An alarm aggregation method

Abstract

The application discloses an alarm aggregation method and relates to the field of information processing, and comprises the following steps: acquiring a current storage level of a current level storage object containing unreported original alarms; if the current storage level is not the lowest level, determining a target storage object based on a next level storage object containing unreported original alarms in the current level storage object; determining whether to take the current level storage object as a storage object to be aggregated according to the number of the target storage object; if not, updating the current level storage object based on the target storage object, and jumping to the step of acquiring the current storage level of the current level storage object; if the current storage level is the lowest level, determining whether to take the current level storage object as the storage object to be aggregated according to the number of unreported original alarms in the current level storage object; and after the unreported original alarms in the storage object to be aggregated are aggregated, the unreported original alarms are reported again, so that the number of reported alarms is reduced, and the difficulty of storage object management and operation and maintenance is reduced.

Description

Technical Field

[0001] This invention relates to the field of information processing, and in particular to an alarm aggregation method. Background Technology

[0002] With the development of computer science and technology, the data generated by society, enterprises, groups and even individuals is growing exponentially. Building large-scale clusters for data collection, storage, computing and distribution has been widely used in various fields. However, the larger the cluster, the more complex the cluster management and maintenance become.

[0003] In a large-scale cluster, each device generates software, hardware, and resource usage alarms. The more devices in the cluster, the higher the probability and the greater the number of alarms generated. Especially when nodes, racks, or networks fail, the cluster can generate a large number of alarms in a short period of time, resulting in an excessive number of alarms and a mix of alarms at different levels. This makes it difficult for operations and maintenance personnel to find key information from the large number of alarms in a timely manner, so as to formulate emergency response plans as soon as possible, increasing the difficulty of cluster management and maintenance.

[0004] Therefore, one approach is to split large-scale clusters into multiple smaller clusters. While this can reduce the number of alarms generated by each cluster to some extent, too many small clusters can also lead to management and maintenance difficulties. Furthermore, if the services are highly coupled, it is not recommended to split large-scale clusters built for those services into multiple smaller clusters, as this can easily impact service performance. Another approach is for the alarm receiver to consolidate alarms after they are reported, thereby reducing the number of alarms. However, this places higher technical demands on the alarm receiver. Therefore, how to proactively consolidate alarms at the alarm reporting end to reduce the difficulty of cluster management and maintenance is a problem that needs to be solved by those skilled in the art. Summary of the Invention

[0005] The purpose of this invention is to provide an alarm aggregation method that reduces the number and frequency of alarm reports by aggregating alarms at the alarm reporting point, thereby solving the problem of high difficulty in managing and maintaining storage objects. The specific solution is as follows:

[0006] In a first aspect, the present invention provides an alarm aggregation method, comprising:

[0007] Get the current storage level that contains the current level storage object that has not reported native alerts;

[0008] If the current storage level is not the preset minimum storage level, then determine the next level storage object that contains no native alarms from the current level storage objects to obtain the target storage object. Based on the total number of objects in the target storage object, determine whether to determine the current level storage object as the storage object to be aggregated. If not, then determine the target storage object as the new current level storage object and jump back to the step of obtaining the current storage level that contains no native alarms.

[0009] If the current storage level is the preset minimum storage level, then determine whether to identify the current storage object as a storage object to be aggregated based on the total number of alarms that have not reported native alarms in the current storage object.

[0010] Aggregate the unreported native alarms in the identified storage objects to be aggregated to obtain the target aggregated alarms.

[0011] Optionally, the storage level of each storage object is positively correlated with the storage capacity of each storage object.

[0012] Among them, storage objects at each level include any one or a combination of cluster-level storage objects, pool-level storage objects, and node-level storage objects.

[0013] Optionally, before obtaining the current storage level containing current-level storage objects that have not reported native alerts, the process also includes:

[0014] Periodically check the highest-level storage object for any unreported native alarms at preset time intervals;

[0015] If there are unreported native alarms in the highest-level storage object, then based on the relationship between the number of unreported native alarms in the highest-level storage object and the first preset number, it is determined whether to trigger an alarm aggregation operation.

[0016] If an alarm aggregation operation is triggered, the highest-level storage object will be determined as the current-level storage object.

[0017] Optionally, determine the next-level storage object containing unreported native alarms from the current-level storage object to obtain the target storage object, including:

[0018] Identify the next-level storage object from the current-level storage object that contains the unreported native alarm;

[0019] If the number of next-level storage objects is less than the second preset number, then the next-level storage objects will be determined as the target storage objects.

[0020] If the number of next-level storage objects is not less than the second preset number, then the target storage object is determined from the next-level storage objects based on the number of native alarms that have not been reported in the next-level storage objects.

[0021] Optionally, based on the number of native alarms not reported in the next-level storage object, the target storage object is determined from the next-level storage object, including:

[0022] Determine the average number of alarms for the next level storage object based on the number of unreported native alarms in the current level storage object and the number of the next level storage object;

[0023] Determine the object filtering criteria for the target storage object based on the average number of alarms;

[0024] The target storage object is obtained by filtering the next-level storage objects based on the number of unreported native alarms that meet the object filtering criteria.

[0025] Optionally, after aggregating the unreported native alarms in the identified storage objects to be aggregated to obtain the target aggregated alarms, the process also includes:

[0026] Obtain the alarm levels of the storage objects to be aggregated that have not reported native alarms, and determine the highest alarm level from each alarm level;

[0027] If all alarm levels are the same and the highest alarm level is not the preset highest level, then the highest alarm level will be upgraded, and the upgraded alarm level will be determined as the alarm level of the target aggregated alarm.

[0028] If the alarm levels are inconsistent or the highest alarm level is the preset highest level, then the highest alarm level will be determined as the alarm level of the target aggregated alarm.

[0029] Optionally, after aggregating the unreported native alarms in the identified storage objects to be aggregated to obtain the target aggregated alarms, the process also includes:

[0030] Determine if any aggregated alarms have been reported in the reported alarm list;

[0031] If there are already reported aggregate alarms in the reported alarms, then based on the relationship between the aggregate level of the already reported aggregate alarms and the aggregate level of the target aggregate alarm, it is determined whether to report the target aggregate alarm; whereby the aggregate level of the aggregate alarm is determined based on the storage level of the aggregate storage object corresponding to the aggregate alarm.

