Signaling storm alarm method and device, equipment and storage medium

Abstract

The invention discloses a signaling storm alarm method, device and equipment and a storage medium, and the method comprises the steps: obtaining a plurality of pieces of sampling data of a preset performance index of a target network element in a current sampling period, and determining a current statistical value of the preset performance index in the current sampling period based on the plurality of pieces of sampling data; acquiring a plurality of pieces of historical sampling data of the preset performance index corresponding to the same sampling date attribute in the historical sampling period, and determining a historical statistical value of the preset performance index in the historical sampling period based on the plurality of pieces of historical sampling data; on the basis of the current statistical value, the historical statistical value and a plurality of different preset alarm thresholds, determining the initial level of the signaling storm alarm information under the condition of determining to generate the signaling storm alarm information of the target network element; and based on a preset alarm level conversion condition, grading the initial level of the signaling storm alarm information, and executing a corresponding storm alarm decision according to the grading level. Thus, the reliability of the network can be improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a signaling storm alarm method, device, equipment and storage medium. Background Art

[0002] With the continuous development of communication technology, Voice over Long-Term Evolution (VoLTE), as a voice communication technology based on Internet Protocol (IP), provides users with high-quality voice communication experience. However, due to network complexity, user growth and unpredictable environmental factors, the signaling storm problem in VoLTE networks has gradually attracted the attention of operators. Among them, signaling storm refers to the situation where the signaling requests received by the terminal device by the network device exceed the processing capacity of the various signaling resources of the network device, resulting in problems with network services. Signaling storms may cause problems such as network performance degradation, deterioration of communication quality, and increased registration failure rate, thereby affecting user experience and the service quality of operators.

[0003] At present, the relevant technology mainly sets a central processor (CPU) in the wireless or related equipment, and controls the flow by determining the CPU occupancy threshold / the number of signaling per unit time, so as to block the signaling storm. However, this method can only play a certain protective role against signaling overload, but the warning effect of signaling storm is poor, which leads to poor blocking effect of signaling storm, and further affects the reliability of the network.

[0004] Therefore, how to improve the reliability of the network has become an urgent problem to be solved. Summary of the invention

[0005] The embodiments of the present application provide a signaling storm alarm method, apparatus, device and storage medium, which can improve the reliability of the network.

[0006] In a first aspect, the present application provides a signaling storm alarm method, the method comprising:

[0007] Acquire multiple sampling data of the preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute;

[0008] Acquire multiple historical sampling data corresponding to the preset performance indicator in the historical sampling period and having the same sampling date attribute, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data;

[0009] Determining a preliminary level of the signaling storm alarm information when generating signaling storm alarm information of a target network element based on current statistical values, historical statistical values, and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to the plurality of preset alarm levels;

[0010] Based on the preset alarm level conversion conditions, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

[0011] In one of the embodiments, the method also includes: determining a deviation value between a current statistical value and a historical statistical value, and obtaining an indicator fluctuation range corresponding to a preset performance indicator based on the deviation value; when the absolute value of the indicator fluctuation range corresponding to any preset performance indicator among multiple preset performance indicators is greater than a first preset threshold, determining to generate signaling storm alarm information for the target network element.

[0012] In one embodiment, the historical sampling period includes multiple historical sampling periods with different period spans; based on the multiple historical sampling data, the historical statistical value of the preset performance indicator in the historical sampling period is determined, including: based on the historical sampling data of each historical sampling period, the historical statistical value of the preset performance indicator in the corresponding historical sampling period is determined respectively, and multiple historical statistical values ​​corresponding to multiple different historical sampling periods are obtained; the deviation value between the current statistical value and the historical statistical value is determined, and the indicator fluctuation range corresponding to the preset performance indicator is obtained based on the deviation value, including: determining the deviation value between the current statistical value and each historical statistical value, and obtaining multiple deviation values; selecting the deviation value with the largest absolute value from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

[0013] In one of the embodiments, determining the preliminary level of the signaling storm alarm information includes: when the indicator fluctuation range is greater than a first preset threshold and less than a second preset threshold, determining the preliminary level of the signaling storm alarm information as a warning-level storm alarm; when the indicator fluctuation range is greater than or equal to the second preset threshold and less than the third preset threshold, determining the preliminary level of the signaling storm alarm information as a level three storm alarm; when the indicator fluctuation range is greater than or equal to the third preset threshold and less than the fourth preset threshold, determining the preliminary level of the signaling storm alarm information as a level two storm alarm; when the indicator fluctuation range is greater than or equal to the fourth preset threshold, determining the preliminary level of the signaling storm alarm information as a level one storm alarm; wherein, the levels of the warning-level storm alarm, level three storm alarm, level two storm alarm, and level one storm alarm increase in sequence.

[0014] In one of the embodiments, a corresponding storm alarm decision is executed according to the classification level, including: comparing the classification level with the highest level of signaling storm alarm information for which alarm notifications have been generated for the target network element within m consecutive sampling times; m is an integer greater than 2; if the classification level is greater than the highest level of the generated alarm notification, an alarm notification is generated for the signaling storm alarm information generated in the current sampling period according to the classification level, and the highest level of the generated alarm notification is updated to the classification level; if the classification level is not greater than the highest level of the generated alarm notification, no alarm notification is generated for the signaling storm alarm information generated in the current sampling period.

[0015] In one of the embodiments, the method also includes: based on a preset alarm level conversion condition, classifying the preliminary level of the signaling storm alarm information, including: if the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the highest level among multiple preset alarm levels, obtaining the proportion of the number of alarms corresponding to the preliminary level in the m sampling times for the target network element in the total number of alarms corresponding to the target network element; m is an integer greater than 2; if the proportion is greater than the preset ratio, it is determined that the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and the preliminary level of the signaling storm alarm information is upgraded by one level as the classification level of the signaling storm alarm information; otherwise, it is determined that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and the preliminary level is used as the classification level of the signaling storm alarm information.

[0016] In one of the embodiments, the method also includes: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, determining whether to perform alarm recovery for historical signaling storm alarm information of each level that has been generated for the target network element; when it is determined that any level of historical signaling storm alarm information requires alarm recovery, deleting the corresponding historical signaling storm alarm information, and generating an alarm recovery notification of the corresponding level for the target network element.

[0017] In one of the embodiments, when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, it is determined whether to perform alarm recovery for the historical signaling storm alarm information of various levels that has been generated for the target network element, including: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, based on the network element identifier of the target network element, querying the historical alarm record information; if the query result is that there is a historical alarm record corresponding to the target network element, detecting the alarm recovery cycle count value count corresponding to the historical alarm record; if count is greater than 0, subtracting count by 1; if count is 0, determining that the signaling storm alarm information corresponding to the historical alarm record needs to perform alarm recovery.

[0018] In one of the embodiments, multiple sampling data of preset performance indicators of the target network element in the current sampling period are obtained, including: based on preset multiple categories of sampling date attributes, multiple sampling data of the preset performance indicators of the target network element in the current sampling period are obtained, and the corresponding sampling date attributes are respectively marked for each sampling data to obtain multiple sampling data corresponding to the multiple categories of sampling date attributes; the method also includes: sorting the multiple sampling data in the current sampling period from high to low according to the priority of the multiple categories of sampling date attributes to obtain multiple sorted sampling data; for the sorted multiple sampling data, the steps after obtaining the multiple sampling data of the preset performance indicators of the target network element in the current sampling period are sequentially executed to preferentially determine the storm alarm decision corresponding to the sampling data with the highest sampling date attribute priority.

[0019] In a second aspect, the present application provides a signaling storm alarm device, the device comprising:

[0020] An acquisition and determination module, used to acquire a plurality of sampled data of a preset performance indicator of a target network element in a current sampling period, and determine a current statistical value of the preset performance indicator in the current sampling period based on the plurality of sampled data; wherein each sampled data corresponds to a sampling date attribute;

[0021] The acquisition and determination module is further used to acquire a plurality of historical sampling data corresponding to the preset performance indicator and having the same sampling date attribute in the historical sampling period, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the plurality of historical sampling data;

[0022] A determination module, configured to determine a preliminary level of the signaling storm alarm information when generating the signaling storm alarm information of the target network element based on the current statistical value, the historical statistical value and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to the plurality of preset alarm levels;

[0023] The processing module is used to classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion conditions, and execute the corresponding storm alarm decision according to the classified level.

