Alarm intelligent order sending method and device

Abstract

The invention relates to an alarm intelligent order sending method and device, and belongs to the technical field of intelligent order sending. The method comprises the following steps: obtaining original alarm data; preprocessing the original alarm data and then storing the original alarm data in an original alarm table; splitting an alarm circuit in the original alarm table, and storing alarm data of which the alarm states are ADD and DEL into an alarm integration table; writing alarm data meeting conditions in the alarm integration table into an alarm aggregation table according to an alarm state ADD aggregation algorithm and an alarm state DEL aggregation algorithm; and according to the alarm template configuration parameter intelligent analysis, sending the alarm data in the alarm aggregation table. According to the method, the alarm integration table is obtained by preprocessing and splitting the original alarm data, the alarm aggregation table is obtained by performing aggregation analysis on the alarm integration table, and the alarm data in the alarm aggregation table is subjected to order sending processing according to intelligent analysis of the alarm template configuration parameters, so that the order sending efficiency is improved, and problems are quickly responded and solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of intelligent dispatching, and in particular, relates to an alarm intelligent dispatching method and device. Background Art

[0002] With the rapid development of Internet applications, the scale of telecommunication networks has continued to increase, resulting in a rapid increase in the number of alarms. Due to the centralization of network monitoring work, the workload of alarm dispatching is very large, and manual dispatching is inefficient, resulting in frequent missed and wrong dispatches. Summary of the invention

[0003] In view of the above deficiencies in the prior art, the purpose of the invention is to provide an alarm intelligent dispatching method and device, which not only significantly improves dispatching efficiency, reduces human intervention and delays, but also responds to and solves problems more quickly.

[0004] A first aspect of the present invention provides an intelligent alarm dispatching method, comprising:

[0005] Get the original alarm data;

[0006] Preprocessing the original alarm data and storing it in an original alarm table;

[0007] Splitting the alarm circuits in the original alarm table, storing the alarm data with the alarm states of ADD and DEL and the split alarm circuits in the alarm integration table;

[0008] According to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table;

[0009] According to the alarm template configuration parameters, the alarm data in the alarm aggregation table is intelligently analyzed and dispatched.

[0010] Furthermore, in the above-mentioned intelligent alarm dispatching method, the original alarm data is pre-processed and then stored in the original alarm table, wherein the pre-processing means at least include: splitting, formatting, normalization, deduplication and outlier removal operations.

[0011] Furthermore, in the above-mentioned intelligent alarm dispatching method, the alarm data satisfying the conditions in the alarm integration table are written into the alarm aggregation table according to the alarm status ADD aggregation algorithm, including:

[0012] Check whether there is alarm data in the alarm integration table;

[0013] If the check result shows that there is no alarm data in the alarm integration table, insert the alarm data into the alarm integration table;

[0014] Check whether there is any alarm data with the alarm status of ADD in the alarm aggregation table;

[0015] If the check result shows that there is no alarm data with the alarm status of ADD in the alarm aggregation table, create alarm data with the alarm status of ADD in the alarm aggregation table; if the check result shows that there is alarm data in the alarm aggregation table and the alarm status is ADD, increase the alarm count in the alarm aggregation table;

[0016] Check the alarm perception level of the alarm data. If the check result shows that the alarm perception level of the alarm data is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the check result shows that the alarm perception level of the alarm data is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0017] Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0018] Furthermore, in the above-mentioned intelligent alarm dispatching method, the alarm data satisfying the conditions in the alarm integration table are written into the alarm aggregation table according to the alarm status ADD aggregation algorithm, including:

[0019] Check whether there is alarm data in the alarm integration table;

[0020] If the check result shows that there is alarm data in the alarm integration table and the alarm status is ADD or DEL, determine the size of the occurrence time of the original alarm data and the occurrence time of the alarm data in the alarm integration table;

[0021] If the judgment result is that the occurrence time of the original alarm data is greater than the occurrence time of the alarm data in the alarm integration table, the alarm occurrence time of the alarm integration table is updated; if the judgment result is that the occurrence time of the original alarm data is less than the occurrence time of the alarm data in the alarm integration table, the data in the alarm integration table remains unchanged;

[0022] Check whether there is any alarm data with the alarm status of ADD in the alarm aggregation table;

