A general network primary and secondary alarm association implementation method and device
By obtaining the alarm source from the real-time alarm queue of the current network processing layer, and setting up the associated active alarm table and historical alarm table, the problem of discontinuity of alarm association time segmentation and active alarm table affecting the system functions in the existing technology is solved, and the timeliness and integrity of alarm association is realized, and the correlation efficiency is improved.
Patent Information
- Application Number
- CN202211420500.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-11-14
- Publication Date
- 2025-04-04
- Estimated Expiration
- 2042-11-14
AI Technical Summary
In the prior art, the alarm selection and correlation time segmentation is discontinuous, resulting in the father-son relationship scattered and cannot accurately reflect the real status of the current business. At the same time, the active alarm table serves as the source of association, affects the overall alarm system function and may lead to delayed entry and loss of alarms.
Directly obtain the alarm source from the real-time alarm queue of the current network processing layer, set up the associated activity alarm table and the associated historical alarm table, distinguish the associated operation table from the alarm main table, ensure the timeliness and integrity of the association, and flexibly configure the associated time range.
It realizes the timeliness and integrity of alarm associations, improves association efficiency, ensures the performance of the alarm master table, and adapts to more alarm association scenarios.
Smart Images

Figure CN115733722B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of computer communication core network, and in particular to a method and device for realizing the association of primary and secondary alarms of a universal network. Background Art
[0002] In the 2G / 3G / 4G era, the primary and secondary alarm correlation function in the core network alarm system is generally mainly used to correlate the alarms in the current active alarm library by time period, such as Figure 1 As shown, the association steps are as follows:
[0003] 1. First, select the active alarms within a period of time before the current time from the active alarm table and store them in the alarm cache;
[0004] 2. Select an alarm from the alarm cache;
[0005] 3. Read all the association rules according to the alarm type and store them in the association rule cache;
[0006] 4. Select an association rule from the association rule cache;
[0007] 5. According to the association rule, the alarm is associated with all the alarms in the alarm cache;
[0008] 6. Determine whether an alarm needs to be derived (based on association rules. For example, some association rules require derivation if multiple alarms are associated to derive a parent alarm).
[0009] 7. If a derived alarm is required, check whether there is a related derived alarm in the active alarm table, and store the derived new alarm in the active alarm table;
[0010] 8. Otherwise, a parent alarm is selected for association according to the association rule (a parent alarm is selected according to the association rule, and the parent alarm type is specified in the association rule);
[0011] 9. Save the parent-child relationship to the parent-child relationship alarm table;
[0012] 10. If the rule analysis is not finished, continue with step 4;
[0013] 11. If the alarm has not been analyzed, continue with step 2;
[0014] 12. After all the alarms in the alarm cache are analyzed, jump to step 1.
[0015] At present, the above schemes mainly have the following shortcomings and deficiencies:
[0016] 1. The alarm selection and association time segmentation is too rigid and has no continuity, which may cause scattered parent-child association relationships and fail to accurately reflect the true status of alarms for the current business.
[0017] 2. Use the active alarm table as the association source. Each association requires fetching a piece of data and loading it into the cache. First, the active alarm table is the main alarm table, which will affect the overall alarm system function. Second, some alarms may be received with delays, resulting in delayed storage. Therefore, obtaining data from the active alarm table may lose the association of some alarms. Summary of the invention
[0018] In order to solve the above-mentioned shortcomings and deficiencies in the current solutions, the present invention provides a method and device for realizing the association of primary and secondary alarms in a general network. The associated alarm source is directly obtained from the real-time alarm queue of the existing network processing layer, thereby ensuring the timeliness and completeness of the association. An associated active alarm table and an associated historical alarm table are set to distinguish the table of associated operations from the alarm main table, which does not affect the main business, thereby ensuring the performance of both the associated alarm and the alarm main table. The associated time range can be flexibly configured for query, and the associated active alarm table can store various fields, so the association rule setting will be more flexible and more scalable.
