An archive room intelligent operation and maintenance and AI prevention and control method, device, equipment and medium

Abstract

The present application relates to the technical field of intelligent operation and maintenance, especially to an archive warehouse intelligent operation and maintenance and AI prevention and control method, device, equipment and medium, the method comprises: comparing the occurrence time sequence and determining the abnormal influence of each abnormal event in the abnormal event set, determining the trigger sequence and conduction influence relationship between each abnormal event, and constructing the abnormal event correlation chain based on the trigger sequence and conduction influence relationship, according to the abnormal event correlation chain, determining the leading abnormal event that causes subsequent abnormal expansion, according to the abnormal level of the leading abnormal event and the expansion state of each associated abnormal event, generating the corresponding linkage disposal priority result, according to the linkage disposal priority result, controlling the corresponding equipment to execute linkage disposal operation, obtaining disposal feedback result, according to the disposal feedback result, determining the leading abnormal event and the associated abnormal event, and generating the corresponding operation output result of the archive warehouse according to the determination result.

Description

Technical Field

[0001] This invention relates to the technical field of intelligent operation and maintenance, and in particular to a method, device, equipment and medium for intelligent operation and maintenance and AI prevention and control of archive storage. Background Technology

[0002] The operation of an archive storage facility involves environmental monitoring, equipment operation monitoring, and anomaly handling. When anomalies occur in the archive storage facility, there are often triggering and propagation relationships between different anomalies. For example, equipment operation anomalies may cause environmental anomalies, and environmental anomalies may lead to other anomalies as they continue to develop. Therefore, anomalies in the archive storage facility usually do not occur in isolation.

[0003] In existing technologies, the handling of anomalies in archive storage is mostly done by identifying and dealing with individual anomalies separately. There is a lack of comprehensive analysis of the order of occurrence and transmission relationship between multiple anomalies. When multiple anomalies occur at the same time, it is difficult to accurately determine the dominant anomaly that triggers the subsequent expansion of anomalies, and it is also difficult to distinguish the related anomalies triggered by the dominant anomaly, which can easily lead to an unreasonable order of handling.

[0004] In addition, existing technologies mostly use feedback results after anomaly handling only to determine whether the handling action has been completed, lacking processing to combine the anomaly extension relationship to determine the resolution of the dominant anomaly and related anomalies, making it difficult for the operation and maintenance output results to accurately reflect the actual anomaly resolution status of the archive storage. Summary of the Invention

[0005] To address the lack of analytical and processing methods for the correlation of abnormal events in archive storage facilities in existing technologies, this application provides a method, device, equipment, and medium for intelligent operation and maintenance and AI-based prevention and control of archive storage facilities.

[0006] The above-mentioned objective of this application is achieved through the following technical solution:

[0007] A method for intelligent operation and maintenance and AI-based prevention and control of archive storage facilities, comprising:

[0008] Obtain operational monitoring data corresponding to the archive storage room, and determine the set of abnormal events based on the operational monitoring data;

[0009] The occurrence sequence of each abnormal event in the abnormal event set is compared and the abnormal impact is determined to identify the trigger sequence relationship and the transmission impact relationship between each abnormal event. An abnormal event association chain is constructed based on the trigger sequence relationship and the transmission impact relationship.

[0010] Based on the abnormal event association chain, determine the dominant abnormal event that triggers the subsequent abnormal expansion, as well as the associated abnormal events triggered by the dominant abnormal event;

[0011] Based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event, a corresponding linkage handling priority result is generated.

[0012] Based on the priority result of the coordinated response, the corresponding equipment is controlled to perform the coordinated response operation, and the response feedback result is obtained;

[0013] Based on the feedback results of the handling, the dominant abnormal event and the associated abnormal event are determined to be resolved, and the corresponding operation and maintenance output results of the archive warehouse are generated based on the resolution determination results.

[0014] By adopting the above technical solution, the set of abnormal events is first determined based on operational monitoring data. Then, the occurrence sequence and abnormal impact of each abnormal event are analyzed. This allows for the identification of triggering and transmission relationships among multiple abnormal events, and further construction of an abnormal event association chain. This enables the formation of clear association paths for previously scattered abnormal changes during the operation of the archive storage facility. It facilitates the identification of the dominant abnormal event that triggers subsequent abnormal expansion and the associated abnormal events triggered by the dominant abnormal event, avoiding isolated judgments of multiple abnormalities. Based on this, the priority results of coordinated handling are generated by combining the abnormality level of the dominant abnormal event and the expansion status of the associated abnormal events. This allows coordinated handling operations to be carried out sequentially around the abnormal expansion chain, reducing the possibility of chaotic handling order. Furthermore, by correspondingly judging the handling feedback results after coordinated handling, the resolution status of the dominant abnormal event and associated abnormal events can be distinguished and processed. Based on the resolution judgment results, corresponding operation and maintenance output results are generated, making the identification, handling, and resolution judgment of abnormalities in the archive storage facility a seamless process.

[0015] In a preferred embodiment, this application can be further configured as follows: comparing the occurrence sequence of each abnormal event in the abnormal event set and determining its abnormal impact, to ascertain the triggering sequence and propagation effect among the abnormal events, includes:

[0016] Extract the occurrence time information, abnormal object information, and abnormal state change information corresponding to each abnormal event, and sort them according to the occurrence time information to obtain the abnormal event time sequence result;

[0017] Based on the time sequence results of the abnormal events, target abnormal events with earlier occurrence times and candidate abnormal events with later occurrence times are selected, and the abnormal object information corresponding to the target abnormal event and the abnormal object information corresponding to the candidate abnormal event are used to determine the association, so as to obtain the object association result.

[0018] When the object association result indicates that an association exists, an abnormality impact determination is performed based on the abnormal state change information corresponding to the target abnormal event and the abnormal state change information corresponding to the candidate abnormal event, and an impact determination result is obtained.

[0019] Based on the occurrence time information of the target abnormal event, the occurrence time information of the candidate abnormal event, and the impact determination result, the triggering sequence relationship and the transmission influence relationship between the target abnormal event and the candidate abnormal event are determined.

[0020] By adopting the above technical solution, the occurrence time information corresponding to each abnormal event is first sorted to form an abnormal event time sequence result, clarifying the occurrence order between each abnormal event. Then, based on the abnormal event time sequence result, the preceding target abnormal event and the subsequent candidate abnormal event are selected, and the association is determined by combining the abnormal object information. This can narrow the judgment range between abnormal events from both the time sequence and object correspondence aspects, avoiding the mixed analysis of unrelated abnormal events. Furthermore, when the object association result indicates that there is a correlation, the abnormal impact is determined based on the abnormal state change information. This allows the impact relationship between abnormal events to be established on the basis of state change correspondence, thereby improving the pertinence of abnormal impact judgment. On this basis, by combining the occurrence time information corresponding to the target abnormal event, the occurrence time information corresponding to the candidate abnormal event, and the impact judgment result, the trigger sequence relationship and the transmission impact relationship between abnormal events are determined. This can unify the temporal sequence relationship and the state impact relationship between abnormal events, so that the construction of the subsequent abnormal event association chain has a clear basis.

[0021] In a preferred embodiment, this application can be further configured as follows: the construction of the abnormal event association chain based on the trigger sequence relationship and the transmission influence relationship includes:

[0022] Extract the abnormal event pairs from the abnormal event set that simultaneously possess the trigger sequence relationship and the propagation influence relationship, and connect each of the abnormal event pairs to obtain an initial abnormal event chain segment;

[0023] In cases where multiple preceding abnormal events correspond to the same subsequent abnormal event, the main transmission abnormal event is determined based on the transmission influence relationship between the multiple preceding abnormal events and the subsequent abnormal event, and the remaining preceding abnormal events are determined as branch abnormal events.

[0024] In the case where the same preceding abnormal event corresponds to multiple subsequent abnormal events, the abnormal expansion order of the multiple subsequent abnormal events is determined according to the triggering order relationship between the multiple subsequent abnormal events and the preceding abnormal event.

[0025] Based on the main transmission anomaly event, the branch anomaly events, and the anomaly expansion order, the initial anomaly event chain segments are merged to generate the anomaly event association chain.

[0026] By adopting the above technical solution, firstly, pairs of abnormal events that simultaneously possess trigger sequence and propagation influence relationships are screened from the set of abnormal events. These pairs are then connected to form initial abnormal event chains, clarifying the basic connections between abnormal events. Next, for cases where multiple preceding abnormal events correspond to the same subsequent abnormal event, the main propagating abnormal event and branch abnormal events are determined based on the propagation influence relationships between these events. This distinguishes multiple abnormal propagation paths converging on the same subsequent abnormal event, preventing multiple preceding abnormal events from being mixed together. Furthermore, for cases where the same preceding abnormal event corresponds to multiple subsequent abnormal events, the abnormal expansion order of these subsequent abnormal events is determined based on the trigger sequence relationships between each subsequent abnormal event and its preceding counterpart. This further clarifies the sequential relationships of the abnormal expansion paths. Based on this, the initial abnormal event chains are then merged by combining the main propagating abnormal event, branch abnormal events, and the abnormal expansion order. This allows the abnormal event association chain to simultaneously reflect the main propagation path, branch connection relationships, and abnormal expansion order between abnormal events.

[0027] In a preferred embodiment, this application can be further configured as follows: determining, based on the abnormal event association chain, the dominant abnormal event that triggers subsequent abnormal expansion, and the associated abnormal events triggered by the dominant abnormal event, includes:

[0028] Based on the number of subsequent connections, the number of branch expansions, and the scope of propagation impact corresponding to each abnormal event in the abnormal event association chain, determine the dominant result of abnormal expansion corresponding to each abnormal event;

[0029] Based on the abnormal expansion dominance result and the preset dominance determination rule, determine the dominant abnormal event in the abnormal event association chain;

[0030] Candidate anomalies affected by the dominant anomaly are identified by following the subsequent extension path of the dominant anomaly in the anomaly association chain.

[0031] Based on the triggering association results and transmission influence results between the dominant abnormal event and each of the candidate abnormal events, the associated abnormal events in each of the candidate abnormal events are determined.