[0023] If the check result shows that there is no alarm data with the alarm status of ADD in the alarm aggregation table, create alarm data with the alarm status of ADD in the alarm aggregation table; if the check result shows that there is alarm data in the alarm aggregation table and the alarm status is ADD, increase the alarm count in the alarm aggregation table;

[0024] Check the alarm perception level of the alarm data. If the check result shows that the alarm perception level of the alarm data is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the check result shows that the alarm perception level of the alarm data is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0025] Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0026] Furthermore, in the above-mentioned intelligent alarm dispatching method, the alarm data satisfying the conditions in the alarm integration table are written into the alarm aggregation table according to the alarm status DEL aggregation algorithm, including:

[0027] Check whether there is alarm data in the alarm integration table;

[0028] If the check result shows that there is alarm data in the alarm integration table and the alarm status is DEL;

[0029] Determine the size of the occurrence time and clearing time of the original alarm data and the occurrence time and clearing time of the alarm data in the alarm integration table;

[0030] If the judgment result is that the occurrence time and clearing time of the original alarm data are greater than the occurrence time and clearing time of the alarm data in the alarm integration table, the occurrence time and clearing time of the alarm data in the alarm integration table are updated; if the judgment result is that the occurrence time and clearing time of the original alarm data are less than the occurrence time and clearing time of the alarm data in the alarm integration table, the data in the alarm integration table remains unchanged;

[0031] Check whether there is alarm data with an alarm status of DEL in the alarm aggregation table. If the check result shows that there is no alarm data with an alarm status of DEL in the alarm aggregation table, create a new alarm data with an alarm status of DEL in the alarm aggregation table; if the check result shows that there is alarm data with an alarm status of DEL in the alarm aggregation table, update the alarm occurrence time and alarm time in the alarm aggregation table to the alarm clearing time; if the check result shows that there is alarm data with an alarm status of ADD in the alarm aggregation table, reduce the number of alarms in the alarm aggregation table. When the number of alarms in the alarm aggregation table is 0, change the alarm status in the alarm aggregation table and add the alarm clearing time;

[0032] Determine the size of the alarm perception level of the alarm integration table and the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0033] Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0034] Furthermore, in the above-mentioned intelligent alarm dispatching method, the alarm data satisfying the conditions in the alarm integration table are written into the alarm aggregation table according to the alarm status DEL aggregation algorithm, including:

[0035] Check whether there is alarm data with alarm status DEL in the alarm integration table;

[0036] If the check result shows that there is no alarm data with alarm status DEL in the alarm integration table, insert the data with alarm status DEL in the alarm integration table, and update the alarm occurrence time and alarm time in the alarm integration table to the alarm clearing time;

[0037] Check whether there is alarm data with an alarm status of DEL in the alarm aggregation table. If the check result shows that there is no alarm data with an alarm status of DEL in the alarm aggregation table, create a new alarm data with an alarm status of DEL in the alarm aggregation table. If the check result shows that there is alarm data with an alarm status of DEL in the alarm aggregation table, check whether the alarm status of the alarm aggregation table is ADD.

[0038] If the check result shows that the alarm status of the alarm aggregation table is ADD, change the alarm status of the alarm aggregation table and add the alarm data clearing time;

[0039] Determine the size of the alarm perception level of the alarm integration table and the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0040] Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0041] Furthermore, the above-mentioned intelligent alarm dispatching method further includes:

[0042] Determine whether the alarm is cleared within the set time period;

[0043] If the judgment result is that it has not been cleared within the set time period, the order will be automatically dispatched. If the judgment result is that it has been cleared within the set time period, no order will be dispatched.

[0044] The second aspect of the present invention further provides an intelligent alarm dispatching device, comprising:

[0045] Acquisition module: used to obtain original alarm data;

[0046] Preprocessing module: used to preprocess the original alarm data and store it in the original alarm table;

[0047] Storage module: used for splitting the alarm circuits in the original alarm table, storing the alarm data with the alarm status of ADD and DEL and the split alarm circuits into the alarm integration table;

[0048] Writing module: used to write the alarm data that meets the conditions in the alarm integration table into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm;

[0049] Dispatch module: used to dispatch the alarm data in the alarm aggregation table according to the intelligent analysis of the alarm template configuration parameters.