[0019] To achieve the above object, the present invention adopts the following technical solutions:
[0020] In one embodiment of the present invention, a general network primary and secondary alarm association implementation method is proposed, the method comprising:
[0021] Get an alarm from the real-time alarm queue and store it in the active alarm table or historical alarm table;
[0022] If the alarm is an active alarm, it will be stored in the associated active alarm table and associated. The associated time range is a period of time before and after the current time. If an alarm needs to be derived, the derived new alarm will be stored in the active alarm table and the associated active alarm table.
[0023] If the alarm is a clearing alarm, its corresponding active alarm will be moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared. If there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
[0024] Furthermore, if the alarm is an active alarm, it is stored in the associated active alarm table and associated, and the associated time range is a period of time before and after the current time; if an alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table, including:
[0025] If the alarm is an active alarm, it is stored in the associated active alarm table, and according to the type of the alarm, all its associated rules are read and stored in the associated rule cache;
[0026] Select an association rule from the association rule cache, and associate the alarm with the associated active alarm table according to the association rule. The association time range is a period of time before and after the current time.
[0027] Determine whether a new alarm needs to be derived based on the association rules. If an alarm needs to be derived, check whether there is a related derived alarm in the active alarm table, and store the derived new alarm in the active alarm table and the associated active alarm table; otherwise, select a parent alarm based on the association rules, and save the parent-child association relationship to the parent-child association alarm table.
[0028] Further, if the alarm is a clear alarm, its corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; it is determined whether there is a parent alarm that needs to be cleared, and if there is a parent alarm that needs to be cleared, the parent alarm is moved from the associated active alarm table to the associated historical alarm table, and the parent alarm is moved from the active alarm table to the historical alarm table, including:
[0029] If the alarm is a clear alarm, the active alarm corresponding to the clear alarm is queried from the associated active alarm table, and the active alarm is moved from the associated active alarm table to the associated historical alarm table;
[0030] Check whether there is a parent alarm from the parent-child association alarm table. If there is a parent alarm, determine whether it needs to be cleared. If it needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
[0031] Further, determining whether it is necessary to clear includes:
[0032] If all sub-alarms under its parent alarm are in the cleared state after the sub-alarm is cleared, it is determined that the parent alarm needs to be cleared.
[0033] In one embodiment of the present invention, a general network primary and secondary alarm association implementation device is also proposed, the device comprising:
[0034] The alarm real-time acquisition module is used to obtain an alarm from the real-time alarm queue and store it in the active alarm table or the historical alarm table;
[0035] The alarm association analysis module is used to store and associate the alarm in the associated active alarm table if it is an active alarm, and the associated time range is a period of time before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table; if the alarm is a clearing alarm, its corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared. If there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
[0036] Furthermore, if the alarm is an active alarm, it is stored in the associated active alarm table and associated, and the associated time range is a period of time before and after the current time; if an alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table, including:
[0037] If the alarm is an active alarm, it is stored in the associated active alarm table, and according to the type of the alarm, all its associated rules are read and stored in the associated rule cache;
[0038] Select an association rule from the association rule cache, and associate the alarm with the associated active alarm table according to the association rule. The association time range is a period of time before and after the current time.
[0039] Determine whether a new alarm needs to be derived based on the association rules. If an alarm needs to be derived, check whether there is a related derived alarm in the active alarm table, and store the derived new alarm in the active alarm table and the associated active alarm table; otherwise, select a parent alarm based on the association rules, and save the parent-child association relationship to the parent-child association alarm table.
[0040] Further, if the alarm is a clear alarm, its corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; it is determined whether there is a parent alarm that needs to be cleared, and if there is a parent alarm that needs to be cleared, the parent alarm is moved from the associated active alarm table to the associated historical alarm table, and the parent alarm is moved from the active alarm table to the historical alarm table, including:
[0041] If the alarm is a clear alarm, the active alarm corresponding to the clear alarm is queried from the associated active alarm table, and the active alarm is moved from the associated active alarm table to the associated historical alarm table;
[0042] Check whether there is a parent alarm from the parent-child association alarm table. If there is a parent alarm, determine whether it needs to be cleared. If it needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
[0043] Further, determining whether it is necessary to clear includes:
[0044] If all sub-alarms under its parent alarm are in the cleared state after the sub-alarm is cleared, it is determined that the parent alarm needs to be cleared.
