An alarm processing method and device and related equipment

By calculating the health score of SD-WAN devices and suppressing alarm events, the problem of massive alarm transmission caused by network oscillations was solved, improving system performance and reducing resource consumption.

CN118509301BActive Publication Date: 2026-04-07NEW H3C TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-05-07
Publication Date
2026-04-07

Smart Images

  • Figure CN118509301B_ABST
    Figure CN118509301B_ABST
Patent Text Reader

Abstract

The application relates to the network operation technical field, in particular to an alarm processing method and device and related equipment. The method comprises the following steps: calculating a current health degree score of a target device based on a network quality parameter of the target device; judging whether the current health degree score is greater than a set threshold value, wherein the current health degree score is used for representing the current alarm oscillation degree of the target device, the greater the current health degree score is, the lower the current alarm oscillation degree of the target device is, the smaller the current health degree score is, and the higher the current alarm oscillation degree of the target device is; and if it is judged that the current health degree score of the target alarm source is not greater than the set threshold value, then the alarm event of the target device is inhibited.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of network operation and maintenance technology, and in particular to an alarm processing method, device and related equipment. Background Technology

[0002] Currently, SD-WAN (Software Defined Networking in a Wide Area Network) has become a focal point in the industry. The introduction of SD-WAN not only simplifies network management and deployment but also reduces manpower service costs and leased line fees. However, with the expansion of SD-WAN scenarios, the network scale, number of network elements, and number of links increase dramatically, leading to an exponential increase in the number of alarms. Especially during network fluctuations, the constant generation of alarms causes significant disruption and becomes unbearable for customers.

[0003] Therefore, how to solve the problem of massive alarm transmission during network oscillations has become an urgent issue to be addressed. Summary of the Invention

[0004] This application provides an alarm processing method, apparatus, and related equipment.

[0005] Firstly, this application provides an alarm processing method, the method comprising:

[0006] Calculate the current health score of the target device based on its network quality parameters;

[0007] Determine whether the current health score is greater than a set threshold, wherein the current health score is used to characterize the current alarm oscillation level of the target device. The larger the current health score, the lower the current alarm oscillation level of the target device; the smaller the current health score, the higher the current alarm oscillation level of the target device.

[0008] If the current health score of the target alarm source is determined to be no greater than a set threshold, then the alarm event of the target device is suppressed.

[0009] Optionally, the network quality parameters of the target device include link latency, jitter, packet loss rate, bandwidth utilization, and application routing changes.

[0010] Optionally, an initial health score is set for the target device, and a corresponding time window and health score addition / subtraction rules are set for each dimension of network quality parameters;

[0011] The steps for calculating the current health score of the target device based on its network quality parameters include:

[0012] For each dimension of network parameter quality, if it is determined that a corresponding alarm event and alarm recovery occurred within the current time window, then the current health score of the target device is deducted based on the deduction rule corresponding to the network quality parameter of that dimension; if it is determined that no corresponding alarm event occurred within the current time window, then the current health score of the target device is added based on the bonus rule corresponding to the network quality parameter of that dimension.

[0013] Optionally, the step of deducting points from the current health score of the target device based on the deduction rules corresponding to the network quality parameters of this dimension includes:

[0014] Calculate the alarm events and alarm recovery time intervals generated within the current time window for this dimension of network quality parameters;

[0015] Based on the value of the time interval, a deduction reference value is determined to reduce the current health score of the target device, wherein the smaller the value of the time interval, the larger the deduction reference value;

[0016] The specific deduction value is the product of the deduction reference value and the weight value set for the network quality parameter of that dimension.

[0017] The difference between the current health score of the target device and the specific deduction value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

[0018] Optionally, the step of adding points to the current health score of the target device based on the scoring rules corresponding to the network quality parameters of this dimension includes:

[0019] Determine a reference value for adding points to the current health score of the target device;

[0020] The specific bonus value is the product of the bonus reference value and the weight value set for the network quality parameter of that dimension.

[0021] The sum of the current health score of the target device and the specific bonus value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

[0022] Optionally, the step of suppressing alarm events of the target device includes:

[0023] Send an instruction to the target device to stop sending the Trap message corresponding to the alarm event; or,

[0024] Upon receiving a Trap message corresponding to an alarm event sent by the target device, no alarm generation processing is performed on the received Trap message.

