Alarm processing method, device, equipment and storage medium

Abstract

The embodiment of the present invention provides an alarm processing method, device, equipment and storage medium, the method comprising: when receiving alarm information or in the process of matching alarm rules based on the received alarm information, learning alarm rules according to the alarm information; and performing alarm processing on the alarm information according to the alarm rules. By providing alarm rule learning at two times, before rule matching and during rule matching, the rule base is continuously improved, the coverage rate of the rule base for alarm information is improved, and the automation of alarm processing is guaranteed as much as possible, thereby saving labor costs.

Description

Technical Field

[0001] The present invention relates to the field of computer application technology, and in particular to an alarm processing method, an alarm processing device, a corresponding electronic device and a corresponding computer storage medium. Background Art

[0002] Bare metal servers can usually be seamlessly connected and compatible with other cloud services provided by cloud vendors, such as network services (such as VPC private networks), cloud database services, etc., and the cloud management platform is responsible for managing bare metal servers and providing basic support for cloud platform virtualization.

[0003] The basic support provided by the cloud management platform can be manifested as real-time monitoring of the resource status of the bare metal server. At this time, the resource status can be displayed on the cloud management platform in the form of alarms, and the operation and maintenance personnel can selectively handle relevant alarms based on experience. However, the cloud management platform usually receives a large amount of possibly repeated alarm information, and manual alarm elimination operations are required. The entire alarm elimination process is time-consuming and laborious. Summary of the invention

[0004] In view of the above problems, embodiments of the present invention are proposed to provide an alarm processing method, an alarm processing device, a corresponding electronic device and a corresponding computer storage medium that overcome the above problems or at least partially solve the above problems.

[0005] The implementation regulations of the present invention disclose an alarm processing method, the method comprising:

[0006] When receiving the alarm information or in the process of matching the alarm rules based on the received alarm information, learning the alarm rules according to the alarm information;

[0007] Perform alarm processing on the alarm information according to the alarm rule.

[0008] Optionally, when the alarm information is received, learning the alarm rule according to the alarm information includes:

[0009] Performing a word segmentation operation on the warning information to obtain a word segmentation result; the word segmentation result includes keywords for the warning information;

[0010] The keywords are used to generate alarm rules, and the alarm rules are added to a preset rule library.

[0011] Optionally, in the process of matching alarm rules based on the received alarm information, learning the alarm rules according to the alarm information includes:

[0012] If there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, an alarm rule customized for the alarm information is received and the alarm rule is added to a preset rule library.

[0013] Optionally, the alarm rules include keywords for the alarm information; the keywords include alarm object, object execution task and object execution status; wherein the alarm object is used to indicate the object that needs to be alarmed, the object execution task is used to indicate the execution action of the alarm object, and the object execution status is used to indicate the execution result of the alarm object.

[0014] Optionally, the alarm information is used to indicate an alarm state of a corresponding network device, and the performing alarm processing on the alarm information according to the alarm rule includes:

[0015] Using the alarm information to perform alarm rule matching;

[0016] According to the matching result of the alarm rule matching, the alarm information is processed as an alarm.

[0017] Optionally, performing alarm processing on the alarm information according to the matching result of the alarm rule matching includes:

[0018] In the process of matching the alarm rule based on the received alarm information, if the alarm information meets the alarm rule, obtaining device information of the network device corresponding to the alarm information;

[0019] Generating alarm and maintenance information using the device information; the alarm and maintenance information is used to instruct maintenance personnel to repair the network device corresponding to the alarm information;

[0020] After receiving the alarm elimination instruction for the alarm repair information, an alarm elimination operation is performed on the alarm message in response to the alarm elimination instruction.

[0021] Optionally, it also includes:

[0022] In the process of matching alarm rules based on the received alarm information, if there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, then a customized alarm rule for the alarm information is received and the alarm rule is added to a preset rule library;

[0023] The alarm information is processed again according to the alarm rule until a matching alarm rule exists for the alarm information during the process of matching the alarm rule.

[0024] The embodiment of the present invention further discloses an alarm processing device, the device comprising:

[0025] An alarm rule learning module, used to learn alarm rules according to the alarm information when the alarm information is received or in the process of matching the alarm rules based on the received alarm information;

[0026] The alarm processing module is used to perform alarm processing on the alarm information according to the alarm rule.

[0027] Optionally, the alarm rule learning module includes:

[0028] A word segmentation processing submodule is used to perform word segmentation operation on the alarm information to obtain a word segmentation result; the word segmentation result includes keywords for the alarm information;

[0029] The alarm rule generation submodule is used to generate alarm rules using the keywords and add the alarm rules to a preset rule library.

[0030] Optionally, the alarm rule learning module includes:

[0031] The alarm rule receiving submodule is used to receive a customized alarm rule for the alarm information when there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, and add the alarm rule to a preset rule library.

[0032] Optionally, the alarm rules include keywords for the alarm information; the keywords include alarm object, object execution task and object execution status; wherein the alarm object is used to indicate the object that needs to be alarmed, the object execution task is used to indicate the execution action of the alarm object, and the object execution status is used to indicate the execution result of the alarm object.

[0033] Optionally, the alarm information is used to indicate an alarm status of a corresponding network device, and the alarm processing module includes:

[0034] An alarm rule matching submodule, used to perform alarm rule matching using the alarm information;

[0035] The alarm rule processing submodule is used to perform alarm processing on the alarm information according to the matching result of the alarm rule matching.

[0036] Optionally, the alarm rule processing submodule includes:

[0037] In the process of matching the alarm rule based on the received alarm information, if the alarm information meets the alarm rule, obtaining device information of the network device corresponding to the alarm information;

[0038] Generating alarm and maintenance information using the device information; the alarm and maintenance information is used to instruct maintenance personnel to repair the network device corresponding to the alarm information;

[0039] After receiving the alarm elimination instruction for the alarm repair information, an alarm elimination operation is performed on the alarm message in response to the alarm elimination instruction.

