device receives an abnormal even...

AI Technical Summary

Problems solved by technology

[0004] However, at present, it is necessary to specify the associated object type of each abnormal event by hard coding. When the format or content of the abnormal event changes due to changes in the product version, the code needs to be modified, which is difficult to maintain.

Images