[0025] Secondly, this application provides an alarm processing apparatus, the apparatus comprising:

[0026] The calculation unit is used to calculate the current health score of the target device based on the network quality parameters of the target device;

[0027] The judgment unit is used to determine whether the current health score is greater than a set threshold, wherein the current health score is used to characterize the current alarm oscillation level of the target device. The larger the current health score, the lower the current alarm oscillation level of the target device; the smaller the current health score, the higher the current alarm oscillation level of the target device.

[0028] The suppression unit is used to suppress alarm events of the target device if the judgment unit determines that the current health score of the target alarm source is not greater than a set threshold.

[0029] Optionally, the network quality parameters of the target device include link latency, jitter, packet loss rate, bandwidth utilization, and application routing changes.

[0030] Optionally, an initial health score is set for the target device, and a corresponding time window and health score addition / subtraction rules are set for each dimension of network quality parameters;

[0031] When calculating the current health score of the target device based on its network quality parameters, the calculation unit is specifically used for:

[0032] For each dimension of network parameter quality, if it is determined that a corresponding alarm event and alarm recovery occurred within the current time window, then the current health score of the target device is deducted based on the deduction rule corresponding to the network quality parameter of that dimension; if it is determined that no corresponding alarm event occurred within the current time window, then the current health score of the target device is added based on the bonus rule corresponding to the network quality parameter of that dimension.

[0033] Optionally, when deducting points from the current health score of the target device based on the deduction rules corresponding to the network quality parameters of this dimension, the calculation unit is specifically used for:

[0034] Calculate the alarm events and alarm recovery time intervals generated within the current time window for this dimension of network quality parameters;

[0035] Based on the value of the time interval, a deduction reference value is determined to reduce the current health score of the target device, wherein the smaller the value of the time interval, the larger the deduction reference value;

[0036] The specific deduction value is the product of the deduction reference value and the weight value set for the network quality parameter of that dimension.

[0037] The difference between the current health score of the target device and the specific deduction value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

[0038] Optionally, when adding points to the current health score of the target device based on the scoring rules corresponding to the network quality parameters of this dimension, the calculation unit is specifically used for:

[0039] Determine a reference value for adding points to the current health score of the target device;

[0040] The specific bonus value is the product of the bonus reference value and the weight value set for the network quality parameter of that dimension.

[0041] The sum of the current health score of the target device and the specific bonus value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

[0042] Optionally, when suppressing alarm events of the target device, the suppression unit is specifically used for:

[0043] Send an instruction to the target device to stop sending the Trap message corresponding to the alarm event; or,

[0044] Upon receiving a Trap message corresponding to an alarm event sent by the target device, no alarm generation processing is performed on the received Trap message.

[0045] Thirdly, embodiments of this application provide an alarm processing apparatus, which includes:

[0046] Memory, used to store program instructions;

[0047] A processor is configured to invoke program instructions stored in the memory and execute the steps of the method as described in any one of the first aspects above, according to the obtained program instructions.

[0048] Fourthly, embodiments of this application also provide a computer-readable storage medium storing computer-executable instructions for causing a computer to perform the steps of the method as described in any of the first aspects above.

[0049] In summary, the alarm processing method provided in this application calculates the current health score of the target device based on the network quality parameters of the target device; determines whether the current health score is greater than a set threshold, wherein the current health score is used to characterize the current alarm oscillation level of the target device; the larger the current health score, the lower the current alarm oscillation level of the target device; the smaller the current health score, the higher the current alarm oscillation level of the target device; if it is determined that the current health score of the target alarm source is not greater than the set threshold, then the alarm event of the target device is suppressed.

[0050] The alarm handling method provided in this application determines whether subsequent alarm events need to be suppressed by judging the current health value of the alarm source. If an alarm source oscillates in multiple dimensions (such as link latency, jitter, packet loss rate, bandwidth utilization, etc.), the system will suppress the generation of other alarms to prevent continuous alarms from causing inconvenience to the administrator, significantly reducing the number of alarms generated during the oscillation phase of the alarm source. The controller does not need to provide additional computing and storage resources to handle such abnormal situations. This optimization measure improves system performance while effectively reducing the resource consumption required for the system to handle abnormal situations. Attached Figure Description

[0051] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments of this application or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this application. For those skilled in the art, other drawings can be obtained based on these drawings of the embodiments of this application.