[0032] If there are no reported aggregated alarms in the reported alarms list, then the target aggregated alarm will be reported.

[0033] Optionally, based on the hierarchical relationship between the aggregation levels of already reported aggregated alarms and the aggregation level of the target aggregated alarm, determine whether to report the target aggregated alarm, including:

[0034] If a first reported aggregated alarm exists among the reported aggregated alarms, determine whether to clear the first reported aggregated alarm based on the alarm duration of the first reported aggregated alarm, and determine whether to report the target aggregated alarm based on the alarm clearing status of the first reported aggregated alarm; the aggregation level of the first reported aggregated alarm is higher than the aggregation level of the target aggregated alarm.

[0035] If there is no first reported aggregated alarm but there is a second reported aggregated alarm, determine whether to report the target aggregated alarm based on the coverage of the first alarm information between the second reported aggregated alarm and the target aggregated alarm; the aggregation level of the second reported aggregated alarm is equal to the aggregation level of the target aggregated alarm.

[0036] If there is no first reported aggregate alarm and no second reported aggregate alarm among the reported aggregate alarms, but there is a third reported aggregate alarm, based on the coverage of the second alarm information between the target aggregate alarm and the third reported aggregate alarm, determine whether to clear the third reported aggregate alarm and report the target aggregate alarm; the aggregation level of the third reported aggregate alarm is lower than the aggregation level of the target aggregate alarm.

[0037] Optionally, based on the coverage of the first alarm information between the second reported aggregated alarm and the target aggregated alarm, determine whether to report the target aggregated alarm, including:

[0038] If the first alarm information coverage indicates that the alarm information of the second reported aggregated alarm completely covers the alarm information of the target aggregated alarm, then the alarm duration of the second reported aggregated alarm is reset and the target aggregated alarm is deactivated.

[0039] If the coverage of the first alarm information indicates that the alarm information of the second reported aggregated alarm does not completely cover the alarm information of the target aggregated alarm, then the target aggregated alarm will be reported.

[0040] Optionally, the alarm aggregation method of the present invention further includes:

[0041] If the current level storage object is determined as a storage object to be aggregated based on the total number of objects or the total number of alarms, or if the current level storage object is not determined as a storage object to be aggregated based on the total number of alarms, then the unaggregated native alarms are identified from the never-reported native alarms.

[0042] If there is no fourth reported aggregated alarm in the reported aggregated alarms, a preset judgment operation is performed to determine whether to report the non-aggregated native alarm based on the coverage of the third alarm information between each reported native alarm and the non-aggregated native alarm; the alarm information of the fourth reported aggregated alarm completely covers the alarm information of the non-aggregated native alarm.

[0043] If a fourth reported aggregated alarm exists among the reported aggregated alarms, determine whether to clear the fourth reported aggregated alarm based on the alarm duration of the fourth reported aggregated alarm, and determine whether to perform a preset judgment operation based on the alarm clearing status of the fourth reported aggregated alarm.

[0044] In a second aspect, the present invention provides an alarm aggregation device, comprising:

[0045] The storage level acquisition module is used to obtain the current storage level of the current level storage object that has not reported native alarms;

[0046] The first object determination module is used to determine the next level storage object containing the unreported native alarm from the current level storage object if the current storage level is not the preset minimum storage level, so as to obtain the target storage object. Based on the total number of objects in the target storage object, it determines whether to determine the current level storage object as the storage object to be aggregated. If not, the target storage object is determined as the new current level storage object, and the process jumps back to the step of obtaining the current storage level containing the current level storage object containing the unreported native alarm.

[0047] The second object determination module is used to determine whether to determine the current level storage object as a storage object to be aggregated based on the total number of alarms that have not reported native alarms in the current level storage object if the current storage level is the preset minimum storage level.

[0048] The alarm aggregation module is used to aggregate unreported native alarms in the identified storage objects to be aggregated, so as to obtain the target aggregated alarms.

[0049] Thirdly, the present invention provides an electronic device, comprising:

[0050] Memory, used to store computer programs;

[0051] A processor is used to execute computer programs to implement the aforementioned alarm aggregation method.

[0052] Fourthly, the present invention provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, it implements the aforementioned alarm aggregation method.

[0053] In this invention, the current storage level of the current-level storage object containing unreported native alarms is obtained. If the current storage level is not a preset minimum storage level, the next-level storage object containing unreported native alarms is determined from the current-level storage objects to obtain the target storage object. Based on the total number of objects in the target storage object, it is determined whether the current-level storage object should be identified as the storage object to be aggregated. If not, the target storage object is identified as a new current-level storage object, and the process jumps back to the step of obtaining the current storage level of the current-level storage object containing unreported native alarms. If the current storage level is a preset minimum storage level, it is determined whether the current-level storage object should be identified as the storage object to be aggregated based on the total number of alarms in the current-level storage object that have not reported native alarms. The unreported native alarms in the identified storage objects to be aggregated are aggregated to obtain the target aggregated alarm.

[0054] Beneficial Effects: This invention analyzes storage objects containing unreported native alarms at each level to identify those containing a large number of lower-level storage objects or a large number of unreported native alarms as storage objects to be aggregated. Unreported native alarms within these storage objects are then aggregated before being reported. Compared to directly reporting native alarms, this invention, by aggregating alarms at the alarm reporting point, significantly reduces the number and frequency of alarm reports without splitting storage objects. This allows maintenance personnel to quickly find key information from alarm messages, thereby reducing the difficulty of storage object management and maintenance. Attached Figure Description

[0055] To more clearly illustrate the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0056] Figure 1 A flowchart of an alarm aggregation method provided in an embodiment of the present invention;

[0057] Figure 2 A flowchart of an aggregated alarm reporting process is provided in this embodiment of the invention;

[0058] Figure 3 A flowchart of a native alarm reporting process provided in an embodiment of the present invention;

[0059] Figure 4 A flowchart of a cluster-level alarm aggregation provided in an embodiment of the present invention.

[0060] Figure 5 A flowchart of pool-level and node-level alarm aggregation provided in an embodiment of the present invention;

[0061] Figure 6 This is a schematic diagram of an alarm aggregation device provided in an embodiment of the present invention;

[0062] Figure 7 This is a structural diagram of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0063] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the protection scope of the present invention.