[0045] In one embodiment of the present invention, a computer device is also proposed, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the aforementioned general network primary and secondary alarm association implementation method is implemented.
[0046] In one embodiment of the present invention, a computer-readable storage medium is further provided, wherein the computer-readable storage medium stores a computer program for executing a general network primary and secondary alarm association implementation method.
[0047] Beneficial effects:
[0048] 1. The associated alarms of the present invention are obtained from the real-time alarm queue of the existing network, the alarm association is timely, and the alarm will not be discarded, thereby ensuring the integrity of the alarm association.
[0049] 2. The present invention adds an associated active alarm table and an associated historical alarm table, so that the associated query will only be performed in the associated table and will not affect the alarm main table, thereby improving the association efficiency.
[0050] 3. The association rule configuration of the present invention is more flexible, and the associated time range can be selected as a period of time before and after the current time, which is suitable for more alarm association scenarios. BRIEF DESCRIPTION OF THE DRAWINGS
[0051] Figure 1 This is a schematic diagram of the primary and secondary alarm correlation process of the 2G / 3G / 4G core network;
[0052] Figure 2 It is a flowchart of a method for realizing association of primary and secondary alarms in a universal network according to the present invention;
[0053] Figure 3 It is a schematic diagram of the structure of a general network primary and secondary alarm association implementation device of the present invention;
[0054] Figure 4 It is a schematic diagram of the computer device structure of the present invention. DETAILED DESCRIPTION
[0055] The principles and spirit of the present invention will be described below with reference to several exemplary embodiments. It should be understood that these embodiments are provided only to enable those skilled in the art to better understand and implement the present invention, and are not intended to limit the scope of the present invention in any way. On the contrary, these embodiments are provided to make the present disclosure more thorough and complete, and to fully convey the scope of the present disclosure to those skilled in the art.
[0056] Those skilled in the art will appreciate that the embodiments of the present invention may be implemented as a system, device, apparatus, method or computer program product. Therefore, the present disclosure may be implemented in the following forms, namely: complete hardware, complete software (including firmware, resident software, microcode, etc.), or a combination of hardware and software.
[0057] According to an implementation manner of the present invention, a general network primary and secondary alarm association implementation method and device are proposed, wherein the associated alarm source is directly obtained from the real-time alarm queue of the existing network processing layer, thereby ensuring the timeliness and completeness of the association; an associated active alarm table and an associated historical alarm table are set to distinguish the associated operation table from the alarm main table, without affecting the main business, thereby ensuring both the performance of the associated alarm and the performance of the alarm main table; the associated time range can be flexibly configured for query, and the associated active alarm table can store various fields, so the association rule setting will be more flexible and more scalable.
[0058] The principle and spirit of the present invention are explained in detail below with reference to several representative embodiments of the present invention.
[0059] Figure 2 1 is a flow chart of a method for realizing the association of primary and secondary alarms in a universal network according to the present invention. Figure 2 As shown, the method includes:
[0060] 1. Get an alarm from the real-time alarm queue and determine whether the alarm is an active alarm. If so, store it in the active alarm table; otherwise, store it in the historical alarm table.
[0061] 2. Perform alarm correlation analysis on the alarm;
[0062] 3. If it is an active alarm, save it in the associated active alarm table and proceed to the next step, otherwise jump to clear alarm step 14;
[0063] 4. According to the type of the alarm, read all its association rules and store them in the association rule cache;
[0064] 5. Select an association rule from the association rule cache;
[0065] 6. According to the association rule, the alarm is associated with the associated active alarm table. The associated time range can be relaxed to a period of time before and after the current time;
[0066] 7. Determine whether a new alarm needs to be derived based on the association rule;
[0067] 8. If a derived alarm is required, check whether there is a related derived alarm in the active alarm library;
[0068] 9. Otherwise, select a parent alarm for association according to the association rule (the parent alarm type is specified in the association rule);
[0069] 10. The derived new alarm is stored in the active alarm table and the associated active alarm table;
[0070] 11. The parent-child alarm association relationship is saved in the parent-child association alarm table;
[0071] 12. If the association rule analysis is not completed, continue with step 5;
[0072] 13. If the alarm has not been checked, continue with step 2;
[0073] 14. Enter the process of clearing alarm associations;
[0074] 15. Query the active alarm corresponding to the cleared alarm from the associated active alarm table, and move it from the associated active alarm table to the associated historical alarm table;
[0075] 16. Check whether there is a parent alarm in the parent-child association alarm table. If there is a parent alarm, determine whether it needs to be cleared. If after the child alarm is cleared, all the child alarms under the parent alarm are in the cleared state, then it is determined that the parent alarm needs to be cleared;
[0076] 17. If clearing is required, move the parent alarm from the associated active alarm table to the associated historical alarm table;
[0077] 18. Correspondingly, the parent alarm needs to be moved from the active alarm table to the historical alarm table.