[0052] Figure 1 A detailed flowchart of an alarm processing method provided in an embodiment of this application;

[0053] Figure 2 This is a schematic diagram of the structure of an alarm processing device provided in an embodiment of this application;

[0054] Figure 3 This is a schematic diagram of the hardware architecture of an alarm processing device provided in an embodiment of this application. Detailed Implementation

[0055] The terminology used in the embodiments of this application is for the purpose of describing particular embodiments only and is not intended to limit the application. The singular forms “a,” “the,” and “the” as used in this application and claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to any and all possible combinations comprising one or more of the associated listed items.

[0056] It should be understood that although the terms first, second, third, etc., may be used to describe various information in embodiments of this application, such information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of this application, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" may also be interpreted as "when," "when," or "in response to a determination."

[0057] In practical applications, alarm systems typically consist of alarm sources, alarm events, and alarm rules. Alarm sources can include devices and links, while alarm events cover situations such as device CPU, memory, and temperature exceeding thresholds, and link quality exceeding thresholds. A common method to reduce the number of alarms is to prevent repeated alarm generation if the same alarm event is received consecutively within a certain period. However, this method cannot solve the problem of repeated alarm transmission caused by network oscillations, nor can it handle the problem of repeated alarm transmission from multiple dimensions of a single alarm source.

[0058] This application provides solutions to the problem of repeated alarm transmission caused by network oscillations, and to address the problem of repeated alarm transmission from multiple dimensions of a single alarm source.

[0059] For example, see Figure 1 The diagram shown is a detailed flowchart of an alarm processing method provided in an embodiment of this application. The method includes the following steps:

[0060] Step 100: Calculate the current health score of the target device based on the network quality parameters of the target device.

[0061] In this embodiment of the application, the alarm processing method can be applied to the controller or to a third-party management device for alarm management. This embodiment of the application does not make any specific limitations.

[0062] In this embodiment, the network quality parameters of the target device include link latency, jitter, packet loss rate, bandwidth utilization, and application routing changes. Of course, network quality parameters may also include other parameters that characterize the network quality of the network device, and users can set them according to specific scenarios and / or specific needs. In this embodiment, no specific limitations are made.

[0063] In this embodiment of the application, an initial health score is set for the target device, and a corresponding time window and health score addition and subtraction rules are set for each dimension of network quality parameters.

[0064] For example, an alarm source (network device) health score is introduced, identified by user H, with an initial score of 100. Alarm dimensions are defined as: link latency (dimension 1), jitter (dimension 2), packet loss rate (dimension 3), bandwidth utilization (dimension 4), and application routing changes (dimension 5). Corresponding time windows are set for each dimension's network quality parameters, meaning that the time windows for each dimension's network quality parameters are independent. Corresponding health score addition and subtraction rules are also set for each dimension's network quality parameters.

[0065] Specifically, taking latency (dimension one) as an example, the calculation principles of other dimensions are consistent with the calculation process of latency, and will not be repeated here. Specifically, if it is determined that the target device generates a latency-corresponding alarm event and recovery event within the time window corresponding to latency, then the health score of the target device needs to be deducted in the latency dimension; at the same time, the time window corresponding to latency is reset; if it is determined that no latency-corresponding alarm event has occurred within the current time window, then the health score of the target device needs to be added in the latency dimension.

[0066] Therefore, the steps for calculating the current health score of the target device based on its network quality parameters include:

[0067] For each dimension of network parameter quality, if it is determined that a corresponding alarm event and alarm recovery occurred within the current time window, then the current health score of the target device is deducted based on the deduction rule corresponding to the network quality parameter of that dimension; if it is determined that no corresponding alarm event occurred within the current time window, then the current health score of the target device is added based on the bonus rule corresponding to the network quality parameter of that dimension.