[0024] In a third aspect, the present application provides a network device, including a processor and a memory, wherein the memory stores a computer program; the processor executes the computer program to perform the following steps:

[0025] Acquire multiple sampling data of the preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute;

[0026] Acquire multiple historical sampling data corresponding to the preset performance indicator in the historical sampling period and having the same sampling date attribute, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data;

[0027] Determining a preliminary level of the signaling storm alarm information when generating signaling storm alarm information of a target network element based on current statistical values, historical statistical values, and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to the plurality of preset alarm levels;

[0028] Based on the preset alarm level conversion conditions, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

[0029] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, which implements the steps in the method designed in the above-mentioned first aspect when the computer program is executed by a processor.

[0030] In a fifth aspect, the present application also provides a chip, which includes a programmable logic circuit and / or program instructions, and when the chip is running, it can execute the steps in the method designed in the first aspect above.

[0031] In a sixth aspect, the present application further provides a computer program product, comprising a computer program, which, when executed by a processor, implements the steps in the method designed in the above-mentioned first aspect.

[0032] According to the above-mentioned signaling storm alarm method, device, equipment and storage medium, the network equipment can obtain multiple sampling data of the preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute; obtain multiple historical sampling data corresponding to the preset performance indicator with the same sampling date attribute in the historical sampling period, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data; determine the preliminary level of the signaling storm alarm information when the signaling storm alarm information of the target network element is generated based on the current statistical value, the historical statistical value and multiple different preset alarm thresholds; multiple different preset alarm thresholds correspond to multiple preset alarm levels; based on the preset alarm level conversion condition, the preliminary level of the signaling storm alarm information is graded, and the corresponding storm alarm decision is executed according to the graded level. By adopting this method, the network equipment can compare the current statistical values ​​in the current sampling period and the historical statistical values ​​in the historical sampling period according to the sampling date attributes, and combine multiple different preset alarm thresholds. When it is determined that the signaling storm alarm information is generated, the preliminary level of the signaling storm alarm information is determined. After that, based on the preset alarm level conversion conditions, the preliminary level of the signaling storm alarm information is graded, and the corresponding storm alarm decision is executed according to the graded level. In this way, the signaling storm event of the target gateway can be perceived in time, and the rationality of the alarm decision is improved, so that the user can take timely action according to the decision result to prevent the occurrence of network disasters, thereby improving the reliability of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0034] Figure 1 It is a structural diagram of a communication system provided in an embodiment of the present application;

[0035] Figure 2 It is a flow chart of a signaling storm alarm method provided in an embodiment of the present application;

[0036] Figure 3 It is a flowchart of another signaling storm alarm method provided by an embodiment of the present application;

[0037] Figure 4 It is a flowchart of an alarm level conversion method provided in an embodiment of the present application;

[0038] Figure 5 It is a flowchart of a method for processing storm warning information provided by an embodiment of the present application;

[0039] Figure 6 It is a flowchart of a signaling storm decision-making process provided by an embodiment of the present application;

[0040] Figure 7 It is a structural diagram of a signaling storm alarm device provided in an embodiment of the present application;

[0041] Figure 8 It is a structural diagram of a network device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0043] See also Figure 1 , Figure 1 Schematic diagram of a communication system provided by an embodiment of the present application. Figure 1 As shown, the communication system includes a network device 101 and a terminal device 102. The network device 101 and the terminal device 102 communicate with each other through a network.

[0044] Optionally, the network device 101 may be a radio resource controller, for example, a base station (Base Transceiver Station, BTS) in Global System of Mobile communication (GSM) or Code Division Multiple Access (CDMA), or a base station (NodeB, NB) in Wideband Code Division Multiple Access (WCDMA), or an evolutionary base station (Evolutional Node B, eNB or eNodeB for short) in Long Term Evolution (LTE), or a relay station or access point, or a base station in a second generation mobile communication technology (2G) network, or a base station in a third generation mobile communication technology (3G) network, or a base station in a fourth generation mobile communication technology (4G) network, or a base station in a fifth generation mobile communication technology (5G) network, etc., which are not limited here.

[0045] Optionally, the terminal device 102 may be a wireless terminal, which may be a device that provides voice and / or other business data connectivity to a user, or a handheld device with a wireless connection function, or other processing devices connected to a wireless modem. A wireless terminal may communicate with one or more core networks via a radio access network (RAN). A wireless terminal may be a mobile terminal, such as a mobile phone (or a "cellular" phone) and a computer with a mobile terminal, for example, a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges language and / or data with a radio access network. A wireless terminal may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, an access terminal, a user terminal, a user agent, a user device or user equipment, which is not limited here.

[0046] The signaling storm alarm method provided in the embodiment of the present application is described in detail below.

[0047] See also Figure 2 , Figure 2 is a flow chart of a signaling storm alarm method provided by an embodiment of the present application. The method can be performed by a network device (e.g. Figure 1 The network device 101 in the embodiment is executed. Figure 2 As shown, the method may include but is not limited to the following steps:

[0048] S201. Acquire a plurality of sampling data of a preset performance indicator of a target network element in a current sampling period, and determine a current statistical value of the preset performance indicator in the current sampling period based on the plurality of sampling data.

[0049] Each sampling data corresponds to a sampling date attribute. Optionally, the sampling date attribute may include the following: statutory holidays, ordinary working days, rest days, special event days (such as the date of the signaling storm event, the date of the geological disaster, etc.), etc.

[0050] Optionally, the preset performance indicators may include but are not limited to the number of initial registration attempts, the number of initial registration successes, the number of calling session attempts, the number of calling session successes, and other indicators that may reflect the signaling situation corresponding to the target network element.

[0051] Optionally, the statistical value may include characteristic values ​​such as initial registration success rate and / or calling session success rate that can reflect the overall situation of the signaling information of the target network element.

[0052] S202: Acquire a plurality of historical sampling data corresponding to the preset performance indicator in the historical sampling period and having the same sampling date attribute, and determine a historical statistical value of the preset performance indicator in the historical sampling period based on the plurality of historical sampling data.

[0053] In an optional implementation, the historical sampling period includes multiple historical sampling periods with different period spans; the network device determines the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data, which may include: based on the historical sampling data of each historical sampling period, respectively determining the historical statistical value of the preset performance indicator in the corresponding historical sampling period, and obtaining multiple historical statistical values ​​corresponding to multiple different historical sampling periods. It can be understood that through this step, it is convenient to compare the sampling value of the preset performance indicator in the current sampling period with the sampling values ​​in multiple historical sampling periods with different time spans.

[0054] In the process of comparing the sampling values ​​of the preset performance indicators in the current sampling period with the historical sampling values, in order to solve the problem that the trend indicator calculation results may not reflect the changes in the storm scenario due to data convergence in multiple sampling periods, a sliding window solution can be used to determine multiple historical sampling periods with different period spans during the indicator calculation process, so as to achieve the effect of normal display of the indicator trend. For example, the historical sampling period may include: the first n sampling periods of the current period, the first n sampling periods of the last w periods, and the first n sampling periods of the last 2*w periods. Among them, w represents the moving step window.

[0055] S203: Determine a preliminary level of the signaling storm alarm information when generating signaling storm alarm information of the target network element based on the current statistical value, the historical statistical value and a plurality of different preset alarm thresholds.

[0056] The multiple different preset alarm thresholds correspond to the multiple preset alarm levels. In one example, the multiple preset alarm levels include four levels, for example: prompt level storm alarm, level 3 storm alarm, level 2 storm alarm, level 1 storm alarm, and the levels increase in sequence.

[0057] In an optional implementation, the network device may also determine the deviation value between the current statistical value and the historical statistical value, and obtain the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value; when the absolute value of the indicator fluctuation range corresponding to any preset performance indicator among multiple preset performance indicators is greater than the first preset threshold, determine to generate signaling storm alarm information for the target network element.

