An alarm analysis method, device, equipment and computer-readable storage medium

Abstract

The present application discloses an alarm analysis method, device, equipment and computer-readable storage medium, which relate to the field of alarm technology. The method includes: obtaining alarm record information of a target time period and / or target point item; determining the alarm type to which the alarm record information belongs according to the alarm record information; filtering the alarm type by at least two methods of list analysis, time trend graph, type frequency graph, alarm flood analysis graph and Top analysis method and obtaining the filtering result; the filtering result is a valid alarm and an invalid alarm. By filtering the alarm type, the alarm information that the user needs to obtain can be extracted from a large number of alarm information and the user can see the alarm information more intuitively, so as to obtain the alarm information that the user needs to obtain from a large number of alarm information in a timely and effective manner, and the alarm information that the user needs to obtain is called a valid alarm, and the rest is called an invalid alarm, so as to effectively filter out a large number of alarm information to obtain a valid alarm.

Description

Technical Field

[0001] The present application relates to the field of alarm technology, and in particular to an alarm analysis method, device, equipment and computer-readable storage medium. Background Art

[0002] Alarm management has been the focus of attention in recent years. Many industrial accidents in the world are related to improper alarm management. There are numerous alarm facilities during normal operation, and alarms are everywhere when disturbances occur in the equipment. This is often related to modern distributed control systems. The numerous alarms will not only cause pressure on operators, but also cause unnecessary production losses, which in turn reduces the safety of equipment production.

[0003] Existing alarm management systems can only collect alarm record information for a target time period or target point. Such alarm information is ineffective when it is reflected to the user. The user cannot clearly understand which alarm information corresponds to a device or component that has a problem and issues an alarm message, and cannot distinguish which of the alarm information is a valid alarm that needs to be processed in a timely manner.

[0004] In view of the above problems, technical personnel in this field are trying their best to find out which device or component has a problem and sends out an alarm message among many alarm messages, and how to distinguish which alarm messages are effective alarms that need to be processed in time among many alarm messages. Summary of the invention

[0005] The purpose of this application is to provide an alarm analysis method for finding out which device or component corresponding to an alarm message has a problem and sends out an alarm message among a large number of alarm messages, and to distinguish which alarm messages are effective alarms that need to be processed in a timely manner.

[0006] In order to solve the above technical problems, the present application provides an alarm analysis method, comprising:

[0007] Obtain alarm record information for target time period and / or target point item;

[0008] Determine the alarm type to which the alarm record information belongs according to the alarm record information;

[0009] The alarm types are screened by at least two methods of list analysis, time trend graph, type frequency graph, alarm flood analysis graph and Top analysis method to obtain screening results; the screening results are valid alarms and invalid alarms.

[0010] Preferably, when the alarm type is a jitter alarm type, analyzing the alarm type according to the alarm record information includes:

[0011] Traverse the alarm record information;

[0012] Determine whether the alarm record information has been traversed;

[0013] If so, then end;

[0014] If not, determine whether the target alarm record information is counted as a jitter alarm;

[0015] After determining whether the target alarm record information is counted as a jitter alarm, the method further includes:

[0016] From the moment when the target alarm record information is recorded to the end of the preset jitter time, determine whether the number of times the target alarm record information is recorded is not less than the preset jitter number;

[0017] If the number of target alarm record information is less than the preset number of jitters, the process ends;

[0018] If the number of times the target alarm record information is recorded is not less than the preset number of jitters, the target alarm record information is counted as a jitter alarm, and the process returns to the step of traversing the alarm record information.

[0019] Preferably, when the alarm type is a flash alarm type, analyzing the alarm type according to the alarm record information includes:

[0020] Traverse the alarm record information and search for the target alarm record information;

[0021] Determine whether the most recent recovery record information of the target alarm record information is found;

[0022] If yes, calculate the flash time difference from finding the target alarm record information to finding the most recently restored record information, and determine whether the flash time difference is less than the preset flash time;

[0023] If not, then end;

[0024] Wherein, judging whether the instantaneous flash time difference is less than the preset instantaneous flash time includes:

[0025] If the flash time difference is not less than the preset flash time, return to the step of traversing the alarm record information and searching for the target alarm record information;

[0026] If the flash time difference is less than the preset flash time, the target alarm record information will be counted as a flash alarm.

[0027] Preferably, when the alarm type is an intermittent alarm type, analyzing the alarm type according to the alarm record information includes:

[0028] Traverse the alarm record information;

[0029] Determine whether the alarm record information has been traversed;

[0030] If yes, determine whether the target alarm record information is counted as a jitter alarm;

[0031] If not, determine whether the target alarm record information is counted as an intermittent alarm;

[0032] Wherein, judging whether the target alarm record information is counted as a jitter alarm includes:

[0033] If yes, remove the target alarm record information;

[0034] If not, then end;

[0035] Determining whether the target alarm record information is counted as an intermittent alarm includes:

[0036] If yes, return to the step of traversing the alarm record information;

[0037] If not, taking the time when the target alarm record information is found as the starting point, it is determined whether the number of times the target alarm record information is recorded within the preset interval time is not less than the preset interval number;

[0038] Taking the time when the target alarm record information is found as the starting point, judging whether the number of times the target alarm record information is recorded within the preset interval time is not less than the preset interval number includes:

[0039] If the number of records is not less than the preset intermittent number, the target alarm record information will be counted as an intermittent alarm;

[0040] If the number of records is less than the preset interval number, return to the step of traversing the alarm record information.