[0064] If a cluster generates a large number of alarms in a short period of time, resulting in an excessive number of alarms and a mix of alarms at different levels, it can make it difficult for operations and maintenance personnel to quickly find key information from the large number of alarms and formulate emergency response plans, thus increasing the difficulty of cluster management and maintenance. To address this, this invention provides an alarm aggregation method. By aggregating alarms at the alarm reporting point, the number and frequency of alarm reports can be significantly reduced without splitting storage objects. This allows operations and maintenance personnel to more quickly find key information from alarm messages, thereby reducing the difficulty of storage object management and maintenance.

[0065] See Figure 1 As shown, this embodiment of the invention provides an alarm aggregation method, including:

[0066] Step S11: Obtain the current storage level of the current level storage object that contains no reported native alarms.

[0067] In this embodiment of the invention, the storage level of each storage object is positively correlated with its storage capacity. This positive correlation indicates that the storage capacity and storage level of each storage object change in the same direction; that is, the larger the storage capacity, the higher the storage level, and vice versa. For example, each storage object includes any one or a combination of cluster-level, pool-level, and node-level storage objects. Since the storage capacity of a cluster is greater than that of a storage pool, which is greater than that of a storage node, the storage level of a cluster-level storage object is higher than that of a pool-level storage object, which is higher than that of a node-level storage object.

[0068] Specifically, the application subject of this invention is the alarm reporting party or the alarm sending party. The alarm reporting party or the alarm sending party periodically checks at preset time intervals whether there are any unreported native alarms in the highest-level storage object; the highest-level storage object is the storage object with the highest storage level among all levels of storage objects. If there are unreported native alarms in the highest-level storage object, it is determined whether to trigger an alarm aggregation operation based on the relationship between the number of unreported native alarms in the highest-level storage object and a first preset number. If triggering the alarm aggregation operation is prohibited, the unreported native alarms in the highest-level storage object are directly reported. If the alarm aggregation operation is triggered, the highest-level storage object is determined as the current-level storage object, and the current storage level of the current-level storage object is obtained; this current storage level is the preset highest storage level.

[0069] Furthermore, if no unreported native alarms are found in the highest-level storage object, the system will continue to periodically check for unreported native alarms in the highest-level storage object at preset time intervals. Native alarms refer to alarm information generated natively by the software; the preset time interval can be set according to the storage object management and maintenance needs, for example, to 10 seconds.

[0070] Regarding whether to trigger alarm aggregation, if the number of unreported native alarms in the highest-level storage object is less than a first preset number, it is considered that the number of unreported native alarms in the highest-level storage object is too small, and alarm aggregation is not necessary; therefore, triggering alarm aggregation is prohibited. If the number of unreported native alarms in the highest-level storage object is greater than or equal to the first preset number, then alarm aggregation is triggered. The first preset number can be set according to alarm aggregation requirements, for example, to 10.

[0071] More specifically, this invention can also periodically check whether the highest-level storage object has any unreported native alarms within a preset historical time period adjacent to the current time for checking the highest-level storage object for unreported native alarms based on a preset time interval. The preset historical time period can also be set according to alarm aggregation requirements, for example, set to 60 seconds.

[0072] Step S12: If the current storage level is not the preset minimum storage level, determine the next level storage object that contains no reported native alarms from the current level storage objects to obtain the target storage object. Based on the total number of objects in the target storage object, determine whether to determine the current level storage object as the storage object to be aggregated. If not, determine the target storage object as the new current level storage object and jump back to the step of obtaining the current storage level that contains no reported native alarms.

[0073] In this embodiment of the invention, after obtaining the current storage level of the current-level storage object, it is necessary to determine whether the current storage level of the current-level storage object is a preset minimum storage level. If the current storage level is not the preset minimum storage level, it indicates that there is a next-level storage object in the current-level storage object. Therefore, the next-level storage object containing no reported native alarms is determined from the current-level storage object, and the target storage object is determined based on the next-level storage object containing no reported native alarms. Then, based on the total number of objects in the target storage object, it is determined whether the current-level storage object is determined as a storage object to be aggregated. If the current-level storage object is not determined as a storage object to be aggregated based on the total number of objects, the target storage object is determined as a new current-level storage object, and the process jumps back to step S11, which involves obtaining the current storage level of the current-level storage object containing no reported native alarms.

[0074] For the target storage object, it is necessary to first identify the next-level storage object containing unreported native alarms from the current-level storage object, and then determine whether the number of next-level storage objects is less than a second preset number. The second preset number can be set according to alarm aggregation requirements, for example, to 2. If the number of next-level storage objects is less than the second preset number, the next-level storage object is directly identified as the target storage object. If the number of next-level storage objects is greater than or equal to the second preset number, the target storage object is determined from the next-level storage object based on the number of unreported native alarms within that next-level storage object.

[0075] Specifically, if the number of next-level storage objects is greater than or equal to the second preset number, the average number of alarms for the next-level storage objects is determined based on the number of native alarms not reported in the current-level storage objects and the number of next-level storage objects. Based on the average number of alarms, the object filtering conditions for the target storage objects are determined. Then, storage objects whose number of native alarms not reported meet the object filtering conditions are filtered from the next-level storage objects to obtain the target storage objects.

[0076] For example, after determining the average number of alarms for the next-level storage object, the maximum value is determined from the preset minimum alarm number and the preset percentage of the average alarm number. This maximum value is then used to determine the object filtering criteria for the target storage object. For instance, the object filtering criteria could be that the number of unreported native alarms in the next-level storage object is greater than or equal to the maximum value. Both the preset minimum alarm number and the preset percentage can be set according to alarm aggregation requirements. For example, the preset minimum alarm number could be set to 2, and the preset percentage could be set to one-half.

[0077] More specifically, after determining the object filtering criteria for the target storage object, the initial object count of 0 is set as the current object count. Then, any unanalyzed storage object is selected from the next-level storage objects containing unreported native alarms as the current storage object to be analyzed. This analysis is performed to determine if the number of unreported native alarms in the current storage object meets the object filtering criteria. If the object filtering criteria are met, the current storage object to be analyzed is designated as the target storage object, and the current object count is incremented by one to obtain a new current object count. Then, it is determined whether all next-level storage objects containing unreported native alarms have been analyzed. If not, the process returns to the step of selecting any unanalyzed storage object from the next-level storage objects containing unreported native alarms; if all are analyzed, the current object count is set as the total number of objects in the target storage object. If the object filtering criteria are not met, it is further determined whether all next-level storage objects containing unreported native alarms have been analyzed.