[0058] In this implementation, the historical statistical value may include multiple historical statistical values ​​corresponding to historical sampling periods with multiple different period spans; the network device determines the deviation value between the current statistical value and the historical statistical value, and obtains the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value, which may include: determining the deviation value between the current statistical value and each historical statistical value to obtain multiple deviation values; selecting the deviation value with the largest absolute value from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

[0059] S204: Based on the preset alarm level conversion condition, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

[0060] In an embodiment of the present application, the network device can obtain multiple sampling data of the preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute; obtain multiple historical sampling data corresponding to the same sampling date attribute of the preset performance indicator in the historical sampling period, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data; determine the preliminary level of the signaling storm alarm information when determining to generate the signaling storm alarm information of the target network element based on the current statistical value, the historical statistical value and multiple different preset alarm thresholds; classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion condition, and execute the corresponding storm alarm decision according to the classified level. By adopting this method, the network equipment can compare the current statistical values ​​in the current sampling period and the historical statistical values ​​in the historical sampling period according to the sampling date attributes, and combine multiple different preset alarm thresholds. When it is determined that the signaling storm alarm information is generated, the preliminary level of the signaling storm alarm information is determined. After that, based on the preset alarm level conversion conditions, the preliminary level of the signaling storm alarm information is graded, and the corresponding storm alarm decision is executed according to the graded level. In this way, the signaling storm event of the target gateway can be perceived in time, and the rationality of the alarm decision is improved, so that the user can take timely action according to the decision result to prevent the occurrence of network disasters, thereby improving the reliability of the network.

[0061] See also Figure 3 , Figure 3 FIG. 1 is a flow chart of another signaling storm alarm method provided by an embodiment of the present application. Figure 2 The difference between the signaling storm alarm method shown is that Figure 3 The method shown in FIG. 1 specifically describes how the network device determines the preliminary level of the signaling storm alarm information. Figure 3As shown, the signaling storm alarm method may include but is not limited to the following steps:

[0062] S301. Acquire a plurality of sampling data of a preset performance indicator of a target network element in a current sampling period, and determine a current statistical value of the preset performance indicator in the current sampling period based on the plurality of sampling data.

[0063] In an optional implementation, the relevant description of step S301 can refer to the description of the aforementioned step S201, which will not be repeated here.

[0064] Optionally, the current statistic value can be recorded as curr_rate.

[0065] S302: Acquire a plurality of historical sampling data having the same sampling date attribute corresponding to a preset performance indicator in a plurality of historical sampling periods with different period spans.

[0066] S303: Based on the historical sampling data of each historical sampling period, respectively determine the historical statistical values ​​of the preset performance indicators in the corresponding historical sampling period, and obtain multiple historical statistical values ​​corresponding to multiple different historical sampling periods.

[0067] For example, the historical sampling periods with different period spans may be the same hour within random consecutive or discontinuous n days in the historical period, the previous n periods of the current period, the previous n periods of the previous w periods, the previous n periods of the previous 2*w periods, the same day and hour of the previous week at the current moment, and the same day and hour of the previous month at the current moment, where w represents the moving step window.

[0068] In this case, the network device determines the historical statistical values ​​of the preset performance indicators in the corresponding historical sampling period based on the historical sampling data of each historical sampling period, which may include: determining a first historical statistical value (referred to as history_rate) based on multiple historical sampling data with the same sampling date attribute as multiple sampling data in the current sampling period in the same hour within random continuous or discontinuous n days in the historical period; determining a second historical statistical value (referred to as last_n_avg) based on multiple historical sampling data with the same sampling date attribute as multiple sampling data in the current sampling period in the first n periods of the current sampling period; determining a second historical statistical value (referred to as last_n_avg) based on multiple historical sampling data with the same sampling date attribute as multiple sampling data in the current sampling period in the first n periods of the last w periods. Based on the data, the third historical statistical value (recorded as plast_n_avg) is determined; based on the multiple historical sampling data with the same sampling date attribute as the multiple sampling data in the current sampling period in the first n periods of the previous 2*w periods, the fourth historical statistical value (recorded as pplast_n_avg) is determined; based on the multiple historical sampling data with the same sampling date attribute as the multiple sampling data in the current sampling period on the same day and hour of the previous week at the current moment, the fifth historical statistical value (recorded as last_week_avg) is determined; based on the multiple historical sampling data with the same sampling date attribute as the multiple sampling data in the current sampling period on the same day and hour of the previous month at the current moment, the sixth historical statistical value (recorded as last_month_avg) is determined.

[0069] S304: Determine a deviation value between the current statistical value and each historical statistical value to obtain multiple deviation values.

[0070] Continuing with the above example, the historical statistical values ​​include the first historical statistical value, the second historical statistical value, the third historical statistical value, the fourth historical statistical value, the fifth historical statistical value, and the sixth historical statistical value in the above example.

[0071] In this case, the network device determines the deviation value between the current statistical value and each historical statistical value to obtain multiple deviation values, which may include: determining the deviation value between the current statistical value and the first historical statistical value as a first deviation value (recorded as history_diff); determining the deviation value between the current statistical value and the second historical statistical value as a second deviation value (recorded as last_diff_cycle); determining the deviation value between the current statistical value and the third historical statistical value as a third deviation value (recorded as lastn_diff_cycle); determining the deviation value between the current statistical value and the fourth historical statistical value as a fourth deviation value (recorded as last2n_diff_cycle); determining the deviation value between the current statistical value and the fifth historical statistical value as a fifth deviation value (recorded as lweek_mo_diff); and determining the deviation value between the current statistical value and the sixth historical statistical value as a sixth deviation value (recorded as lmonth_mo_diff).

[0072] S305. Select a deviation value with the largest absolute value from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

[0073] Continuing with the above example, the multiple deviation values ​​include a first deviation value, a second deviation value, a third deviation value, a fourth deviation value, a fifth deviation value, and a sixth deviation value. Assuming that the absolute value of the first deviation value is the largest, the network device can select the first deviation value as the indicator fluctuation range (recorded as final_diff) corresponding to the preset performance indicator.

[0074] S306: When the absolute value of the indicator fluctuation amplitude is greater than a first preset threshold, determine to generate signaling storm alarm information of the target network element.

[0075] Exemplarily, assuming that the first preset threshold may be 5%, and the absolute value of the indicator fluctuation range is 5.7%, the network device may determine to generate signaling storm alarm information of the target network element.

[0076] S307: Determine a preliminary level of the signaling storm alarm information based on the indicator fluctuation range and a plurality of different preset alarm thresholds.

[0077] Among them, multiple different preset alarm thresholds correspond to multiple preset alarm levels.

[0078] In an optional implementation, the network device determines the preliminary level of the signaling storm alarm information based on the indicator fluctuation range and multiple preset alarm thresholds, which may include: when the indicator fluctuation range is greater than the first preset threshold and less than the second preset threshold, determining the preliminary level of the signaling storm alarm information as a prompt-level storm alarm; when the indicator fluctuation range is greater than or equal to the second preset threshold and less than the third preset threshold, determining the preliminary level of the signaling storm alarm information as a level three storm alarm; when the indicator fluctuation range is greater than or equal to the third preset threshold and less than the fourth preset threshold, determining the preliminary level of the signaling storm alarm information as a level two storm alarm; when the indicator fluctuation range is greater than or equal to the fourth preset threshold, determining the preliminary level of the signaling storm alarm information as a level one storm alarm; wherein, the levels of the prompt-level storm alarm, level three storm alarm, level two storm alarm, and level one storm alarm increase in sequence.

[0079] Exemplarily, it is assumed that the first preset threshold value may be 5%, the second preset threshold value may be 10%, the third preset threshold value may be 25%, and the fourth preset threshold value may be 50%. If the index fluctuation range is 8%, the network device may determine that the index fluctuation range 8% is greater than the first preset threshold value 5% and less than the second preset threshold value 10%. In this case, the network device may determine that the preliminary level of the signaling storm alarm information is a prompt storm alarm. If the index fluctuation range is 12%, the network device may determine that the index fluctuation range 12% is greater than the second preset threshold value 10% and less than the third preset threshold value 25%. In this case, the network device may determine that the preliminary level of the signaling storm alarm information is a level 3 storm alarm. If the index fluctuation range is 25.3%, the network device may determine that the index fluctuation range 25.3% is greater than the third preset threshold value 25% and less than the fourth preset threshold value 50%. In this case, the network device may determine that the preliminary level of the signaling storm alarm information is a level 2 storm alarm. If the indicator fluctuation range is 50.1%, the network device can determine that the indicator fluctuation range 50.1% is greater than the fourth preset threshold 50%. In this case, the network device can determine that the preliminary level of the signaling storm alarm information is a level 1 storm alarm.