[0050] According to a third aspect of the present invention, an electronic device is provided, comprising: a processor and a memory;

[0051] The processor calls the program or instruction stored in the memory to execute any of the above alarm intelligent dispatching methods.

[0052] In a fourth aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a program or instruction, and the program or instruction enables a computer to execute any one of the above-mentioned intelligent alarm dispatching methods.

[0053] The beneficial effects of the present invention are as follows: the present invention obtains original alarm data; pre-processes the original alarm data and stores it in the original alarm table; splits the alarm circuits in the original alarm table, and stores the alarm data with alarm status ADD and DEL in the alarm integration table; writes the alarm data that meets the conditions in the alarm integration table into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm; and performs dispatch processing on the alarm data in the alarm aggregation table according to the intelligent analysis of the alarm template configuration parameters. The present invention pre-processes and splits the original alarm data to obtain an alarm integration table, performs aggregation analysis on the alarm integration table to obtain an alarm aggregation table, and performs dispatch processing on the alarm data in the alarm aggregation table according to the intelligent analysis of the alarm template configuration parameters, which not only improves dispatch efficiency and reduces human intervention and delays, but also responds to and solves problems more quickly. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] The accompanying drawings are only used to illustrate specific embodiments and are not considered to limit the present invention. In the entire drawings, the same reference symbols represent the same components. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings.

[0055] Figure 1 A diagram of an intelligent alarm dispatching method provided by an embodiment of the present invention;

[0056] Figure 2 A method for aggregating alarm data using an ADD aggregation algorithm provided in an embodiment of the present invention Figure 1 ;

[0057] Figure 3 A method for aggregating alarm data using an ADD aggregation algorithm provided in an embodiment of the present invention Figure 2 ;

[0058] Figure 4 A method for aggregating alarm data using a DEL aggregation algorithm provided in an embodiment of the present invention Figure 1 ;

[0059] Figure 5 A method for aggregating alarm data using a DEL aggregation algorithm provided in an embodiment of the present invention Figure 2 ;

[0060] Figure 6 A diagram of an intelligent alarm dispatching device provided in an embodiment of the present invention;

[0061] Figure 7 A schematic block diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0062] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, the technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. It should be understood that these descriptions are only exemplary and are not intended to limit the scope of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in the field without making creative work should fall within the scope of protection of the present invention.

[0063] Furthermore, in the following description, descriptions of well-known structures and technologies are omitted to avoid unnecessarily obscuring the concepts disclosed in the present invention.

[0064] In the description of the present invention, the terms "first", "second", and "third" are used for descriptive purposes only and should not be understood as indicating or implying relative importance. The terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be internal communication between two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0065] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of methods and systems consistent with some aspects of the present invention as detailed in the appended claims.

[0066] The present invention proposes an alarm intelligent dispatching method, device, electronic device and storage medium, which not only significantly improves dispatching efficiency and reduces human intervention and delay, but also responds to and solves problems more quickly.

[0067] Method Embodiment

[0068] Figure 1 A diagram of an intelligent alarm dispatching method provided in an embodiment of the present invention.

[0069] The first aspect of the present invention provides an intelligent alarm dispatching method, combining Figure 1 , including five steps from S1 to S5:

[0070] S1: Get the original alarm data.

[0071] Specifically, in the embodiment of the present invention, the original alarm data is the original alarm information pushed by the comprehensive alarm system of the KAFKA channel consumer group.

[0072] S2: Pre-process the original alarm data and store it in the original alarm table.

[0073] Specifically, in the embodiment of the present invention, the original alarm data is split, formatted, normalized, deduplicated, and de-outliers are performed and then stored in the original alarm table, so that the data in the original alarm table is accurate, making subsequent data processing faster and more accurate.

[0074] S3: split the alarm circuits in the original alarm table, and store the alarm data with the alarm status of ADD and DEL and the split alarm circuits in the alarm integration table.

[0075] Specifically, in an embodiment of the present invention, the alarm circuit in the original alarm table is split based on information such as circuit name, alarm ID, alarm source, alarm type, etc., and the alarm integration table stores the alarm data of the alarm circuit split and the alarm status of ADD and DEL.

[0076] S4: Write the alarm data meeting the conditions in the alarm integration table into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm.