[0041] Preferably, when the alarm type is an alarm flood type, analyzing the alarm type according to the alarm record information includes:

[0042] Querying a database containing alarm record information according to a query identifier, wherein the query identifier is composed of an event number, a point name, an item name, a time when the alarm record information is found, and a time when the most recently restored record information is found;

[0043] Traverse the alarm record information and count the alarm flooding according to the status bit representing the occurrence of flood alarms;

[0044] According to the statistical alarm flooding, it is determined whether the number of alarm flooding occurrences is not less than the preset flooding start number;

[0045] If the number of alarm flooding occurrences is less than the preset flooding start number, return to the step of traversing the alarm record information;

[0046] If the number of alarm flooding is not less than the preset flooding start number, the flooding time from the detection of the status bit to the detection of the next status bit is recorded;

[0047] According to the number of alarm flooding, it is determined whether the number of alarm flooding end times is not greater than the preset flooding start times and whether the alarm flooding end time is not greater than the flooding time;

[0048] If the number of times the alarm flooding ends is greater than the preset number of times the alarm flooding starts or the alarm flooding end time is greater than the flooding time, then return to the step of traversing the alarm record information;

[0049] If the number of alarm flooding ends is not greater than the preset number of flooding starts and the alarm flooding alarm end time is not greater than the flooding time, the number of alarm flooding ends is updated and the end time from when the alarm flooding alarm end time is judged to be not greater than the flooding time to when the alarm flooding alarm end time is judged to be not greater than the flooding time is recorded;

[0050] Put the flooding time and end time into the result set and get the result of alarm flooding.

[0051] Preferably, when the alarm type is a frequent alarm type, analyzing the alarm type according to the alarm record information includes:

[0052] Querying a database containing alarm record information according to a query identifier, wherein the query identifier is composed of an event number, a point name, an item name, a time when the alarm record information is found, and a time when the most recently restored record information is found;

[0053] The target alarm record information exceeding the preset frequent alarm times is counted as frequent alarms;

[0054] Determine whether to count jitter alarms among frequent alarms;

[0055] If yes, then the jitter alarms are counted and the step of determining whether alarm flooding is counted among the frequent alarms is entered;

[0056] If not, the step of determining whether alarm flooding is counted in frequent alarms is entered, wherein the jitter alarm is 0;

[0057] The determination of whether alarm flooding is counted in frequent alarms includes:

[0058] If yes, then the alarm flooding is counted and the step of removing the jitter alarms and alarm flooding from the frequent alarms is entered;

[0059] If not, the process proceeds to the step of removing jitter alarms and alarm flooding from frequent alarms, wherein the alarm flooding is zero.

[0060] Preferably, when the alarm type is an old alarm type, analyzing the alarm type according to the alarm record information includes:

[0061] Call the database containing alarm record information;

[0062] Determine an analysis mode for analyzing the alarm record information, wherein the analysis mode includes a real-time analysis mode and a full analysis mode;

[0063] When the analysis mode is the real-time analysis mode, determine whether the alarm record information has been traversed;

[0064] If all alarm record information is traversed, the process ends;

[0065] If the alarm record information has not been traversed, determine whether the target alarm record information is in an activated state;

[0066] If the target alarm record information is not in an activated state, return to the step of determining whether the alarm record information has been traversed;

[0067] If the target alarm record information is in the activated state, determine whether the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time;

[0068] If the difference between the time when the old alarm occurred and the current time is not less than the preset old alarm time, the target alarm record information will be counted as an old alarm;

[0069] If the difference between the time when the old alarm occurred and the current time is greater than the preset old alarm time, return to the step of determining whether the alarm record information has been traversed;

[0070] When the analysis mode is the full analysis mode, determine whether the alarm record information has been traversed;

[0071] If all alarm record information is traversed, the process ends;

[0072] If the alarm record information has not been traversed, determine whether the target alarm record information is in an activated state;

[0073] If the target alarm record information is not in the activated state, it is determined whether the difference between the old alarm occurrence time and the recovery time is not less than the preset old alarm time;

[0074] If the difference between the occurrence time of the obsolete alarm and the recovery time is not less than the preset obsolete alarm time, the step of counting the target alarm record information as an obsolete alarm is entered;

[0075] If the difference between the old alarm occurrence time and the recovery time is greater than the preset old alarm time, return to the step of determining whether the alarm record information has been traversed;

[0076] If the target alarm record information is in the activated state, determine whether the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time;

[0077] If the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time, the step of counting the target alarm record information as an old alarm is entered;

[0078] If the difference between the time when the old alarm occurred and the current time is greater than the preset old alarm time, the process returns to the step of determining whether the alarm record information has been traversed.

[0079] In order to solve the above technical problems, the present application also provides an alarm analysis device, comprising:

[0080] An acquisition module is used to acquire alarm record information of a target time period and / or target point item;

[0081] A determination module, used to determine the alarm type to which the alarm record information belongs according to the alarm record information;

[0082] The screening module is used to screen the alarm types through at least two methods of list analysis, time trend chart, type frequency chart, alarm flood analysis chart and Top analysis method and obtain the screening results; the screening results are valid alarms and invalid alarms.

[0083] In order to solve the above technical problems, the present application also provides an alarm analysis device, including:

[0084] Memory for storing computer programs;

[0085] The processor is used to point to the computer program to implement the steps of the alarm analysis method mentioned above.

[0086] In order to solve the above technical problems, the present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of all the above alarm analysis methods are implemented.

[0087] The alarm analysis method provided by the present application includes: obtaining alarm record information of a target time period and / or target point item; determining the alarm type to which the alarm record information belongs according to the alarm record information; filtering the alarm type by at least two methods of list analysis, time trend graph, type frequency graph, alarm flood analysis graph, and Top analysis method and obtaining the filtering result; the filtering result is a valid alarm and an invalid alarm. By filtering the alarm type, the alarm information that the user needs to obtain can be extracted from a large number of alarm information and the user can see the alarm information more intuitively. At this time, the alarm information that the user needs to obtain is obtained from a large number of alarm information in a timely and effective manner, and the alarm information that the user needs to obtain is called a valid alarm, and the rest is called an invalid alarm. At this time, effective filtering of a large number of alarm information to obtain a valid alarm is achieved.