[0078] According to one embodiment, the determination of whether to identify the current-level storage object as a storage object to be aggregated can be made by checking whether the total number of objects in the target storage object is less than a preset total number of objects. The preset total number of objects can be set according to alarm aggregation requirements, for example, to 2. If the total number of objects in the target storage object is not less than the preset total number of objects, then the current-level storage object is identified as a storage object to be aggregated; if the total number of objects in the target storage object is less than the preset total number of objects, then identifying the current-level storage object as a storage object to be aggregated is prohibited.

[0079] Step S13: If the current storage level is the preset minimum storage level, determine whether to identify the current storage object as a storage object to be aggregated based on the total number of alarms that have not reported native alarms in the current level storage object.

[0080] In this embodiment of the invention, after obtaining the current storage level of the current level storage object, if the current storage level of the current level storage object is the preset lowest storage level, that is, the current level storage object is the lowest level storage object among all levels of storage objects that has not reported native alarms, then based on the total number of alarms that have not reported native alarms in the current level storage object, it is determined whether to identify the current level storage object as a storage object to be aggregated.

[0081] Specifically, the decision to designate the current-level storage object as a storage object to be aggregated is made by determining whether the total number of alarms without reported native alarms in the current-level storage object is less than the preset total number of alarms. The preset total number of alarms can be set according to alarm aggregation requirements, for example, to 5. If the total number of alarms without reported native alarms in the current-level storage object is less than the preset total number of alarms, it indicates that there are relatively few unreported native alarms in the current-level storage object, and therefore the current-level storage object is not designated as a storage object to be aggregated. If the total number of alarms without reported native alarms in the current-level storage object is greater than or equal to the preset total number of alarms, it indicates that there are relatively many unreported native alarms in the current-level storage object, and therefore the current-level storage object is designated as a storage object to be aggregated.

[0082] Step S14: Aggregate the unreported native alarms in the identified storage objects to be aggregated to obtain the target aggregated alarms.

[0083] In this embodiment, whether the current level storage object is determined as the storage object to be aggregated based on the total number of objects of the target storage object, or based on the total number of alarms in the current level storage object that have not reported native alarms, it is necessary to aggregate the alarms of the unreported native alarms in the determined storage objects to be aggregated in order to obtain the target aggregated alarms.

[0084] After obtaining the target aggregated alarm, it is also necessary to determine the alarm level of the target aggregated alarm. Specifically, obtain the alarm levels of each unreported native alarm in the storage object to be aggregated, and determine the highest alarm level from each alarm level. If all alarm levels are consistent and the highest alarm level is not the preset highest level, then upgrade the highest alarm level, and determine the upgraded alarm level as the alarm level of the target aggregated alarm; if all alarm levels are inconsistent or the highest alarm level is the preset highest level, then determine the highest alarm level as the alarm level of the target aggregated alarm. The upgrade operation can be an operation that raises the highest alarm level by one level.

[0085] It should be noted that, in this embodiment of the invention, an alarm aggregation control switch can be set to control whether the alarm aggregation process for unreported native alarms is enabled. When the alarm aggregation control switch is off, unreported native alarms in each level of storage object are directly reported; when the alarm aggregation control switch is on, steps S11 to S14 are used to aggregate the unreported native alarms in each level of storage object before reporting them.

[0086] Furthermore, such as Figure 2As shown, after receiving the target aggregated alarm, it is necessary to report the target aggregated alarm. The reporting logic for the aggregated alarm is as follows: determine if there is a previously reported aggregated alarm among the reported alarms; if not, report the target aggregated alarm. If there is a previously reported aggregated alarm, determine whether to report the target aggregated alarm based on the hierarchy between the aggregate level of the previously reported aggregated alarm and the aggregate level of the target aggregated alarm.

[0087] The aggregation level of an aggregated alarm is determined based on the storage level of the aggregated storage object corresponding to the alarm. For example, the storage level of the aggregated storage object is used as the aggregation level of the alarm. Correspondingly, the aggregation level of an aggregated alarm is positively correlated with the storage level of the aggregated storage object. This positive correlation indicates that the aggregation level of the alarm and the storage level of the aggregated storage object change in the same direction; that is, the higher the storage level of the aggregated storage object, the higher the aggregation level of the alarm.

[0088] To determine whether to report the target aggregated alarm based on the hierarchical relationship between the aggregated levels of already reported aggregated alarms and the aggregated level of the target aggregated alarm, the specific steps include:

[0089] If a first reported aggregated alarm exists among the reported aggregated alarms, the system determines whether to clear the first reported aggregated alarm based on its alarm duration, and further determines whether to report the target aggregated alarm based on the clearing status of the first reported aggregated alarm. The aggregate level of the first reported aggregated alarm is higher than the aggregate level of the target aggregated alarm.

[0090] For example, if a first reported aggregated alarm exists among the reported aggregated alarms, it is determined whether the alarm duration of the first reported aggregated alarm has reached a preset duration. If the alarm duration of the first reported aggregated alarm has not reached the preset duration, the first reported aggregated alarm is not cleared, and correspondingly, the target aggregated alarm is not reported. If the alarm duration of the first reported aggregated alarm has reached the preset duration, the first reported aggregated alarm is cleared, and the target aggregated alarm is reported.

[0091] If there is no first reported aggregated alarm but there is a second reported aggregated alarm, the decision on whether to report the target aggregated alarm is based on the coverage of the first alarm information between the second reported aggregated alarm and the target aggregated alarm. The aggregation level of the second reported aggregated alarm is equal to the aggregation level of the target aggregated alarm.