[0068] In this embodiment of the application, when deducting points from the current health score of the target device based on the deduction rules corresponding to the network quality parameters of this dimension, a preferred implementation is as follows:

[0069] Calculate the alarm events and alarm recovery time intervals generated within the current time window for this dimension of network quality parameters; based on the value of the time interval, determine a deduction reference value for the current health score of the target device, wherein the smaller the time interval value, the larger the deduction reference value; multiply the deduction reference value and the weight value set for the network quality parameter of this dimension as the specific deduction value; take the difference between the current health score of the target device and the specific deduction value as the latest current health score, and reset the time window corresponding to the network quality parameter of this dimension.

[0070] In practical applications, if the target device malfunctions, an alarm event corresponding to the malfunction will be generated. If the malfunction is resolved, a recovery event corresponding to the malfunction will be generated. In this embodiment, the time interval Δt between the generation and recovery of the alarm event is defined. The smaller Δt is, the greater the likelihood that the malfunction is caused by network oscillation of the target device, and correspondingly, the larger the deduction reference value. That is, the smaller Δt is, the more points are deducted; conversely, the larger Δt is, the fewer points are deducted. For example: 0 <= Δt < 10ms deducts 3 points (deduction reference value), 10ms <= Δt < 100ms deducts 2 points (deduction reference value), 100ms <= Δt < 2s deducts 1 point, and 2s <= Δt deducts 0.1 points (deduction reference value).

[0071] If the time interval between the target device generating a delay alarm event and recovering from the alarm event is determined to be 5ms, then the determined deduction reference value is 3.

[0072] Furthermore, in this embodiment of the application, different weights dim_W are set for each dimension of network quality parameters to accurately reflect their impact on the overall health. For example, the link latency weight is 0.25, jitter weight is 0.25, packet loss weight is 0.25, bandwidth utilization weight is 0.1, and application routing change weight is 0.15.

[0073] In this way, the product of the determined deduction reference value and the weight value set for the network quality parameter of that dimension can be used as the specific deduction value. For example, if the deduction reference value is 3 and the latency weight is 0.25, then the calculated specific deduction value is: 3 * 0.25 = 0.75 points. If the target device's current health score is H, then the current health score after performing the deduction operation is: H - 0.75.

[0074] In this embodiment of the application, when adding points to the current health score of the target device based on the scoring rules corresponding to the network quality parameters of this dimension, a preferred implementation is as follows:

[0075] Determine a reference value for adding points to the current health score of the target device; multiply the reference value and the weight value set for the network quality parameter of that dimension as the specific bonus value; take the sum of the current health score of the target device and the specific bonus value as the latest current health score, and reset the time window corresponding to the network quality parameter of that dimension.

[0076] In other words, if no latency alarm event occurs within the current time window corresponding to the latency, the target device's health score needs to be increased. Assuming the preset reference value for the increase is P, and the weights of the network quality parameters for each dimension remain the same: link latency weight 0.25, jitter 0.25, packet loss rate 0.25, bandwidth utilization 0.1, and application routing changes 0.15, then the specific increase value is: P * 0.25. If the target device's current health score is H, then the current health score after the increase operation is: H + P * 0.25.

[0077] The deduction reference values ​​for each dimension of network quality parameters can be preset through the controller, and can be set based on specific scenarios and / or user needs. Similarly, the bonus reference values ​​and weight values ​​for each dimension of network quality parameters can also be set based on specific scenarios and / or user needs. In this embodiment, no specific limitations are made. Users can configure these settings through the controller.

[0078] In practical applications, for situations with a large number of alarm sources and a complex health calculation process, the timeliness of health calculation can be improved by initializing a thread pool. The specific implementation is as follows:

[0079] Step 1: Initialize a thread pool. The size of the thread pool should be determined based on the actual situation and system resources.

[0080] Step 2: Encapsulate all health calculation tasks into asynchronous threads. The task can be the health calculation logic for a single alarm source.

[0081] Step 3: When the scheduling thread is triggered, an idle thread is requested from the thread pool to execute the health calculation task. This allows multiple threads in the thread pool to process multiple health calculation tasks in parallel, improving computational efficiency.

[0082] Step 110: Determine whether the current health score is greater than the set threshold.

[0083] In this embodiment of the application, the current health score is used to characterize the current alarm oscillation level of the target device. The larger the current health score, the lower the current alarm oscillation level of the target device; the smaller the current health score, the higher the current alarm oscillation level of the target device.