[0080] S308: Based on the preset alarm level conversion condition, the preliminary level of the signaling storm alarm information is graded, and the corresponding storm alarm decision is executed according to the graded level.

[0081] In an embodiment of the present application, the network device can perform a year-on-year comparison based on the current statistical values ​​in the current sampling period and the historical statistical values ​​in the historical sampling period according to the sampling date attributes, and combine multiple different preset alarm thresholds to determine the initial level of the signaling storm alarm information when determining to generate the signaling storm alarm information. Thereafter, based on the preset alarm level conversion conditions, the initial level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level. In this way, timely perception and reasonable decision-making of the signaling storm events of the target gateway can be achieved, so that users can make timely processing according to the decision results to prevent the occurrence of network disasters, thereby improving the reliability of the network.

[0082] In an optional implementation, in step S201 and step S301, the network device obtains multiple sampling data of the preset performance indicators of the target network element in the current sampling period, which may include: based on the preset multiple types of sampling date attributes, obtaining multiple sampling data of the preset performance indicators of the target network element in the current sampling period, and marking the corresponding sampling date attributes for each sampling data, to obtain multiple sampling data corresponding to the multiple types of sampling date attributes. In this implementation, the network device can also sort the multiple sampling data in the current sampling period from high to low according to the priority of the multiple types of sampling date attributes, to obtain multiple sorted sampling data; for the sorted multiple sampling data, sequentially execute the steps after obtaining the multiple sampling data of the preset performance indicators of the target network element in the current sampling period, so as to preferentially determine the storm alarm decision corresponding to the sampling data with the highest priority of the sampling date attribute.

[0083] By adopting this implementation mode, the network device can preferentially determine the storm warning decision corresponding to the sampling data with the highest priority of the sampling date attribute. For example, the sampling date attributes of the sampling data include statutory holidays, ordinary working days, rest days, special event days (such as the date of the signaling storm event, the date of the geological disaster, etc.), etc. In this case, the storm warning analysis and storm warning decision processing of the above embodiment are preferentially performed on the sampling data with special date attributes, so that when the sampling data with special date attributes has the risk of signaling storm, the warning can be given priority.

[0084] In an optional implementation, in step S204 and step S308, the network device classifies the preliminary level of the signaling storm alarm information based on a preset alarm level conversion condition, which may include: if the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the highest level among multiple preset alarm levels, obtaining the proportion of the number of alarms corresponding to the preliminary level in the m sampling times for the target network element in the total number of alarms corresponding to the target network element; m is an integer greater than 2; if the proportion is greater than the preset ratio, it is determined that the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and the preliminary level of the signaling storm alarm information is upgraded by one level as the classification level of the signaling storm alarm information; otherwise, it is determined that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and the preliminary level is used as the classification level of the signaling storm alarm information.

[0085] Combine the following Figure 4 , the above implementation methods are elaborated in detail. Figure 4 FIG. 1 is a flow chart of a method for converting an alarm level provided in an embodiment of the present application. Figure 4 As shown, the method may include but is not limited to the following steps:

[0086] S401. Determine whether a storage entry corresponding to a target network element already exists in the memory. If so, execute step S402; if not, execute step S409.

[0087] The storage entry corresponding to the target network element refers to the data information with the identifier net_id of the target network element as the key value, the sum of the number of alarms generated by the target network element within m sampling times, the sampling times stamp_count, the number of alarms of the first alarm level first_level, the number of alarms of the second alarm level sec_level, the number of alarms of the third alarm level th_level, the number of alarms of the fourth alarm level fh_level, and the number of alarms of the fifth alarm level five_level as the storage content. Optionally, m is a preset value.

[0088] S402: Determine whether the sampling number stamp_count for the target network element reaches the sampling number m. If so, execute step S403; if not, execute steps S409 and S410.

[0089] S403: Determine the total number of alarms generated for the target network element within m sampling times.

[0090] Optionally, the network device may calculate the total number of alarms generated for the target network element within m sampling times by the following formula: sum.

[0091] sum = first_level+sec_level+th_level+fh_level+five_level

[0092] In the above formula, first_level indicates the number of alarms of the first alarm level that have been generated by the target network element within m sampling times; sec_level indicates the number of alarms of the second alarm level that have been generated by the target network element within m sampling times; th_level indicates the number of alarms of the third alarm level that have been generated by the target network element within m sampling times; fh_level indicates the number of alarms of the fourth alarm level that have been generated by the target network element within m sampling times; five_level indicates the number of alarms of the fifth alarm level that have been generated by the target network element within m sampling times.

[0093] S404: Determine whether the ratio between the total number of alarm times sum and the number of sampling times m is greater than another preset ratio. If so, execute step S405; if not, execute step S410.

[0094] Optionally, another preset ratio may be denoted as z%.

[0095] S405 . Determine respectively the proportion of the number of alarms of each level generated for the target network element within m sampling times in the total number of alarms sum.

[0096] Exemplarily, assuming that the target network element has generated five levels of alarms within m sampling times, including alarms of the first alarm level, alarms of the second alarm level, alarms of the third alarm level, alarms of the fourth alarm level, and alarms of the fifth alarm level, the network device can respectively determine the proportion of the number of alarms of each alarm level in the total number of alarms sum as follows:

[0097] first_per = (first_level / sum) * 100 / 100;

[0098] sec_per = (sec_level / sum) * 100 / 100;

[0099] th_per=(th_level / sum) * 100 / 100;

[0100] fh_per=(fh_level / sum) * 100 / 100;

[0101] fv_per=(five_level / sum) * 100 / 100.

[0102] Among them, first_per indicates the ratio of the number of alarms of the first alarm level first_level to the total number of alarms sum; sec_per indicates the ratio of the number of alarms of the second alarm level sec_level to the total number of alarms sum; th_per indicates the ratio of the number of alarms of the third alarm level th_level to the total number of alarms sum; fh_per indicates the ratio of the number of alarms of the fourth alarm level fh_level to the total number of alarms sum; fv_per indicates the ratio of the number of alarms of the first alarm level five_level to the total number of alarms sum.

[0103] S406: Determine whether the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the preset maximum level, and whether the proportion corresponding to the preliminary level is greater than the preset ratio. If so, execute step S407; if not, execute step S408.

[0104] Optionally, the preset ratio may be denoted as k%.

[0105] S407: Determine whether the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and upgrade the initial level of the signaling storm alarm information by one level as the classification level of the signaling storm alarm information.

[0106] S408: Determine that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and then execute step S410.

[0107] Optionally, after step S408, the network device may also reset each field information in the storage entry corresponding to the target network element in the memory.

[0108] S409, adding 1 to the sampling times stamp_count for the target network element, and, according to the preliminary level of the signaling storm alarm information of the target network element, adding 1 to the alarm times corresponding to the preliminary level in the memory, and executing step S410.

[0109] S410: Use the preliminary level as the classification level of the signaling storm warning information.

[0110] By using the embodiment of the present application, the network device can determine whether the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and if it is determined that it meets the alarm level conversion condition, the preliminary level of the signaling storm alarm information is upgraded by one level as the classification level of the signaling storm alarm information. This is conducive to improving the accuracy of the signaling storm alarm information.

[0111] In an optional implementation, in step S204 and step S308, the process in which the network device executes the corresponding storm alarm decision according to the classification level may include but is not limited to the following steps:

[0112] Step 1: Compare the classification level with the highest level of signaling storm alarm information for which alarm notifications have been generated for the target network element within m sampling times. If the classification level is greater than the highest level of the generated alarm notification, execute step 2; if the classification level is not greater than the highest level of the generated alarm notification, execute step 3.

[0113] Step 2: Generate an alarm notification for the signaling storm alarm information generated in the current sampling period according to the classification level, and update the highest level of the generated alarm notification to the classification level.