[0092] For example, if there is no first reported aggregated alarm but there is a second reported aggregated alarm in the reported aggregated alarms, the coverage of the first alarm information between the second reported aggregated alarm and the target aggregated alarm is determined. If the first alarm information coverage indicates that the alarm information of the second reported aggregated alarm completely covers the alarm information of the target aggregated alarm, the alarm duration of the second reported aggregated alarm is reset, for example, the alarm duration of the second reported aggregated alarm is reset to 0, and the target aggregated alarm is deactivated. If the first alarm information coverage indicates that the alarm information of the second reported aggregated alarm does not completely cover the alarm information of the target aggregated alarm, the target aggregated alarm is reported.

[0093] If there are no first and second reported aggregated alarms among the reported aggregated alarms, but a third reported aggregated alarm exists, based on the coverage of second alarm information between the target aggregated alarm and the third reported aggregated alarm, it is determined whether to clear the third reported aggregated alarm and report the target aggregated alarm. The aggregation level of the third reported aggregated alarm is lower than the aggregation level of the target aggregated alarm.

[0094] For example, if there are no first and second reported aggregated alarms in the reported aggregated alarms, but a third reported aggregated alarm exists, the coverage of second alarm information between the target aggregated alarm and the third reported aggregated alarm is determined. If the second alarm information coverage indicates that the alarm information of the target aggregated alarm completely covers the alarm information of the third reported aggregated alarm, then the third reported aggregated alarm is cleared, and the target aggregated alarm is reported. If the second alarm information coverage indicates that the alarm information of the target aggregated alarm does not completely cover the alarm information of the third reported aggregated alarm, then the target aggregated alarm is reported directly.

[0095] In this embodiment of the invention, if the current level storage object is determined as a storage object to be aggregated based on the total number of objects, or based on the total number of alarms, or if the current level storage object is not determined as a storage object to be aggregated based on the total number of alarms, then it is determined whether there are any unaggregated native alarms among the unreported native alarms participating in alarm aggregation this time; if so, the unaggregated native alarms are determined from the unreported native alarms participating in alarm aggregation this time, and the unaggregated native alarms are reported based on the already reported aggregated alarms and the already reported native alarms.

[0096] Specifically, such as Figure 3 As shown, the non-aggregated native alarms are identified from the non-reported native alarms participating in this alarm aggregation, and it is determined whether there is a fourth reported aggregated alarm among the reported aggregated alarms; wherein, the alarm information of the fourth reported aggregated alarm completely covers the alarm information of the non-aggregated native alarms.

[0097] If there is no fourth reported aggregated alarm in the reported aggregated alarms, a preset judgment operation is performed to determine whether to report the unaggregated native alarm based on the coverage of third alarm information between each reported native alarm and the unaggregated native alarm. Specifically, if the coverage of third alarm information between any reported native alarm and the unaggregated native alarm indicates that the alarm information of any reported native alarm completely covers the alarm information of the unaggregated native alarm, then the alarm duration of any reported native alarm is reset and the unaggregated native alarm is cleared; if the coverage of third alarm information between any reported native alarm and the unaggregated native alarm indicates that the alarm information of any reported native alarm does not completely cover the alarm information of the unaggregated native alarm, then the unaggregated native alarm is reported.

[0098] If a fourth reported aggregated alarm exists among the reported aggregated alarms, determine whether to clear the fourth reported aggregated alarm based on the alarm duration of the fourth reported aggregated alarm, and determine whether to perform a preset judgment operation based on the alarm clearing status of the fourth reported aggregated alarm.

[0099] In other words, if a fourth reported aggregated alarm exists among the reported aggregated alarms, it is determined whether the alarm duration of the fourth reported aggregated alarm has reached a preset duration. If the alarm duration of the fourth reported aggregated alarm has not reached the preset duration, the fourth reported aggregated alarm will not be cleared, and the preset judgment operation will not be performed, nor will the unaggregated original alarms be reported. If the alarm duration of the fourth reported aggregated alarm has reached the preset duration, the fourth reported aggregated alarm will be cleared, and the preset judgment operation will be performed.

[0100] Each aggregated alarm in this embodiment of the invention corresponds to a data structure table, which records the basic information of the aggregated alarm. The data structure table for aggregated alarms includes the alarm serial number, alarm level, aggregation level, alarm details, alarm generation time, alarm reporting time, alarm duration, and alarm clearance time. The alarm serial number is used to identify the aggregated alarm, and each aggregated alarm has a unique serial number. The alarm details include the storage objects at each level involved in the aggregated alarm and the corresponding number of objects, the number of alarm categories of the original alarms involved in the aggregated alarm, and the number of alarms. The number of alarm categories can be determined based on the alarm category identifiers of the original alarms involved in the aggregated alarm; that is, the number of different category identifiers is determined based on the alarm category identifiers of the original alarms involved in the aggregated alarm, which serves as the number of alarm categories. The alarm duration of the aggregated alarm refers to the duration of the aggregated alarm after it has been reported.

[0101] For example, if the aggregated storage object corresponding to the aggregated alarm is a storage node, meaning the various levels of storage objects involved in the aggregated alarm include one storage node, then the alarm details of the aggregated alarm can be "x storage nodes generated a total of y native alarms of type z". If the aggregated storage object corresponding to the aggregated alarm is a storage pool, meaning the various levels of storage objects involved in the aggregated alarm include one storage pool and three storage nodes, then the alarm details of the aggregated alarm can be "m storage pools with a total of x storage nodes generated y native alarms of type z". If the aggregated storage object corresponding to the aggregated alarm is a cluster, meaning the various levels of storage objects involved in the aggregated alarm include one cluster, two storage pools, and three storage nodes, then the alarm details of the aggregated alarm can be "m storage pools in n clusters with a total of x storage nodes generated y native alarms of type z".

[0102] Since aggregated alarms are composed of multiple native alarms, the process of clearing aggregated alarms requires clearing the native alarms involved in the aggregated alarm in descending order of alarm level. Correspondingly, when clearing the native alarms involved in the aggregated alarm, the alarm level of the aggregated alarm can be continuously updated based on the uncleared native alarms involved in the aggregated alarm. For example, the highest alarm level of the uncleared native alarms involved in the aggregated alarm can be determined as the alarm level of the reported aggregated alarm, thereby continuously updating the alarm level of the aggregated alarm to continuously reduce the alarm level of the aggregated alarm, so that the alarm level of the aggregated alarm is consistent with the clearing status of the native alarms of the aggregated alarm.