[0077] Specifically, in an embodiment of the present invention, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm. Aggregation calculation is performed by comparing the alarm status, alarm time, alarm level, number of alarms, etc. of the alarm integration table and the alarm aggregation table based on the alarm status ADD or DEL and six data columns. The specific method is described in detail below.

[0078] S5: According to the alarm template configuration parameters, the alarm data in the alarm aggregation table is intelligently analyzed and dispatched.

[0079] Specifically, in the embodiment of the present invention, the dispatch processing is intelligent dispatching. The intelligent dispatching is interconnected with the comprehensive dispatching system through the DCOOS interface and the http+json format. The alarm dispatching rules are set in the alarm template, and the alarm data in the alarm aggregation table is intelligently analyzed. For alarm circuits that meet the dispatching rules, they are automatically dispatched to the dispatching department according to the circuit properties. The dispatching department dispatches the alarm fault ticket to the corresponding set order receiving station for fault processing.

[0080] Figure 2 A method for aggregating alarm data using an ADD aggregation algorithm provided in an embodiment of the present invention Figure 1 .

[0081] Furthermore, in the above-mentioned intelligent alarm dispatching method, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table according to the alarm status ADD aggregation algorithm, and combined with Figure 2 , including six steps from S21 to S26:

[0082] S21: Check whether there is alarm data in the alarm integration table;

[0083] S22: If the check result is that there is no alarm data in the alarm integration table, insert the alarm data into the alarm integration table;

[0084] S23: Check whether there is alarm data with an alarm status of ADD in the alarm aggregation table;

[0085] S24: If the check result is that there is no alarm data with an alarm status of ADD in the alarm aggregation table, create alarm data with an alarm status of ADD in the alarm aggregation table; if the check result is that there is alarm data in the alarm aggregation table and the alarm status is ADD, increase the alarm count in the alarm aggregation table;

[0086] S25: Check the alarm perception level of the alarm data. If the check result shows that the alarm perception level of the alarm data is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the check result shows that the alarm perception level of the alarm data is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0087] S26: Check whether the alarm state of the alarm aggregation table is DEL. If the check result shows that the alarm state of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0088] Specifically, in an embodiment of the present invention, the alarm aggregation table is checked based on 6 data columns, which are domain, alarm_source, alarm_type, probable_cause, alarm_location, and cir_name. Steps S21 to S26 are a method for aggregating alarm data when there is no alarm data in the alarm integration table and there is or is no alarm data with an alarm status of ADD in the alarm aggregation table.

[0089] Figure 3 A method for aggregating alarm data using an ADD aggregation algorithm provided in an embodiment of the present invention Figure 2 .

[0090] Furthermore, in the above-mentioned intelligent alarm dispatching method, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table according to the alarm status ADD aggregation algorithm, and combined with Figure 3 , including seven steps from S31 to S37:

[0091] S31: Check whether there is alarm data in the alarm integration table;

[0092] S32: If the check result is that there is alarm data in the alarm integration table and the alarm status is ADD or DEL, determine the size of the occurrence time of the original alarm data and the occurrence time of the alarm data in the alarm integration table;

[0093] S33: If the judgment result is that the occurrence time of the original alarm data is greater than the occurrence time of the alarm data in the alarm integration table, the alarm occurrence time in the alarm integration table is updated; if the judgment result is that the occurrence time of the original alarm data is less than the occurrence time of the alarm data in the alarm integration table, the data in the alarm integration table remains unchanged;

[0094] S34: Check whether there is alarm data with an alarm status of ADD in the alarm aggregation table;

[0095] S35: If the check result is that there is no alarm data with an alarm status of ADD in the alarm aggregation table, create alarm data with an alarm status of ADD in the alarm aggregation table; if the check result is that there is alarm data in the alarm aggregation table and the alarm status is ADD, increase the alarm count in the alarm aggregation table;

[0096] S36: Check the alarm perception level of the alarm data. If the check result shows that the alarm perception level of the alarm data is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the check result shows that the alarm perception level of the alarm data is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0097] S37: Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0098] Specifically, in an embodiment of the present invention, the alarm aggregation table is checked based on 6 data columns, which are domain, alarm_source, alarm_type, probable_cause, alarm_location, and cir_name. Steps S31 to S37 are a method for aggregating alarm data when there is alarm data in the alarm integration table and there is or is not alarm data with an alarm status of ADD in the alarm aggregation table.