[0040] Optionally, the alarm rule processing submodule further includes:

[0041] An alarm rule receiving unit, used for, in the process of matching alarm rules based on the received alarm information, if there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, receiving an alarm rule customized for the alarm information and adding the alarm rule to a preset rule library;

[0042] The alarm loop processing unit is used to perform alarm processing on the alarm information according to the alarm rule again until the alarm information has a matching alarm rule in the process of matching the alarm rule.

[0043] An embodiment of the present invention further discloses an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program implements any step of the alarm processing method when executed by the processor.

[0044] The embodiment of the present invention further discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of any one of the alarm processing methods are implemented.

[0045] The embodiments of the present invention include the following advantages:

[0046] In an embodiment of the present invention, alarm rules can be learned based on the alarm information when alarm information is received or in the process of matching rules based on the received alarm information. Alarm rule learning is provided at two times, before rule matching and during rule matching, to continuously improve the rule base, improve the coverage of alarm information by the rule base, and through the subsequent alarm processing of the alarm information using alarm rules, try to ensure 100% automation of alarm processing, thereby saving labor costs; in addition, by intelligently learning alarms and adding alarm rules, the workload can be further reduced, the self-learning ability of alarm processing can be realized, and the fault handling efficiency can be maximized. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 It is a flow chart of steps of an implementation regulation of an alarm processing method of the present invention;

[0048] Figure 2 Schematic diagram of the system framework of the alarm monitoring system provided by an embodiment of the present invention;

[0049] Figure 3 is a flowchart of the steps of another implementation regulation of the alarm processing method of the present invention;

[0050] Figure 4 It is a schematic diagram of the implementation process of the alarm processing provided by the embodiment of the present invention;

[0051] Figure 5 It is a flowchart of the steps of another implementation regulation of the alarm processing method of the present invention;

[0052] Figure 6 It is a schematic diagram of an application scenario of alarm processing provided by an embodiment of the present invention;

[0053] Figure 7 It is a structural block diagram of the implementation regulations of an alarm processing device of the present invention. DETAILED DESCRIPTION

[0054] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0055] The cloud management platform accepts and manages all bare metal servers, providing basic support for cloud platform virtualization, including computing virtualization, network virtualization, and storage virtualization. The cloud management platform can monitor the health status of the bare metal server's computing resources, network resources, and storage resources in real time, and can display the monitored resource status on the cloud management platform in the form of alarms. The operation and maintenance personnel can selectively handle the relevant alarms based on their experience. After the operation and maintenance personnel choose to handle the relevant alarms, the alarms will be eliminated. The alarm elimination process requires the operation and maintenance personnel to notify the manufacturer after completing the alarm processing, and then the manufacturer notifies the spare parts party, and then the computer room personnel perform the operation, and finally the operation and maintenance personnel confirm the fault recovery and eliminate the alarm.

[0056] From the above, it can be seen that the selection and processing of alarms and the elimination of alarms both need to rely on manual operations. Especially when the cloud management platform usually receives a large amount of potentially repeated alarm information, the entire alarm elimination process is time-consuming and laborious, and results in low fault handling efficiency.

[0057] The embodiment of the present invention proposes an intelligent learning and processing method for hardware alarms based on a cloud management platform. One of the core ideas of the implementation regulations of the present invention is that it can automatically and intelligently learn and process alarm information and automatically report repairs to achieve alarm elimination processing. It mainly omits the step or process of manually judging the alarm content and replaces it with an automatic intelligent learning alarm processing method, and automatically reports repairs based on the collected equipment information, which can quickly respond to and process alarms to achieve a closed loop of alarms; and through the method of intelligently learning alarms and adding alarm rules, the labor cost is reduced based on the intelligent learning of alarm content, thereby further reducing the workload and achieving the self-learning ability of alarm processing; and the method of generating alarm rules can also process a large amount of repeated alarm information, so as to maximize the efficiency of fault handling, and can provide alarm rule learning at two times before rule matching and during rule matching, continuously improve the rule base, improve the coverage of alarm information by the rule base, and try to ensure the automation of alarm processing as much as possible.

[0058] Reference Figure 1 , shows a flowchart of the steps of the implementation regulations of the alarm processing method of the present invention, which may specifically include the following steps:

[0059] Step 101, when alarm information is received or in the process of matching alarm rules based on the received alarm information, learning alarm rules according to the alarm information;

[0060] In order to reduce the labor cost required in the process of selecting and processing alarms, the step or process of manually judging the alarm content can be omitted and replaced by an automatic intelligent learning alarm processing method to realize the automated analysis and judgment operation of alarm selection and processing.

[0061] Automatic intelligent learning alarm processing can be mainly achieved by learning alarm rules based on the received alarm information. The alarm rule learning performed can be specifically manifested as the generation of alarm rules, and the completion of learning alarm rules can be specifically manifested as adding the generated alarm rules to a preset rule base. The added preset rule base can be a local rule base or a rule base obtained through the Internet, which is not limited by the embodiments of the present invention.

[0062] Among them, the generated alarm rules can be used to confirm whether the received alarm rules meet the alarm conditions or requirements, so that there is no need for human analysis of the alarm information based on experience to selectively process related alarms, and it is conducive to the automatic processing of large amounts of repeated alarm information.

[0063] The timing for learning alarm rules may include when alarm information is received, or in the process of matching alarm rules based on the received alarm information, wherein the process of matching alarm rules usually occurs after the alarm information is received and the alarm information is used to generate alarm rules, that is, at this time, not only can the alarm rules be generated when the alarm information is received, but the alarm rules can also be generated again after the alarm rules are generated. These two timings belong to a sequence of before and after, respectively. Alarm rule learning can be provided at both times before rule matching and during rule matching, and the rule base can be continuously improved to improve the coverage of the rule base for alarm information, so that the subsequent alarm processing of the alarm information using the alarm rules can ensure the automation of alarm processing as much as possible.