[0088] The present application also provides an alarm analysis device, equipment and computer-readable storage medium, with the same effects as above. BRIEF DESCRIPTION OF THE DRAWINGS

[0089] In order to more clearly illustrate the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0090] Figure 1 A flowchart of an alarm analysis method provided in an embodiment of the present application;

[0091] Figure 2 A flowchart of a method for analyzing jitter alarm types provided in an embodiment of the present application;

[0092] Figure 3 A flow chart of a method for analyzing flash alarm types provided in an embodiment of the present application;

[0093] Figure 4 A flow chart of the intermittent alarm type analysis method provided in an embodiment of the present application;

[0094] Figure 5 A flowchart of the alarm flood type analysis method provided in an embodiment of the present application;

[0095] Figure 6 A flowchart of a frequent alarm type analysis method provided in an embodiment of the present application;

[0096] Figure 7 A flow chart of the method for analyzing old alarm types provided in an embodiment of the present application;

[0097] Figure 8A structural diagram of an alarm analysis device provided in an embodiment of the present application;

[0098] Fig. 9 A structural diagram of an alarm analysis device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0099] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0100] The core of this application is to provide an alarm analysis method, device and computer-readable storage medium, which can determine which device or component corresponding to an alarm message has a problem and sends out an alarm message among many alarm messages, and distinguish which alarm messages are valid alarms that need to be processed in a timely manner.

[0101] In order to enable those skilled in the art to better understand the present application, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0102] Distributed Control System (DCS) is a new control system developed from the perspective of integrated automation to meet the needs of large-scale industrial production and increasingly complex control systems. It combines process control and process monitoring and combines 4C technology (computer: Computer, communication: Communication, display: Cathode Ray Tube, CRT, control: Control).

[0103] The design concept of DCS system is: decentralized control, centralized management, hierarchical management, flexible configuration, and convenient configuration. Reliability The design of DCS system basically adopts redundant design. The meaning of redundancy is to design the important equipment of the system, CPU and various modules in the form of one use and one backup. When a CPU or module fails, the backup equipment will work immediately, or both can be selected to work at the same time, thus reducing the system paralysis caused by the failure of key equipment. The open system adopts an open platform, systematization, modularization, and standardization. Each interconnected computer system can realize centralized interconnection and mutual access through communication methods such as Ethernet. When there is a need to increase or decrease the system, the system modules can be directly increased or decreased, which is more convenient for system design and maintenance. DCS system has developed to the present, and is more inclined to modular design. All core equipment has been transformed into modular design, such as CPU, power supply, I / O module, communication module, AI / AO module. These devices are designed as independent modules and assembled using a cabinet. At this time, you only need to install the base of the module and then install the corresponding module on the base to realize the hardware installation. Each module integrates its own CPU and can process data or operations at a faster speed. At the same time, the modules do not interfere with each other. If a problem occurs in one module, it will not affect other modules, and hot swapping is supported.

[0104] Alarm management has been the focus of attention in recent years. Many industrial accidents in the world are related to improper alarm management. There are many alarm facilities during normal operation, and there are alarms everywhere when the device is disturbed. This is often related to modern distributed control systems. The numerous alarms will not only cause pressure on operators, but also cause unnecessary production losses, and reduce the safety of device production. The flood of alarms will cause serious environmental pollution, production interruptions, injuries and even deaths. Proper management of the alarm system is very necessary to deal with the flood of alarms and other related problems.

[0105] The goal of an alarm plan is to ensure that the alarm system is effective in helping operators take the right action at the right time. Ideally, each alarm should provide operators with information such as priority, possible source of the problem, and recommended response steps. Operators can respond to alarms quickly and effectively. Limiting the number of alarms, prioritizing alarms, and providing alarms with necessary relevant information can reduce the possibility that operators will delay responding or even ignore alarms.

[0106] The formulation of the alarm management plan should achieve the following goals: the alarm settings are reasonable and the alarm management is implemented correctly; the alarm information is instructive and clear and easy to understand; the alarm settings and configurations comply with relevant industrial standards and best industrial practices; the alarm selection is reasonable, and the alarm incidence rate is controlled within the range of international standards; the operator needs to respond to alarms of all priority levels; the operator can quickly determine the alarm location and alarm priority; the operator can effectively handle alarm information when the alarm occurs frequently; the alarm system is effectively controlled, monitored and maintained. In order to improve alarm management, many countries and organizations have defined alarm management specifications such as EEMUA191, IAS 18.2 and IEC 62682. The alarm system data flow and alarm life cycle model are defined in IEC 62682.

[0107] First, the nuisance alarm is subdivided into jitter alarm, flash alarm, intermittent alarm, alarm flood, frequent alarm, and obsolete alarm. Among them, the first alarm type is jitter alarm, the second alarm type is flash alarm, the third alarm type is intermittent alarm, the fourth alarm type is alarm flood, the fifth alarm type is frequent alarm, and the sixth alarm type is obsolete alarm. Different alarm types are used to split the nuisance alarms by type, and the different original alarm types are redefined for further analysis. After redefinition and analysis of the original alarm according to the definition, the alarms that the user needs to pay attention to can be quickly and effectively identified through the analysis process. If there is no such analysis process, and only the event or frequency dimension is defined to analyze the original alarm, alarms of various reasons in different situations often cannot be effectively identified and then handled in a timely manner.

[0108] Figure 1 This is a flow chart of an alarm analysis method provided by an embodiment of the present application. Figure 1 As shown, the method includes:

[0109] S10: Acquire alarm record information of target time period and / or target point item;

[0110] It should be noted that the alarm record information of the target time period and / or target point item can be a short text content, or a data string such as "00101100". It can be understood that when the alarm record information of the target time period and / or target point item is a data string, the above-mentioned data string form is only one of many embodiments, and does not limit the alarm record information of the target time period and / or target point item. The data string can be 2 bits, 4 bits, 8 bits, 16 bits, 32 bits, 64 bits, etc., and its implementation method can be determined according to the specific implementation scenario. It can be understood that the device for obtaining the alarm record information of the target time period and / or target point item can be a CPU or an MCU, as long as it can realize the function of obtaining the alarm record information of the target time period and / or target point item. Here, the device for obtaining the alarm record information of the target time period and / or target point item is not limited, and its implementation method can be determined according to the specific implementation scenario.