[0078] In the above scheme, the active alarm table can be understood as the formal active alarm table, whose table data is the main table of the current alarm system, with complete data, and can be used for various operations such as presentation and dispatch. The associated active alarm table can be understood as an informal temporary table, whose table data is only used for associated alarms. The alarms in the table are not as complete as those in the formal active alarm table, and the data cannot be used for presentation, dispatch and other needs, and can only be provided to associated programs for use.
[0079] In the above scheme, the historical alarm table can be understood as the formal historical alarm table. Its table data is the main table of the current alarm system. The data is complete and can be used for various operations such as presentation and dispatch. The associated historical alarm table can be understood as an informal temporary table. Its table data is only used for associated alarms. The alarms in the table are not as complete as those in the formal historical alarm table. The data cannot be used for presentation, dispatch and other needs and can only be provided to associated programs for use.
[0080] It should be noted that, although the operations of the method of the present invention are described in a specific order in the above embodiments and the accompanying drawings, this does not require or imply that the operations must be performed in the specific order, or that all the operations shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps.
[0081] In order to explain the above-mentioned general network primary and secondary alarm association implementation method more clearly, it is described below in conjunction with a specific embodiment. However, it should be noted that this embodiment is only for better illustrating the present invention and does not constitute an improper limitation to the present invention.
[0082] Example of associated alarm:
[0083] 1. First, formulate an association rule:
[0084] Alarms A and B need to be associated. The association condition is that the network element names are the same and the alarm type of A is used as the main alarm;
[0085] 2. Get an active alarm A from the real-time alarm queue and store it in the active alarm table and the associated active alarm table;
[0086] 3. At the same time, perform alarm correlation analysis on this activity alarm A;
[0087] 4. Read all the associated rules of this active alarm type A;
[0088] 5. Select the association rule formulated in step 1 above to associate A and B;
[0089] 6. If there is only active alarm A in the detection-related active alarm table, there is no alarm association;
[0090] 7. Get an active alarm B from the real-time alarm queue and store it in the active alarm table and the associated active alarm table;
[0091] 8. At the same time, perform alarm correlation analysis on this activity alarm B;
[0092] 9. Load all the associated rules of this active alarm type B;
[0093] 10. Select the association rule formulated in step 1 above to associate A and B;
[0094] 11. There are active alarms A and B in the detection and association active alarm table, which are just associated;
[0095] 12. The judgment rule is that A is the main alarm and no derived alarm is needed;
[0096] 13. Parent-child alarm association, the association between A and B is saved;
[0097] 14. Get a clear alarm B from the real-time alarm queue;
[0098] 15. After finding active alarm B from the active alarm table, clear the alarm and move the alarm to the historical alarm table;
[0099] 16. After finding active alarm B from the associated active alarm table, clear the alarm and move the alarm to the associated historical alarm table;
[0100] 17. For clearing alarms, find the parent alarm of alarm B in the parent-child relationship alarm table, which is A;
[0101] 18. After alarm B is cleared, it is found that the parent alarm A of alarm B has only one child alarm, which is B, and B is also cleared. Therefore, all child alarms have been cleared, and the parent alarm A meets the clearing conditions and needs to be cleared;
[0102] 19. After finding the parent alarm A from the active alarm table, clear the alarm and move the parent alarm A to the historical alarm table;
[0103] 20. After finding the parent alarm A from the associated active alarm table, clear the alarm and transfer the parent alarm A to the associated historical alarm table.