[0032] By adopting the above technical solution, the dominant result of each abnormal event's expansion is first determined based on the number of subsequent connections, the number of branch expansions, and the scope of propagation influence corresponding to each abnormal event in the abnormal event association chain. This allows for the differentiation of the degree of dominance of each abnormal event in the subsequent abnormal expansion process. Then, by combining the dominant result of abnormal expansion with the preset dominance judgment rules, the dominant abnormal event in the abnormal event association chain is determined. This allows for the screening of abnormal sources that play a dominant role in the subsequent abnormal expansion from multiple abnormal events. Furthermore, by following the subsequent extension path of the dominant abnormal event in the abnormal event association chain, candidate abnormal events affected by the dominant abnormal event are determined. This allows for the inclusion of abnormal events with subsequent connection relationships with the dominant abnormal event in the subsequent analysis scope. On this basis, the associated abnormal events among the candidate abnormal events are determined based on the triggering association results and propagation influence results between the dominant abnormal event and each candidate abnormal event. This allows for the differentiation of abnormal events that are truly triggered and influenced by the dominant abnormal event to form an expansion association, thereby making the correspondence between the dominant abnormal event and the associated abnormal events clearer.

[0033] In a preferred embodiment, this application can be further configured as follows: generating corresponding linkage handling priority results based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event includes:

[0034] Based on the anomaly level, determine the dominant handling level corresponding to the dominant anomaly event;

[0035] Based on the expanded status, determine the expanded handling level corresponding to each of the associated abnormal events;

[0036] In the event of a conflict between the primary handling level and the extended handling level, the extended handling level corresponding to each associated abnormal event is corrected according to a preset linkage constraint rule to obtain the target handling level corresponding to each associated abnormal event.

[0037] Prioritize the actions based on the primary and target levels to generate the coordinated action priority results.

[0038] By adopting the above technical solution, the dominant handling level corresponding to the dominant abnormal event is first determined according to the abnormality level, which clarifies the handling position of the dominant abnormal event in the linkage handling process. Then, the extended handling level corresponding to each related abnormal event is determined according to the expansion status, which enables the handling order of each related abnormal event to correspond to the expansion status. Furthermore, in the case of a conflict between the dominant handling level and the extended handling level, the extended handling level corresponding to each related abnormal event is corrected according to the preset linkage constraint rules, which can coordinate the handling order between the dominant abnormal event and the related abnormal events and avoid overlapping or chaotic handling order. On this basis, priority is arranged according to the dominant handling level and the target handling level to generate the linkage handling priority result, which enables the linkage handling process to simultaneously reflect the priority handling position of the dominant abnormal event and the linkage handling order of the related abnormal events.

[0039] In a preferred embodiment, this application can be further configured as follows: controlling the corresponding device to perform a coordinated handling operation based on the coordinated handling priority result, and obtaining a handling feedback result, includes:

[0040] Based on the priority results of the coordinated handling, the master control handling operation corresponding to the dominant abnormal event is determined, and the collaborative handling operation corresponding to each of the associated abnormal events is determined.

[0041] Control the corresponding device to execute the main control processing operation, and adjust the start status of each of the collaborative processing operations according to the change status of the dominant abnormal event after the execution of the main control processing operation;

[0042] For each of the collaborative handling operations that are in the startup state, control the corresponding device to execute the corresponding collaborative handling operation, and determine the extended change state corresponding to each of the associated abnormal events;

[0043] The handling feedback result is generated based on the change status of the dominant abnormal event, the extended change status of each associated abnormal event, and the operating status of the corresponding device.

[0044] By adopting the above technical solution, the main control operation corresponding to the dominant abnormal event and the collaborative operation corresponding to each associated abnormal event are first determined according to the priority result of the linkage response. This allows the dominant abnormal event and associated abnormal events to be associated with different response contents. Then, the corresponding equipment is controlled to execute the main control operation, and the activation status of each collaborative operation is adjusted according to the change status of the dominant abnormal event after the execution of the main control operation. This ensures that the activation of the collaborative operation corresponds to the change status of the dominant abnormal event. Furthermore, for each collaborative operation in the activation state, the corresponding equipment is controlled to execute the corresponding collaborative operation, and the extended change status corresponding to each associated abnormal event is determined. This ensures that the change status of each associated abnormal event is mapped one by one during the collaborative response process. Based on this, the response feedback result is generated by combining the change status of the dominant abnormal event, the extended change status corresponding to each associated abnormal event, and the operating status result of the corresponding equipment. This ensures that the response feedback result simultaneously reflects the corresponding changes of the dominant abnormal event, associated abnormal events, and corresponding equipment after the linkage response.

[0045] In a preferred embodiment, this application can be further configured as follows: the step of determining the resolution of the dominant abnormal event and the associated abnormal event based on the handling feedback result, and generating the corresponding operation and maintenance output result of the archive repository based on the resolution determination result, including:

[0046] Based on the change status of the dominant abnormal event and the operating status of the corresponding equipment in the handling feedback results, the dominant abnormal event is determined to be resolved, and the dominant resolution result is obtained.

[0047] Based on the extended change status and the corresponding device operation status results of each associated abnormal event in the processing feedback results, the associated abnormal events are determined to be resolved, and the association resolution result is obtained.

[0048] Based on the dominant resolution result and each of the associated resolution results, determine the abnormal resolution combination result;

[0049] If the combined result of the anomaly resolution indicates that the dominant anomaly event and each of the associated anomaly events have been resolved, an anomaly resolution operation and maintenance output result is generated.

[0050] If the combined result of the anomaly resolution indicates that the dominant anomaly event has been resolved and at least one of the associated anomaly events has not been resolved, a continuous tracking operation and maintenance output result is generated.

[0051] If the combined result of the anomaly resolution indicates that the dominant anomaly event has not been resolved, an upgrade handling and maintenance output result is generated.

[0052] By adopting the above technical solution, the dominant abnormal event is first determined based on the change status of the dominant abnormal event and the operating status of the corresponding equipment in the handling feedback results. This clarifies the resolution status of the dominant abnormal event after coordinated handling. Then, based on the extended change status of each associated abnormal event and the operating status of the corresponding equipment in the handling feedback results, the resolution status of each associated abnormal event after coordinated handling is determined. Furthermore, by combining the dominant resolution result and the resolution results of each associated abnormal event, a combined anomaly resolution result is determined, which unifies the resolution status of the dominant abnormal event and associated abnormal events. On this basis, based on the combined anomaly resolution result, anomaly resolution operation and maintenance output results, continuous tracking operation and maintenance output results, and upgraded handling operation and maintenance output results are generated respectively. This allows different resolution statuses to correspond to different operation and maintenance output contents, making the anomaly judgment and operation and maintenance handling after coordinated handling more targeted.

[0053] The second objective of this invention is achieved through the following technical solution:

[0054] An intelligent operation and maintenance and AI-based prevention and control device for archive storage facilities, comprising:

[0055] An abnormal event generation module is used to obtain the operation monitoring data corresponding to the archive storage room and determine the abnormal event set based on the operation monitoring data;

[0056] An abnormal association chain construction module is used to compare the occurrence time of each abnormal event in the abnormal event set and determine the abnormal impact, determine the trigger sequence relationship and the transmission impact relationship between each abnormal event, and construct an abnormal event association chain based on the trigger sequence relationship and the transmission impact relationship;

[0057] An anomaly dominance identification module is used to determine, based on the anomaly event association chain, the dominant anomaly event that triggers subsequent anomaly expansion, and the associated anomaly events triggered by the dominant anomaly event.

[0058] The linkage priority generation module is used to generate corresponding linkage handling priority results based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event.

[0059] The coordinated response execution module is used to control the corresponding device to perform coordinated response operations based on the coordinated response priority result, and to obtain the response feedback result.

[0060] The operation and maintenance output generation module is used to determine the resolution of the dominant abnormal event and the associated abnormal event based on the handling feedback result, and generate the operation and maintenance output result corresponding to the archive warehouse based on the resolution determination result.

[0061] By adopting the above technical solution, the set of abnormal events is first determined based on operational monitoring data. Then, the occurrence sequence and abnormal impact of each abnormal event are analyzed. This allows for the identification of triggering and transmission relationships among multiple abnormal events, and further construction of an abnormal event association chain. This enables the formation of clear association paths for previously scattered abnormal changes during the operation of the archive storage facility. It facilitates the identification of the dominant abnormal event that triggers subsequent abnormal expansion and the associated abnormal events triggered by the dominant abnormal event, avoiding isolated judgments of multiple abnormalities. Based on this, the priority results of coordinated handling are generated by combining the abnormality level of the dominant abnormal event and the expansion status of the associated abnormal events. This allows coordinated handling operations to be carried out sequentially around the abnormal expansion chain, reducing the possibility of chaotic handling order. Furthermore, by correspondingly judging the handling feedback results after coordinated handling, the resolution status of the dominant abnormal event and associated abnormal events can be distinguished and processed. Based on the resolution judgment results, corresponding operation and maintenance output results are generated, making the identification, handling, and resolution judgment of abnormalities in the archive storage facility a seamless process.

[0062] The above-mentioned objective three of this application is achieved through the following technical solution:

[0063] A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the above-described intelligent operation and maintenance and AI prevention and control method for an archive storage facility.

[0064] The fourth objective of this application is achieved through the following technical solution:

[0065] A computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the aforementioned intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility.

[0066] In summary, this application includes at least one of the following beneficial technical effects:

[0067] First, an abnormal event set is determined based on operational monitoring data. Then, the occurrence sequence and impact of each abnormal event are analyzed to identify triggering and transmission relationships among multiple abnormal events. Furthermore, an abnormal event correlation chain is constructed, thus forming a clear correlation path for previously scattered abnormal changes during the operation of the archive storage. This facilitates the identification of the dominant abnormal event that triggers subsequent abnormal expansion and the associated abnormal events triggered by the dominant abnormal event, avoiding isolated judgments of multiple abnormalities. Based on this, the priority result of coordinated handling is generated by combining the abnormality level of the dominant abnormal event and the expansion status of associated abnormal events. This allows coordinated handling operations to be carried out sequentially around the abnormal expansion chain, reducing the possibility of chaotic handling order. Furthermore, by correspondingly judging the handling feedback results after coordinated handling, the resolution status of the dominant abnormal event and associated abnormal events can be distinguished and processed. Based on the resolution judgment result, corresponding operation and maintenance output results are generated, making the identification, handling, and resolution judgment of abnormalities in the archive storage operation a seamless process. Attached Figure Description

[0068] Figure 1 This is a flowchart of an intelligent operation and maintenance and AI prevention and control method for an archive storage facility according to one embodiment of this application.

[0069] Figure 2 This is a principle block diagram of an intelligent operation and maintenance and AI prevention and control device for an archive storage facility according to one embodiment of this application. Detailed Implementation

[0070] The present application will be further described in detail below with reference to the accompanying drawings.