[0111] S11: Determine the alarm type to which the alarm record information belongs according to the alarm record information;

[0112] There are six types of alarms mentioned above, namely, the first alarm type is jitter alarm, the second alarm type is flash alarm, the third alarm type is intermittent alarm, the fourth alarm type is alarm flooding, the fifth alarm type is frequent alarm, and the sixth alarm type is obsolete alarm. Since the subsequent analysis of the alarm record information is different, it is necessary to determine here which of the six alarm types the alarm record information belongs to.

[0113] It should be noted that different alarm types are distinguished by different parameters defined for each alarm type. The parameters defined for each alarm type are not limited here. They can be the number of alarms or the time when the alarm occurs. The above-mentioned parameters are two of many parameters and do not limit the parameters. The parameters in the implementation method can be determined according to the specific implementation scenario.

[0114] S12: Screening the alarm types by at least two methods of list analysis, time trend graph, type frequency graph, alarm flood analysis graph and Top analysis method to obtain screening results; the screening results are valid alarms and invalid alarms;

[0115] Defining the parameters of nuisance alarms and obtaining different types of alarms from analysis is only the first step. At this point, there may still be many interference factors that lead to the inability to effectively identify key alarms in a timely manner. Therefore, it is necessary to provide multiple methods to further identify which nuisance alarms to effectively screen, so that effective alarms that require timely processing by users can be obtained. The following screening methods are provided:

[0116] Among them, list analysis is the basic alarm analysis and screening method, which provides a table to describe the alarm from different angles and provide relevant information for users to screen. The information includes: alarm name, alarm description, alarm source, alarm level, alarm measurement point, alarm measurement point item value, alarm measurement point type, equipment, alarm event number, alarm status, alarm occurrence time, alarm recovery time, alarm confirmation time, alarm shelving time, alarm grouping, alarm area, alarm operator, alarm time value and extended fields. In addition, the table provides field query, time sorting, and field sorting functions to support quick screening.

[0117] The time trend chart is a method to view the alarm occurrence trend and jitter of the corresponding analysis category through the time trend. In the time trend chart, the results of an alarm analysis are divided into nodes every 10 minutes, and the corresponding nuisance alarm similar analysis results in the current node are counted. From the time trend chart, you can quickly get which time period is the peak period of which nuisance alarms, and the user can further analyze and study why these alarms are frequent at this time, these devices, and these alarms. At the same time, clicking each peak point of the time trend chart can be linked to the specific alarm corresponding to this peak point.

[0118] The type frequency chart is a special two-dimensional bar chart that counts the results of an alarm analysis according to the frequency of occurrence. The bar chart can count the frequency of the corresponding nuisance alarms during the alarm analysis period according to the different dimensions of device and name. In particular, for the case where the parent device contains child devices, the repeated alarms counted by the parent device and child device will be filtered out when filtering the name.

[0119] The alarm flood analysis chart is a special time trend chart. It can display the duration of alarm flooding and the number of alarms that occurred during this time period. Click any of them to display all the alarm details for this time period in the alarm details below.

[0120] Top analysis is to sort and analyze the nuisance alarms in the alarm analysis results in a TopN manner, so that the ranking of the nuisance alarm analysis results can be quickly obtained. The concerned results can be obtained quickly and directly.

[0121] The above screening method can further screen the analysis results of a nuisance alarm through different dimensions, forms and means, which is an efficient method for alarm analysis and screening statistics. Compared with the traditional analysis method, which can only simply analyze all alarm results according to time, frequency or type, it is difficult to get effective results.

[0122] By filtering the alarm types, the alarm information that the user needs to obtain can be extracted from a large number of alarm information and the user can see the alarm information more intuitively. At this time, it is possible to timely and effectively obtain the alarm information that the user needs to obtain from a large number of alarm information. In addition, the alarm information that the user needs to obtain is called a valid alarm, and the rest are called invalid alarms. At this time, it is possible to effectively filter out a large number of alarm information to obtain a valid alarm.

[0123] Figure 2 Flow chart of the jitter alarm type analysis method provided in the embodiment of the present application. It should be noted that jitter alarm is defined from the dimensions of the device used, the frequency threshold (times), and the frequency threshold (minutes). Among them, the frequency of occurrence means that an alarm is counted as one time from the occurrence to the recovery. When the conditions are met, it is considered a jitter alarm. Figure 2 When the alarm type is a jitter alarm type, the alarm types are analyzed based on the alarm record information:

[0124] S20: traverse the alarm record information;

[0125] S21: Determine whether the alarm record information has been traversed;

[0126] If so, then end;

[0127] If not, proceed to step S22: determine whether the target alarm record information is counted as a jitter alarm;

[0128] After determining whether the target alarm record information is counted as a jitter alarm, the method further includes:

[0129] From the moment when the target alarm record information is recorded to the time period when the preset jitter time ends, step S23 is executed: determining whether the number of times the target alarm record information is recorded is not less than the preset jitter number;

[0130] If the number of target alarm record information is less than the preset number of jitters, the process ends;

[0131] S24: If the number of times the target alarm record information is recorded is not less than the preset number of jitters, the target alarm record information is counted as a jitter alarm, and the process returns to step S20: traversing the alarm record information.

[0132] Figure 3 Flow chart of the flash alarm type analysis method provided in the embodiment of the present application. It should be noted that the flash alarm is defined based on the device used and the frequency threshold (seconds). The frequency of occurrence refers to the time from the occurrence of an alarm to its recovery. When the conditions are met, it is considered a flash alarm. Figure 3 As shown in the figure, when the alarm type is a flash alarm type, the alarm types analyzed according to the alarm record information include:

[0133] S30: traverse the alarm record information and search for target alarm record information;

[0134] S31: Determine whether the latest restored record information of the target alarm record information is found;

[0135] If yes, then go to step S32: calculate the flash time difference from finding the target alarm record information to finding the latest restored record information, and go to step S33: determine whether the flash time difference is less than the preset flash time;

[0136] If not, then end;

[0137] Wherein, judging whether the instantaneous flash time difference is less than the preset instantaneous flash time includes:

[0138] If the flash time difference is not less than the preset flash time, return to step S30: traverse the alarm record information and search for the target alarm record information;

[0139] If the flash time difference is less than the preset flash time, the process proceeds to step S34: counting the target alarm record information as a flash alarm.