[0103] Each native alarm in this embodiment of the invention corresponds to a data structure table, which records the basic information of the native alarm. The native alarm data structure table includes the alarm category identifier, alarm serial number, object name and object IP address (Internet Protocol Address) of the lowest-level storage object involved in the alarm, alarm generation time, alarm reporting time, alarm duration, alarm cancellation time, alarm level, aggregation identifier, and the alarm serial number of the aggregate alarm to which the native alarm belongs. Specifically, the alarm category identifier identifies the alarm category of the native alarm; different alarm category identifiers correspond to different alarm categories. The alarm serial number identifies the native alarm; different native alarms correspond to different alarm serial numbers. The alarm reporting time refers to the duration after the native alarm is reported. The aggregation identifier indicates whether the native alarm has been aggregated, including an aggregated identifier and a non-aggregated identifier, such as 1 and 0.

[0104] It should be noted that, regardless of whether it is the alarm duration of the aggregated alarm or the alarm duration of the native alarm, the corresponding alarm can be cleared when the alarm duration reaches the preset duration. However, during the alarm reporting process, the alarm duration of both the aggregated alarm and the native alarm may be reset.

[0105] Beneficial Effects: This invention analyzes storage objects containing unreported native alarms at each level to identify those containing a large number of lower-level storage objects or a large number of unreported native alarms as storage objects to be aggregated. Unreported native alarms within these storage objects are then aggregated before being reported. Compared to directly reporting native alarms, this invention, by aggregating alarms at the alarm reporting point, significantly reduces the number and frequency of alarm reports without splitting storage objects. This allows maintenance personnel to quickly find key information from alarm messages, thereby reducing the difficulty of storage object management and maintenance.

[0106] like Figure 4 and Figure 5 As shown, taking storage objects at various levels, including clusters, storage pools, and storage nodes, as examples, the alarm aggregation method of this invention is described in detail below.

[0107] Every 10 seconds, the cluster is periodically checked to see if there are any unreported native alarms in the last 60 seconds. If there are any unreported native alarms in the cluster in the last 60 seconds, it is determined whether the number of unreported native alarms in the cluster is not less than 10. If the number of unreported native alarms in the cluster is less than 10, the unreported native alarms in the cluster are reported directly.

[0108] If the number of unreported native alarms in the cluster is not less than 10, then the storage pool containing unreported native alarms in the cluster is determined, and it is determined whether the number of storage pools containing unreported native alarms in the cluster is not less than 2; if the number of storage pools containing unreported native alarms in the cluster is less than 2, then the storage pool containing unreported native alarms in the cluster is taken as the target storage pool, and a preset pool-level aggregation judgment operation is performed on the target storage pool.

[0109] If the number of storage pools in the cluster that have not reported native alarms is not less than 2, then initialize n=0, and analyze each storage pool in the cluster that has not reported native alarms. Select any unanalyzed storage pool from the cluster that has not reported native alarms as the current storage pool to be analyzed. Analyze the current storage pool to determine if the number of unanalyzed native alarms in the current storage pool is not less than the maximum value, where the maximum value = max(2, average number of alarms per pool / 2). The average number of alarms per pool is the average of the number of unanalyzed native alarms in the cluster and the number of storage pools in the cluster that have not reported native alarms. If the number of unanalyzed native alarms in the current storage pool to be analyzed is not less than the maximum value, then the current storage pool to be analyzed is designated as the target storage pool, and n=n+1 is updated. Then, determine if all storage pools in the cluster that have not reported native alarms have been analyzed. If not, return to the step of selecting any unanalyzed storage pool from the cluster that has not reported native alarms as the current storage pool to be analyzed. If all analyses are completed, determine if n is not less than 2. If n is not less than 2, perform cluster-level alarm aggregation on the unreported native alarms in the cluster to obtain the target aggregated alarm, and then report the target aggregated alarm. If n is less than 2, perform a preset pool-level aggregation judgment operation on the target storage pool. If the number of unreported native alarms in the current storage pool to be analyzed is less than the maximum value, further determine whether all storage pools in the cluster containing unreported native alarms have been analyzed.

[0110] During the process of performing a preset pool-level aggregation judgment operation on the target storage pool, storage nodes that have not reported native alarms are identified from the target storage pool, and it is determined whether the number of storage nodes that have not reported native alarms in the target storage pool is not less than 2. If the number of storage nodes that have not reported native alarms in the target storage pool is less than 2, then the storage nodes that have not reported native alarms in the target storage pool are taken as target storage nodes, and a preset node-level aggregation judgment operation is performed on the target storage nodes.

[0111] If the number of storage nodes in the target storage pool that have not reported native alarms is not less than 2, then initialize nn=0 and perform node-by-node analysis on the storage nodes in the target storage pool that have not reported native alarms. Take any unanalyzed storage node in the target storage pool that has not reported native alarms as the current storage node to be analyzed. Analyze the current storage node to determine if the number of unreported native alarms in the current storage node is not less than the maximum value, where the maximum value = max(2, average number of alarms per node / 2). The average number of alarms per node is the average value determined based on the number of unreported native alarms in the target storage pool and the number of storage nodes in the target storage pool that have not reported native alarms. If the number of unreported native alarms in the current storage node to be analyzed is not less than the maximum value, then determine the current storage node to be analyzed as the target storage node, update nn=nn+1, and then determine if all storage nodes in the target storage pool that have not reported native alarms have been analyzed. If the analysis is not complete, the process jumps back to the step of selecting any unanalyzed storage node from the target storage pool containing unreported native alarms as the current storage node to be analyzed. If the analysis is complete, it is determined whether nn is not less than 2; if nn is not less than 2, pool-level alarm aggregation is performed on the unreported native alarms in the target storage pool to obtain the target aggregated alarm, and the target aggregated alarm is reported; if nn is less than 2, a preset node-level aggregation judgment operation is performed on the target storage node. If the number of unreported native alarms in the current storage node to be analyzed is less than the maximum value, it is further determined whether all storage nodes in the target storage pool containing unreported native alarms have been analyzed.