[0064] In actual applications, the generated alarm rules can be keywords for alarm information, that is, they can include keywords that are required to confirm that the alarm information meets the conditions or requirements of the alarm, and this keyword can include the alarm object, the object execution task, and the object execution status. Among them, the alarm object can be used to indicate the object that needs to be alarmed, the object execution task can be used to indicate the execution action of the alarm object, and the object execution status can be used to indicate the execution result of the alarm object, so as to clarify the object, the executed task and the execution status based on the above keywords, clarify the specific information of the alarm, and accurately locate the alarm, which is conducive to fast and accurate alarm location and alarm processing.

[0065] Step 102: Perform alarm processing on the alarm information according to the alarm rules.

[0066] The generated alarm rules can be used to confirm whether the received alarm rules meet the alarm conditions or requirements. In order to reduce the labor costs required in the alarm elimination process, after learning the alarm rules, the alarm information can be processed based on the generated alarm rules to realize the automated operation of alarm elimination.

[0067] In practical applications, alarm information is mainly used to indicate the alarm status of the corresponding network device. In this case, the alarm information can be used to match the alarm rules, so that the alarm information can be processed based on the matching results of the alarm rules.

[0068] Among them, the alarm processing performed can be expressed as alarm elimination processing, and the alarm elimination processing can be expressed as a repair operation for the alarm information, and an alarm elimination operation after the repair is confirmed. In a specific implementation, the repair operation for the alarm information can be implemented by collecting the device information of the network device corresponding to the alarm information and performing an automatic repair, and the alarm elimination operation can be implemented by canceling or eliminating the alarm status of the network device corresponding to the alarm information, thereby quickly responding to and processing the device alarm and realizing a closed loop of the alarm.

[0069] In an embodiment of the present invention, alarm rules can be learned based on the alarm information when alarm information is received or in the process of matching rules based on the received alarm information. Alarm rule learning is provided at two times, before rule matching and during rule matching, to continuously improve the rule base, improve the coverage of alarm information by the rule base, and through the subsequent alarm processing of the alarm information using alarm rules, try to ensure 100% automation of alarm processing, thereby saving labor costs; in addition, by intelligently learning alarms and adding alarm rules, the workload can be further reduced, the self-learning ability of alarm processing can be realized, and the fault handling efficiency can be maximized.

[0070] Reference Figure 2 , showing a system framework diagram of the alarm processing system provided by an embodiment of the present invention. The cloud management platform is equipped with a corresponding alarm monitoring system for the bare metal server. The alarm processing system 210 may include an alarm monitoring system 211, a cloud platform 212 and a maintenance platform 213, and the alarm monitoring system 211 may include a network facility 2110 and a cloud management platform 2111.

[0071] Among them, the network facility 2110 can also be called a network device. This network facility may include a bare metal server. The bare metal server can usually be seamlessly connected and compatible with other cloud services provided by cloud vendors, such as network services (such as VPC private networks), cloud database services, etc., and the health status of the bare metal server can be displayed on the cloud management platform 2111 in the form of an alarm; the cloud management platform 2111 can be responsible for managing bare metal servers and providing basic support for cloud platform virtualization, including computing virtualization, network virtualization, and storage virtualization. It is mainly a management platform for managing and monitoring all virtualization layer and physical layer resources. For example, it can monitor the health status of computing resources, network resources and storage resources of network facilities in real time, and collect alarm information of network facilities; the cloud platform 212 is a small system deployed separately and interconnected with the cloud management platform 2111 network, which can be mainly used to receive The data from the cloud management platform 2111 and the received data are processed, for example, the alarm information collected by the cloud management platform 2111 is used to process the corresponding network facilities. Specifically, it can be manifested as a learning process of alarm rules based on the alarm information and a matching process of alarm rules, as well as a collection of equipment information and an automatic repair reporting process; the maintenance platform 213 is usually a platform for notifying maintenance personnel, which can be communicated with the cloud management platform 2111 and the cloud platform 212 respectively. It can inform the maintenance personnel to repair the network facilities corresponding to the alarm information based on the alarm and repair information issued by the cloud platform 212, and because the network facilities that issue the alarm information can be displayed on the cloud management platform 2111 in the form of an alarm, after informing the maintenance personnel to repair the network facilities, the alarm information displayed on the cloud management platform 2111 can also be eliminated.

[0072] In such Figure 2 In the alarm processing system shown, the characteristics of the alarm information of the network facilities 2110 can be centrally managed based on the cloud management platform 2111, and the alarm information of the network facilities can be processed by the cloud platform 212 intelligently learning the alarm rules, automatically collecting the equipment information corresponding to the alarm information and performing a closed-loop alarm processing operation for repair, and automatically eliminating the alarm information, effectively saving the time of operation and maintenance personnel in processing the alarm information. The cloud platform 212 intelligently learns the alarm content, saving a lot of troubleshooting work required to be handled by operation and maintenance personnel, and based on the method of learning alarm rules and adding alarm rules, the workload is further reduced, realizing self-learning ability, maximizing the fault handling efficiency, and realizing savings in labor costs. In addition, it can also help operation and maintenance personnel save the process of collecting network equipment for repair.

[0073] Reference Figure 3 , showing a flow chart of the steps of another alarm processing method implementation regulations of the present invention, the cloud platform 212 performs alarm processing on the corresponding network facilities based on the alarm information collected by the cloud management platform 2111. This step flow can be applied to Figure 2 The cloud platform 212 shown in the figure can be connected to the cloud management platform 2111 for communication, which can specifically include the following steps:

[0074] Step 301, receiving alarm information collected by the cloud management platform through the cloud center, and generating alarm rules according to the alarm information when the alarm information is received;

[0075] The cloud platform can be mainly used to receive data from the cloud management platform and process the received data, such as performing alarm processing on the corresponding network facilities based on the alarm information collected by the cloud management platform.

[0076] In actual applications, in the alarm monitoring system configured by the cloud management platform, the cloud management platform can collect alarm information for network facilities and transmit the collected alarm information to the cloud center, so that the cloud center can learn and match alarm rules based on the alarm information, as well as collect equipment information and automatically report repairs.