[0140] Figure 4 Flow chart of the intermittent alarm type analysis method provided in the embodiment of the present application. It should be noted that intermittent alarms are defined based on the device used, the frequency threshold (hours), the minimum number of alarms (times), and whether to exclude jitter alarms. The frequency of occurrence means that an alarm is counted as one time from the occurrence to the recovery. When the conditions are met, it is considered an intermittent alarm. Figure 4 As shown in the figure, when the alarm type is an intermittent alarm type, the alarm types analyzed according to the alarm record information include:

[0141] S40: traverse the alarm record information;

[0142] S41: Determine whether the alarm record information has been traversed;

[0143] If yes, then proceed to step S42: determine whether the target alarm record information is counted as a jitter alarm;

[0144] If not, proceed to step S43: determine whether the target alarm record information is counted as an intermittent alarm;

[0145] Wherein, judging whether the target alarm record information is counted as a jitter alarm includes:

[0146] If yes, proceed to step S44: remove the target alarm record information;

[0147] If not, then end;

[0148] Determining whether the target alarm record information is counted as an intermittent alarm includes:

[0149] If yes, then return to step S40: traverse the alarm record information;

[0150] If not, the process proceeds to step S45 with the time when the target alarm record information is found as the starting point: determining whether the number of times the target alarm record information is recorded within the preset interval time is not less than the preset interval number;

[0151] Taking the time when the target alarm record information is found as the starting point, judging whether the number of times the target alarm record information is recorded within the preset interval time is not less than the preset interval number includes:

[0152] If the number of records is not less than the preset intermittent number, the process proceeds to step S46: counting the target alarm record information as an intermittent alarm;

[0153] If the number of records is less than the preset number of intervals, the process returns to step S40: traversing the alarm record information.

[0154] Figure 5 Flow chart of the alarm flood type analysis method provided in the embodiment of the present application. It should be noted that alarm flooding is defined based on the equipment used, flood start standard (times), flood start standard (minutes), flood end standard (times), and flood end standard (minutes). The frequency of occurrence means that an alarm is counted as one time from the occurrence to the recovery. When the conditions are met, it is considered an intermittent alarm. Figure 5 As shown in the figure, when the alarm type is alarm flooding type, the alarm types analyzed according to the alarm record information include:

[0155] S50: Querying a database containing alarm record information according to the query identifier;

[0156] The query identifier is composed of the event number, point name, item name, time when the alarm record information is found, and time when the most recent recovery record information is found;

[0157] S51: traverse the alarm record information, and count the alarm flooding according to the status bit indicating the occurrence of flood alarm;

[0158] S52: judging whether the number of alarm flooding occurrences is not less than a preset number of flooding start times according to the statistical alarm flooding;

[0159] If the number of alarm flooding occurrences is less than the preset flooding start number, the process returns to step S51: traversing the alarm record information;

[0160] If the number of alarm flooding is not less than the preset flooding start number, the process proceeds to step S53: recording the flooding time from when the state bit is detected to when the next state bit is detected;

[0161] S54: According to the number of alarm flooding, it is determined whether the number of alarm flooding end times is not greater than the preset flooding start times and whether the alarm flooding end time is not greater than the flooding time;

[0162] If the number of times the alarm flooding ends is greater than the preset number of times the alarm flooding starts or the alarm flooding end time is greater than the flooding time, then return to step S51: traverse the alarm record information;

[0163] If the number of alarm flooding ends is not greater than the preset number of flooding start times and the alarm flooding alarm end time is not greater than the flooding time, then proceed to step S55: update the number of alarm flooding ends and record the end time from when it is determined that the alarm flooding alarm end time is not greater than the flooding time to when it is determined that the alarm flooding alarm end time is not greater than the flooding time;

[0164] S56: The flooding time and the end time are put into the result set, and the result of the alarm flooding is obtained.

[0165] Figure 6 Flow chart of the frequent alarm type analysis method provided in the embodiment of the present application. It should be noted that frequent alarms are defined based on the equipment used, the minimum number of alarms (times), whether jitter alarms are excluded, and whether there is currently an alarm flood. The frequency of occurrence means that an alarm is counted as one time from the occurrence to the recovery. When the conditions are met, it is considered a frequent alarm. Figure 6 As shown, when the alarm type is a frequent alarm type, the alarm types analyzed according to the alarm record information include:

[0166] S60: Querying a database containing alarm record information according to the query identifier;

[0167] The query identifier is composed of the event number, point name, item name, time when the alarm record information is found, and time when the most recent recovery record information is found;

[0168] S61: Counting target alarm record information exceeding a preset number of frequent alarms as frequent alarms;

[0169] S62: Determine whether to count jitter alarms in frequent alarms;

[0170] If yes, then proceed to step S63: count jitter alarms, and proceed to step S64: determine whether alarm flooding is counted in frequent alarms;

[0171] If not, then proceed to step S64: determine whether alarm flooding is counted in frequent alarms; wherein the jitter alarm is 0;

[0172] The determination of whether alarm flooding is counted in frequent alarms includes:

[0173] If yes, then go to step S65: count alarm flooding, and go to step S66: remove jitter alarms and alarm flooding from frequent alarms;

[0174] If not, the process proceeds to step S66: removing jitter alarms and alarm flooding from frequent alarms; wherein the alarm flooding is 0.