[0104] Based on the same inventive concept, the present invention also proposes a general network primary and secondary alarm association implementation device. The implementation of the device can refer to the implementation of the above method, and the repeated parts will not be repeated. The term "module" used below can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.
[0105] Figure 3 Schematic diagram of the structure of the general network primary and secondary alarm association implementation device of the present invention. Figure 3 As shown, the device comprises:
[0106] The alarm real-time acquisition module 101 is used to obtain an alarm from the real-time alarm queue and store it in the active alarm table or the historical alarm table;
[0107] The alarm association analysis module 102 is used to store and associate the alarm in the associated active alarm table if the alarm is an active alarm, and the associated time range is a period of time before and after the current time; if an alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table; if the alarm is a clear alarm, the corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared, and if there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table; the details are as follows:
[0108] If the alarm is an active alarm, it is stored in the associated active alarm table, and according to the type of the alarm, all its associated rules are read and stored in the associated rule cache;
[0109] Select an association rule from the association rule cache, and associate the alarm with the associated active alarm table according to the association rule. The association time range is a period of time before and after the current time.
[0110] Determine whether a new alarm needs to be derived based on the association rules. If an alarm needs to be derived, check whether there is a related derived alarm in the active alarm table, and store the derived new alarm in the active alarm table and the associated active alarm table; otherwise, select a parent alarm based on the association rules, and save the parent-child association relationship to the parent-child association alarm table.
[0111] If the alarm is a clear alarm, the active alarm corresponding to the clear alarm is queried from the associated active alarm table, and the active alarm is moved from the associated active alarm table to the associated historical alarm table;
[0112] Check whether there is a parent alarm in the parent-child association alarm table. If there is a parent alarm, determine whether it needs to be cleared. If after the child alarm is cleared, all the child alarms under the parent alarm are in the cleared state, then it is determined that the parent alarm needs to be cleared;
[0113] If it needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
[0114] It should be noted that although several modules of the general network primary and secondary alarm association implementation device are mentioned in the above detailed description, this division is only exemplary and not mandatory. In fact, according to an embodiment of the present invention, the features and functions of two or more modules described above can be concretized in one module. Conversely, the features and functions of one module described above can be further divided into multiple modules for concretization.
[0115] Based on the above invention concept, Figure 4 As shown, the present invention also proposes a computer device 200, including a memory 210, a processor 220, and a computer program 230 stored in the memory 210 and executable on the processor 220. When the processor 220 executes the computer program 230, the aforementioned general network primary and secondary alarm association implementation method is implemented.
[0116] Based on the aforementioned inventive concept, the present invention further proposes a computer-readable storage medium, which stores a computer program for executing the aforementioned general network primary and secondary alarm association implementation method.
[0117] The present invention proposes a general network primary and secondary alarm association implementation method and device, in which the associated alarms are obtained from the real-time alarm queue of the existing network, the alarm association is timely, and the alarm will not be discarded, thereby ensuring the integrity of the alarm association; an associated active alarm table and an associated historical alarm table are added, so that the associated query will only be performed in the associated table and will not affect the alarm main table, thereby improving the association efficiency; the association rule configuration is more flexible, and the associated time range can be selected to be a period of time before and after the current time, adapting to more alarm association scenarios.
[0118] Although the spirit and principle of the present invention have been described with reference to several specific embodiments, it should be understood that the present invention is not limited to the disclosed specific embodiments, and the division of various aspects does not mean that the features in these aspects cannot be combined to benefit, and such division is only for the convenience of expression. The present invention is intended to cover various modifications and equivalent arrangements contained in the spirit and scope of the attached claims.
[0119] Regarding the limitation of the protection scope of the present invention, those skilled in the art should understand that, based on the technical solution of the present invention, various modifications or variations that can be made by those skilled in the art without creative work are still within the protection scope of the present invention.