[0112] During the preset node-level aggregation judgment operation on the target storage node, it is determined whether the number of unreported native alarms in the target storage node is not less than 5. If the number of unreported native alarms in the target storage node is not less than 5, then node-level alarm aggregation is performed on the unreported native alarms in the target storage node to obtain the target aggregated alarm, and the target aggregated alarm is reported. If the number of unreported native alarms in the target storage node is less than 5, then node-level alarm aggregation is not performed on the unreported native alarms in the target storage node.

[0113] Beneficial Effects: This invention analyzes clusters containing unreported native alarms hierarchically, following the order of cluster, storage pool, and storage node. Storage objects containing a large number of lower-level storage objects or a large number of unreported native alarms are identified as storage objects to be aggregated. Unreported native alarms within these storage objects are then aggregated before being reported. Compared to directly reporting native alarms, this invention, by aggregating alarms at the alarm reporting stage, significantly reduces the number and frequency of alarm reports without splitting the cluster. This allows operations and maintenance personnel to quickly find key information from alarm messages, thereby reducing the difficulty of cluster management and maintenance.

[0114] See Figure 6 As shown, an embodiment of the present invention provides an alarm aggregation device, comprising:

[0115] Storage level acquisition module 11 is used to acquire the current storage level of the current level storage object that has not reported native alarms;

[0116] The first object determination module 12 is used to determine the next level storage object containing the unreported native alarm from the current level storage object if the current storage level is not the preset minimum storage level, so as to obtain the target storage object, and determine whether to determine the current level storage object as the storage object to be aggregated based on the total number of objects of the target storage object. If not, the target storage object is determined as the new current level storage object, and the process jumps back to the step of obtaining the current storage level containing the current level storage object containing the unreported native alarm.

[0117] The second object determination module 13 is used to determine whether to determine the current level storage object as a storage object to be aggregated based on the total number of alarms that have not reported native alarms in the current level storage object if the current storage level is the preset minimum storage level.

[0118] The alarm aggregation module 14 is used to aggregate unreported native alarms in the identified storage objects to be aggregated in order to obtain the target aggregated alarms.

[0119] Since the embodiments of the device part correspond to the embodiments described above, please refer to the embodiments described in the method part for the embodiments of the device part, and will not be repeated here.

[0120] Beneficial Effects: This invention analyzes storage objects containing unreported native alarms at each level to identify those containing a large number of lower-level storage objects or a large number of unreported native alarms as storage objects to be aggregated. Unreported native alarms within these storage objects are then aggregated before being reported. Compared to directly reporting native alarms, this invention, by aggregating alarms at the alarm reporting point, significantly reduces the number and frequency of alarm reports without splitting storage objects. This allows maintenance personnel to quickly find key information from alarm messages, thereby reducing the difficulty of storage object management and maintenance.

[0121] Furthermore, embodiments of this application also disclose an electronic device, Figure 7 This is a structural diagram of an electronic device according to an exemplary embodiment. The content of the diagram should not be construed as limiting the scope of this application. Specifically, the electronic device may include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 stores a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the alarm aggregation method disclosed in any of the foregoing embodiments. Furthermore, the electronic device in this embodiment may specifically be an electronic computer.

[0122] In this embodiment, the power supply 23 is used to provide operating voltage for various hardware devices on the electronic device; the communication interface 24 can create a data transmission channel between the electronic device and external devices, and the communication protocol it follows can be any communication protocol applicable to the technical solution of this application, and is not specifically limited here; the input / output interface 25 is used to acquire external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs, and is not specifically limited here.

[0123] In addition, the memory 22, as a carrier for resource storage, can be a read-only memory, random access memory, disk or optical disk, etc. The resources stored thereon can include operating system 221, computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0124] The operating system 221 is used to manage and control the various hardware devices on the electronic device and the computer program 222, which may be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program capable of performing the alarm aggregation method executed by the electronic device as disclosed in any of the foregoing embodiments, the computer program 222 may further include a computer program capable of performing other specific tasks.

[0125] Furthermore, this application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, it implements the aforementioned alarm aggregation method. Specific steps of this method can be found in the corresponding content disclosed in the foregoing embodiments, and will not be repeated here.

[0126] Furthermore, this application also discloses a computer program product, including a computer program / instructions; wherein, when the computer program / instructions are executed by a processor, they implement the aforementioned disclosed alarm aggregation method. Specific steps of this method can be found in the corresponding content disclosed in the foregoing embodiments, and will not be repeated here.

[0127] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to in the method section.

[0128] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0129] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein can be implemented directly by hardware, a software module executed by a processor, or a combination of both. The software module can be located in random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art.

[0130] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0131] The technical solutions provided in this application have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. An alarm aggregation method, characterized in that, include: Get the current storage level that contains the current level storage object that has not reported native alerts; If the current storage level is not the preset minimum storage level, then determine the next-level storage object that contains no reported native alarms from the current level storage objects to obtain the target storage object. Based on the total number of objects in the target storage object, determine whether to designate the current level storage object as a storage object to be aggregated. If not, designate the target storage object as the new current level storage object and jump back to the step of obtaining the current storage level containing the current level storage object that has not reported native alarms. If the total number of objects is not less than the preset total number of objects, then the current level storage object is designated as a storage object to be aggregated. If the total number of objects is less than the preset total number of objects, then designating the current level storage object as a storage object to be aggregated is prohibited. If the current storage level is the preset minimum storage level, then the current level storage object is determined as a storage object to be aggregated based on the total number of alarms that have not reported native alarms in the current level storage object; wherein, if the total number of alarms is less than the preset total number of alarms, the current level storage object is prohibited from being determined as a storage object to be aggregated, and if the total number of alarms is not less than the preset total number of alarms, the current level storage object is determined as a storage object to be aggregated. The unreported native alarms in the identified storage objects to be aggregated are aggregated to obtain the target aggregated alarms; The step of determining the next-level storage object containing unreported native alarms from the current-level storage object to obtain the target storage object includes: Identify the next-level storage object from the current-level storage object that contains the unreported native alarm; If the number of the next-level storage objects is less than the second preset number, then the next-level storage objects are determined as target storage objects; If the number of the next-level storage objects is not less than the second preset number, then the target storage object is determined from the next-level storage objects based on the number of native alarms that have not been reported in the next-level storage objects.

2. The alarm aggregation method according to claim 1, characterized in that, The storage level of each storage object is positively correlated with the storage capacity of that storage object. The storage objects at each level include any one or a combination of cluster-level storage objects, pool-level storage objects, and node-level storage objects.