[0175] Figure 7 Flow chart of the method for analyzing the type of obsolete alarms provided in the embodiment of the present application. It should be noted that obsolete alarms are defined based on the device used, the time (hours) that the alarm has not been processed, and whether only unrecovered alarms are counted. The frequency of occurrence means that an alarm is counted as one time from the occurrence to the recovery. The analysis will only count the obsolete alarms that have not been recovered yet, which is defined as real-time analysis, and all obsolete alarms within the statistical time period are defined as full analysis. Figure 7 As shown, when the alarm type is an old alarm type, the alarm type analyzed according to the alarm record information includes:

[0176] S700: Call the database containing alarm record information;

[0177] S701: Determine an analysis mode for analyzing alarm record information;

[0178] Among them, the analysis modes are real-time analysis mode and full analysis mode;

[0179] S702: When the analysis mode is the real-time analysis mode, determining whether the alarm record information has been traversed;

[0180] If all alarm record information is traversed, the process ends;

[0181] If the alarm record information has not been traversed, the process proceeds to step S703: determining whether the target alarm record information is in an activated state;

[0182] If the target alarm record information is not in an activated state, the process returns to step S702: when the analysis mode is the real-time analysis mode, it is determined whether the alarm record information has been traversed;

[0183] If the target alarm record information is in the activated state, the process proceeds to step S704: determining whether the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time;

[0184] If the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time, the process proceeds to step S705: counting the target alarm record information as an old alarm;

[0185] If the difference between the old alarm occurrence time and the current time is greater than the preset old alarm time, the process returns to step S702: when the analysis mode is the real-time analysis mode, it is determined whether the alarm record information has been traversed;

[0186] S706: When the analysis mode is the full analysis mode, determine whether the alarm record information has been traversed;

[0187] If all alarm record information is traversed, the process ends;

[0188] If the alarm record information has not been traversed, the process proceeds to step S707: determining whether the target alarm record information is in an activated state;

[0189] If the target alarm record information is not in the activated state, the process proceeds to step S708: determining whether the difference between the old alarm occurrence time and the recovery time is not less than the preset old alarm time;

[0190] If the difference between the old alarm occurrence time and the recovery time is not less than the preset old alarm time, the process proceeds to step S705: counting the target alarm record information as an old alarm;

[0191] If the difference between the old alarm occurrence time and the recovery time is greater than the preset old alarm time, the process returns to step S706: when the analysis mode is the full analysis mode, it is determined whether the alarm record information has been traversed;

[0192] If the target alarm record information is in the activated state, the process proceeds to step S709: determining whether the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time;

[0193] If the difference between the old alarm occurrence time and the current time is not less than the preset old alarm time, the process proceeds to step S705: counting the target alarm record information as an old alarm;

[0194] If the difference between the old alarm occurrence time and the current time is greater than the preset old alarm time, the process returns to step S706: when the analysis mode is the full analysis mode, it is determined whether the alarm record information has been traversed.

[0195] Through the above embodiments, nuisance alarms can be effectively screened. Compared with the traditional method, which can only be simply analyzed from the perspective of conventional alarm definitions such as time or time and equipment, alarm limit type (such as high limit, high high limit, low limit, low low limit), etc., it is difficult to determine which nuisance alarms are of what type of alarm. In addition, the standard only defines a simple classification for nuisance alarms, and cannot effectively identify different types of nuisance alarms. For example, when some equipment has an alarm or anomaly, it is generally in hours or days. At this time, the alarm anomaly of this equipment can be quickly identified through a flashing alarm. At the same time, in some special cases, such as maintenance or accidents, the key alarm is overwhelmed by a large number of other alarms. Although the key alarm is in an alarm flood, it is impossible to effectively identify it in time due to too many other alarms. Through the above multi-dimensional analysis method, the alarm can be effectively classified and identified from different dimensions. It should be noted that the above analysis method does not divide an alarm according to a certain category. The purpose of dividing multiple dimensions is to identify effective alarms. At the same time, an alarm will be analyzed from multiple dimensions, so that users can identify key alarms faster. It can be understood that the key to the multi-dimensional definition and post-analysis method is identification rather than definition.

[0196] For nuisance alarm analysis, basic alarm configuration management is also provided, including data source configuration, alarm field configuration, and device configuration.

[0197] Data source configuration can configure and manage different alarm data sources, which is also one of the key information for alarm analysis. Different data sources can be controlled separately to avoid failure of the analysis system caused by abnormality of a single data source.

[0198] The alarm field configuration is to manage the display of nuisance alarm information. It provides basic fields (alarm name, alarm description, alarm source, alarm level, alarm measurement point, alarm measurement point item value, alarm measurement point type, equipment, alarm event number, alarm status, alarm occurrence time, alarm recovery time, alarm confirmation time, alarm shelving time, alarm group, alarm area, alarm operator, alarm time value) configuration and extended field configuration, which can unify the different alarm descriptions under multiple data sources to avoid ambiguity.

[0199] Equipment configuration provides management of alarm types under the alarm data source according to the equipment or area dimension. Equipment or area is a commonly used method to describe alarm sources and alarm locations in chemical and thermal power sites. Equipment configuration management can also realize the description and management of multiple data sources, different types, and different location alarm sources.

[0200] The above basic information configuration management effectively provides the basis for the analysis of nuisance alarms, and can provide an effective nuisance alarm analysis method based on this. Compared with the traditional analysis method, which simply describes the basic information of the alarm in a single dimension, the traditional analysis method cannot effectively provide a nuisance alarm analysis method.

[0201] The various embodiments mentioned above can effectively identify the nuisance alarm analysis from the basic alarm information according to the defined nuisance alarm parameters by analyzing the nuisance alarm in multiple dimensions. On this basis, the analyzed nuisance alarms can be further screened by multiple screening methods, and the types of nuisance alarms can be quickly analyzed from a large number of nuisance alarms to find out what time, what alarms, what equipment, what time, what situation, and what device have what type of nuisance alarms. Finally, the nuisance alarm basic information configuration management is used to effectively configure the nuisance alarm related information and provide support for nuisance alarm analysis. Based on this information, users can quickly identify the nuisance alarms that need to be processed and process them, eliminating the effective alarm information from being submerged due to nuisance alarms. It provides effective support for users to improve production efficiency and reduce production risks.

[0202] In the above embodiments, the alarm analysis method is described in detail, and the present application also provides corresponding embodiments of the alarm analysis device.

[0203] Figure 8 This is a structural diagram of an alarm analysis device provided in an embodiment of the present application. Figure 8 As shown, the present application also provides an alarm analysis device, comprising:

[0204] An acquisition module 80 is used to acquire alarm record information of a target time period and / or a target point item;

[0205] A determination module 81, used to determine the alarm type to which the alarm record information belongs according to the alarm record information;

[0206] The screening module 82 is used to screen the alarm types by at least two methods of list analysis, time trend graph, type frequency graph, alarm flood analysis graph and Top analysis method and obtain screening results; the screening results are valid alarms and invalid alarms.