[0099] Figure 4 A method for aggregating alarm data using a DEL aggregation algorithm provided in an embodiment of the present invention Figure 1 .

[0100] Furthermore, in the above-mentioned intelligent alarm dispatching method, according to the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table, and combined with Figure 4 , including seven steps from S41 to S47:

[0101] S41: Check whether there is alarm data in the alarm integration table;

[0102] S42: If the check result is that there is alarm data in the alarm integration table and the alarm status is DEL;

[0103] S43: Determine the size of the occurrence time and clearing time of the original alarm data and the occurrence time and clearing time of the alarm data in the alarm integration table;

[0104] S44: if the judgment result is that the occurrence time and clearing time of the original alarm data are greater than the occurrence time and clearing time of the alarm data in the alarm integration table, the occurrence time and clearing time of the alarm data in the alarm integration table are updated; if the judgment result is that the occurrence time and clearing time of the original alarm data are less than the occurrence time and clearing time of the alarm data in the alarm integration table, the data in the alarm integration table remains unchanged;

[0105] S45: Check whether there is alarm data with an alarm status of DEL in the alarm aggregation table. If the check result is that there is no alarm data with an alarm status of DEL in the alarm aggregation table, create a new alarm data with an alarm status of DEL in the alarm aggregation table; if the check result is that there is alarm data with an alarm status of DEL in the alarm aggregation table, update the alarm occurrence time and alarm time in the alarm aggregation table to the alarm clearing time; if the check result is that there is alarm data with an alarm status of ADD in the alarm aggregation table, reduce the number of alarms in the alarm aggregation table. When the number of alarms in the alarm aggregation table is 0, change the alarm status in the alarm aggregation table and add the alarm clearing time;

[0106] S46: Determine the alarm perception level of the alarm integration table and the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0107] S47: Check whether the alarm state of the alarm aggregation table is DEL. If the check result shows that the alarm state of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0108] Specifically, in an embodiment of the present invention, the alarm aggregation table is checked based on 6 data columns, which are domain, alarm_source, alarm_type, probable_cause, alarm_location, and cir_name. Steps S41 to S47 are a method for aggregating alarm data in the alarm aggregation table where there is alarm data and the alarm status is DEL, and in the alarm aggregation table where there is or does not exist alarm data with the alarm status of DEL.

[0109] Figure 5 A method for aggregating alarm data using a DEL aggregation algorithm provided in an embodiment of the present invention Figure 2 .

[0110] Furthermore, in the above-mentioned intelligent alarm dispatching method, according to the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table, and combined with Figure 5 , including six steps from S51 to S56:

[0111] S51: Check whether there is alarm data with an alarm status of DEL in the alarm integration table;

[0112] S52: If the check result is that there is no alarm data with an alarm status of DEL in the alarm integration table, insert the data with an alarm status of DEL into the alarm integration table, and update the alarm occurrence time and alarm time in the alarm integration table to all be the alarm clearing time;

[0113] S53: Check whether there is alarm data with an alarm status of DEL in the alarm aggregation table. If the check result is that there is no alarm data with an alarm status of DEL in the alarm aggregation table, create a new alarm data with an alarm status of DEL in the alarm aggregation table; if the check result is that there is alarm data with an alarm status of DEL in the alarm aggregation table, check whether the alarm status of the alarm aggregation table is ADD;

[0114] S54: If the check result shows that the alarm state of the alarm aggregation table is ADD, the alarm state of the alarm aggregation table is changed and the alarm data clearing time is supplemented;

[0115] S55: Determine the alarm perception level of the alarm integration table and the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table.

[0116] S56: Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

[0117] Specifically, in an embodiment of the present invention, the alarm aggregation table is checked based on 6 data columns, which are domain, alarm_source, alarm_type, probable_cause, alarm_location, and cir_name. Steps S51 to S56 are a method for aggregating alarm data when there is no alarm data with an alarm status of DEL in the alarm integration table and there is or is not alarm data with an alarm status of DEL in the alarm aggregation table.

[0118] Furthermore, the above-mentioned intelligent alarm dispatching method further includes:

[0119] Determine whether the alarm is cleared within the set time period;

[0120] If the judgment result is that it has not been cleared within the set time period, the order will be automatically dispatched. If the judgment result is that it has been cleared within the set time period, no order will be dispatched.