3. The alarm aggregation method according to claim 1, characterized in that, Before obtaining the current storage level of the current level storage object that contains no reported native alarms, the process also includes: Periodically check the highest-level storage object for any unreported native alarms at preset time intervals; If there are unreported native alarms in the highest-level storage object, then based on the relationship between the number of unreported native alarms in the highest-level storage object and a first preset number, it is determined whether to trigger an alarm aggregation operation; wherein, if the number of unreported native alarms in the highest-level storage object is less than the first preset number, the alarm aggregation operation is prohibited from being triggered; if the number of unreported native alarms in the highest-level storage object is not less than the first preset number, the alarm aggregation operation is triggered. If an alarm aggregation operation is triggered, the highest-level storage object will be determined as the current-level storage object.

4. The alarm aggregation method according to claim 1, characterized in that, The step of determining the target storage object from the next-level storage object based on the number of unreported native alarms includes: The average number of alarms for the next-level storage object is determined based on the number of unreported native alarms in the current-level storage object and the number of the next-level storage object. Determine the object filtering criteria for the target storage object based on the average number of alarms; The target storage object is obtained by filtering the number of storage objects that have not reported native alarms from the next-level storage objects and meeting the object filtering conditions.

5. The alarm aggregation method according to claim 1, characterized in that, After aggregating the unreported native alarms in the identified storage objects to be aggregated to obtain the target aggregated alarms, the process further includes: Obtain the alarm levels of the storage objects to be aggregated that have not reported native alarms, and determine the highest alarm level from among the alarm levels; If all alarm levels are the same and the highest alarm level is not the preset highest level, then the highest alarm level is upgraded, and the upgraded alarm level is determined as the alarm level of the target aggregated alarm; the upgrade operation is to raise the highest alarm level by one level. If the alarm levels are inconsistent or the highest alarm level is a preset highest level, then the highest alarm level is determined as the alarm level of the target aggregated alarm.

6. The alarm aggregation method according to any one of claims 1 to 5, characterized in that, After aggregating the unreported native alarms in the identified storage objects to be aggregated to obtain the target aggregated alarms, the process further includes: Determine if any aggregated alarms have been reported in the reported alarm list; If the reported aggregate alarm is among the reported alarms, then based on the high-low relationship between the aggregate level of the reported aggregate alarm and the aggregate level of the target aggregate alarm, it is determined whether to report the target aggregate alarm; wherein, the aggregate level of the aggregate alarm is determined based on the storage level of the aggregate storage object corresponding to the aggregate alarm. If the reported aggregated alarm is not among the reported alarms, then the target aggregated alarm will be reported.

7. The alarm aggregation method according to claim 6, characterized in that, The step of determining whether to report the target aggregated alarm based on the hierarchical relationship between the aggregation levels of the already reported aggregated alarms and the aggregation level of the target aggregated alarm includes: When a first reported aggregated alarm exists among the reported aggregated alarms, based on the alarm duration of the first reported aggregated alarm, it is determined whether to clear the first reported aggregated alarm, and based on the clearing status of the first reported aggregated alarm, it is determined whether to report the target aggregated alarm; the aggregation level of the first reported aggregated alarm is higher than the aggregation level of the target aggregated alarm; wherein, if the alarm duration of the first reported aggregated alarm does not reach a preset duration, clearing the first reported aggregated alarm is prohibited, and reporting the target aggregated alarm is prohibited; if the alarm duration of the first reported aggregated alarm reaches a preset duration, clearing the first reported aggregated alarm is performed, and reporting the target aggregated alarm is performed. If the first reported aggregated alarm does not exist in the reported aggregated alarms but the second reported aggregated alarm does exist, it is determined whether to report the target aggregated alarm based on the first alarm information coverage between the second reported aggregated alarm and the target aggregated alarm; the aggregation level of the second reported aggregated alarm is equal to the aggregation level of the target aggregated alarm. If neither the first nor the second reported aggregated alarm exists in the reported aggregated alarms, but a third reported aggregated alarm exists, based on the second alarm information coverage between the target aggregated alarm and the third reported aggregated alarm, it is determined whether to clear the third reported aggregated alarm and report the target aggregated alarm; the aggregation level of the third reported aggregated alarm is lower than the aggregation level of the target aggregated alarm; wherein, if the second alarm information coverage indicates that the alarm information of the target aggregated alarm completely covers the alarm information of the third reported aggregated alarm, then the third reported aggregated alarm is cleared; if the second alarm information coverage indicates that the alarm information of the target aggregated alarm does not completely cover the alarm information of the third reported aggregated alarm, then clearing the third reported aggregated alarm is prohibited.

8. The alarm aggregation method according to claim 7, characterized in that, The step of determining whether to report the target aggregated alarm based on the first alarm information coverage between the second reported aggregated alarm and the target aggregated alarm includes: If the first alarm information coverage indicates that the alarm information of the second reported aggregated alarm completely covers the alarm information of the target aggregated alarm, then the alarm duration of the second reported aggregated alarm is reset, and the target aggregated alarm is deactivated. If the first alarm information coverage indicates that the alarm information of the second reported aggregated alarm does not completely cover the alarm information of the target aggregated alarm, then the target aggregated alarm is reported.

9. The alarm aggregation method according to any one of claims 1 to 5, characterized in that, Also includes: If the current level storage object is determined as a storage object to be aggregated based on the total number of objects or the total number of alarms, or if the current level storage object is not determined as a storage object to be aggregated based on the total number of alarms, then the unaggregated native alarms are determined from the never-reported native alarms. If there is no fourth reported aggregated alarm in the reported aggregated alarms, a preset judgment operation is performed to determine whether to report the unaggregated native alarm based on the coverage of the third alarm information between each reported native alarm and the unaggregated native alarm; the alarm information of the fourth reported aggregated alarm completely covers the alarm information of the unaggregated native alarm. When the fourth reported aggregated alarm exists among the reported aggregated alarms, based on the alarm duration of the fourth reported aggregated alarm, it is determined whether to clear the fourth reported aggregated alarm, and based on the alarm clearing status of the fourth reported aggregated alarm, it is determined whether to execute the preset judgment operation.

Images