[0207] Since the embodiments of the apparatus part correspond to the embodiments of the method part, please refer to the description of the embodiments of the method part for the embodiments of the apparatus part, which will not be repeated here.

[0208] Fig. 9 A structural diagram of an alarm analysis device provided in an embodiment of the present application, such as Fig. 9 As shown, the alarm analysis equipment includes:

[0209] A memory 90, used for storing computer programs;

[0210] The processor 91 is used to implement the steps of the alarm analysis method mentioned in the above embodiment when executing the computer program.

[0211] The alarm analysis device provided in this embodiment may include but is not limited to a smart phone, a tablet computer, a laptop computer, or a desktop computer.

[0212] Among them, the processor 91 may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor 91 can be implemented in at least one hardware form of DSP (Digital Signal Processing), FPGA (Field-Programmable Gate Array), and PLA (Programmable Logic Array). The processor 91 may also include a main processor and a coprocessor. The main processor is a processor for processing data in the awake state, also known as a CPU (Central Processing Unit); the coprocessor is a low-power processor for processing data in the standby state. In some embodiments, the processor 91 may be integrated with a GPU (Graphics Processing Unit), which is responsible for rendering and drawing the content to be displayed on the display screen. In some embodiments, the processor 91 may also include an AI (Artificial Intelligence) processor, which is used to process computing operations related to machine learning.

[0213] The memory 90 may include one or more computer-readable storage media, which may be non-transitory. The memory 90 may also include a high-speed random access memory, and a non-volatile memory, such as one or more disk storage devices, flash memory storage devices. In this embodiment, the memory 90 is at least used to store the following computer program, wherein, after the computer program is loaded and executed by the processor 91, it can implement the relevant steps of the alarm analysis method disclosed in any of the aforementioned embodiments. In addition, the resources stored in the memory 90 may also include an operating system and data, etc., and the storage method may be temporary storage or permanent storage. Among them, the operating system may include Windows, Unix, Linux, etc.

[0214] In some embodiments, the alarm analysis device may also include a display screen, an input and output interface, a communication interface, a power supply, and a communication bus.

[0215] Those skilled in the art will understand that Fig. 9 The structure shown in the figure does not constitute a limitation on the alarm analysis device, and may include more or fewer components than those shown in the figure.

[0216] The alarm analysis device provided in the embodiment of the present application includes a memory 90 and a processor 91. When the processor executes the program stored in the memory, the alarm analysis method can be implemented.

[0217] Finally, the present application also provides an embodiment corresponding to a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps recorded in the above method embodiment are implemented.

[0218] It is understandable that if the method in the above embodiment is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0219] The above is a detailed introduction to an alarm analysis method, device and computer-readable storage medium provided by the present application. The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same and similar parts between the embodiments can be referenced to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the claims of the present application.

[0220] It should also be noted that, in this specification, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the statement "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or device including the element.

Claims

1. An alarm analysis method, characterized in that: include: Obtain alarm record information for target time period and / or target point item; Determine the alarm type to which the alarm record information belongs according to the alarm record information; The alarm types are screened by at least two methods selected from list analysis, time trend graph, type frequency graph, alarm flood analysis graph and Top analysis method to obtain screening results; the screening results are valid alarms and invalid alarms; When the alarm type is a jitter alarm type, the step of analyzing the alarm type according to the alarm record information includes: Traversing the alarm record information; Determine whether the alarm record information has been traversed; If so, then end; If not, determining whether the target alarm record information is counted as the jitter alarm; Wherein, after determining whether the target alarm record information is counted as the jitter alarm, the method further includes: From the moment when the target alarm record information is recorded to the end of the preset jitter time, determining whether the number of times the target alarm record information is recorded is not less than the preset jitter number; If the number of times the target alarm record information is recorded is less than the preset number of jitters, then the process ends; If the number of times the target alarm record information is recorded is not less than the preset number of jitters, the target alarm record information is counted as the jitter alarm, and the process returns to the step of traversing the alarm record information.

2. The alarm analysis method according to claim 1, when the alarm type is a flash alarm type, is characterized in that: Analyzing the alarm type according to the alarm record information includes: Traversing the alarm record information and searching for target alarm record information; Determine whether the latest recovery record information of the target alarm record information is found; If so, calculate the flash time difference from finding the target alarm record information to finding the most recently restored record information, and determine whether the flash time difference is less than the preset flash time; If not, then end; The step of judging whether the instantaneous flash time difference is less than a preset instantaneous flash time comprises: If the flash time difference is not less than the preset flash time, returning to the step of traversing the alarm record information and searching for target alarm record information; If the flash time difference is less than the preset flash time, the target alarm record information is counted as the flash alarm.

3. The alarm analysis method according to claim 1, when the alarm type is an intermittent alarm type, is characterized in that: Analyzing the alarm type according to the alarm record information includes: Traversing the alarm record information; Determine whether the alarm record information has been traversed; If yes, determining whether the target alarm record information is counted as the jitter alarm; If not, determining whether the target alarm record information is counted as the intermittent alarm; Wherein, the determining whether the target alarm record information is counted as the jitter alarm includes: If yes, remove the target alarm record information; If not, then end; The determining whether the target alarm record information is counted as the intermittent alarm comprises: If yes, return to the step of traversing the alarm record information; If not, taking the time when the target alarm record information is found as the starting point, determining whether the number of times the target alarm record information is recorded within the preset interval time is not less than the preset interval number; The step of taking the time when the target alarm record information is found as the starting point and judging whether the number of times the target alarm record information is recorded within the preset interval time is not less than the preset interval number includes: If the number of records is not less than the preset intermittent number of times, the target alarm record information is counted as the intermittent alarm; If the number of records is less than the preset number of intervals, the process returns to the step of traversing the alarm record information.