[0121] Specifically, in an embodiment of the present invention, intelligent dispatching can be a delayed processing method to determine whether the alarm is cleared within a set time period; if the judgment result is that it has not been cleared within the set time period, automatic dispatching is performed; if it has been cleared within the set time period, it is regarded as an instantaneous alarm and no work order is dispatched.

[0122] Device Embodiment

[0123] Figure 6 A diagram of an intelligent alarm dispatching device provided in an embodiment of the present invention.

[0124] In the second aspect of the present invention, an intelligent alarm dispatching device is also proposed, Figure 6 ,include:

[0125] Acquisition module 61: used to acquire original alarm data.

[0126] Specifically, in the embodiment of the present invention, the original alarm data acquired by the acquisition module 61 is the original alarm information pushed by the comprehensive alarm system of the KAFKA channel consumer group.

[0127] The preprocessing module 62 is used to preprocess the original alarm data and store them in the original alarm table.

[0128] Specifically, in the embodiment of the present invention, the preprocessing module 62 performs operations such as splitting, formatting, normalizing, deduplicating and removing outliers on the original alarm data and then stores it in the original alarm table, so that the data in the original alarm table is accurate, making subsequent data processing faster and more accurate.

[0129] Storage module 63: used for splitting the alarm circuits in the original alarm table, storing the alarm data of ADD and DEL states and the split alarm circuits in the alarm integration table.

[0130] Specifically, in an embodiment of the present invention, the storage module 63 splits the alarm circuit in the original alarm table based on the circuit name, alarm ID, alarm source, alarm type and other information. The alarm integration table stores the alarm data of the alarm circuit split and the alarm status of ADD and DEL.

[0131] The writing module 64 is used to write the alarm data satisfying the conditions in the alarm integration table into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm.

[0132] Specifically, in an embodiment of the present invention, the writing module 64 writes the alarm data that meets the conditions in the alarm integration table into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm. It compares the alarm status, alarm time, alarm level, number of alarms, etc. of the alarm integration table and the alarm aggregation table based on the alarm status ADD or DEL and six data columns, and performs aggregation calculations. The specific method is described in detail below.

[0133] The dispatch module 65 is used to perform dispatch processing on the alarm data in the alarm aggregation table according to the intelligent analysis of the alarm template configuration parameters.

[0134] Specifically, in the embodiment of the present invention, the dispatching module 65 performs intelligent dispatching. Intelligent dispatching is implemented through the DCOOS interface and the http+json format to interconnect with the comprehensive dispatching system. Alarm dispatching rules are set in the alarm template, and the alarm data in the alarm aggregation table are intelligently analyzed. Alarm circuits that meet the dispatching rules are automatically dispatched to the dispatching department according to the circuit attributes. The dispatching department dispatches the alarm fault ticket to the corresponding set order receiving station for fault processing.

[0135] According to a third aspect of the present invention, an electronic device is provided, comprising: a processor and a memory;

[0136] The processor calls the program or instruction stored in the memory to execute any of the above alarm intelligent dispatching methods.

[0137] In a fourth aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a program or instruction, and the program or instruction enables a computer to execute any one of the above-mentioned intelligent alarm dispatching methods.

[0138] Figure 7 It is a schematic block diagram of an electronic device provided by an embodiment of the present invention.

[0139] like Figure 7 As shown, the electronic device includes: at least one processor 701, at least one memory 702 and at least one communication interface 703. The various components in the electronic device are coupled together through a bus system 704. The communication interface 703 is used to transmit information between external devices. It can be understood that the bus system 704 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 704 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, Figure 7 Various buses are labeled as bus system 704 .

[0140] It can be understood that the memory 702 in this embodiment can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories.

[0141] In some implementations, the memory 702 stores the following elements, executable units or data structures, or a subset thereof, or an extended set thereof: an operating system and application programs.

[0142] The operating system includes various system programs, such as a framework layer, a core library layer, a driver layer, etc., which are used to implement various basic services and process hardware-based tasks. The application includes various application programs, such as a media player (Media Player), a browser (Browser), etc., which are used to implement various application services. A program that implements any method in the intelligent alarm dispatching method provided in an embodiment of the present invention can be included in the application.