[0071] In one embodiment, such as Figure 1 As shown, this application discloses an intelligent operation and maintenance and AI-based prevention and control method for archive storage, which specifically includes the following steps:

[0072] S10: Obtain the operation monitoring data corresponding to the archive storage room, and determine the set of abnormal events based on the operation monitoring data.

[0073] In this embodiment, operational monitoring data refers to the status record information formed around each monitored object during the operation of the archive storage room. The monitored object refers to the object whose status changes during the operation of the archive storage room and can be recorded. The abnormal event set refers to the set of multiple abnormal events identified based on the operational monitoring data.

[0074] Specifically, when acquiring operational monitoring data for the archive storage, the data acquisition relationship is first established according to the distribution of each monitored object within the archive storage. Then, at the preset acquisition time, the status record information corresponding to each monitored object is read, and the status record information corresponding to each monitored object is matched according to the acquisition time information to form operational monitoring data for the archive storage. When determining the set of abnormal events based on the operational monitoring data, each status record information in the operational monitoring data is compared one by one according to the preset abnormal identification conditions. The abnormal identification conditions refer to the discrimination conditions used to determine whether the monitored object is in an abnormal state. When the status value in the status record information exceeds the corresponding allowable range, the status identifier changes abnormally, or the same monitored object experiences a sudden change in status between consecutive acquisition times, the corresponding status record information is determined as abnormal status record information. Then, the corresponding abnormal events are generated according to the monitored object, abnormal type, and acquisition time information corresponding to the abnormal status record information, and multiple abnormal events are summarized according to the acquisition time order to determine the set of abnormal events.

[0075] S20: Compare the occurrence sequence and determine the impact of each abnormal event in the abnormal event set, determine the trigger sequence and transmission impact relationship between each abnormal event, and construct an abnormal event association chain based on the trigger sequence and transmission impact relationship.

[0076] In this embodiment, the trigger sequence relationship refers to the event relationship formed when two abnormal events have a corresponding triggering order in their occurrence sequence. The transmission influence relationship refers to the event relationship corresponding to the state change of the subsequent abnormal event after the occurrence of the preceding abnormal event. The abnormal event association chain refers to the chain relationship formed after sequentially associating multiple abnormal events according to the trigger sequence relationship and the transmission influence relationship.

[0077] Specifically, when comparing the occurrence time sequence of each abnormal event in the abnormal event set, the multiple abnormal events in the abnormal event set are first sorted by time according to the collection time information corresponding to each abnormal event, forming an abnormal event time sequence. Then, following the arrangement order in the abnormal event time sequence, preceding and subsequent abnormal events are selected sequentially, and the occurrence time interval between the preceding and subsequent abnormal events is compared. When the occurrence time interval is within the preset time sequence association range, the preceding and subsequent abnormal events are determined as candidate association events. When determining the abnormal impact of the preceding and subsequent abnormal events, the abnormal type, abnormal object, and abnormal state change process corresponding to the preceding abnormal event are compared with the abnormal type, abnormal object, and abnormal state change process corresponding to the subsequent abnormal event. The process is analyzed accordingly. When the abnormal state change process corresponding to the subsequent abnormal event has a sequential relationship with the abnormal state change process corresponding to the preceding abnormal event, and there is an operational association between the abnormal object corresponding to the preceding abnormal event and the abnormal object corresponding to the subsequent abnormal event, the relationship that the preceding abnormal event precedes the subsequent abnormal event is determined as the triggering sequence relationship, and the relationship that the preceding abnormal event affects the state change of the subsequent abnormal event is determined as the propagation influence relationship. After determining the triggering sequence relationship and the propagation influence relationship among multiple abnormal events, the abnormal events that have both triggering sequence relationship and propagation influence relationship are first sequentially connected to form corresponding abnormal event chain segments. Then, the abnormal events that can be connected end to end in multiple abnormal event chain segments are merged and connected to generate an abnormal event association chain.

[0078] S30: Based on the abnormal event association chain, determine the dominant abnormal event that triggers the subsequent abnormal expansion, as well as the associated abnormal events triggered by the dominant abnormal event.

[0079] In this embodiment, the dominant abnormal event refers to the abnormal event that triggers subsequent abnormal expansion in the abnormal event association chain and occupies a dominant position in the transmission, while the associated abnormal event refers to the abnormal event that is triggered by the dominant abnormal event to form an extended association in the abnormal event association chain.

[0080] Specifically, when determining the dominant abnormal event that triggers subsequent abnormal expansion based on the abnormal event association chain, the subsequent connection situation corresponding to each abnormal event is analyzed sequentially according to the connection order of the abnormal events in the abnormal event association chain. The subsequent connection situation refers to the number of abnormal events connected to the abnormal event in the abnormal event association chain, the branch connection situation, and the propagation extension situation. Then, combined with the propagation influence coverage of each abnormal event in the abnormal event association chain, the dominant result of the abnormal expansion corresponding to each abnormal event is determined. The dominant result of the abnormal expansion refers to the result information used to characterize the degree of dominance of the abnormal event in the subsequent abnormal expansion process. Then, based on the dominant result of the abnormal expansion corresponding to each abnormal event and the preset dominance judgment rule, the dominant abnormal event is determined in the abnormal event association chain. When determining the associated abnormal events triggered by the dominant abnormal event, the abnormal events that have a direct or indirect connection relationship with the dominant abnormal event are judged one by one along the subsequent connection direction of the dominant abnormal event in the abnormal event association chain. Based on the triggering order relationship and propagation influence relationship between each abnormal event and the dominant abnormal event, the abnormal events that are triggered by the dominant abnormal event to form an extended association are screened out, and the associated abnormal events are determined.

[0081] S40: Generate corresponding linkage handling priority results based on the anomaly level of the dominant abnormal event and the expansion status of each related abnormal event.

[0082] In this embodiment, the anomaly level refers to the level information used to characterize the degree of anomaly of the dominant anomaly event, the expansion state refers to the development state information of each associated anomaly event during the anomaly expansion process, and the linkage handling priority result refers to the handling sequence result information determined according to the anomaly level of the dominant anomaly event and the expansion state of each associated anomaly event.

[0083] Specifically, when generating corresponding coordinated response priority results based on the anomaly level of the dominant anomaly and the expansion status of each associated anomaly, the anomaly level of the dominant anomaly is first classified according to a pre-set classification rule to determine the dominant response level. The classification rule refers to the rules for determining the response level based on the severity range corresponding to the anomaly level. Then, the expansion status of each associated anomaly is classified according to a pre-set status classification rule to determine the expansion response level for each associated anomaly. The status classification rule refers to the rules for determining the response level based on the expansion range, expansion duration, and expansion connection status corresponding to the expansion status. After determining the dominant response level and each expansion response level, the dominant response level is... The primary handling level is compared with each extended handling level to determine whether there is a handling conflict between each extended handling level and the primary handling level. A handling conflict means that the extended handling level corresponding to the associated abnormal event is prior to or equal to the primary handling level corresponding to the primary abnormal event in terms of handling order. In the case of a handling conflict, the order of each extended handling level is corrected according to the preset linkage constraint rules to obtain the target handling level corresponding to each associated abnormal event. The preset linkage constraint rules refer to the rules that constrain the order of associated abnormal events that have an extended association with the primary abnormal event when the primary abnormal event is in a priority handling position. After the target handling level corresponding to each associated abnormal event is determined, the primary handling level and each target handling level are combined and arranged in order to generate the linkage handling priority result.

[0084] S50: Control the corresponding equipment to perform the linkage response operation based on the linkage response priority result, and obtain the response feedback result.

[0085] In this embodiment, the coordinated handling operation refers to the handling action performed on the corresponding device according to the coordinated handling priority result, and the handling feedback result refers to the feedback result information generated after the corresponding device performs the coordinated handling operation.

[0086] Specifically, when controlling the corresponding equipment to execute linkage handling operations based on the linkage handling priority results, the execution order and corresponding equipment for each linkage handling operation are first determined according to the order of the handling objects in the linkage handling priority results. The handling object refers to the abnormal corresponding object that needs to be handled by the linkage handling operation, and the execution order refers to the sequential arrangement of multiple linkage handling operations during the execution process. After determining the execution order and corresponding equipment, control content corresponding to each linkage handling operation is sent to each corresponding equipment according to the execution order. The control content refers to the action content used to cause the corresponding equipment to enter the target handling state. After the preceding linkage handling operation begins to execute, the changes in the operating status of the corresponding equipment and the linkage are monitored. The execution status of the corresponding dynamic handling operation is continuously judged. The change in operating status refers to the status change information formed by the corresponding equipment during the execution of the linkage handling operation. The execution status refers to the status information corresponding to the linkage handling operation during the execution process. When the judgment result indicates that the preceding linkage handling operation has been completed, the control process corresponding to the subsequent linkage handling operation is started. When the judgment result indicates that the preceding linkage handling operation has not been completed, the subsequent linkage handling operation is kept in a waiting state. After all linkage handling operations are completed, the changes in the operating status of each corresponding equipment before and after the execution of the linkage handling operation are summarized, and the execution status corresponding to each linkage handling operation is summarized to generate the handling feedback result.

[0087] S60: Based on the feedback results of the handling, determine the resolution of the main abnormal event and related abnormal events, and generate the corresponding operation and maintenance output results of the archive warehouse based on the resolution results.

[0088] In this embodiment, the resolution determination refers to the process of determining whether the dominant abnormal event and related abnormal events have been resolved based on the handling feedback results, and the operation and maintenance output results refer to the archive warehouse operation and handling result information generated based on the resolution determination results.

[0089] Specifically, when determining the resolution of dominant and related abnormal events based on the feedback results, the abnormal changes corresponding to the dominant abnormal event are first compared with the changes in the operating status of the corresponding equipment after the execution of the coordinated response operation and the execution status of each coordinated response operation, as shown in the feedback results. Abnormal changes refer to the state changes exhibited by the dominant abnormal event before and after the execution of the coordinated response operation. When the change in the operating status of the corresponding equipment matches the coordinated response objective of the dominant abnormal event, and the abnormal state of the dominant abnormal event no longer persists, the dominant abnormal event is determined to be resolved. When the change in the operating status of the corresponding equipment does not meet the coordinated response objective of the dominant abnormal event, or the abnormal state of the dominant abnormal event still persists, the dominant abnormal event is determined to be in an unresolved state. The resolution of the dominant abnormal event is then completed. After the judgment, based on the status changes after the execution of each coordinated handling operation in the handling feedback results, the expansion changes corresponding to each associated abnormal event are compared one by one. The expansion changes refer to the expansion status changes of the associated abnormal event before and after the execution of the coordinated handling operation. When the expansion status corresponding to the associated abnormal event stops extending and returns to the preset state range, the corresponding associated abnormal event is judged as a resolved state. When the expansion status corresponding to the associated abnormal event still extends or has not returned to the preset state range, the corresponding associated abnormal event is judged as a not resolved state. After completing the resolution judgment of the dominant abnormal event and each associated abnormal event, the resolution status corresponding to the dominant abnormal event and the resolution status corresponding to each associated abnormal event are combined and judged to generate a resolution judgment result. Based on the resolution judgment result, the corresponding operation and maintenance output results of the archive warehouse are generated.