[0114] Step 3: Do not generate an alarm notification for the signaling storm alarm information generated in the current sampling period.

[0115] In this implementation, the network device can determine whether to generate an alarm notification for the signaling storm alarm information generated in the current sampling period according to the classification level. In this way, it can avoid the possibility of erroneous generation of storm alarms due to a large number of repetitions of storm alarms of the target network element in a short period of time, or the performance indicator may be abnormal due to a short-term jitter, and then the indicator begins to be normal continuously, or the target network element continues to have abnormal indicators and normal indicators for a period of time.

[0116] In an optional embodiment, Figure 2 and Figure 3 In the method shown, the network device can also process the signaling storm alarm information for the target network element according to the signaling storm alarm information for the target network element in the current sampling period and the historical signaling storm alarm information. Figure 5 , Figure 5 FIG. 1 is a flow chart of a method for processing storm warning information provided by an embodiment of the present application. Figure 5 As shown, the method may include but is not limited to the following steps:

[0117] S501. Determine whether signaling storm alarm information is generated for a target network element in the current sampling period. If so, execute step S502; if not, execute steps S503 and S504.

[0118] S502: Based on the preset alarm level conversion condition, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

[0119] In an optional implementation, the specific description of step S502 can be found in the above description and will not be repeated here.

[0120] S503: Determine whether to perform alarm recovery on the historical signaling storm alarm information of each level generated by the target network element.

[0121] That is to say, the network device may determine whether to perform alarm recovery for each level of historical signaling storm alarm information generated by the target network element when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period. Optionally, when the network device determines that no signaling storm alarm information is generated for the target network element within the current sampling period, determining whether to perform alarm recovery for each level of historical signaling storm alarm information generated by the target network element may include: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, querying historical alarm record information based on the network element identifier of the target network element; if the query result is that there is a historical alarm record corresponding to the target network element, detecting the alarm recovery cycle count value count corresponding to the historical alarm record; if count is greater than 0, subtracting count by 1; if count is 0, determining that the signaling storm alarm information corresponding to the historical alarm record needs to perform alarm recovery.

[0122] S504: When it is determined that any level of the historical signaling storm alarm information needs to be restored, the corresponding historical signaling storm alarm information is deleted, and an alarm restoration notification of the corresponding level is generated for the target network element.

[0123] By adopting this implementation mode, the network equipment can also process the signaling storm alarm information for the target network element according to the signaling storm alarm information for the target network element in the current sampling period and the historical signaling storm alarm information, thereby facilitating improving the control capability for signaling storms.

[0124] Combine the following Figure 6 ,right Figure 5 Step S503 in the method shown is explained. Figure 6 FIG. 1 is a flow chart of a signaling storm decision process provided by an embodiment of the present application. Figure 6 As shown, the process may include but is not limited to the following steps:

[0125] S601: Generate an alarm identifier corresponding to the signaling storm alarm information based on the classification level of the signaling storm alarm information generated in the current sampling period and the network element identifier of the target network element.

[0126] S602, query whether the alarm identifier already exists in the historical alarm identifier record information, if so, execute steps S603 to S606; if not, execute step S607.

[0127] S603. Determine whether the alarm type corresponding to the alarm identifier corresponding to the signaling storm alarm information generated in the current sampling period is an alarm recovery type or an alarm generation type. When the alarm type corresponding to the alarm identifier is an alarm recovery type, execute steps S604 and S605; when the alarm type corresponding to the alarm identifier is an alarm generation type, execute step S606.

[0128] Optionally, the alarm type corresponding to the alarm identifier may be determined by the network device when determining to generate signaling storm alarm information of the target network element and determining a preliminary level of the signaling storm alarm information.

[0129] S604: Detect the alarm recovery cycle count value count corresponding to the alarm identifier in the historical alarm identifier record information.

[0130] S605: If count is greater than 0, reduce count by 1; if count is 0, determine that the signaling storm alarm information corresponding to the alarm identifier in the historical alarm identifier record information needs to perform alarm recovery.

[0131] S606: Determine that the signaling storm alarm information corresponding to the alarm identifier in the historical alarm identifier record information does not need to perform alarm recovery, and do not repeatedly send the signaling storm alarm information corresponding to the alarm identifier.

[0132] S607. When the alarm type of the alarm identifier corresponding to the signaling storm alarm information generated in the current sampling period is the alarm generation type, save the alarm identifier to the historical alarm identifier record information, and set the alarm recovery cycle count value count corresponding to the alarm identifier to the initial value; the initial value is a positive integer.

[0133] By adopting this implementation mode, the network device can make decisions on signaling storm alarms, thereby helping to improve the management and control capabilities for signaling storms.

[0134] It should be understood that although Figures 2 to 6 The steps in any of the flowcharts are shown in sequence as indicated by the arrows, but the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction for the execution of the steps, and the steps may be executed in other orders. Figures 2 to 6 At least part of the steps may include multiple steps or multiple stages. These steps or stages are not necessarily performed at the same time, but can be performed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed in turn or alternately with other steps or at least part of the steps or stages in other steps.

[0135] See also Figure 7 , Figure 7 Schematic diagram of the structure of a signaling storm warning device provided in an embodiment of the present application. Figure 7 As shown, the device includes but is not limited to the following modules:

[0136] The acquisition and determination module 701 is used to acquire a plurality of sampled data of a preset performance indicator of a target network element in a current sampling period, and determine a current statistical value of the preset performance indicator in the current sampling period based on the plurality of sampled data; wherein each sampled data corresponds to a sampling date attribute;

[0137] The acquisition and determination module 701 is further used to acquire a plurality of historical sampling data corresponding to the preset performance indicator in the historical sampling period and having the same sampling date attribute, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the plurality of historical sampling data;

[0138] The determination module 702 is used to determine the preliminary level of the signaling storm alarm information when determining to generate the signaling storm alarm information of the target network element based on the current statistical value, the historical statistical value and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to the plurality of preset alarm levels;

[0139] The processing module 703 is used to classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion condition, and execute the corresponding storm alarm decision according to the classified level.

[0140] In one embodiment, the determination module 702 is also used to determine the deviation value between the current statistical value and the historical statistical value, and obtain the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value; when the absolute value of the indicator fluctuation range corresponding to any preset performance indicator among multiple preset performance indicators is greater than the first preset threshold, it is determined to generate signaling storm alarm information of the target network element.

[0141] In one embodiment, the historical sampling period includes multiple historical sampling periods with different period spans; when the acquisition and determination module 701 is used to determine the historical statistical value of the preset performance indicator in the historical sampling period based on multiple historical sampling data, it is specifically used to: based on the historical sampling data of each historical sampling period, respectively determine the historical statistical value of the preset performance indicator in the corresponding historical sampling period, and obtain multiple historical statistical values ​​corresponding to multiple different historical sampling periods; when the determination module 702 is used to determine the deviation value between the current statistical value and the historical statistical value, and obtain the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value, it is specifically used to: determine the deviation value between the current statistical value and each historical statistical value, and obtain multiple deviation values; select the deviation value with the largest absolute value from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

[0142] In one embodiment, when the determination module 702 is used to determine the preliminary level of the signaling storm alarm information, it is specifically used to: when the indicator fluctuation range is greater than the first preset threshold and less than the second preset threshold, determine that the preliminary level of the signaling storm alarm information is a warning-level storm alarm; when the indicator fluctuation range is greater than or equal to the second preset threshold and less than the third preset threshold, determine that the preliminary level of the signaling storm alarm information is a level three storm alarm; when the indicator fluctuation range is greater than or equal to the third preset threshold and less than the fourth preset threshold, determine that the preliminary level of the signaling storm alarm information is a level two storm alarm; when the indicator fluctuation range is greater than or equal to the fourth preset threshold, determine that the preliminary level of the signaling storm alarm information is a level one storm alarm; wherein, the levels of the warning-level storm alarm, level three storm alarm, level two storm alarm, and level one storm alarm increase in sequence.