[0143] In an embodiment of the present invention, the processor 701 calls a program or instruction stored in the memory 702, specifically, a program or instruction stored in an application, and the processor 701 is used to execute the steps of each embodiment of an alarm intelligent dispatching method provided in an embodiment of the present invention.

[0144] Get the original alarm data;

[0145] The original alarm data is pre-processed and stored in the original alarm table;

[0146] Split the alarm circuits in the original alarm table and store the alarm data of ADD and DEL states into the alarm integration table;

[0147] According to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table;

[0148] According to the alarm template configuration parameters, the alarm data in the alarm aggregation table is intelligently analyzed and dispatched.

[0149] Any method in the intelligent alarm dispatching method provided in an embodiment of the present invention can be applied to the processor 701, or implemented by the processor 701. The processor 701 can be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by a hardware integrated logic circuit in the processor 701 or an instruction in software form. The above-mentioned processor 701 can be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0150] The steps of any method in the method for intelligent dispatching of alarms provided in an embodiment of the present invention can be directly embodied as being executed by a hardware decoding processor, or being executed by a combination of hardware and software units in the decoding processor. The software unit can be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 702, and the processor 701 reads the information in the memory 702 and completes the steps of the method in combination with its hardware.

[0151] Those skilled in the art will appreciate that although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features from different embodiments is meant to be within the scope of the present invention and to form different embodiments.

[0152] Those skilled in the art will appreciate that the description of each embodiment has its own emphasis, and for parts not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0153] Although the embodiments of the present invention are described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations all fall within the scope defined by the appended claims. The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of various equivalent modifications or substitutions within the technical scope disclosed by the present invention, and these modifications or substitutions should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

[0154] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A method for intelligently dispatching alarms, characterized in that: include: Get the original alarm data; Preprocessing the original alarm data and storing it in an original alarm table; Splitting the alarm circuits in the original alarm table, storing the alarm data with the alarm states of ADD and DEL and the split alarm circuits in the alarm integration table; According to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table; According to the alarm template configuration parameters, the alarm data in the alarm aggregation table is intelligently analyzed and dispatched.

2. The intelligent alarm dispatching method according to claim 1, characterized in that: The raw alarm data is pre-processed and then stored in the raw alarm table, wherein the pre-processing means at least include: splitting, formatting, normalizing, de-duplication and de-outlier operations.

3. The intelligent alarm dispatching method according to claim 1, characterized in that: According to the alarm status ADD aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table, including: Check whether there is alarm data in the alarm integration table; If the check result shows that there is no alarm data in the alarm integration table, insert the alarm data into the alarm integration table; Check whether there is any alarm data with the alarm status of ADD in the alarm aggregation table; If the check result shows that there is no alarm data with the alarm status of ADD in the alarm aggregation table, create alarm data with the alarm status of ADD in the alarm aggregation table; if the check result shows that there is alarm data in the alarm aggregation table and the alarm status is ADD, increase the alarm count in the alarm aggregation table; Check the alarm perception level of the alarm data. If the check result shows that the alarm perception level of the alarm data is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the check result shows that the alarm perception level of the alarm data is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table. Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

4. The intelligent alarm dispatching method according to claim 1, characterized in that: According to the alarm status ADD aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table, including: Check whether there is alarm data in the alarm integration table; If the check result shows that there is alarm data in the alarm integration table and the alarm status is ADD or DEL, determine the size of the occurrence time of the original alarm data and the occurrence time of the alarm data in the alarm integration table; If the judgment result is that the occurrence time of the original alarm data is greater than the occurrence time of the alarm data in the alarm integration table, the alarm occurrence time of the alarm integration table is updated; if the judgment result is that the occurrence time of the original alarm data is less than the occurrence time of the alarm data in the alarm integration table, the data in the alarm integration table remains unchanged; Check whether there is any alarm data with the alarm status of ADD in the alarm aggregation table; If the check result shows that there is no alarm data with the alarm status of ADD in the alarm aggregation table, create alarm data with the alarm status of ADD in the alarm aggregation table; if the check result shows that there is alarm data in the alarm aggregation table and the alarm status is ADD, increase the alarm count in the alarm aggregation table; Check the alarm perception level of the alarm data. If the check result shows that the alarm perception level of the alarm data is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the check result shows that the alarm perception level of the alarm data is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table. Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