[0090] In one embodiment, step S20 involves comparing the occurrence sequence of each abnormal event in the abnormal event set and determining its impact, thereby identifying the triggering order and propagation relationship between the abnormal events. This includes:

[0091] S201: Extract the occurrence time information, abnormal object information, and abnormal state change information corresponding to each abnormal event, and sort them according to the occurrence time information to obtain the abnormal event time sequence result.

[0092] In this embodiment, occurrence time information refers to the occurrence time record information corresponding to each abnormal event, abnormal object information refers to the abnormal object information corresponding to each abnormal event, abnormal state change information refers to the state change record information corresponding to each abnormal event during its occurrence, and abnormal event time sequence result refers to the time sequence arrangement result formed after sorting each abnormal event according to the occurrence time information.

[0093] Specifically, when processing the occurrence time information, abnormal object information, and abnormal state change information corresponding to each abnormal event, the event record content corresponding to each abnormal event is first read one by one according to the abnormal event record order in the abnormal event set. Then, the occurrence time information, abnormal object information, and abnormal state change information corresponding to each abnormal event are determined from the event record content. The occurrence time information is used to characterize the time when the abnormal event occurs, the abnormal object information is used to characterize the abnormal object involved in the abnormal event, and the abnormal state change information is used to characterize the state change of the abnormal event during the occurrence process. After determining the occurrence time information, abnormal object information, and abnormal state change information corresponding to each abnormal event, the occurrence time information corresponding to each abnormal event is uniformly compared, and the abnormal events are rearranged according to the chronological order. When the occurrence time information corresponding to multiple abnormal events is at the same time position, the order of the original records of each abnormal event in the abnormal event set is combined to arrange them sequentially, and finally, the abnormal event time sequence result corresponding to each abnormal event is formed.

[0094] S202: Based on the time sequence results of abnormal events, select the target abnormal event that occurred earlier and the candidate abnormal event that occurred later, and determine the association between the abnormal object information corresponding to the target abnormal event and the abnormal object information corresponding to the candidate abnormal event to obtain the object association result.

[0095] In this embodiment, the target abnormal event refers to the abnormal event that occurs in the preceding sequence of the abnormal event time sequence, the candidate abnormal event refers to the abnormal event that occurs in the following sequence of the abnormal event time sequence and is used for association determination, and the object association result refers to the association result information formed after determining the abnormal object information corresponding to the target abnormal event and the abnormal object information corresponding to the candidate abnormal event.

[0096] Specifically, when selecting target abnormal events and candidate abnormal events based on the timing of abnormal events, the abnormal events occurring earlier in the sequence are first identified as target abnormal events according to their order in the timing results. Then, the abnormal events occurring after the target abnormal events are identified as candidate abnormal events, thus establishing a sequential correspondence between the target and candidate abnormal events. When determining the association between the abnormal object information corresponding to the target abnormal event and the abnormal object information corresponding to the candidate abnormal event, the object type and object position of the abnormal object information corresponding to the target and candidate abnormal events are compared first. The object type comparison refers to comparing the object class to which the abnormal object belongs. Instead of performing a matching judgment, object location comparison refers to judging the corresponding position relationship of abnormal objects in the archive. When the object type comparison result indicates that the abnormal object corresponding to the target abnormal event and the abnormal object corresponding to the candidate abnormal event belong to the same object category, or when the object location comparison result indicates that there is a positional adjacency relationship, connection relationship, or function correspondence relationship between the abnormal object corresponding to the target abnormal event and the abnormal object corresponding to the candidate abnormal event, the target abnormal event and the candidate abnormal event are determined to have an object association relationship, and the corresponding object association result is generated. When neither the object type comparison result nor the object location comparison result meets the association condition, the target abnormal event and the candidate abnormal event are determined to have no object association relationship, and the corresponding object association result is generated.

[0097] S203: When the object association result indicates that there is an association, the abnormal impact is determined based on the abnormal state change information corresponding to the target abnormal event and the abnormal state change information corresponding to the candidate abnormal event, and the impact determination result is obtained.

[0098] In this embodiment, the impact determination result refers to the result information formed after determining the abnormal state change information corresponding to the target abnormal event and the abnormal state change information corresponding to the candidate abnormal event.

[0099] Specifically, when the object association result indicates an association, when determining the abnormal impact based on the abnormal state change information corresponding to the target abnormal event and the abnormal state change information corresponding to the candidate abnormal event, the abnormal state change information corresponding to the target abnormal event is first expanded according to the order of state change occurrence to determine the start, duration, and end of the state change during the occurrence of the target abnormal event. Then, the abnormal state change information corresponding to the candidate abnormal event is expanded according to the order of state change occurrence to determine the start, duration, and end of the state change during the occurrence of the candidate abnormal event. After expanding the abnormal state change information corresponding to both the target and candidate abnormal events, the direction, magnitude, and duration of the state change corresponding to the target abnormal event are compared with those of the candidate abnormal events. The process involves a line-by-line comparison. The direction of state change refers to the direction of change of the abnormal state from the initial state to the abnormal state. The magnitude of state change refers to the degree of change of the abnormal state relative to the initial state. The duration of state change refers to the duration of the abnormal state after it occurs. When the direction of state change corresponding to the candidate abnormal event is related to the direction of state change corresponding to the target abnormal event, and the magnitude and duration of state change corresponding to the candidate abnormal event are related to the state change process corresponding to the target abnormal event, it is determined that the target abnormal event has an abnormal influence on the candidate abnormal event, and an influence judgment result indicating that there is an influence is generated. When there is no related relationship between the direction of state change, magnitude and duration of state change corresponding to the candidate abnormal event and the state change process corresponding to the target abnormal event, it is determined that the target abnormal event does not have an abnormal influence on the candidate abnormal event, and an influence judgment result indicating that there is no influence is generated.

[0100] S204: Based on the occurrence time information of the target abnormal event, the occurrence time information of the candidate abnormal event, and the impact judgment result, determine the trigger sequence relationship and the transmission impact relationship between the target abnormal event and the candidate abnormal event.

[0101] In this embodiment, the trigger sequence relationship refers to the sequential correspondence between the target abnormal event and the candidate abnormal event in the order of their occurrence, and the transmission influence relationship refers to the relationship information corresponding to the abnormal influence of the target abnormal event on the candidate abnormal event.

[0102] Specifically, when determining the triggering sequence and transmission influence relationship between the target abnormal event and the candidate abnormal event based on the occurrence time information of the target abnormal event, the occurrence time information of the candidate abnormal event, and the influence determination result, the occurrence time information of the target abnormal event and the candidate abnormal event are first compared in terms of time sequence. When the occurrence time information of the target abnormal event is earlier than that of the candidate abnormal event, the target abnormal event is identified as the preceding abnormal event, and the candidate abnormal event is identified as the following abnormal event. Then, the influence determination result is combined to make a corresponding judgment. When the influence determination result indicates that the target abnormal event has an abnormal influence on the candidate abnormal event... When the target abnormal event is a preceding abnormal event and the candidate abnormal event is a subsequent abnormal event, the relationship between the target abnormal event and the candidate abnormal event is determined as the triggering sequence relationship, and the relationship in which the target abnormal event has an abnormal impact on the candidate abnormal event is determined as the transmission influence relationship. When the influence determination result indicates that the target abnormal event has no abnormal impact on the candidate abnormal event, only the time sequence correspondence between the target abnormal event and the candidate abnormal event is retained and the transmission influence relationship is not determined. When the occurrence time information corresponding to the target abnormal event and the occurrence time information corresponding to the candidate abnormal event do not have a corresponding order, the target abnormal event and the candidate abnormal event are not determined as the triggering sequence relationship.

[0103] In one embodiment, step S20, namely constructing an abnormal event association chain based on the trigger sequence and the transmission effect relationship, includes:

[0104] S205: Extract abnormal event pairs from the abnormal event set that have both a trigger sequence relationship and a propagation effect relationship, and connect the abnormal event pairs to obtain the initial abnormal event chain segment.

[0105] In this embodiment, an abnormal event pair refers to the event correspondence formed by two abnormal events in the abnormal event set that have both a trigger sequence relationship and a transmission influence relationship. The initial abnormal event chain segment refers to the initial chain segment formed by connecting multiple abnormal event pairs according to the event connection order.

[0106] Specifically, when processing pairs of abnormal events in an abnormal event set that simultaneously possess both a trigger sequence relationship and a propagation effect relationship, the trigger sequence relationship and propagation effect relationship between each abnormal event are first read one by one according to the event record order in the abnormal event set. Then, the preceding abnormal event that simultaneously satisfies the trigger sequence relationship and the following abnormal event are paired to form multiple abnormal event pairs. After determining multiple abnormal event pairs, they are compared sequentially according to the connection direction of the preceding and following abnormal events in each abnormal event pair. When the preceding abnormal event in the following abnormal event pair is the same as the following abnormal event in the preceding abnormal event pair, the corresponding two abnormal event pairs are connected end-to-end. When there is a continuous end-to-end correspondence between multiple abnormal event pairs, the sequential connection continues along the connection direction until it is impossible to continue connecting, thereby forming an initial abnormal event chain segment corresponding to the continuous connection relationship. When there is no end-to-end correspondence between multiple abnormal event pairs, the corresponding abnormal event pairs are retained as different initial abnormal event chains.

[0107] S206: When multiple preceding abnormal events correspond to the same subsequent abnormal event, the main propagating abnormal event is determined based on the propagation relationship between the multiple preceding and subsequent abnormal events, and the remaining preceding abnormal events are determined as branch abnormal events.

[0108] In this embodiment, the main conduction anomaly event refers to the preceding anomaly event that has a major conduction effect on the following anomaly event when multiple preceding anomalies correspond to the same following anomaly event. The branch anomaly event refers to other preceding anomalies that have a conduction effect relationship with the following anomaly event, other than the main conduction anomaly event, when multiple preceding anomalies correspond to the same following anomaly event.