Claims
1. A general network primary and secondary alarm association implementation method, characterized in that: The method includes: Get an alarm from the real-time alarm queue and store it in the active alarm table or historical alarm table; If the alarm is an active alarm, it will be stored in the associated active alarm table and associated. The associated time range is a period of time before and after the current time. If an alarm needs to be derived, the derived new alarm will be stored in the active alarm table and the associated active alarm table. If the alarm is a clearing alarm, its corresponding active alarm will be moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared. If there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
2. The method for realizing association of primary and secondary alarms in a general network according to claim 1, characterized in that: If the alarm is an active alarm, it is stored in the associated active alarm table and associated. The associated time range is a period of time before and after the current time. If an alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table, including: If the alarm is an active alarm, it is stored in the associated active alarm table, and according to the type of the alarm, all its associated rules are read and stored in the associated rule cache; Select an association rule from the association rule cache, and associate the alarm with the associated active alarm table according to the association rule. The association time range is a period of time before and after the current time. Determine whether a new alarm needs to be derived based on the association rules. If an alarm needs to be derived, check whether there is a related derived alarm in the active alarm table, and store the derived new alarm in the active alarm table and the associated active alarm table; otherwise, select a parent alarm based on the association rules, and save the parent-child association relationship to the parent-child association alarm table.
3. The method for realizing association of primary and secondary alarms in a general network according to claim 1, characterized in that: If the alarm is a clear alarm, its corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared. If there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table, including: If the alarm is a clear alarm, the active alarm corresponding to the clear alarm is queried from the associated active alarm table, and the active alarm is moved from the associated active alarm table to the associated historical alarm table; Check whether there is a parent alarm from the parent-child association alarm table. If there is a parent alarm, determine whether it needs to be cleared. If it needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
4. The method for realizing association of primary and secondary alarms in a general network according to claim 3, characterized in that: Determine whether it needs to be cleared, including: If all sub-alarms under its parent alarm are in the cleared state after the sub-alarm is cleared, it is determined that the parent alarm needs to be cleared.
5. A general network primary and secondary alarm association implementation device, characterized in that: The device includes: The alarm real-time acquisition module is used to obtain an alarm from the real-time alarm queue and store it in the active alarm table or the historical alarm table; The alarm association analysis module is used to store and associate the alarm in the associated active alarm table if it is an active alarm, and the associated time range is a period of time before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table; if the alarm is a clearing alarm, its corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared. If there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
6. The general network primary and secondary alarm association implementation device according to claim 5, characterized in that: If the alarm is an active alarm, it is stored in the associated active alarm table and associated. The associated time range is a period of time before and after the current time. If an alarm needs to be derived, the derived new alarm is stored in the active alarm table and the associated active alarm table, including: If the alarm is an active alarm, it is stored in the associated active alarm table, and according to the type of the alarm, all its associated rules are read and stored in the associated rule cache; Select an association rule from the association rule cache, and associate the alarm with the associated active alarm table according to the association rule. The association time range is a period of time before and after the current time. Determine whether a new alarm needs to be derived based on the association rules. If an alarm needs to be derived, check whether there is a related derived alarm in the active alarm table, and store the derived new alarm in the active alarm table and the associated active alarm table; otherwise, select a parent alarm based on the association rules, and save the parent-child association relationship to the parent-child association alarm table.
7. The general network primary and secondary alarm association implementation device according to claim 5, characterized in that: If the alarm is a clear alarm, its corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; determine whether there is a parent alarm that needs to be cleared. If there is a parent alarm that needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table, including: If the alarm is a clear alarm, the active alarm corresponding to the clear alarm is queried from the associated active alarm table, and the active alarm is moved from the associated active alarm table to the associated historical alarm table; Check whether there is a parent alarm from the parent-child association alarm table. If there is a parent alarm, determine whether it needs to be cleared. If it needs to be cleared, move the parent alarm from the associated active alarm table to the associated historical alarm table, and at the same time move the parent alarm from the active alarm table to the historical alarm table.
8. The general network primary and secondary alarm association implementation device according to claim 7, characterized in that: Determine whether it needs to be cleared, including: If all sub-alarms under its parent alarm are in the cleared state after the sub-alarm is cleared, it is determined that the parent alarm needs to be cleared.
9. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 4 is implemented.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program for executing the method according to any one of claims 1 to 4.
Citation Information
Patent Citations
Alarm method and apparatus
WO2016201812A1
Alarm processing method and apparatus, and storage medium
WO2021136247A1