5. The intelligent alarm dispatching method according to claim 1, characterized in that: According to the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table, including: Check whether there is alarm data in the alarm integration table; If the check result shows that there is alarm data in the alarm integration table and the alarm status is DEL; Determine the size of the occurrence time and clearing time of the original alarm data and the occurrence time and clearing time of the alarm data in the alarm integration table; If the judgment result is that the occurrence time and clearing time of the original alarm data are greater than the occurrence time and clearing time of the alarm data in the alarm integration table, the occurrence time and clearing time of the alarm data in the alarm integration table are updated; if the judgment result is that the occurrence time and clearing time of the original alarm data are less than the occurrence time and clearing time of the alarm data in the alarm integration table, the data in the alarm integration table remains unchanged; Check whether there is alarm data with an alarm status of DEL in the alarm aggregation table. If the check result shows that there is no alarm data with an alarm status of DEL in the alarm aggregation table, create a new alarm data with an alarm status of DEL in the alarm aggregation table; if the check result shows that there is alarm data with an alarm status of DEL in the alarm aggregation table, update the alarm occurrence time and alarm time in the alarm aggregation table to the alarm clearing time; if the check result shows that there is alarm data with an alarm status of ADD in the alarm aggregation table, reduce the number of alarms in the alarm aggregation table. When the number of alarms in the alarm aggregation table is 0, change the alarm status in the alarm aggregation table and add the alarm clearing time; Determine the size of the alarm perception level of the alarm integration table and the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table. Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

6. The intelligent alarm dispatching method according to claim 1, characterized in that: According to the alarm status DEL aggregation algorithm, the alarm data that meets the conditions in the alarm integration table is written into the alarm aggregation table, including: Check whether there is alarm data with alarm status DEL in the alarm integration table; If the check result shows that there is no alarm data with alarm status DEL in the alarm integration table, insert the data with alarm status DEL in the alarm integration table, and update the alarm occurrence time and alarm time in the alarm integration table to the alarm clearing time; Check whether there is alarm data with an alarm status of DEL in the alarm aggregation table. If the check result shows that there is no alarm data with an alarm status of DEL in the alarm aggregation table, create a new alarm data with an alarm status of DEL in the alarm aggregation table. If the check result shows that there is alarm data with an alarm status of DEL in the alarm aggregation table, check whether the alarm status of the alarm aggregation table is ADD. If the check result shows that the alarm status of the alarm aggregation table is ADD, change the alarm status of the alarm aggregation table and add the alarm data clearing time; Determine the size of the alarm perception level of the alarm integration table and the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is greater than the alarm perception level of the alarm aggregation table, update the alarm perception level of the alarm aggregation table. If the alarm perception level of the alarm integration table is less than the alarm perception level of the alarm aggregation table, do not update the alarm perception level of the alarm aggregation table. Check whether the alarm status of the alarm aggregation table is DEL. If the check result shows that the alarm status of the alarm aggregation table is DEL, no operation is performed on the alarm aggregation table.

7. The intelligent alarm dispatching method according to claim 1, characterized in that: The method further comprises: Determine whether the alarm is cleared within the set time period; If the judgment result is that it has not been cleared within the set time period, the order will be automatically dispatched. If the judgment result is that it has been cleared within the set time period, no order will be dispatched.

8. An intelligent alarm dispatching device, characterized in that: include: Acquisition module: used to obtain original alarm data; Preprocessing module: used for preprocessing the original alarm data and storing it in the original alarm table; Storage module: used for splitting the alarm circuits in the original alarm table, storing the alarm data with the alarm status of ADD and DEL and the split alarm circuits into the alarm integration table; Writing module: used to write the alarm data that meets the conditions in the alarm integration table into the alarm aggregation table according to the alarm status ADD aggregation algorithm and the alarm status DEL aggregation algorithm; Dispatch module: used to dispatch the alarm data in the alarm aggregation table according to the intelligent analysis of the alarm template configuration parameters.

9. An electronic device, characterized in that: include: Processor and memory; The processor is used to execute an intelligent alarm dispatching method as described in any one of claims 1 to 7 by calling the program or instruction stored in the memory.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores programs or instructions, and the programs or instructions enable a computer to execute an intelligent alarm dispatching method as described in any one of claims 1 to 7.

Images