[0077] The learning of alarm rules by the cloud platform can be expressed as generating alarm rules, and the completion of the learning of alarm rules can be specifically expressed as adding the generated alarm rules to a preset rule base, which can be a local rule base or a rule base obtained through the Internet, and the embodiment of the present invention does not limit this. Among them, the generated alarm rules can be used to confirm whether the received alarm rules meet the conditions or requirements of the alarm, so that there is no need for manual judgment of the alarm information based on experience to selectively process related alarms, and it is conducive to the automatic processing of a large amount of repeated alarm information.

[0078] In a specific implementation, the timing for the cloud station to learn the alarm rules may be when the cloud station receives the alarm information transmitted by the cloud management platform, and the alarm rules may be learned based on the alarm information.

[0079] The generated alarm rules can be keywords for the alarm information, that is, they can include keywords that are required to confirm that the alarm information meets the alarm conditions or requirements. Then, when learning the alarm rules for the alarm information, the received alarm information can be segmented, that is, the alarm information is divided to obtain the segmentation results. At this time, the keywords contained in the segmentation results can be used to generate alarm rules, and the generated alarm rules can be added to the preset rule library, indicating that the alarm rules for the current alarm information have been learned.

[0080] In actual applications, the received alarm information has an alarm name. At this time, the alarm name can be segmented first, and keyword matching can be performed based on the segmentation results. Then, the matched keywords are added to the preset rule library to generate alarm rules for the current alarm information.

[0081] Exemplarily, the received alarm information may be as shown in Table 1, where the alarm information shown may be partial alarm information of some network facilities, and the received alarm information may include information such as the alarm serial number, cloud service, level, and alarm name:

[0082]

[0083] Table 1

[0084] As an example, assuming that the received alarm information is [alarm serial number: 1309401299, cloud service: Server, level: important, alarm name: power input lost], the alarm name "power input lost" in the alarm information can be obtained, and the alarm name can be segmented, for example, divided into "power", "input", and "lost". At this time, there are also keywords "power", "input", and "lost". Then "power", "input", and "lost" can be added to the preset rule library to generate an alarm rule for this alarm information ["power", "input", "lost"]; As another example, assuming that the received alarm information is [alarm serial number: 1352401429, cloud service: DBS Platform, Level: Important, Alarm Name: Abnormal Replication Status of Master and Standby Instances]. At this time, the alarm name "Abnormal Replication Status of Master and Standby Instances" in the alarm information can be obtained, and the alarm name can be segmented, for example, into "Master and Standby Instances", "Replication", and "Abnormal Status". At this time, there are also keywords such as "Master and Standby Instances", "Replication", and "Abnormal Status". In this case, "Master and Standby Instances", "Replication", and "Abnormal Status" can be added to the preset rule base to generate alarm rules ["Master and Standby Instances", "Replication", and "Abnormal Status"] for this alarm information.

[0085] As can be seen from the above, the generated alarm rules can be keywords for alarm information, wherein the keywords can generally include a combination of alarm objects, object execution tasks, and object execution status. Alarm objects can be used to indicate objects that require alarms, which can generally be network facilities where alarms occur; object execution tasks can be used to indicate the current operation process, and / or indicate the execution action of the alarm object, that is, a certain action of the object in the process of executing the task; object execution status can also be an execution status, which can be used to indicate the execution result of the alarm object, so as to clarify the object, the executed task, and the execution status based on the above keywords, clarify the specific information of the alarm, and accurately locate the alarm, which is conducive to fast and accurate alarm location and alarm processing.

[0086] It should be noted that the generated alarm rules can be a combination of alarm objects, object execution tasks and object execution status in sequence, that is, [alarm object, object execution task, object execution status]. This is to clarify the specific information of the alarm and accurately locate the alarm; and when there is no need to locate (for example, the fault is unique to a certain network facility, etc.), the alarm rules may also be generated in the form of [object execution status], or when the fault occurs in the alarm that is solved by the solution, the alarm rules may also be generated in the form of [alarm object, object execution status]. The form of the generated alarm rules and the types of keywords they contain can be changed according to actual conditions, and the embodiments of the present invention are not limited thereto.

[0087] Step 302, in the process of matching the alarm rules based on the received alarm information, if the alarm information meets the alarm rules, an alarm elimination operation is performed on the alarm message;

[0088] The generated alarm rules can be used to confirm whether the received alarm rules meet the alarm conditions or requirements. In order to reduce the labor costs required in the alarm elimination process, after learning the alarm rules, the alarm information can be processed based on the generated alarm rules to realize the automated operation of alarm elimination.

[0089] In practical applications, alarm information is mainly used to indicate the alarm status of the corresponding network device. In this case, the alarm information can be used to match the alarm rules, so that the alarm information can be processed based on the matching results of the alarm rules.

[0090] Among them, the alarm processing performed can be expressed as alarm elimination processing, and the alarm elimination processing can be expressed as a repair operation for the alarm information, and an alarm elimination operation after the repair is confirmed. In a specific implementation, the repair operation for the alarm information can be implemented by collecting the device information of the network device corresponding to the alarm information and performing an automatic repair, and the alarm elimination operation can be implemented by canceling or eliminating the alarm status of the network device corresponding to the alarm information, thereby quickly responding to and processing the device alarm and realizing a closed loop of the alarm.

[0091] When using alarm information to match alarm rules, the keywords contained in the generated alarm rules can be mainly used for matching. For example, assuming that the alarm rules are generated in the combination form of [alarm object, object execution task, object execution status], then when matching, the alarm information needs to completely match all the keywords in the combination form to be represented as valid alarm information.

[0092] like Figure 4As shown, in the process of matching alarm rules based on the received alarm information, in one case, the alarm information may meet the alarm rules. At this time, the device information of the network device corresponding to the alarm information can be obtained, and the device information can be used to generate alarm and repair information. The generated alarm and repair information can be used to send it to the maintenance platform, and to instruct maintenance personnel to repair the network equipment corresponding to the alarm information. After the maintenance personnel confirms the alarm and repair information, an alarm elimination instruction can be generated based on the repair confirmation information, and the maintenance platform sends the alarm elimination instruction to the cloud management platform, so that the cloud management platform responds to the alarm elimination instruction to perform an alarm elimination operation on the alarm message, thereby completing the closed loop of alarm processing for the alarm information.