[0084] In practical applications, users can define a health threshold td (set threshold) according to the actual situation. If the current health score of the target device is lower than the threshold, the alarm of the target device will be suppressed. The threshold can also be set on the controller based on specific scenarios and / or user needs.

[0085] In practical applications, when the oscillation frequency of a target device is high, it will generate a large number of alarm events and corresponding recovery events across various network quality parameters. This will lead to a decrease in the target device's health score. When the target device's health score drops to a preset threshold, the alarm events can be suppressed to reduce the system's processing overhead for alarm events from oscillating devices. In other words, during the oscillation phase of an alarm source, the system will suppress the generation of alarm events from that source to prevent continuous alarms from causing inconvenience to administrators.

[0086] When the health score of the target device is greater than the preset threshold, it means that no alarm has been generated for a long time. At this time, the alarm suppression on the target device is lifted.

[0087] Step 120: If it is determined that the current health score of the target alarm source is not greater than the set threshold, then the alarm event of the target device is suppressed.

[0088] In this embodiment of the application, a preferred method for suppressing alarm events of the target device is as follows:

[0089] Send an instruction to the target device to stop sending the Trap message corresponding to the alarm event.

[0090] At this point, the controller will no longer receive Trap messages sent by the target device. The controller will add points to the target device's current health score based on the scoring rules. When the target device's current health score is greater than the preset threshold, the controller will send an instruction to the target device to continue sending Trap messages corresponding to the alarm events.

[0091] In this embodiment of the application, another preferred method for suppressing alarm events of the target device is as follows:

[0092] Upon receiving a Trap message corresponding to an alarm event sent by the target device, no alarm generation processing is performed on the received Trap message.

[0093] In other words, it only receives Trap messages without consuming system resources to process them or generating corresponding alarms. The controller will add points to the target device's current health score based on a scoring rule. When the target device's current health score is greater than a preset threshold, it will continue to process Trap messages sent by the target device.

[0094] At the same time, an emergency alarm notification is sent to the administrator, informing the administrator that the target device may experience network instability and prompting the administrator to handle the fault of the target device.

[0095] Based on the same inventive concept as the above-described embodiments, see, for example, the following: Figure 2The diagram shown is a structural schematic of an alarm processing device provided in an embodiment of this application. The device includes:

[0096] The calculation unit 20 is used to calculate the current health score of the target device based on the network quality parameters of the target device;

[0097] The judgment unit 21 is used to judge whether the current health score is greater than a set threshold, wherein the current health score is used to characterize the current alarm oscillation degree of the target device. The larger the current health score, the lower the current alarm oscillation degree of the target device; the smaller the current health score, the higher the current alarm oscillation degree of the target device.

[0098] If the judgment unit 21 determines that the current health score of the target alarm source is not greater than a set threshold, the suppression unit 22 is used to suppress the alarm event of the target device.

[0099] Optionally, the network quality parameters of the target device include link latency, jitter, packet loss rate, bandwidth utilization, and application routing changes.

[0100] Optionally, an initial health score is set for the target device, and a corresponding time window and health score addition / subtraction rules are set for each dimension of network quality parameters;

[0101] When calculating the current health score of the target device based on its network quality parameters, the calculation unit 20 is specifically used for:

[0102] For each dimension of network parameter quality, if it is determined that a corresponding alarm event and alarm recovery occurred within the current time window, then the current health score of the target device is deducted based on the deduction rule corresponding to the network quality parameter of that dimension; if it is determined that no corresponding alarm event occurred within the current time window, then the current health score of the target device is added based on the bonus rule corresponding to the network quality parameter of that dimension.

[0103] Optionally, when deducting points from the current health score of the target device based on the deduction rules corresponding to the network quality parameters of this dimension, the calculation unit 20 is specifically used for:

[0104] Calculate the alarm events and alarm recovery time intervals generated within the current time window for this dimension of network quality parameters;

[0105] Based on the value of the time interval, a deduction reference value is determined to reduce the current health score of the target device, wherein the smaller the value of the time interval, the larger the deduction reference value;

[0106] The specific deduction value is the product of the deduction reference value and the weight value set for the network quality parameter of that dimension.