[0109] Specifically, when dealing with situations where multiple preceding abnormal events correspond to the same subsequent abnormal event, the judgment is made based on the transmission influence relationship between these events. First, focusing on the same subsequent abnormal event, multiple preceding abnormal events with a transmission influence relationship are centrally mapped. Then, the transmission influence relationship content between the multiple preceding and subsequent abnormal events is read separately. This transmission influence relationship content refers to the influence connection, extension, and continuation when a preceding abnormal event influences a subsequent abnormal event. After mapping the transmission influence relationship content between multiple preceding and subsequent abnormal events, the completeness of the influence connection and the extension of the influence between each preceding and subsequent abnormal event are analyzed. The continuity and directness of the impact are compared. The continuity of the impact connection refers to whether the transmission connection between the preceding and subsequent abnormal events is complete. The continuity of the impact extension refers to whether the state change caused by the preceding abnormal event to the subsequent abnormal event is continuously extended. The directness of the impact refers to whether there is a direct connection between the state change corresponding to the subsequent abnormal event and the state change corresponding to the preceding abnormal event. After the comparison is completed, the main transmission abnormal event is determined from multiple preceding abnormal events according to the preset main transmission judgment rule. The preset main transmission judgment rule refers to the rule for judging the main transmission according to the continuity of the impact connection, the continuity of the impact extension, and the directness of the impact. Then, the remaining preceding abnormal events other than the main transmission abnormal event are determined as branch abnormal events.

[0110] S207: In cases where the same preceding abnormal event corresponds to multiple subsequent abnormal events, the abnormal expansion order of the multiple subsequent abnormal events is determined according to the triggering order relationship between the multiple subsequent abnormal events and the preceding abnormal event.

[0111] In this embodiment, the exception propagation order refers to the sequential arrangement of multiple subsequent exception events as they propagate along the preceding exception event when the same preceding exception event corresponds to multiple subsequent exception events.

[0112] Specifically, when dealing with multiple subsequent abnormal events corresponding to the same preceding abnormal event, and determining the abnormal expansion order of the multiple subsequent abnormal events based on their triggering sequence relationships with the preceding abnormal event, the process first involves merging the multiple subsequent abnormal events that have triggering sequence relationships with the same preceding abnormal event. Then, the triggering sequence relationship content between the multiple subsequent abnormal events and the preceding abnormal event is read separately. This triggering sequence relationship content refers to the record of the chronological order of occurrence between the preceding and subsequent abnormal events. This process is repeated after the completion of multiple subsequent abnormal events... After matching the trigger sequence of the event with the preceding abnormal event, the occurrence time positions of multiple subsequent abnormal events are compared. When there is a clear difference in the occurrence time positions of multiple subsequent abnormal events, the abnormal expansion order of multiple subsequent abnormal events is determined according to the order of occurrence time positions from front to back. When the occurrence time positions of multiple subsequent abnormal events are at the same time position, the order is determined by combining the arrangement position of multiple subsequent abnormal events in the abnormal event time sequence result, and the abnormal expansion order of multiple subsequent abnormal events is determined according to the order of the arrangement position from front to back.

[0113] S208: Based on the main transmission abnormal event, branch abnormal events, and the order of abnormal expansion, merge the initial abnormal event chain segments to generate an abnormal event association chain.

[0114] In this embodiment, the abnormal event association chain refers to the abnormal event chain association result formed by connecting and merging multiple initial abnormal event chain segments according to the main transmission abnormal event, branch abnormal events, and abnormal expansion order.

[0115] Specifically, when merging the initial abnormal event chains based on the main transmission abnormal event, branch abnormal events, and the abnormal expansion sequence, firstly, based on the corresponding position of the main transmission abnormal event in each initial abnormal event chain, the main chain segment connected to the main transmission abnormal event is determined. Then, based on the corresponding position of each branch abnormal event in each initial abnormal event chain, the branch chain segments connected to each branch abnormal event are determined. After determining the main chain segments and branch chain segments, each branch chain segment is connected to the position in the main chain segment corresponding to the subsequent abnormal event according to the connection correspondence between each branch abnormal event and the main transmission abnormal event. Then, according to the abnormal expansion sequence, the multiple link connection directions formed by the extension of the same preceding abnormal event to multiple subsequent abnormal events are arranged sequentially, and the corresponding initial abnormal event chains are sequentially spliced ​​according to the abnormal expansion sequence. When there is a head-to-tail connection relationship between multiple initial abnormal event chains, the initial abnormal event chains with a head-to-tail connection relationship are merged and connected until all chains corresponding to the main transmission abnormal event, branch abnormal events, and abnormal expansion sequence are merged, generating an abnormal event association chain.

[0116] In one embodiment, step S30, namely, determining the dominant abnormal event that triggers subsequent abnormal expansion and the associated abnormal events triggered by the dominant abnormal event, based on the abnormal event association chain, includes:

[0117] S301: Determine the dominant result of the abnormal expansion corresponding to each abnormal event based on the number of subsequent connections, the number of branch expansions, and the scope of propagation impact corresponding to each abnormal event in the abnormal event association chain.

[0118] In this embodiment, the number of subsequent connections refers to the number of abnormal events that are connected backward in the abnormal event association chain; the number of branch extensions refers to the number of branches formed by the abnormal event in different subsequent extension directions in the abnormal event association chain; the range of propagation influence refers to the range of abnormal events covered by the propagation influence formed by the abnormal event along the abnormal event association chain; and the result of abnormal expansion dominance refers to the result information formed after judging the degree of dominance of the abnormal event in the subsequent abnormal expansion process based on the number of subsequent connections, the number of branch extensions, and the range of propagation influence.

[0119] Specifically, when determining the dominant outcome of anomaly propagation for each anomaly event based on the number of subsequent connections, branch expansions, and the scope of propagation impact corresponding to each anomaly event in the anomaly event association chain, firstly, the number of anomaly events directly connected to each anomaly event is counted one by one along the connection direction in the anomaly event association chain to determine the number of subsequent connections for each anomaly event. Then, the different extension paths formed during the backward connection process of each anomaly event are distinguished. When the same anomaly event is connected to two or more different extension paths, the number of the corresponding different extension paths is determined as the number of branch expansions corresponding to the anomaly event. After completing the calculation of the number of subsequent connections and the number of branch expansions... After the initial determination, the distribution range of abnormal events that can be reached from each abnormal event is sequentially judged along the subsequent connection direction of each abnormal event in the abnormal event association chain. The number of abnormal events covered by the subsequent connection of each abnormal event and the coverage path range are determined as the corresponding propagation influence range. After the determination of the number of subsequent connections, the number of branch expansions and the propagation influence range corresponding to each abnormal event are completed, the number of subsequent connections, the number of branch expansions and the propagation influence range are combined accordingly. The degree of dominance of each abnormal event in the subsequent abnormal expansion process is judged according to the preset dominance judgment rule, and the abnormal expansion dominance result corresponding to each abnormal event is generated.

[0120] S302: Based on the abnormal expansion dominant result and the preset dominant judgment rule, determine the dominant abnormal event in the abnormal event association chain.

[0121] In this embodiment, the preset dominant determination rule refers to the rule for determining the dominant corresponding abnormal event in the abnormal event association chain based on the abnormal expansion dominant result.

[0122] Specifically, when determining the dominant abnormal event in the abnormal event association chain based on the abnormal expansion dominance result and the preset dominance judgment rule, the abnormal expansion dominance result corresponding to each abnormal event in the abnormal event association chain is first read one by one, and the abnormal expansion dominance result corresponding to each abnormal event is judged according to the preset dominance judgment rule. The preset dominance judgment rule may include the judgment content of the dominance degree corresponding interval in the abnormal expansion dominance result, the judgment content of the dominance degree corresponding order among multiple abnormal events, and the judgment content of further distinguishing abnormal events within the same dominance degree interval. After completing the judgment of the abnormal expansion dominance result corresponding to each abnormal event, candidate dominant abnormal events that meet the dominance correspondence condition are first screened out, and then the multiple candidate dominant abnormal events are compared according to the connection position of the abnormal events in the abnormal event association chain. The abnormal event located in the pre-order position of the abnormal propagation and meeting the dominance correspondence condition is determined as the dominant abnormal event. When only one abnormal event meets the dominance correspondence condition, the abnormal event that meets the dominance correspondence condition is directly determined as the dominant abnormal event.

[0123] S303: Identify candidate anomalies affected by the dominant anomaly by following the subsequent extension path of the dominant anomaly in the anomaly association chain.

[0124] In this embodiment, the subsequent extension path refers to the path relationship formed by the dominant abnormal event extending backward along the subsequent connection direction in the abnormal event association chain, and the candidate abnormal event refers to the abnormal event that has a subsequent connection relationship with the dominant abnormal event on the subsequent extension path and is used to influence the corresponding judgment.

[0125] Specifically, when determining candidate exceptions affected by the dominant exception along the subsequent extension path of the dominant exception in the exception event association chain, the process first locates the position within the chain corresponding to the dominant exception. Then, starting from the position within the chain corresponding to the dominant exception, the process sequentially traverses the subsequent connection direction in the exception event association chain, recording exceptions that have a direct subsequent connection relationship with the dominant exception. The exceptions corresponding to the direct subsequent connection relationship are determined as the first-level candidate exceptions. After determining the first-level candidate exceptions, the process continues along the subsequent connections of each first-level candidate exception in the exception event association chain. The process iterates through each layer in the following direction, recording exceptions that have subsequent connections to each first-level candidate exception event. These exceptions are then included in the candidate range in the order of their connections in the exception event association chain. When an exception event is located in the subsequent connection direction corresponding to the dominant exception event and has a continuous connection relationship with the dominant exception event, the corresponding exception event is identified as a candidate exception event affected by the dominant exception event. When an exception event does not have a continuous connection relationship with the dominant exception event, or when the corresponding connection direction is removed from the subsequent extension path where the dominant exception event is located, the corresponding exception event is not identified as a candidate exception event.

[0126] S304: Based on the triggering association results and transmission impact results between the dominant abnormal event and each candidate abnormal event, determine the associated abnormal events among each candidate abnormal event.

[0127] In this embodiment, the triggering association result refers to the association result information formed between the dominant abnormal event and the candidate abnormal event in the order of abnormal occurrence, and the transmission influence result refers to the result information corresponding to the abnormal transmission influence of the dominant abnormal event on the candidate abnormal event.