[0093] In actual applications, the collection of equipment information of network devices can be expressed as automatic collection after a hit. At this time, the cloud platform can automatically execute the script and migrate the relevant business of the network equipment corresponding to the alarm information, and then collect relevant hardware information for repair, so that the hardware operation and maintenance personnel can spare parts and replace related hardware, and after spare parts and replacement, confirm the repair on the maintenance platform and perform subsequent alarm elimination operations.

[0094] Exemplarily, the device information automatically collected by the cloud platform can be as shown in Table 2. The device information can include fault location, device physical name, node logical name, serial number, BMC IP (Baseboard Management Controller, which is a software that runs when the server AC is powered on and is responsible for managing the components of the entire server), management IP and other information, so as to locate the network facilities that need to be repaired based on the device information:

[0095] Fault location: Please replace PSU2 Device physical name: TS-AZ05-FSTPOD01-SATA-Pooll6-ds006 Node logical name: TSYS-803-0311-931-SEV-RH528-4U12 Serial number: 2102351CVD10J7012385 BMCIP: 10.234.17.149 Management IP: 10.124.85.145

[0096] Table 2

[0097] In an optional embodiment, the process of using alarm information to match alarm rules can also be implemented by model training. The training process for the model can mainly show the continuous learning of alarm rules, that is, through intelligent word segmentation, and then matching according to the word segmentation results, and adjusting the corresponding keywords according to the matching results, and generating alarm rules with the matched keywords. Through continuous learning of new alarm rules, the rule library is always in a process of continuous improvement, so as to ensure the automation of alarm processing as much as possible. As for the use process of the model, it can be shown as inputting the alarm information as an input item into the trained model, and then obtaining the matching result of the alarm rule matching, wherein an alarm rule may accurately match the relevant alarm information through multiple keywords.

[0098] Step 303, in the process of matching alarm rules based on the received alarm information, if there is no matching alarm rule for the alarm information, learn the alarm rules according to the alarm information until there is an alarm rule that matches the alarm information in the process of matching alarm rules based on the received alarm information.

[0099] like Figure 4 As shown, in the process of matching alarm rules based on the received alarm information, in another case, the situation may occur that there is no matching alarm rule for the alarm information. For example, assuming that the alarm rule is generated in the combination form of [alarm object, object execution task, object execution status], the received alarm information does not completely hit all keywords at this time, that is, the current alarm information is not valid alarm information. The alarm rules can be learned again, and the alarm information can be processed again according to the alarm rules until there is an alarm rule that meets the alarm information in the process of matching alarm rules based on the received alarm information, until the alarm elimination operation of the alarm message is realized.

[0100] The learning process of the alarm rules in this case may be during the process of matching the alarm rules based on the received alarm information. This process occurs after the alarm information is received, that is, the alarm rules can be generated not only when the alarm information is received, but also again after the alarm rules are generated. These two moments belong to a sequence of events, respectively. The learning of the alarm rules can be provided again during the rule matching process, and the rule base can be continuously improved to increase the coverage of the rule base for the alarm information, so that the subsequent alarm processing of the alarm information using the alarm rules can ensure the automation of the alarm processing as much as possible.

[0101] When there is no matching alarm rule for the alarm information, if an alarm confirmation message for the alarm information is received at this time, an alarm rule customized for the alarm information can be received, and the received alarm rule can be added to the preset rule library to complete the learning of the alarm rule again.

[0102] In actual applications, when there is no matching alarm rule for the alarm information, the learning process of the cloud station can be manually intervened, and the maintenance personnel can manually intervene to judge the alarm content. If the manual judgment result at this time is a fault alarm, then an alarm confirmation message can be generated on the maintenance platform, and the generated alarm confirmation message is sent to the cloud management platform, and then the cloud management platform sends the alarm confirmation message to the cloud station. At this time, the alarm confirmation message sent can also carry customized alarm rules for the current alarm information, that is, the manually customized alarm rules, and then the cloud station learns and executes the unit polling matching alarm rules to learn this customized alarm rule. The cloud station can manually intervene in the alarm learning and add customized alarm rules to make up for the deficiencies in the intelligent learning process. Based on the implementation of customized alarm rules, it can also quickly transform the experience of maintenance personnel into permanent alarm rules to facilitate the subsequent automated processing of repeated alarms.

[0103] Among them, the customized alarm rules can be expressed as manually adding alarm rules to the preset rule base. For example, a certain alarm information (in English or involving numbers, matches, etc.) may not be segmented, and the alarm rules need to be manually entered. The process of adding customized alarm rules does not affect the matching process when receiving alarm information. All alarm rules can be added to the same preset rule base, which is equivalent to a data set.

[0104] In an optional embodiment, after learning the alarm rules based on the alarm information is completed in the process of matching alarm rules based on the received alarm information, the process of performing alarm processing on the alarm information can be performed again based on the matching results of the alarm rules, until there is an alarm rule that meets the alarm information in the process of matching alarm rules based on the received alarm information.

[0105] In an embodiment of the present invention, alarm rules can be learned based on the alarm information when alarm information is received or in the process of matching rules based on the received alarm information. Alarm rule learning is provided at two times, before rule matching and during rule matching, to continuously improve the rule base, improve the coverage of alarm information by the rule base, and through the subsequent alarm processing of the alarm information using alarm rules, try to ensure 100% automation of alarm processing, thereby saving labor costs; in addition, by intelligently learning alarms and adding alarm rules, the workload can be further reduced, the self-learning ability of alarm processing can be realized, and the fault handling efficiency can be maximized.