[0107] The difference between the current health score of the target device and the specific deduction value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

[0108] Optionally, when adding points to the current health score of the target device based on the scoring rules corresponding to the network quality parameters of this dimension, the calculation unit 20 is specifically used for:

[0109] Determine a reference value for adding points to the current health score of the target device;

[0110] The specific bonus value is the product of the bonus reference value and the weight value set for the network quality parameter of that dimension.

[0111] The sum of the current health score of the target device and the specific bonus value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

[0112] Optionally, when suppressing alarm events of the target device, the suppression unit 22 is specifically used for:

[0113] Send an instruction to the target device to stop sending the Trap message corresponding to the alarm event; or,

[0114] Upon receiving a Trap message corresponding to an alarm event sent by the target device, no alarm generation processing is performed on the received Trap message.

[0115] These units can be one or more integrated circuits configured to implement the above methods, such as one or more Application Specific Integrated Circuits (ASICs), one or more digital signal processors (DSPs), or one or more Field Programmable Gate Arrays (FPGAs). Alternatively, when one of these units is implemented using processing element scheduler code, the processing element can be a general-purpose processor, such as a Central Processing Unit (CPU) or other processor capable of calling program code. Furthermore, these units can be integrated together to form a system-on-a-chip (SOC).

[0116] Furthermore, regarding the alarm processing device provided in this application embodiment, from a hardware perspective, the hardware architecture diagram of the alarm processing device can be found in [reference needed]. Figure 3 As shown, the alarm processing device may include: a memory 30 and a processor 31.

[0117] The memory 30 is used to store program instructions; the processor 31 calls the program instructions stored in the memory 30 and executes the above method embodiment according to the obtained program instructions. The specific implementation method and technical effect are similar, and will not be described again here.

[0118] Optionally, this application also provides an alarm processing device, including at least one processing element (or chip) for performing the above method embodiments.

[0119] Optionally, this application also provides a program product, such as a computer-readable storage medium storing computer-executable instructions for causing the computer to perform the above-described method embodiments.

[0120] Here, a machine-readable storage medium can be any electronic, magnetic, optical, or other physical storage device that can contain or store information, such as executable instructions, data, etc. For example, a machine-readable storage medium can be: RAM (Random Access Memory), volatile memory, non-volatile memory, flash memory, storage drives (such as hard disk drives), solid-state drives, any type of storage disk (such as optical discs, DVDs, etc.), or similar storage media, or combinations thereof.

[0121] The systems, devices, modules, or units described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer, which can take the form of a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email sending and receiving device, game console, tablet computer, wearable device, or any combination of these devices.

[0122] For ease of description, the above devices are described separately by function as various units. Of course, in implementing this application, the functions of each unit can be implemented in one or more software and / or hardware.

[0123] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments of this application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0124] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0125] Furthermore, these computer program instructions can also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in the process. Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0126] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0127] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. An alarm processing method, characterized in that, The method includes: Calculate the current health score of the target device based on its network quality parameters; Determine whether the current health score is greater than a set threshold, wherein the current health score is used to characterize the current alarm oscillation level of the target device. The larger the current health score, the lower the current alarm oscillation level of the target device; the smaller the current health score, the higher the current alarm oscillation level of the target device. If the current health score of the target device is determined to be no greater than a set threshold, then the alarm event of the target device is suppressed; An initial health score is set for the target device, and corresponding time windows and health score addition and subtraction rules are set for each dimension of network quality parameters; The steps for calculating the current health score of the target device based on its network quality parameters include: For each dimension of network parameter quality, if it is determined that a corresponding alarm event and alarm recovery occurred within the current time window for that dimension's network quality parameter, then the current health score of the target device is deducted based on the deduction rule corresponding to that dimension's network quality parameter; if it is determined that no corresponding alarm event occurred within the current time window for that dimension's network quality parameter, then the current health score of the target device is added based on the addition rule corresponding to that dimension's network quality parameter. The steps for deducting points from the current health score of the target device based on the deduction rules corresponding to the network quality parameters of this dimension include: Calculate the alarm events and alarm recovery time intervals generated within the current time window for this dimension of network quality parameters; Based on the value of the time interval, a deduction reference value is determined to reduce the current health score of the target device, wherein the smaller the value of the time interval, the larger the deduction reference value; The specific deduction value is the product of the deduction reference value and the weight value set for the network quality parameter of that dimension. The difference between the current health score of the target device and the specific deduction value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

2. The method as described in claim 1, characterized in that, The network quality parameters of the target device include link latency, jitter, packet loss rate, bandwidth utilization, and application routing changes.