[0128] Specifically, when determining the associated anomalies among the candidate anomalies based on the triggering association results and transmission influence results between the dominant anomaly and each candidate anomaly, the triggering association results and transmission influence results corresponding to the dominant anomaly and each candidate anomaly are first read for each candidate anomaly. Then, the triggering association results and transmission influence results corresponding to each candidate anomaly are checked one by one. When the triggering association result corresponding to a candidate anomaly indicates that there is an anomaly occurrence sequence association between the dominant anomaly and the candidate anomaly, and the corresponding transmission influence result indicates that the dominant anomaly has an abnormal transmission influence on the candidate anomaly, the corresponding candidate anomaly is determined. To identify associated anomalies, if the triggering correlation result of a candidate anomaly only indicates a correlation in the order of anomaly occurrence but the corresponding propagation effect result does not indicate a propagation effect of anomaly, the corresponding candidate anomaly will not be identified as an associated anomaly. Similarly, if the propagation effect result of a candidate anomaly indicates a propagation effect of anomaly but the corresponding triggering correlation result does not indicate a correlation in the order of anomaly occurrence, the corresponding candidate anomaly will not be identified as an associated anomaly. After completing the one-to-one correspondence identification of each candidate anomaly, the candidate anomalies that meet the conditions of both triggering correlation result and propagation effect result are summarized to identify the associated anomalies among the candidate anomalies.

[0129] In one embodiment, step S40 involves generating a corresponding coordinated handling priority result based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event, including:

[0130] S401: Determine the dominant handling level corresponding to the dominant abnormal event based on the abnormality level.

[0131] In this embodiment, the dominant handling level refers to the handling level information determined based on the anomaly level corresponding to the dominant abnormal event.

[0132] Specifically, when determining the dominant handling level corresponding to the dominant abnormal event based on the abnormality level, the abnormality level content corresponding to the dominant abnormal event is first read, and the abnormality level content is compared with the pre-set level classification rules. The level classification rules refer to the rules for classifying according to the correspondence between the level range corresponding to the abnormality level and the handling level. In the comparison process, it is first determined which level range the abnormality level belongs to, and then the corresponding handling level is determined according to the level range in which the abnormality level is located. When the abnormality level is in a higher level range, the handling level corresponding to the higher level range is determined as the dominant handling level. When the abnormality level is in an intermediate level range, the handling level corresponding to the intermediate level range is determined as the dominant handling level. When the abnormality level is in a lower level range, the handling level corresponding to the lower level range is determined as the dominant handling level, thereby completing the determination of the dominant handling level corresponding to the dominant abnormal event.

[0133] S402: Determine the extended handling level corresponding to each associated abnormal event based on the extended status.

[0134] In this embodiment, the extended handling level refers to the handling level information determined based on the extended state corresponding to the associated abnormal event.

[0135] Specifically, when determining the extended handling level corresponding to each associated abnormal event based on the extended state, the extended state content corresponding to each associated abnormal event is first read. Then, the extended state content corresponding to each associated abnormal event is matched one by one with the pre-set state division rules. The state division rules refer to the rules for dividing according to the correspondence between the extended range, extended duration, extended connection status, and handling level of the extended state. In the matching process, it is first determined which state interval the extended state corresponding to each associated abnormal event belongs to, and then the corresponding handling level is determined according to the state interval in which the extended state corresponding to each associated abnormal event belongs. When the extended state corresponding to a certain associated abnormal event is in the extended range... When the state range is large, the extension duration is long, and the extension connection is complex, the handling level corresponding to the corresponding state range is determined as the corresponding extension handling level. When the extension state corresponding to a certain associated abnormal event is in a state range with a medium extension range, medium extension duration, and medium extension connection, the handling level corresponding to the corresponding state range is determined as the corresponding extension handling level. When the extension state corresponding to a certain associated abnormal event is in a state range with a small extension range, short extension duration, and few extension connections, the handling level corresponding to the corresponding state range is determined as the corresponding extension handling level, thereby completing the determination of the extension handling level corresponding to each associated abnormal event.

[0136] S403: In the event of a conflict between the primary handling level and the extended handling level, the extended handling level corresponding to each associated abnormal event is corrected according to the preset linkage constraint rules to obtain the target handling level corresponding to each associated abnormal event.

[0137] In this embodiment, a level conflict refers to a situation where the primary handling level and the extended handling level are inconsistent or overlap in their handling order. The target handling level refers to the handling level information determined after correcting the extended handling level.

[0138] Specifically, when there is a conflict between the primary handling level and the extended handling level, and when correcting the extended handling level corresponding to each associated abnormal event according to the preset linkage constraint rules, the primary handling level is first compared one by one with the extended handling level corresponding to each associated abnormal event. This determines whether there is a situation where the extended handling level precedes the primary handling level, is parallel to the primary handling level, or overlaps with the primary handling level. After determining that a level conflict exists, the corresponding extended handling level is then corrected according to the preset linkage constraint rules. The preset linkage constraint rules refer to the rules in place when the primary abnormal event... When a primary event is in a priority handling position, the rule for sequentially constraining the handling levels of related events that have an extended association with the primary event is as follows: During the correction process, the handling order corresponding to the primary handling level is kept unchanged. Then, the extended handling levels that conflict with the primary handling level are adjusted to their corresponding order positions after the primary handling level. When the extended handling levels corresponding to multiple related events all conflict with the primary handling level, they are arranged sequentially according to the original order of the extended handling levels among the related events, thereby completing the correction of the extended handling levels corresponding to each related event and obtaining the target handling level corresponding to each related event.

[0139] S404: Prioritize actions based on the primary and target handling levels to generate coordinated handling priority results.

[0140] In this embodiment, the priority result of coordinated handling refers to the priority result information formed by arranging the primary handling level and the target handling level in sequence.

[0141] Specifically, when prioritizing based on the dominant handling level and target handling level, the dominant handling level is first used as the basis for the handling order of the dominant abnormal event, and then the target handling level of each associated abnormal event is used as the basis for the handling order of the associated abnormal events. After determining the correspondence between the dominant handling level and each target handling level, the position of the handling order corresponding to the dominant handling level is first determined as the priority handling position, and then each target handling level is arranged sequentially after the dominant handling level according to the level correspondence order. When multiple target handling levels are at the same level position, they are arranged sequentially according to the subsequent extension order of each associated abnormal event in the abnormal event association chain, thereby forming the handling order corresponding to the dominant abnormal event and the handling order corresponding to each associated abnormal event. After completing the correspondence of all handling orders, the handling order corresponding to the dominant handling level and the handling order corresponding to each target handling level are combined to generate the linkage handling priority result.

[0142] In one embodiment, in step S50, the corresponding device is controlled to perform a coordinated handling operation based on the coordinated handling priority result to obtain the handling feedback result, including:

[0143] S501: Based on the priority results of the coordinated handling, determine the main control handling operation corresponding to the dominant abnormal event, and determine the collaborative handling operation corresponding to each related abnormal event.

[0144] In this embodiment, the master control operation refers to the coordinated handling operation performed on the dominant abnormal event, which is determined according to the priority result of the coordinated handling operation. The collaborative handling operation refers to the coordinated handling operation performed on each related abnormal event, which is determined according to the priority result of the coordinated handling operation.

[0145] Specifically, when determining the master control operation corresponding to the dominant abnormal event based on the priority results of the coordinated handling, and when determining the collaborative handling operations corresponding to each associated abnormal event, the handling order position corresponding to the dominant abnormal event and the handling order position corresponding to each associated abnormal event are first read from the priority results of the coordinated handling. Then, the corresponding judgment is made based on the abnormal type, abnormal object, and handling order position corresponding to the dominant abnormal event to determine the coordinated handling operation content matching the dominant abnormal event. The coordinated handling operation content matching the dominant abnormal event is determined as the master control operation. The coordinated handling operation content refers to the handling action content corresponding to the abnormal event. After determining the master control operation corresponding to the dominant abnormal event, the abnormal type, abnormal object, and handling order position corresponding to each associated abnormal event are matched one by one to determine the coordinated handling operation content matching each associated abnormal event. The coordinated handling operation content matching each associated abnormal event is determined as the collaborative handling operation. When there are differences in the handling order positions corresponding to multiple associated abnormal events, the execution order of each collaborative handling operation is determined according to the correspondence from front to back of the handling order position.

[0146] S502: Control the corresponding device to execute the main control handling operation, and adjust the start status of each collaborative handling operation according to the change status of the dominant abnormal event after the execution of the main control handling operation.

[0147] In this embodiment, the dominant abnormal event change state refers to the abnormal state change of the dominant abnormal event after the execution of the master control handling operation, and the start state refers to the start judgment state of each collaborative handling operation after the execution of the master control handling operation.

[0148] Specifically, when controlling the corresponding device to execute the main control handling operation and adjusting the start status of each collaborative handling operation according to the change in the dominant abnormal event after the execution of the main control handling operation, the corresponding device is first sent a handling execution command according to the control content corresponding to the main control handling operation. After receiving the handling execution command, the corresponding device enters the execution process corresponding to the main control handling operation. During the execution of the main control handling operation, the abnormal state change of the dominant abnormal event is continuously read. Continuous reading means that the state record information corresponding to the dominant abnormal event is obtained multiple times at preset time intervals. Then, the state record information formed by continuous reading is used to analyze the state change of the dominant abnormal event before and after the execution of the main control handling operation. The direction, magnitude, and duration of state changes are compared to generate the dominant abnormal event change state. After determining the dominant abnormal event change state, it is matched one by one with the activation judgment conditions corresponding to each collaborative handling operation. The activation judgment condition refers to the condition used to determine whether the collaborative handling operation has entered the activation state. When the dominant abnormal event change state meets the corresponding activation judgment condition, the corresponding collaborative handling operation is determined to be in the activation state. When the dominant abnormal event change state does not meet the corresponding activation judgment condition, the corresponding collaborative handling operation is determined to be in the non-activation state, thereby completing the adjustment of the activation state of each collaborative handling operation.

[0149] S503: For each collaborative handling operation in the startup state, control the corresponding device to execute the corresponding collaborative handling operation, and determine the extended change state corresponding to each associated abnormal event.

[0150] In this embodiment, the extended change state refers to the changes in the extended state of each associated abnormal event after the collaborative handling operation is executed.

