Alarm event association method and device, electronic equipment, medium and program product

Abstract

The embodiment of the invention relates to an alarm event association method and device, electronic equipment, a medium and a program product, and the method comprises the steps: obtaining a to-be-associated alarm event; based on the target similarity between the to-be-associated alarm event and the representative element in each cluster in the at least one cluster, performing streaming clustering on the to-be-associated alarm event so as to associate the to-be-associated alarm event to a target cluster; wherein the representative element in each cluster is an alarm event in the corresponding cluster, and the target similarity comprises text content similarity and / or index data similarity. According to the embodiment of the invention, on the basis of the text content similarity and / or the index data similarity, the similarity between the to-be-associated alarm events and the representative elements in each cluster is measured, and the to-be-associated alarm events are clustered in real time, so that the association effect and the clustering effect can be effectively improved.

Description

technical field [0001] The present disclosure relates to the technical field of operation and maintenance, and in particular to an alarm event correlation method, device, electronic equipment, media and program product. Background technique [0002] With the gradual expansion of the network scale and the increasingly complex network architecture, a large number of alarm events will be generated every day when the network is running. Generally speaking, alarm events do not occur independently, and there is a certain sequence and causal relationship between alarm events. Then, when an alarm event occurs, how to associate related alarm events together, so as to quickly analyze and locate the problem from multiple complicated alarm events. [0003] At present, the prior art scheme of associating based on the same or similar alarm event fields can simply and quickly determine which events are related. However, in a large-scale and complex system, there are some alarm events wit...

AI Technical Summary

Problems solved by technology

However, in a large-scale and complex system, there are some alarm events with similar but irrelevant content, so the effect of measuring the correlation between alarm events through the similarity of a single field is poor

[0004] Therefore, how to accurately correlate the various and repeated alarm events in a large-scale and complex system is still an urgent problem to be solved

Images