[0106] Reference Figure 5, showing a step flow chart of another implementation regulation of the alarm processing method of the present invention, the cloud platform 212 performs alarm processing on the corresponding network facilities based on the alarm information collected by the cloud management platform 2111. This step flow can be applied to Figure 2 The cloud platform 212 shown in the figure can be connected to the cloud management platform 2111 for communication, which can specifically include the following steps:

[0107] Step 501, receiving alarm information collected by the cloud management platform through the cloud center, and generating alarm rules according to the alarm information in the process of matching alarm rules based on the received alarm information;

[0108] In the embodiment of the present invention, step 501 may be a specific step of step 303, or may be a cyclic process of learning the alarm rule again in step 303, that is, in the process of matching the alarm rule based on the received alarm information described in step 501, the process of generating the alarm rule according to the alarm information may be the Nth (N is a positive integer) alarm rule learning operation performed when there is no matching alarm rule for the alarm information, that is, in the case where Figure 4 After artificial intervention learning, Figure 5 The steps shown can be as follows Figure 4 The cyclic process shown, that is, when there is no matching alarm rule for the alarm information, the alarm rules can be continuously learned based on the alarm information, and then the alarm information is continuously processed according to the alarm rules, that is, the alarm rules are matched until there is an alarm rule that matches the alarm information during the alarm rule matching process.

[0109] The process of generating alarm rules based on alarm information in the process of matching alarm rules based on the received alarm information is performed when there is no matching alarm rule for the alarm information when matching alarm rules. By providing alarm rule learning again in the rule matching process, the rule base is continuously improved and the coverage rate of the rule base for alarm information is improved, so that the subsequent alarm processing of the alarm information using the alarm rules can ensure the automation of alarm processing as much as possible.

[0110] When there is no matching alarm rule for the alarm information, if an alarm confirmation message for the alarm information is received at this time, an alarm rule customized for the alarm information can be received, and the received alarm rule can be added to the preset rule library to complete the learning of the alarm rule again.

[0111] In actual applications, when there is no matching alarm rule for the alarm information, the learning process of the cloud station can be manually intervened, and the maintenance personnel can manually intervene to judge the alarm content. If the manual judgment result at this time is a fault alarm, then an alarm confirmation message can be generated on the maintenance platform, and the generated alarm confirmation message is sent to the cloud management platform, and then the cloud management platform sends the alarm confirmation message to the cloud station. At this time, the alarm confirmation message sent can also carry customized alarm rules for the current alarm information, that is, the manually customized alarm rules, and then the cloud station learns and executes the unit polling matching alarm rules to learn this customized alarm rule. The cloud station can manually intervene in the alarm learning and add customized alarm rules to make up for the deficiencies in the intelligent learning process. Based on the implementation of customized alarm rules, it can also quickly transform the experience of maintenance personnel into permanent alarm rules to facilitate the subsequent automated processing of repeated alarms.

[0112] Among them, the customized alarm rules can be expressed as manually adding alarm rules to the preset rule base. For example, a certain alarm information (in English or involving numbers, symbols, etc.) may not be segmented, and the alarm rules need to be manually entered. The process of adding customized alarm rules does not affect the matching process when receiving alarm information. All alarm rules can be added to the same preset rule base, which is equivalent to a data set.

[0113] Step 502: Perform alarm processing on the alarm information according to the matching result of the alarm rule matching.

[0114] In one embodiment of the present invention, after learning the alarm rules based on the alarm information is completed in the process of matching alarm rules based on the received alarm information, the process of performing alarm processing on the alarm information can be performed again based on the matching results of the alarm rules, until there is an alarm rule that meets the alarm information in the process of matching alarm rules based on the received alarm information.

[0115] Alarm processing based on the matching results, such as Figure 4As shown, in the process of matching alarm rules based on the received alarm information, in one case, the alarm information may meet the alarm rules. For example, assuming that the alarm rule is generated in the combination of [alarm object, object execution task, object execution status], the received alarm information at this time does not completely hit all keywords, that is, the current alarm information is valid alarm information. At this time, the device information of the network device corresponding to the alarm information can be obtained, and the alarm repair information can be generated using the device information. The generated alarm repair information can be used to send to the maintenance platform and to instruct maintenance personnel to repair the network equipment corresponding to the alarm information. After the maintenance personnel confirms the alarm repair information, an alarm elimination instruction can be generated based on the repair confirmation information, and the maintenance platform sends the alarm elimination instruction to the cloud management platform, so that the cloud management platform responds to the alarm elimination instruction to perform an alarm elimination operation on the alarm message, thereby completing the closed loop of alarm processing for the alarm information.

[0116] like Figure 4 As shown, in another case, there may be a situation where there is no matching alarm rule for the alarm information. For example, assuming that the alarm rule is generated in the form of a combination of [alarm object, object execution task, object execution status], the received alarm information does not completely hit all keywords, that is, the current alarm information is not valid alarm information, and the alarm rule can be learned again, that is, return to step 501 and continue to execute as shown. Figure 5 The step flow shown is performed until an alarm rule that matches the alarm information exists in the process of matching the alarm rules based on the received alarm information, and until the alarm elimination operation of the alarm message is implemented.

[0117] In an embodiment of the present invention, alarm rules can be learned based on the alarm information when alarm information is received or in the process of matching rules based on the received alarm information. Alarm rule learning is provided at two times, before rule matching and during rule matching, to continuously improve the rule base, improve the coverage of alarm information by the rule base, and through the subsequent alarm processing of the alarm information using alarm rules, try to ensure 100% automation of alarm processing, thereby saving labor costs; in addition, by intelligently learning alarms and adding alarm rules, the workload can be further reduced, the self-learning ability of alarm processing can be realized, and the fault handling efficiency can be maximized.

[0118] Reference Figure 6 , shows a schematic diagram of the application scenario of the alarm processing provided by the embodiment of the present invention, which can be applied to the scenario of processing hardware alarms when the user uses the cloud management platform to monitor the alarms of network equipment. At this time, the alarm intelligent learning and processing method based on the cloud management platform proposed in the embodiment of the present invention can be adopted.

[0119] In this application scenario, the cloud management platform is equipped with a corresponding alarm monitoring system for the bare metal server. This alarm processing system may include an alarm monitoring system, a cloud platform, and a maintenance platform. The alarm monitoring system may include network facilities and a cloud management platform. In this application scenario, the network facilities included in the alarm monitoring system may be expressed as hardware network facilities.