[0151] Specifically, when controlling the corresponding devices to execute the corresponding collaborative handling operations in the initiation state, and determining the extended change states corresponding to each associated abnormal event, the corresponding execution devices are first determined for each collaborative handling operation in the initiation state. Then, execution instructions are sent to the corresponding devices according to the control content corresponding to each collaborative handling operation, causing the corresponding devices to enter the execution process corresponding to each collaborative handling operation. During the execution of each collaborative handling operation, the extended states corresponding to each associated abnormal event are continuously read according to the correspondence between each associated abnormal event and each collaborative handling operation. Continuous reading refers to repeatedly acquiring the state record information corresponding to each associated abnormal event at preset time intervals. After reading, the changes in the expansion range, the duration of expansion, and the changes in expansion connections of each associated abnormal event before and after the execution of the collaborative handling operation are compared one by one. The change in expansion range refers to the change in the abnormal expansion coverage of the associated abnormal event. The change in duration of expansion refers to the change in the maintenance of the abnormal expansion of the associated abnormal event. The change in expansion connections refers to the change in the subsequent connections of the associated abnormal event in the abnormal event association chain. When the corresponding comparison results show that the expansion range has shrunk, the duration of expansion has weakened, or the expansion connections have decreased, the corresponding change is determined as the expansion change state and recorded in accordance with the corresponding associated abnormal event, thereby completing the determination of the expansion change state of each associated abnormal event.

[0152] S504: Generate handling feedback results based on the change status of the dominant abnormal event, the extended change status of each associated abnormal event, and the operating status results of the corresponding equipment.

[0153] In this embodiment, the operating status result refers to the operating status record result formed by the corresponding device after performing the main control processing operation and the collaborative processing operation.

[0154] Specifically, when generating the handling feedback result based on the change status of the dominant abnormal event, the extended change status of each associated abnormal event, and the operating status of the corresponding equipment, the change status of the dominant abnormal event and the extended change status of each associated abnormal event are first summarized to form an abnormal change summary. Then, the operating status of each corresponding equipment that performed the main control handling operation and the collaborative handling operation after the handling is summarized to form an equipment operation summary. The operating status result can include the operation start-up status, operation maintenance status, and operation termination status of the corresponding equipment after the handling is executed. After the summarization of the abnormal change summary and the equipment operation summary is completed, the abnormal change summary and the equipment operation summary are matched item by item according to the correspondence between the main control handling operation and the collaborative handling operation. It is determined whether the change status of the dominant abnormal event is consistent with the operating status result of the equipment corresponding to the main control handling operation, and whether the extended change status of each associated abnormal event is consistent with the operating status result of the equipment corresponding to each collaborative handling operation. After the matching is completed, the change status of the dominant abnormal event, the extended change status of each associated abnormal event, and the operating status result of the corresponding equipment are combined according to the correspondence between the abnormal event and the handling operation to generate the handling feedback result.

[0155] In one embodiment, in step S50, the dominant abnormal event and related abnormal events are determined to be resolved based on the handling feedback results, and the operation and maintenance output results corresponding to the archive repository are generated based on the resolution determination results, including:

[0156] S501: Based on the change status of the dominant abnormal event and the operating status of the corresponding equipment in the handling feedback results, determine the resolution of the dominant abnormal event and obtain the dominant resolution result.

[0157] In this embodiment, the dominant resolution result refers to the result information formed after the dominant abnormal event is resolved.

[0158] Specifically, when determining the resolution of a dominant abnormal event based on the change status of the dominant abnormal event and the corresponding equipment's operational status in the handling feedback results, the process begins by first reading the change status of the dominant abnormal event from the handling feedback results, and simultaneously reading the operational status of the corresponding equipment that performed the main control handling operation after the handling execution. Then, the change status of the dominant abnormal event is compared with the abnormal status record corresponding to the dominant abnormal event before the handling execution to determine whether the abnormal status corresponding to the dominant abnormal event has stopped continuing, whether the magnitude of the abnormal change has decreased, and whether the abnormal change process has ended. After completing the comparison of the change status of the dominant abnormal event, the operational status of the corresponding equipment is then compared with the main control handling operation... The corresponding operational objectives are judged accordingly. The operational objectives refer to the operational state that the corresponding equipment should achieve after the execution of the master control operation. When the change in the state of the dominant abnormal event indicates that the abnormal state corresponding to the dominant abnormal event has stopped or recovered to the preset state range, and the operational state result of the corresponding equipment meets the operational objectives corresponding to the master control operation, the dominant abnormal event is judged as a resolved state, and a dominant resolved result is generated. When the change in the state of the dominant abnormal event still indicates that the abnormal state corresponding to the dominant abnormal event continues or has not recovered to the preset state range, or the operational state result of the corresponding equipment does not meet the operational objectives corresponding to the master control operation, the dominant abnormal event is judged as a not resolved state, and a dominant resolved result is generated.

[0159] S502: Based on the extended change status of each associated abnormal event and the operating status of the corresponding equipment in the handling feedback results, determine the removal of each associated abnormal event and obtain the association removal result.

[0160] In this embodiment, the association removal result refers to the result information formed after determining the removal of each associated abnormal event.

[0161] Specifically, based on the expansion and change states of each associated abnormal event and the operational status of the corresponding equipment in the handling feedback results, when determining the resolution of each associated abnormal event, firstly, according to the correspondence between each associated abnormal event and each collaborative handling operation, the expansion and change states corresponding to each associated abnormal event are read one by one from the handling feedback results, and simultaneously, the operational status of the corresponding equipment executing the corresponding collaborative handling operation is read after the handling is executed. Then, the expansion and change states corresponding to each associated abnormal event are compared with the expansion state records corresponding to each associated abnormal event before the handling is executed to determine whether the expansion range corresponding to each associated abnormal event has stopped extending, whether the expansion duration has weakened, and whether the expansion connection has decreased. After completing the comparison of the expansion and change states corresponding to each associated abnormal event, then... The corresponding device's operational status is matched with the operational objective of the corresponding collaborative handling operation. The operational objective refers to the operational status that the corresponding device should achieve after the collaborative handling operation is executed. When the expansion change status of a certain associated abnormal event indicates that the expansion range has stopped extending or has returned to the preset state range, and the operational status of the corresponding device meets the operational objective of the corresponding collaborative handling operation, the corresponding associated abnormal event is determined to be in a resolved state, and a resolution result is generated. When the expansion change status of a certain associated abnormal event still indicates that the expansion range continues to extend or has not returned to the preset state range, or the operational status of the corresponding device does not meet the operational objective of the corresponding collaborative handling operation, the corresponding associated abnormal event is determined to be in a not resolved state, and a resolution result is generated.

[0162] S503: Determine the abnormal removal combination result based on the dominant removal result and the related removal results.

[0163] In this embodiment, the abnormal resolution combination result refers to the result information formed after combining and judging the dominant resolution result and each associated resolution result.

[0164] Specifically, when determining the combined result of anomaly resolution based on the dominant resolution result and each associated resolution result, the resolution status of the dominant anomaly event in the dominant resolution result is read first. Then, the resolution status of each associated anomaly event in each associated resolution result is read one by one according to the corresponding order of each associated anomaly event. After reading the resolution status of the dominant anomaly event and each associated anomaly event, the resolution status of the dominant anomaly event and each associated anomaly event are combined and matched to determine whether the resolution status of the dominant anomaly event and each associated anomaly event is a complete resolution correspondence, a partial resolution correspondence, or a non-resolution correspondence. A complete resolution correspondence means that both the resolution status of the dominant anomaly event and each associated anomaly event are in a resolution state. A partial resolution correspondence means that both the resolution status of the dominant anomaly event and each associated anomaly event have a resolution state and a non-resolution state coexisting. A non-resolution correspondence means that neither the resolution status of the dominant anomaly event nor each associated anomaly event is in a resolution state. After completing the correspondence judgment, the corresponding judgment results are combined according to the corresponding order of the dominant anomaly event and the associated anomaly event to determine the combined result of anomaly resolution.

[0165] S504: If the abnormality resolution result indicates that both the dominant abnormal event and all related abnormal events have been resolved, generate the abnormality resolution operation and maintenance output result.

[0166] In this embodiment, the anomaly resolution operation and maintenance output result refers to the operation and maintenance output result generated when the anomaly resolution combination result indicates that both the dominant anomaly event and all related anomaly events have been resolved.

[0167] Specifically, when the anomaly resolution combination result indicates that both the dominant anomaly and all related anomalies have been resolved, the anomaly resolution operation and maintenance output result is generated by first reading the corresponding combination judgment content in the anomaly resolution combination result and confirming that the resolution status corresponding to the dominant anomaly and all related anomalies are both resolved. After confirming the anomaly resolution combination result, the resolution status corresponding to the dominant anomaly and all related anomalies is sequentially merged according to the corresponding order of the dominant anomaly and all related anomalies in the anomaly event association chain to form an anomaly resolution status summary. Then, the anomaly resolution status summary is combined with the corresponding equipment operation status result in the handling feedback result to form a resolution completion record. The resolution completion record refers to the record content used to represent that the dominant anomaly, related anomalies, and corresponding equipment operation status have all been resolved. After the resolution completion record is formed, the resolution status corresponding to the dominant anomaly, the resolution status corresponding to all related anomalies, and the corresponding equipment operation status result are integrated according to a preset output format to generate the anomaly resolution operation and maintenance output result.

[0168] S505: If the combined result of an anomaly resolution indicates that the dominant anomaly event has been resolved and at least one associated anomaly event has not been resolved, generate continuous tracking operation and maintenance output results.

[0169] In this embodiment, continuous tracking of operation and maintenance output results refers to the operation and maintenance output results generated when the abnormality resolution combination result indicates that the dominant abnormal event has been resolved and at least one related abnormal event has not been resolved.

[0170] Specifically, when the anomaly resolution combination result indicates that the dominant anomaly event has been resolved but at least one related anomaly event has not been resolved, when generating the continuous tracking operation and maintenance output result, the corresponding combination judgment content in the anomaly resolution combination result is first read, and the resolution status corresponding to the dominant anomaly event is confirmed to be resolved. At the same time, it is confirmed that there are unresolved states among the resolution statuses corresponding to each related anomaly event. After confirming the anomaly resolution combination result, the related anomaly events in the unresolved state are identified one by one according to the corresponding order of each related anomaly event in the anomaly event association chain. The resolution statuses corresponding to each unresolved related anomaly event are sequentially merged to form a continuous tracking status summary. Then, the continuous tracking status summary is combined with the corresponding extended change status and the corresponding equipment operation status result in the handling feedback result to form the tracking record content. The tracking record content refers to the record content used to represent that the dominant anomaly event has been resolved but the related anomaly events are still in a continuously changing state. After the formation of the tracking record content is completed, the resolution status corresponding to the dominant anomaly event, the resolution status corresponding to each unresolved related anomaly event, the corresponding extended change status, and the corresponding equipment operation status result are integrated according to the preset output format to generate the continuous tracking operation and maintenance output result.