4. The alarm analysis method according to claim 2, when the alarm type is an alarm flood type, is characterized in that: Analyzing the alarm type according to the alarm record information includes: Querying a database containing the alarm record information according to a query identifier, wherein the query identifier is composed of an event number, a point name, an item name, a time when the alarm record information is found, and a time when the most recently restored record information is found; Traversing the alarm record information, and counting the alarm flooding according to the status bit representing the occurrence of the flood alarm; According to the statistics of the alarm flooding, determining whether the number of occurrences of the alarm flooding is not less than a preset number of flooding start times; If the number of times the alarm flooding occurs is less than the preset flooding start number, returning to the step of traversing the alarm record information; If the number of occurrences of the alarm flooding is not less than the preset flooding start number, then recording the flooding time from when the status bit is detected to when the next status bit is detected; According to the number of alarm flooding, it is simultaneously determined whether the number of times the alarm flooding ends is not greater than a preset number of flooding start times and whether the alarm flooding end time is not greater than the flooding time; If the number of times the alarm flooding ends is greater than the preset number of times the alarm flooding starts or the alarm end time of the alarm flooding is greater than the flooding time, returning to the step of traversing the alarm record information; If the number of times the alarm flooding is ended is not greater than the preset number of times the alarm flooding starts and the alarm end time of the alarm flooding is not greater than the flooding time, then the number of times the alarm flooding is ended is updated and the end time from when it is determined that the alarm end time of the alarm flooding is not greater than the flooding time to when it is determined that the alarm end time of the next alarm flooding is not greater than the flooding time is recorded; The flooding time and the end time are put into a result set, and the result of the alarm flooding is obtained.

5. The alarm analysis method according to claim 2, when the alarm type is a frequent alarm type, is characterized in that: Analyzing the alarm type according to the alarm record information includes: Querying a database containing the alarm record information according to a query identifier, wherein the query identifier is composed of an event number, a point name, an item name, a time when the alarm record information is found, and a time when the most recently restored record information is found; The target alarm record information exceeding the preset frequent alarm times is counted as the frequent alarm; Determining whether the jitter alarm is counted in the frequent alarms; If yes, then the jitter alarms are counted, and the step of determining whether the alarm flooding is counted in the frequent alarms is entered; If not, then entering the step of determining whether the alarm flooding is counted in the frequent alarms, wherein the jitter alarm is 0; The determining whether the alarm flooding is counted in the frequent alarms comprises: If yes, then counting the alarm flooding, and entering the step of removing the jitter alarm and the alarm flooding from the frequent alarms; If not, the process proceeds to the step of removing the jitter alarm and the alarm flood from the frequent alarms, wherein the alarm flood is zero.

6. The alarm analysis method according to claim 1, when the alarm type is an old alarm type, characterized in that: Analyzing the alarm type according to the alarm record information includes: Calling a database containing the alarm record information; Determine an analysis mode for analyzing the alarm record information, wherein the analysis mode is a real-time analysis mode and a full analysis mode; When the analysis mode is the real-time analysis mode, determining whether the alarm record information has been traversed; If the alarm record information is traversed, the process ends; If the alarm record information has not been traversed, determining whether the target alarm record information is in an activated state; If the target alarm record information is not in an activated state, returning to the step of determining whether the alarm record information has been traversed; If the target alarm record information is in an activated state, determining whether the difference between the old alarm occurrence time and the current time is not less than a preset old alarm time; If the difference between the occurrence time of the old alarm and the current time is not less than the preset old alarm time, the target alarm record information is counted as the old alarm; If the difference between the time when the old alarm occurred and the current time is greater than the preset old alarm time, return to the step of determining whether the alarm record information has been traversed; When the analysis mode is the full analysis mode, determining whether the alarm record information has been traversed; If the alarm record information is traversed, the process ends; If the alarm record information has not been traversed, determining whether the target alarm record information is in an activated state; If the target alarm record information is not in an activated state, determining whether the difference between the occurrence time of the old alarm and the recovery time is not less than a preset old alarm time; If the difference between the occurrence time and the recovery time of the obsolete alarm is not less than the preset obsolete alarm time, then entering the step of counting the target alarm record information as the obsolete alarm; If the difference between the occurrence time of the old alarm and the recovery time is greater than the preset old alarm time, return to the step of determining whether the alarm record information has been traversed; If the target alarm record information is in an activated state, determining whether the difference between the old alarm occurrence time and the current time is not less than a preset old alarm time; If the difference between the occurrence time of the old alarm and the current time is not less than the preset old alarm time, then entering the step of counting the target alarm record information as the old alarm; If the difference between the time when the old alarm occurred and the current time is greater than the preset old alarm time, the process returns to the step of determining whether the alarm record information has been traversed.

7. An alarm analysis device, characterized in that: include: An acquisition module is used to acquire alarm record information of a target time period and / or target point item; A determination module, used to determine the alarm type to which the alarm record information belongs according to the alarm record information; when the alarm type is a jitter alarm type, it is characterized in that the analysis of the alarm type according to the alarm record information includes: traversing the alarm record information; judging whether the alarm record information has been traversed; if so, ending; if not, judging whether the target alarm record information is counted as the jitter alarm; wherein, after judging whether the target alarm record information is counted as the jitter alarm, it also includes: judging whether the number of times the target alarm record information is recorded is not less than the preset jitter number within the time period from the moment the target alarm record information is recorded to the end of the preset jitter time; if the number of times the target alarm record information is recorded is less than the preset jitter number, ending; if the number of times the target alarm record information is recorded is not less than the preset jitter number, counting the target alarm record information as the jitter alarm, and returning to the step of traversing the alarm record information; The screening module is used to screen the alarm types through at least two methods of list analysis, time trend chart, type frequency chart, alarm flood analysis chart and Top analysis method and obtain screening results; the screening results are valid alarms and invalid alarms.

8. An alarm analysis device, characterized in that: include: Memory for storing computer programs; A processor, configured to implement the steps of the alarm analysis method as described in any one of claims 1 to 6 when executing the computer program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the alarm analysis method according to any one of claims 1 to 6 are implemented.

Images