[0143] In one embodiment, when the processing module 703 is used to execute the corresponding storm alarm decision according to the classification level, it is specifically used to: compare the classification level with the highest level of the signaling storm alarm information for which the alarm notification has been generated for the target network element within m consecutive sampling times; m is an integer greater than 2; if the classification level is greater than the highest level of the generated alarm notification, then an alarm notification is generated for the signaling storm alarm information generated in the current sampling period according to the classification level, and the highest level of the generated alarm notification is updated to the classification level; if the classification level is not greater than the highest level of the generated alarm notification, then no alarm notification is generated for the signaling storm alarm information generated in the current sampling period.

[0144] In one embodiment, when the processing module 703 is used to classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion condition, it is specifically used to: if the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the highest level among multiple preset alarm levels, obtain the proportion of the number of alarms corresponding to the preliminary level in the m sampling times for the target network element in the total number of alarms corresponding to the target network element; m is an integer greater than 2; if the proportion is greater than the preset ratio, it is determined that the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and the preliminary level of the signaling storm alarm information is upgraded by one level as the classification level of the signaling storm alarm information; otherwise, it is determined that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and the preliminary level is used as the classification level of the signaling storm alarm information.

[0145] In one embodiment, the determination module 702 is also used to: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, determine whether to perform alarm recovery for the historical signaling storm alarm information of each level that has been generated for the target network element; when it is determined that any level of the historical signaling storm alarm information needs to perform alarm recovery, delete the corresponding historical signaling storm alarm information, and generate an alarm recovery notification of the corresponding level for the target network element.

[0146] In one embodiment, the determination module 702 is used to determine whether to perform alarm recovery on historical signaling storm alarm information of various levels that has been generated by the target network element when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period. The determination module 702 is specifically used to: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, query the historical alarm record information based on the network element identifier of the target network element; the processing module 703 is also used to: if the query result is that there is a historical alarm record corresponding to the target network element, detect the alarm recovery cycle count corresponding to the historical alarm record; if count is greater than 0, reduce count by 1; if count is 0, determine that the signaling storm alarm information corresponding to the historical alarm record needs to perform alarm recovery.

[0147] In one embodiment, when the acquisition and determination module 701 is used to acquire multiple sampling data of the preset performance indicators of the target network element in the current sampling period, it is specifically used to: acquire multiple sampling data of the preset performance indicators of the target network element in the current sampling period based on preset multiple categories of sampling date attributes, and mark the corresponding sampling date attributes for each sampling data respectively, to obtain multiple sampling data corresponding to the multiple categories of sampling date attributes; the processing module 703 is also used to: sort the multiple sampling data in the current sampling period from high to low according to the priority of the multiple categories of sampling date attributes, to obtain multiple sorted sampling data; for the sorted multiple sampling data, sequentially execute the steps after acquiring multiple sampling data of the preset performance indicators of the target network element in the current sampling period, so as to preferentially determine the storm alarm decision corresponding to the sampling data with the highest priority of the sampling date attribute.

[0148] For the specific definition of the signaling storm alarm device, please refer to the definition of the signaling storm alarm method above, which will not be repeated here. Each module in the above-mentioned signaling storm alarm device can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0149] In one embodiment, the present application also provides a network device. Figure 8, Figure 8 Schematic diagram of the structure of a terminal device provided in an embodiment of the present application. Figure 8 As shown, the terminal device includes: at least one processor 801, a memory 802, and at least one network interface 803. The various components in the network device are coupled together through a bus system 804. It can be understood that the bus system 804 is used to realize the connection and communication between these components. In addition to the data bus, the bus system 804 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Figure 8 Various buses are labeled as bus system 804 .

[0150] It can be understood that the memory 802 in the embodiment of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct RAM bus random access memory (DRRAM). The memory 802 of the system and method described in the embodiments of the present application is intended to include but is not limited to these and any other suitable types of memory.

[0151] In some implementations, the memory 802 stores the following elements, executable modules or data structures, or their subsets, or their extensions: operating system. The operating system includes various system programs, such as a framework layer, a core library layer, a driver layer, etc., which are used to implement various basic services and process hardware-based tasks.

[0152] In an embodiment of the present application, the processor 801 can call a program or instruction stored in the memory 802, so that the processor 801 is used to obtain multiple sampling data of a preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute; the processor 801 is also used to obtain multiple historical sampling data corresponding to the preset performance indicator in the historical sampling period with the same sampling date attribute, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data; the processor 801 is also used to determine the preliminary level of the signaling storm alarm information when the signaling storm alarm information of the target network element is generated based on the current statistical value, the historical statistical value and multiple different preset alarm thresholds; multiple different preset alarm thresholds correspond to multiple preset alarm levels; the processor 801 is also used to classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion condition, and execute the corresponding storm alarm decision according to the classified level.

[0153] Part or all of the methods disclosed in the above embodiments of the present application may also be applied to the processor 801, or implemented by the processor 801, or implemented by the processor 801 in cooperation with other components (such as a transceiver). The processor 801 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware or software instructions in the processor 701. The above processor 801 may be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied as being executed by a hardware decoding processor, or may be executed by a combination of hardware and software modules in a decoding processor. The software module may be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 802, and the processor 801 reads the information in the memory 802 and completes the steps of the above method in combination with its hardware.

[0154] It is understood that the embodiments described in the embodiments of the present application can be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, the processing unit can be implemented in one or more application specific integrated circuits (ASIC), digital signal processors (DSP), digital signal processing devices (DSPD), programmable logic devices (PLD), field programmable gate arrays (FPGA), general-purpose processors, controllers, microcontrollers, microprocessors, other electronic units for performing the functions of the present application or a combination thereof.

[0155] For software implementation, the technology in the embodiments of the present application can be implemented by a module (such as a process, function, etc.) that executes the functions of the embodiments of the present application. The software code can be stored in a memory and executed by the processor 801. The memory can be implemented in the processor 801 or outside the processor 801.

[0156] In an optional embodiment, the processor 801 is also used to: determine the deviation value between the current statistical value and the historical statistical value, and obtain the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value; when the absolute value of the indicator fluctuation range corresponding to any preset performance indicator among multiple preset performance indicators is greater than the first preset threshold, determine to generate signaling storm alarm information for the target network element.

[0157] In an optional embodiment, the historical sampling period includes multiple historical sampling periods with different period spans; when the processor 801 is used to determine the historical statistical value of the preset performance indicator in the historical sampling period based on multiple historical sampling data, it is specifically used to: determine the historical statistical value of the preset performance indicator in the corresponding historical sampling period based on the historical sampling data of each historical sampling period, and obtain multiple historical statistical values ​​corresponding to multiple different historical sampling periods; determine the deviation value between the current statistical value and the historical statistical value, and obtain the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value, including: determining the deviation value between the current statistical value and each historical statistical value, and obtaining multiple deviation values; selecting the deviation value with the largest absolute value from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

[0158] In an optional embodiment, when the processor 801 is used to determine the preliminary level of the signaling storm alarm information, it is specifically used to: when the indicator fluctuation range is greater than the first preset threshold and less than the second preset threshold, determine that the preliminary level of the signaling storm alarm information is a warning-level storm alarm; when the indicator fluctuation range is greater than or equal to the second preset threshold and less than the third preset threshold, determine that the preliminary level of the signaling storm alarm information is a level three storm alarm; when the indicator fluctuation range is greater than or equal to the third preset threshold and less than the fourth preset threshold, determine that the preliminary level of the signaling storm alarm information is a level two storm alarm; when the indicator fluctuation range is greater than or equal to the fourth preset threshold, determine that the preliminary level of the signaling storm alarm information is a level one storm alarm; wherein, the levels of the warning-level storm alarm, level three storm alarm, level two storm alarm, and level one storm alarm increase in sequence.

[0159] In an optional implementation, when the processor 801 is used to execute the corresponding storm alarm decision according to the classification level, it is specifically used to: compare the classification level with the highest level of signaling storm alarm information for which alarm notifications have been generated for the target network element within m consecutive sampling times; m is an integer greater than 2; if the classification level is greater than the highest level of the generated alarm notification, then an alarm notification is generated for the signaling storm alarm information generated in the current sampling period according to the classification level, and the highest level of the generated alarm notification is updated to the classification level; if the classification level is not greater than the highest level of the generated alarm notification, then no alarm notification is generated for the signaling storm alarm information generated in the current sampling period.