[0171] S506: If the abnormality resolution result indicates that the dominant abnormal event has not been resolved, generate the upgrade handling operation and maintenance output result.

[0172] In this embodiment, the upgrade handling operation and maintenance output result refers to the operation and maintenance output result generated when the abnormality resolution combination result indicates that the dominant abnormal event has not been resolved.

[0173] Specifically, when the anomaly resolution combination result indicates that the dominant anomaly event has not been resolved, when generating the upgraded handling and maintenance output result, the corresponding combination judgment content in the anomaly resolution combination result is first read, and the resolution status corresponding to the dominant anomaly event is confirmed to be unresolved. After confirming the anomaly resolution combination result, the changes in the dominant anomaly event status, the extended changes in the corresponding related anomalies, and the corresponding equipment operation status results in the handling feedback result are merged to form the upgraded handling status summary. The upgraded handling status summary refers to the content used to characterize that the dominant anomaly event is still in an unresolved state after the execution of the coordinated handling operation. After the summary of the status of the upgraded handling is completed, the unresolved status of the dominant abnormal event is combined with the resolved status of each associated abnormal event to form the upgraded handling record content. The upgraded handling record content refers to the record content used to represent the unresolved status of the dominant abnormal event and the current resolved status of the associated abnormal events. After the upgraded handling record content is completed, the unresolved status of the dominant abnormal event, the resolved status of each associated abnormal event, the changed status of the dominant abnormal event, the extended changed status of each associated abnormal event, and the corresponding equipment operation status results are integrated according to the preset output format to generate the upgraded handling operation and maintenance output results.

[0174] It should be understood that the sequence number of each step in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0175] In one embodiment, an intelligent operation and maintenance and AI-based prevention and control device for archive storage is provided, which corresponds one-to-one with the intelligent operation and maintenance and AI-based prevention and control method for archive storage described in the above embodiments. For example... Figure 2 As shown, the intelligent operation and maintenance and AI prevention and control device for archive storage includes an abnormal event generation module, an abnormal association chain construction module, an abnormal dominant identification module, a linkage priority generation module, a linkage handling execution module, and an operation and maintenance output generation module.

[0176] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is used as an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0177] The above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application, and should all be included within the protection scope of this application.

Claims

1. A method for intelligent operation and maintenance and AI-based prevention and control of archive storage facilities, characterized in that, The aforementioned intelligent operation and maintenance and AI-based prevention and control method for archive storage includes: Obtain operational monitoring data corresponding to the archive storage room, and determine the set of abnormal events based on the operational monitoring data; The occurrence sequence of each abnormal event in the abnormal event set is compared and the abnormal impact is determined to identify the trigger sequence relationship and the transmission impact relationship between each abnormal event. An abnormal event association chain is constructed based on the trigger sequence relationship and the transmission impact relationship. Based on the abnormal event association chain, determine the dominant abnormal event that triggers the subsequent abnormal expansion, as well as the associated abnormal events triggered by the dominant abnormal event; Based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event, a corresponding linkage handling priority result is generated. Based on the priority result of the coordinated response, the corresponding equipment is controlled to perform the coordinated response operation, and the response feedback result is obtained; Based on the feedback results of the handling, the dominant abnormal event and the associated abnormal event are determined to be resolved, and the corresponding operation and maintenance output results of the archive warehouse are generated based on the resolution determination results.

2. The intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility according to claim 1, characterized in that, The step of comparing the occurrence sequence of each abnormal event in the abnormal event set and determining its abnormal impact to ascertain the triggering order and propagation effect among the abnormal events includes: Extract the occurrence time information, abnormal object information, and abnormal state change information corresponding to each abnormal event, and sort them according to the occurrence time information to obtain the abnormal event time sequence result; Based on the time sequence results of the abnormal events, target abnormal events with earlier occurrence times and candidate abnormal events with later occurrence times are selected, and the abnormal object information corresponding to the target abnormal event and the abnormal object information corresponding to the candidate abnormal event are used to determine the association, so as to obtain the object association result. When the object association result indicates that an association exists, an abnormality impact determination is performed based on the abnormal state change information corresponding to the target abnormal event and the abnormal state change information corresponding to the candidate abnormal event, and an impact determination result is obtained. Based on the occurrence time information of the target abnormal event, the occurrence time information of the candidate abnormal event, and the impact determination result, the triggering sequence relationship and the transmission influence relationship between the target abnormal event and the candidate abnormal event are determined.

3. The intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility according to claim 1, characterized in that, The construction of the abnormal event association chain based on the trigger sequence relationship and the transmission influence relationship includes: Extract the abnormal event pairs from the abnormal event set that simultaneously possess the trigger sequence relationship and the propagation influence relationship, and connect each of the abnormal event pairs to obtain an initial abnormal event chain segment; In cases where multiple preceding abnormal events correspond to the same subsequent abnormal event, the main transmission abnormal event is determined based on the transmission influence relationship between the multiple preceding abnormal events and the subsequent abnormal event, and the remaining preceding abnormal events are determined as branch abnormal events. In the case where the same preceding abnormal event corresponds to multiple subsequent abnormal events, the abnormal expansion order of the multiple subsequent abnormal events is determined according to the triggering order relationship between the multiple subsequent abnormal events and the preceding abnormal event. Based on the main transmission anomaly event, the branch anomaly events, and the anomaly expansion order, the initial anomaly event chain segments are merged to generate the anomaly event association chain.

4. The intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility according to claim 1, characterized in that, The step of determining the dominant abnormal event that triggers subsequent abnormal expansion, and the associated abnormal events triggered by the dominant abnormal event, based on the abnormal event association chain, includes: Based on the number of subsequent connections, the number of branch expansions, and the scope of propagation impact corresponding to each abnormal event in the abnormal event association chain, determine the dominant result of abnormal expansion corresponding to each abnormal event; Based on the abnormal expansion dominance result and the preset dominance determination rule, determine the dominant abnormal event in the abnormal event association chain; Candidate anomalies affected by the dominant anomaly are identified by following the subsequent extension path of the dominant anomaly in the anomaly association chain. Based on the triggering association results and transmission influence results between the dominant abnormal event and each of the candidate abnormal events, the associated abnormal events in each of the candidate abnormal events are determined.

5. The intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility according to claim 1, characterized in that, The step of generating corresponding coordinated handling priority results based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event includes: Based on the anomaly level, determine the dominant handling level corresponding to the dominant anomaly event; Based on the expanded status, determine the expanded handling level corresponding to each of the associated abnormal events; In the event of a conflict between the primary handling level and the extended handling level, the extended handling level corresponding to each associated abnormal event is corrected according to a preset linkage constraint rule to obtain the target handling level corresponding to each associated abnormal event. Prioritize the actions based on the primary and target levels to generate the coordinated action priority results.

6. The intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility according to claim 1, characterized in that, The step of controlling the corresponding device to perform the coordinated response operation based on the coordinated response priority result, and obtaining the response feedback result, includes: Based on the priority results of the coordinated handling, the master control handling operation corresponding to the dominant abnormal event is determined, and the collaborative handling operation corresponding to each of the associated abnormal events is determined. Control the corresponding device to execute the main control processing operation, and adjust the start status of each of the collaborative processing operations according to the change status of the dominant abnormal event after the execution of the main control processing operation; For each of the collaborative handling operations that are in the startup state, control the corresponding device to execute the corresponding collaborative handling operation, and determine the extended change state corresponding to each of the associated abnormal events; The handling feedback result is generated based on the change status of the dominant abnormal event, the extended change status of each associated abnormal event, and the operating status of the corresponding device.

7. The intelligent operation and maintenance and AI-based prevention and control method for an archive storage facility according to claim 1, characterized in that, The step involves determining the resolution of the dominant and associated abnormal events based on the feedback results of the handling, and generating corresponding operation and maintenance output results for the archive repository based on the resolution determination results, including: Based on the change status of the dominant abnormal event and the operating status of the corresponding equipment in the handling feedback results, the dominant abnormal event is determined to be resolved, and the dominant resolution result is obtained. Based on the extended change status and the corresponding device operation status results of each associated abnormal event in the processing feedback results, the associated abnormal events are determined to be resolved, and the association resolution result is obtained. Based on the dominant resolution result and each of the associated resolution results, determine the abnormal resolution combination result; If the combined result of the anomaly resolution indicates that the dominant anomaly event and each of the associated anomaly events have been resolved, an anomaly resolution operation and maintenance output result is generated. If the combined result of the anomaly resolution indicates that the dominant anomaly event has been resolved and at least one of the associated anomaly events has not been resolved, a continuous tracking operation and maintenance output result is generated. If the combined result of the anomaly resolution indicates that the dominant anomaly event has not been resolved, an upgrade handling and maintenance output result is generated.

8. An intelligent operation and maintenance and AI-based prevention and control device for archive storage, characterized in that, The intelligent operation and maintenance and AI-based prevention and control device for archive storage includes: An abnormal event generation module is used to obtain the operation monitoring data corresponding to the archive storage room and determine the abnormal event set based on the operation monitoring data; An abnormal association chain construction module is used to compare the occurrence time of each abnormal event in the abnormal event set and determine the abnormal impact, determine the trigger sequence relationship and the transmission impact relationship between each abnormal event, and construct an abnormal event association chain based on the trigger sequence relationship and the transmission impact relationship; An anomaly dominance identification module is used to determine, based on the anomaly event association chain, the dominant anomaly event that triggers subsequent anomaly expansion, and the associated anomaly events triggered by the dominant anomaly event. The linkage priority generation module is used to generate corresponding linkage handling priority results based on the anomaly level of the dominant abnormal event and the expansion status of each associated abnormal event. The coordinated response execution module is used to control the corresponding device to perform coordinated response operations based on the coordinated response priority result, and to obtain the response feedback result. The operation and maintenance output generation module is used to determine the resolution of the dominant abnormal event and the associated abnormal event based on the handling feedback result, and generate the operation and maintenance output result corresponding to the archive warehouse based on the resolution determination result.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the intelligent operation and maintenance and AI prevention and control method for archive storage as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the intelligent operation and maintenance and AI prevention and control method for archive storage as described in any one of claims 1 to 7.

Images