3. The method as described in claim 1, characterized in that, The steps for adding points to the current health score of the target device based on the scoring rules corresponding to the network quality parameters of this dimension include: Determine a reference value for adding points to the current health score of the target device; The specific bonus value is the product of the bonus reference value and the weight value set for the network quality parameter of that dimension. The sum of the current health score of the target device and the specific bonus value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

4. The method as described in claim 1, characterized in that, The steps to suppress alarm events of the target device include: Send an instruction to the target device to stop sending the Trap message corresponding to the alarm event; or, Upon receiving a Trap message corresponding to an alarm event sent by the target device, no alarm generation processing is performed on the received Trap message.

5. An alarm processing device, characterized in that, The device includes: The calculation unit is used to calculate the current health score of the target device based on the network quality parameters of the target device; The judgment unit is used to determine whether the current health score is greater than a set threshold, wherein the current health score is used to characterize the current alarm oscillation level of the target device. The larger the current health score, the lower the current alarm oscillation level of the target device; the smaller the current health score, the higher the current alarm oscillation level of the target device. The suppression unit is used to suppress alarm events of the target device if the judgment unit determines that the current health score of the target device is not greater than a set threshold. An initial health score is set for the target device, and corresponding time windows and health score addition and subtraction rules are set for each dimension of network quality parameters; When calculating the current health score of the target device based on its network quality parameters, the calculation unit is specifically used for: For each dimension of network parameter quality, if it is determined that a corresponding alarm event and alarm recovery occurred within the current time window for that dimension's network quality parameter, then the current health score of the target device is deducted based on the deduction rule corresponding to that dimension's network quality parameter; if it is determined that no corresponding alarm event occurred within the current time window for that dimension's network quality parameter, then the current health score of the target device is added based on the addition rule corresponding to that dimension's network quality parameter. When deducting points from the current health score of the target device based on the deduction rules corresponding to the network quality parameters of this dimension, the calculation unit is specifically used for: Calculate the alarm events and alarm recovery time intervals generated within the current time window for this dimension of network quality parameters; Based on the value of the time interval, a deduction reference value is determined to reduce the current health score of the target device, wherein the smaller the value of the time interval, the larger the deduction reference value; The specific deduction value is the product of the deduction reference value and the weight value set for the network quality parameter of that dimension. The difference between the current health score of the target device and the specific deduction value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

6. The apparatus as claimed in claim 5, characterized in that, The network quality parameters of the target device include link latency, jitter, packet loss rate, bandwidth utilization, and application routing changes.

7. The apparatus as claimed in claim 5, characterized in that, When adding points to the current health score of the target device based on the scoring rules corresponding to the network quality parameters of this dimension, the calculation unit is specifically used for: Determine a reference value for adding points to the current health score of the target device; The specific bonus value is the product of the bonus reference value and the weight value set for the network quality parameter of that dimension. The sum of the current health score of the target device and the specific bonus value is taken as the latest current health score, and the time window corresponding to the network quality parameter of this dimension is reset.

8. The apparatus as claimed in claim 5, characterized in that, When suppressing alarm events of the target device, the suppression unit is specifically used for: Send an instruction to the target device to stop sending the Trap message corresponding to the alarm event; or, Upon receiving a Trap message corresponding to an alarm event sent by the target device, no alarm generation processing is performed on the received Trap message.

9. An alarm processing device, characterized in that, The alarm processing device includes: Memory, used to store program instructions; A processor is configured to invoke program instructions stored in the memory and execute the steps of the method as described in any one of claims 1-4 according to the obtained program instructions.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions for causing the computer to perform the steps of the method as described in any one of claims 1-4.

Citation Information

Patent Citations

  • Host network health condition assessment method and device, equipment and storage medium

    CN114095345A

  • Alarm suppression method and device based on distributed architecture, equipment and storage medium

    CN116582413A