[0120] In the embodiment of the present invention, based on the characteristics of the cloud management platform centrally managing the alarm information of the hardware network facilities, the alarm information of the network facilities can be processed by intelligently learning the alarm rules through the cloud platform, and the equipment information corresponding to the alarm information can be automatically collected and a closed-loop operation of alarm processing can be performed for repair, so as to automatically eliminate the alarm information.

[0121] In the specific process, it may include the alarm collection process, the alarm intelligent learning process, the cloud platform matching process, and the automatic repair reporting and alarm elimination process.

[0122] (1) During the alarm collection process, the cloud management platform can collect alarm information through the alarm monitoring system configured for the hardware network settings. After the cloud management platform collects the alarm information, it will centrally transmit the alarm information to the cloud center;

[0123] (2) During the intelligent alarm learning process, the sub-process of the cloud platform can learn the alarm keywords based on the alarm content in the alarm information, specifically the alarm name, and generate alarm rules based on the alarm keywords. At the same time, the sub-process of the cloud platform will also match the alarm rules and enter the cloud platform matching process;

[0124] (3) During the matching process of the cloud platform, the cloud platform can match the alarm information according to the learned alarm rules. If the received alarm information matches the corresponding alarm rules, the cloud platform can be triggered to automatically collect the hardware equipment information involved in the alarm, that is, enter the automatic repair and alarm elimination process. If the received alarm information does not match the relevant alarm rules, then another alarm rule learning opportunity can be provided at this time. Usually, manual intervention can be performed to judge the alarm content and intervene in intelligent learning. If the manual judgment result is a hardware failure alarm at this time, it is necessary to manually add a custom alarm rule, and the cloud platform learning and execution unit polls the matching alarm rules until the alarm information received during the cloud platform matching process has a matching alarm rule;

[0125] (4) During the matching process of the cloud platform, if the received alarm information has a matching alarm rule, then the automatic repair and alarm elimination process can be entered. At this time, the cloud platform can be triggered to automatically collect the equipment information of the hardware network facilities involved in the alarm information, and automatically determine whether there is any business in the hardware network facilities corresponding to the alarm information, and remove the business involved. Then, the fault location information (specifically the hardware fault point), equipment name, logical node name, serial number, management IP, BMC IP and other information carried in the hardware equipment information, as well as the hardware replacement information can be automatically sent to the on-site hardware maintenance personnel through the maintenance platform. After receiving the repair information and determining that it is a hardware failure, the hardware personnel will take measures such as replacing spare parts and replacing accessories in the computer room. After the maintenance is carried out, the maintenance confirmation information can be generated through the maintenance platform, and the alarm elimination instruction is generated based on this maintenance confirmation information, and the alarm elimination instruction is sent to the cloud management platform so that the cloud management platform responds to the alarm elimination instruction to perform an alarm elimination operation on the alarm message, completing the closed loop of alarm processing for the alarm information.

[0126] In the embodiment of the present invention, the cloud platform learns to automatically handle alarms through intelligent learning of alarms, saving a large amount of fault handling work required by operation and maintenance personnel, and further reducing the workload based on learning alarm rules and adding alarm rules, while achieving self-learning ability and maximizing fault handling efficiency, saving labor costs; the cloud platform can also handle hardware alarms around the clock to ensure timeliness and maximize fault handling efficiency.

[0127] It should be noted that the intelligent alarm learning and processing method based on the cloud management platform proposed in the embodiment of the present invention can not only be applied to the alarm elimination processing for hardware, but can also be applied to any alarm elimination based on adaptive adaptation and adjustment. The embodiment of the present invention does not limit this.

[0128] The embodiments of the present invention can automatically and intelligently learn and process alarm information and automatically report repairs to achieve alarm elimination processing. This is mainly achieved by omitting the step or process of manually judging the alarm content and replacing it with an automatic intelligent learning alarm processing method, and automatically reporting repairs based on the collected equipment information. It can quickly respond to and process alarms to achieve a closed loop of alarms; and by intelligently learning alarms and adding alarm rules, it reduces labor costs based on intelligent learning of alarm content, thereby further reducing workload and achieving self-learning capabilities for alarm processing; and, the method of generating alarm rules can also process a large amount of repeated alarm information, thereby maximizing fault handling efficiency, and can provide alarm rule learning at two times, before rule matching and during rule matching, continuously improve the rule base, improve the coverage of the rule base for alarm information, and try to ensure 100% automation of alarm processing.

[0129] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0130] Reference Figure 7 , shows a structural block diagram of an implementation regulation of an alarm processing device of the present invention, which may specifically include the following modules:

[0131] An alarm rule learning module 701 is used to learn alarm rules according to the alarm information when the alarm information is received or in the process of matching the alarm rules based on the received alarm information;

[0132] The alarm processing module 702 is used to perform alarm processing on the alarm information according to the alarm rule.

[0133] In one embodiment of the present invention, the alarm rule learning module 701 may include the following submodules:

[0134] A word segmentation processing submodule is used to perform word segmentation operation on the alarm information to obtain a word segmentation result; the word segmentation result includes keywords for the alarm information;

[0135] The alarm rule generation submodule is used to generate alarm rules using the keywords and add the alarm rules to a preset rule library.

[0136] In one embodiment of the present invention, the alarm rule learning module 701 may include the following submodules:

[0137] The alarm rule receiving submodule is used to receive a customized alarm rule for the alarm information when there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, and add the alarm rule to a preset rule library.

[0138] In one embodiment of the present invention, the alarm rule includes keywords for the alarm information; the keywords include alarm object, object execution task and object execution status; wherein the alarm object is used to indicate the object that needs to be alarmed, the object execution task is used to indicate the execution action of the alarm object, and the object execution status is used to indicate the execution result of the alarm object.