[0160] In an optional implementation, when the processor 801 is used to classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion condition, it is specifically used to: if the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the highest level among multiple preset alarm levels, obtain the proportion of the number of alarms corresponding to the preliminary level in the m sampling times for the target network element in the total number of alarms corresponding to the target network element; m is an integer greater than 2; if the proportion is greater than the preset ratio, it is determined that the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and the preliminary level of the signaling storm alarm information is upgraded by one level as the classification level of the signaling storm alarm information; otherwise, it is determined that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and the preliminary level is used as the classification level of the signaling storm alarm information.

[0161] In an optional implementation, the processor 801 is also used to: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, determine whether to perform alarm recovery for historical signaling storm alarm information of each level that has been generated for the target network element; when it is determined that any level of historical signaling storm alarm information needs to perform alarm recovery, delete the corresponding historical signaling storm alarm information, and generate an alarm recovery notification of the corresponding level for the target network element.

[0162] In an optional implementation, when the processor 801 is used to determine whether to perform alarm recovery on historical signaling storm alarm information of various levels that has been generated by the target network element when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, the processor 801 is specifically used to: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, query the historical alarm record information based on the network element identifier of the target network element; if the query result is that there is a historical alarm record corresponding to the target network element, detect the alarm recovery cycle count corresponding to the historical alarm record; if count is greater than 0, subtract 1 from count; if count is 0, determine that the signaling storm alarm information corresponding to the historical alarm record needs to perform alarm recovery.

[0163] In an optional embodiment, when the processor 801 is used to obtain multiple sampling data of the preset performance indicators of the target network element in the current sampling period, it is specifically used to: based on preset multiple categories of sampling date attributes, obtain multiple sampling data of the preset performance indicators of the target network element in the current sampling period, and mark the corresponding sampling date attributes for each sampling data respectively, to obtain multiple sampling data corresponding to the multiple categories of sampling date attributes; the processor 801 is also used to: sort the multiple sampling data in the current sampling period from high to low according to the priority of the multiple categories of sampling date attributes, to obtain multiple sorted sampling data; for the sorted multiple sampling data, sequentially execute the steps after obtaining the multiple sampling data of the preset performance indicators of the target network element in the current sampling period, so as to preferentially determine the storm alarm decision corresponding to the sampling data with the highest priority of the sampling date attribute.

[0164] In one embodiment, the present application further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned signaling storm alarm method are implemented, for example:

[0165] Acquire multiple sampling data of the preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute;

[0166] Acquire multiple historical sampling data corresponding to the preset performance indicator in the historical sampling period and having the same sampling date attribute, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data;

[0167] Determining a preliminary level of the signaling storm alarm information when generating signaling storm alarm information of a target network element based on current statistical values, historical statistical values, and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to the plurality of preset alarm levels;

[0168] Based on the preset alarm level conversion conditions, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

[0169] In an optional embodiment, the computer program executed by the processor also implements the following steps: determining the deviation value between the current statistical value and the historical statistical value, and obtaining the indicator fluctuation range corresponding to the preset performance indicator based on the deviation value; when the absolute value of the indicator fluctuation range corresponding to any preset performance indicator among multiple preset performance indicators is greater than the first preset threshold, determining to generate signaling storm alarm information for the target network element.

[0170] In an optional embodiment, the historical sampling period includes multiple historical sampling periods with different period spans; when the computer program is executed by the processor to determine the historical statistical value of the preset performance indicator in the historical sampling period based on multiple historical sampling data, the following steps are specifically implemented: based on the historical sampling data of each historical sampling period, the historical statistical value of the preset performance indicator in the corresponding historical sampling period is determined respectively, and multiple historical statistical values ​​corresponding to multiple different historical sampling periods are obtained; the deviation value between the current statistical value and the historical statistical value is determined, and the indicator fluctuation range corresponding to the preset performance indicator is obtained based on the deviation value, including: determining the deviation value between the current statistical value and each historical statistical value, and obtaining multiple deviation values; selecting the deviation value with the largest absolute value from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

[0171] In an optional embodiment, when the computer program is executed by a processor to determine the preliminary level of signaling storm alarm information, the following steps are specifically performed: when the indicator fluctuation range is greater than a first preset threshold and less than a second preset threshold, the preliminary level of the signaling storm alarm information is determined to be a prompt-level storm alarm; when the indicator fluctuation range is greater than or equal to the second preset threshold and less than a third preset threshold, the preliminary level of the signaling storm alarm information is determined to be a level three storm alarm; when the indicator fluctuation range is greater than or equal to the third preset threshold and less than a fourth preset threshold, the preliminary level of the signaling storm alarm information is determined to be a level two storm alarm; when the indicator fluctuation range is greater than or equal to the fourth preset threshold, the preliminary level of the signaling storm alarm information is determined to be a level one storm alarm; wherein, the levels of the prompt-level storm alarm, level three storm alarm, level two storm alarm, and level one storm alarm increase in sequence.

[0172] In an optional embodiment, when a computer program is executed by a processor to implement a corresponding storm alarm decision according to the classification level, the following steps are specifically performed: comparing the classification level with the highest level of signaling storm alarm information for which alarm notifications have been generated for the target network element within m consecutive sampling times; m is an integer greater than 2; if the classification level is greater than the highest level of the generated alarm notification, then an alarm notification is generated for the signaling storm alarm information generated in the current sampling period according to the classification level, and the highest level of the generated alarm notification is updated to the classification level; if the classification level is not greater than the highest level of the generated alarm notification, then no alarm notification is generated for the signaling storm alarm information generated in the current sampling period.

[0173] In an optional embodiment, when a computer program is executed by a processor to implement classification of a preliminary level of signaling storm alarm information based on a preset alarm level conversion condition, the following steps are specifically implemented: if the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the highest level among multiple preset alarm levels, obtain the ratio of the number of alarms corresponding to the preliminary level in the m sampling times for the target network element to the total number of alarms corresponding to the target network element; m is an integer greater than 2; if the ratio is greater than the preset ratio, determine that the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and upgrade the preliminary level of the signaling storm alarm information by one level as the classification level of the signaling storm alarm information; otherwise, determine that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and use the preliminary level as the classification level of the signaling storm alarm information.

[0174] In an optional embodiment, the computer program executed by the processor also implements the following steps: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, determining whether to perform alarm recovery for historical signaling storm alarm information of each level that has been generated by the target network element; when it is determined that any level of historical signaling storm alarm information requires alarm recovery, deleting the corresponding historical signaling storm alarm information, and generating an alarm recovery notification of the corresponding level for the target network element.

[0175] In an optional implementation, a computer program is executed by a processor to implement, when it is determined that no signaling storm alarm information is generated for a target network element within a current sampling period, whether to perform alarm recovery for historical signaling storm alarm information of various levels that has been generated for the target network element, and the following steps are specifically implemented: when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, based on the network element identifier of the target network element, query the historical alarm record information; if the query result is that there is a historical alarm record corresponding to the target network element, detect the alarm recovery cycle count corresponding to the historical alarm record; if count is greater than 0, reduce count by 1; if count is 0, determine that the signaling storm alarm information corresponding to the historical alarm record needs to perform alarm recovery.

[0176] In an optional embodiment, when the computer program is executed by the processor to obtain multiple sampling data of the preset performance indicators of the target network element in the current sampling period, the following steps are specifically implemented: based on preset multiple categories of sampling date attributes, multiple sampling data of the preset performance indicators of the target network element in the current sampling period are obtained, and the corresponding sampling date attributes are respectively marked for each sampling data to obtain multiple sampling data corresponding to the multiple categories of sampling date attributes; the computer program is also executed by the processor to implement the following steps: according to the priority of the multiple categories of sampling date attributes, the multiple sampling data in the current sampling period are sorted from high to low to obtain multiple sorted sampling data; for the sorted multiple sampling data, the steps after obtaining the multiple sampling data of the preset performance indicators of the target network element in the current sampling period are sequentially executed to preferentially determine the storm alarm decision corresponding to the sampling data with the highest priority of the sampling date attribute.