[0139] In an embodiment of the present invention, the alarm information is used to indicate the alarm status of the corresponding network device, and the alarm processing module 702 may include the following submodules:

[0140] An alarm rule matching submodule, used to perform alarm rule matching using the alarm information;

[0141] The alarm rule processing submodule is used to perform alarm processing on the alarm information according to the matching result of the alarm rule matching.

[0142] In one embodiment of the present invention, the alarm rule processing submodule may include the following units:

[0143] In the process of matching the alarm rule based on the received alarm information, if the alarm information meets the alarm rule, obtaining device information of the network device corresponding to the alarm information;

[0144] Generating alarm and maintenance information using the device information; the alarm and maintenance information is used to instruct maintenance personnel to repair the network device corresponding to the alarm information;

[0145] After receiving the alarm elimination instruction for the alarm repair information, an alarm elimination operation is performed on the alarm message in response to the alarm elimination instruction.

[0146] In one embodiment of the present invention, the alarm rule processing submodule may further include the following units:

[0147] An alarm rule receiving unit, used for, in the process of matching alarm rules based on the received alarm information, if there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, receiving an alarm rule customized for the alarm information and adding the alarm rule to a preset rule library;

[0148] The alarm loop processing unit is used to perform alarm processing on the alarm information according to the alarm rule again until the alarm information has a matching alarm rule in the process of matching the alarm rule.

[0149] In an embodiment of the present invention, alarm rules can be learned based on the alarm information when alarm information is received or in the process of matching rules based on the received alarm information. Alarm rule learning is provided at two times, before rule matching and during rule matching, to continuously improve the rule base, improve the coverage of alarm information by the rule base, and through the subsequent alarm processing of the alarm information using alarm rules, try to ensure 100% automation of alarm processing, thereby saving labor costs; in addition, by intelligently learning alarms and adding alarm rules, the workload can be further reduced, the self-learning ability of alarm processing can be realized, and the fault handling efficiency can be maximized.

[0150] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method implementation regulations.

[0151] An embodiment of the present invention further provides an electronic device, including:

[0152] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned alarm processing method implementation regulations are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0153] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned alarm processing method implementation regulations are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0154] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other implementation regulations. The same or similar parts between the various embodiments can be referenced to each other.

[0155] It should be understood by those skilled in the art that embodiments of the implementation regulations of the present invention may be provided as methods, devices or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment or a combination of software and hardware implementation regulations. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0156] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the implementation regulations of the present invention. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0157] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0158] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0159] Although the preferred embodiments of the implementation rules of the present invention have been described, those skilled in the art may make additional changes and modifications to these implementation rules once they are aware of the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred implementation rules and all changes and modifications that fall within the scope of the implementation rules of the present invention.

[0160] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or still includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "including one..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0161] The above describes in detail an alarm processing method, an alarm processing device, a corresponding electronic device and a corresponding computer storage medium provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The above description of the implementation regulations is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. An alarm processing method, characterized in that: The method comprises: When receiving alarm information or in the process of matching alarm rules based on the received alarm information, learning alarm rules according to the alarm information; the learning of alarm rules according to the alarm information when receiving alarm information includes: performing a word segmentation operation on the alarm information to obtain a word segmentation result, the word segmentation result includes keywords for the alarm information, using the keywords to generate alarm rules, and adding the alarm rules to a preset rule library; The alarm information is processed according to the alarm rules, wherein the alarm rules include keywords for the alarm information; the keywords include alarm object, object execution task and object execution status; wherein the alarm object is used to indicate the object to be alarmed, the object execution task is used to indicate the execution action of the alarm object, and the object execution status is used to indicate the execution result of the alarm object.

2. The method according to claim 1, characterized in that In the process of matching alarm rules based on the received alarm information, learning the alarm rules according to the alarm information includes: If there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, an alarm rule customized for the alarm information is received and the alarm rule is added to a preset rule library.

3. The method according to claim 1, characterized in that The alarm information is used to indicate the alarm status of the corresponding network device, and the alarm processing of the alarm information according to the alarm rule includes: Using the alarm information to perform alarm rule matching; According to the matching result of the alarm rule matching, the alarm information is processed as an alarm.

4. The method according to claim 3, characterized in that The step of performing alarm processing on the alarm information according to the matching result of the alarm rule matching includes: In the process of matching the alarm rule based on the received alarm information, if the alarm information meets the alarm rule, obtaining device information of the network device corresponding to the alarm information; Generating alarm and maintenance information using the device information; the alarm and maintenance information is used to instruct maintenance personnel to repair the network device corresponding to the alarm information; After receiving the alarm elimination instruction for the alarm repair information, an alarm elimination operation is performed on the alarm information in response to the alarm elimination instruction.

5. The method according to claim 3 or 4, characterized in that: Also includes: In the process of matching alarm rules based on the received alarm information, if there is no matching alarm rule for the alarm information and alarm confirmation information for the alarm information is received, then a customized alarm rule for the alarm information is received and the alarm rule is added to a preset rule library; The alarm information is processed again according to the alarm rule until a matching alarm rule exists for the alarm information during the process of matching the alarm rule.

6. An alarm processing device, characterized in that: The device comprises: An alarm rule learning module is used to learn alarm rules according to the alarm information when the alarm information is received or in the process of matching the alarm rules based on the received alarm information; the alarm rule learning module includes the following submodules: a word segmentation processing submodule, which is used to perform word segmentation operation on the alarm information to obtain a word segmentation result; the word segmentation result includes keywords for the alarm information; an alarm rule generation submodule, which is used to generate alarm rules using the keywords and add the alarm rules to a preset rule library; An alarm processing module is used to perform alarm processing on the alarm information according to the alarm rules, wherein the alarm rules include keywords for the alarm information; the keywords include alarm object, object execution task and object execution status; wherein the alarm object is used to indicate the object that needs to be alarmed, the object execution task is used to indicate the execution action of the alarm object, and the object execution status is used to indicate the execution result of the alarm object.

7. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the alarm processing method according to any one of claims 1 to 5 are implemented.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the alarm processing method according to any one of claims 1 to 5 are implemented.

Images