[0177] In one embodiment, the present application also provides a computer program product including instructions. In an optional implementation, when the computer program product is run on a terminal device, the network device performs the following steps:

[0178] Acquire multiple sampling data of the preset performance indicator of the target network element in the current sampling period, and determine the current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each sampling data corresponds to a sampling date attribute;

[0179] Acquire multiple historical sampling data corresponding to the preset performance indicator in the historical sampling period and having the same sampling date attribute, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the multiple historical sampling data;

[0180] Determining a preliminary level of the signaling storm alarm information when generating signaling storm alarm information of a target network element based on current statistical values, historical statistical values, and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to the plurality of preset alarm levels;

[0181] Based on the preset alarm level conversion conditions, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

[0182] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), tape, floppy disk, flash memory or optical memory, etc. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0183] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0184] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A signaling storm alarm method, characterized in that: The method comprises: Acquire multiple sampling data of a preset performance indicator of a target network element in a current sampling period, and determine a current statistical value of the preset performance indicator in the current sampling period based on the multiple sampling data; wherein each of the sampling data corresponds to a sampling date attribute; Acquire a plurality of historical sampling data corresponding to the preset performance indicator and having the same sampling date attribute in a historical sampling period, and determine a historical statistical value of the preset performance indicator in the historical sampling period based on the plurality of historical sampling data; In the case where it is determined to generate the signaling storm alarm information of the target network element based on the current statistical value, the historical statistical value and a plurality of different preset alarm thresholds, determining the preliminary level of the signaling storm alarm information; the plurality of different preset alarm thresholds correspond to a plurality of preset alarm levels; Based on the preset alarm level conversion condition, the preliminary level of the signaling storm alarm information is classified, and the corresponding storm alarm decision is executed according to the classified level.

2. The method according to claim 1, characterized in that The method further comprises: Determine a deviation value between the current statistical value and the historical statistical value, and obtain an indicator fluctuation range corresponding to the preset performance indicator based on the deviation value; When the absolute value of the indicator fluctuation amplitude corresponding to any preset performance indicator among the plurality of preset performance indicators is greater than a first preset threshold, it is determined to generate the signaling storm alarm information of the target network element.

3. The method according to claim 2, characterized in that The historical sampling period includes a plurality of historical sampling periods with different period spans; The determining, based on a plurality of historical sampling data, a historical statistical value of the preset performance indicator in the historical sampling period includes: Based on the historical sampling data of each historical sampling period, respectively determine the historical statistical value of the preset performance indicator in the corresponding historical sampling period, and obtain multiple historical statistical values ​​corresponding to multiple different historical sampling periods; The determining a deviation value between the current statistical value and the historical statistical value, and obtaining an indicator fluctuation range corresponding to the preset performance indicator based on the deviation value, includes: Determine a deviation value between the current statistical value and each of the historical statistical values ​​to obtain a plurality of deviation values; A deviation value with the largest absolute value is selected from the multiple deviation values ​​as the indicator fluctuation range corresponding to the preset performance indicator.

4. The method according to claim 3, characterized in that The determining of the preliminary level of the signaling storm warning information includes: When the fluctuation range of the indicator is greater than the first preset threshold and less than the second preset threshold, determining that the preliminary level of the signaling storm warning information is a warning-level storm warning; When the fluctuation range of the indicator is greater than or equal to the second preset threshold and less than the third preset threshold, determining that the preliminary level of the signaling storm warning information is a level 3 storm warning; When the fluctuation range of the indicator is greater than or equal to the third preset threshold and less than the fourth preset threshold, determining that the preliminary level of the signaling storm warning information is a level 2 storm warning; When the fluctuation range of the indicator is greater than or equal to the fourth preset threshold, determining that the preliminary level of the signaling storm warning information is a level 1 storm warning; Among them, the levels of warning-level storm warning, level 3 storm warning, level 2 storm warning, and level 1 storm warning increase in sequence.

5. The method according to claim 1, characterized in that The executing corresponding storm warning decision according to the classification level includes: Comparing the classification level with the highest level of signaling storm alarm information for which alarm notifications have been generated for the target network element within m consecutive sampling times; m is an integer greater than 2; If the classification level is greater than the highest level of the generated alarm notification, an alarm notification is generated for the signaling storm alarm information generated in the current sampling period according to the classification level, and the highest level of the generated alarm notification is updated to the classification level; If the classification level is not greater than the highest level of the generated alarm notification, no alarm notification is generated for the signaling storm alarm information generated in the current sampling period.

6. The method according to claim 1, characterized in that The step of grading the preliminary level of the signaling storm warning information based on the preset warning level conversion condition includes: If the preliminary level of the signaling storm alarm information generated in the current sampling period is lower than the highest level among multiple preset alarm levels, obtain the proportion of the number of alarms corresponding to the preliminary level in the m sampling times for the target network element in the total number of alarms corresponding to the target network element; m is an integer greater than 2; If the proportion is greater than the preset ratio, it is determined that the signaling storm alarm information generated in the current sampling period meets the alarm level conversion condition, and the preliminary level of the signaling storm alarm information is upgraded by one level as the classification level of the signaling storm alarm information; otherwise, it is determined that the signaling storm alarm information generated in the current sampling period does not meet the alarm level conversion condition, and the preliminary level is used as the classification level of the signaling storm alarm information.

7. The method according to claim 1, characterized in that The method further comprises: In the case of determining that no signaling storm alarm information is generated for the target network element within the current sampling period, determining whether to perform alarm recovery for historical signaling storm alarm information of various levels that has been generated by the target network element; When it is determined that any level of the historical signaling storm alarm information needs to be restored, the corresponding historical signaling storm alarm information is deleted, and an alarm restoration notification of the corresponding level is generated for the target network element.

8. The method according to claim 7, characterized in that The determining whether to perform alarm recovery on historical signaling storm alarm information of various levels generated by the target network element when it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period includes: In the case where it is determined that no signaling storm alarm information is generated for the target network element within the current sampling period, querying historical alarm record information based on the network element identifier of the target network element; If the query result is that there is a historical alarm record corresponding to the target network element, detect the alarm recovery cycle count value count corresponding to the historical alarm record; If the count is greater than 0, reduce the count by 1; If the count is 0, it is determined that the signaling storm alarm information corresponding to the historical alarm record needs to perform alarm recovery.

9. The method according to any one of claims 1 to 8, characterized in that: The obtaining of a plurality of sampling data of a preset performance indicator of a target network element in a current sampling period includes: Based on the preset multiple types of sampling date attributes, multiple sampling data of the preset performance indicators of the target network element in the current sampling period are obtained, and the corresponding sampling date attributes are marked on each sampling data to obtain multiple sampling data corresponding to the multiple types of sampling date attributes; The method further comprises: According to the priorities of the multiple types of sampling date attributes, the multiple sampling data in the current sampling period are sorted from high to low to obtain the sorted multiple sampling data; For the sorted multiple sampling data, the steps of obtaining the preset performance indicators of the target network element after the multiple sampling data in the current sampling period are sequentially performed to preferentially determine the storm alarm decision corresponding to the sampling data with the highest sampling date attribute priority.

10. A signaling storm alarm device, characterized in that: The device comprises: An acquisition and determination module, used to acquire a plurality of sampling data of a preset performance indicator of a target network element in a current sampling period, and determine a current statistical value of the preset performance indicator in the current sampling period based on the plurality of sampling data; wherein each of the sampling data corresponds to a sampling date attribute; The acquisition and determination module is further used to acquire a plurality of historical sampling data corresponding to the preset performance indicator and having the same sampling date attribute in the historical sampling period, and determine the historical statistical value of the preset performance indicator in the historical sampling period based on the plurality of historical sampling data; A determination module, configured to determine a preliminary level of the signaling storm alarm information when generating the signaling storm alarm information of the target network element based on the current statistical value, the historical statistical value and a plurality of different preset alarm thresholds; the plurality of different preset alarm thresholds correspond to a plurality of preset alarm levels; The processing module is used to classify the preliminary level of the signaling storm alarm information based on the preset alarm level conversion condition, and execute the corresponding storm alarm decision according to the classified level.

11. A network device, characterized in that: include: A processor and a memory, wherein the memory stores a computer program; when the processor executes the computer program, the steps of the method according to any one of claims 1 to 9 are implemented.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

13. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

Images