A network device alarm shielding method and related device

Abstract

The application discloses a network device alarm shielding method and related device, and the network device alarm shielding method comprises the following steps: providing a user page, obtaining a shielding rule through the user page, generating a regular expression according to the shielding rule, and executing network device alarm shielding according to the regular expression. The application can identify the demand of a first user through the user page, generate a corresponding regular expression, shield the alarm reported by a target network device in real time, complete the real-time shielding function of the alarm information of the target network device, and realize the real-time control of the first user on shielding time and shielding rules and other elements from the user page. After the editing of the user page, the shielding rule of the network device alarm takes effect immediately, and the real-time performance is high. The first user can adjust the shielding rule of the network device alarm without the participation of a developer, and the work efficiency is improved. The application is widely applied in the field of network technology.

Description

Technical Field

[0001] This invention relates to the field of network technology, and in particular to a method and related equipment for blocking network device alarms. Background Technology

[0002] The controller system is responsible for collecting various information from network devices, a crucial component of which is device alarm information. As the system with primary access to raw alarm information from backbone network devices, it is responsible for providing alarm data to other systems that require it. However, during network device cutovers, some invalid alarms may be generated. During normal service changes, network devices may generate alarms, leading to invalid network maintenance dispatch orders. These invalid alarms can cause maintenance personnel to misjudge the status of devices and the network. Summary of the Invention

[0003] To address at least one of the aforementioned technical problems, the present invention aims to provide a network device alarm blocking method and related equipment.

[0004] On one hand, embodiments of the present invention include a network device alarm blocking method, the network device alarm blocking method comprising the following steps: Provide a user page; The blocking rules are obtained through the user page; the blocking rules originate from the first user. Generate a regular expression based on the aforementioned blocking rules; Network device alarm blocking is performed based on the regular expression.

[0005] Further, generating a regular expression based on the blocking rules includes: The blocking rules are parsed to obtain the blocking logic; The blocking logic is processed into regular expressions to obtain the regular expressions.

[0006] Further, the step of performing network device alarm blocking based on the regular expression includes: Obtain the original alarm text information pushed by the target network device; The alarm text information is filtered according to the regular expression.

[0007] Further, the filtering of the original alarm text information based on the regular expression includes: The alarm text information is matched using regular expressions. When the regular expression match passes, the location information is extracted from the original alarm information; the location information includes the port name of the target network device. Based on the location information, the blocking rules are searched; When information corresponding to the location information is found in the blocking rules, the original alarm information is blocked.

[0008] Further, the filtering of the original alarm text information based on the regular expression includes: If no information corresponding to the location information is found in the blocking rules, the original alarm information is allowed to pass.

[0009] Furthermore, obtaining the blocking rules through the user page includes: The first entered information is obtained through the user page; the first entered information is entered by the first user. The first entered information is judged; When it is determined that the first entered information meets the preset conditions, the first entered information is rendered to obtain the masking rules.

[0010] Furthermore, the judgment of the first entered information includes: At least one second piece of information is obtained through the user page; the second piece of information is entered by a corresponding second user; When the target network device corresponds to the same first entered information and each of the second entered information, the coverage area of ​​the first entered information and each of the second entered information is obtained; When the coverage area is greater than the range threshold, it is determined that the first entered information meets the preset conditions.

[0011] Furthermore, the step of obtaining the coverage range of the first entered information and each of the second entered information includes: Obtain the user information vectors of the first user and each of the second users; the user information vectors include multiple components, each component representing the value of a corresponding attribute dimension; Determine the normalized axis-aligned bounding box volume based on each of the user information vectors; The normalized axis-aligned bounding box volume is used as the coverage area.

[0012] On the other hand, embodiments of the present invention also include a computer device, including a memory and a processor, wherein the memory is used to store at least one program, and the processor is used to load at least one program to execute the network device alarm blocking method of the embodiments.

[0013] On the other hand, embodiments of the present invention also include a computer-readable storage medium storing a processor-executable program, which, when executed by a processor, is used to perform the network device alarm blocking method in the embodiments.

[0014] The beneficial effects of this invention are as follows: The network device alarm blocking method in the embodiments can identify the needs of the first user through the user page, generate corresponding regular expressions, and block alarms reported by the target network device in real time, thereby completing the real-time blocking function of target network device alarm information. The first user can control the blocking time and blocking rules in real time from the user page. After editing on the user page, the blocking rules for network device alarms take effect immediately, with strong real-time performance. The first user can adjust the network device alarm blocking rules without the participation of R&D personnel, which is conducive to improving work efficiency. Attached Figure Description

[0015] Figure 1 This is a schematic diagram of a network control system to which the network device alarm shielding method can be applied in the embodiment; Figure 2 This is a schematic diagram illustrating the steps of the network device alarm blocking method in the embodiment; Figure 3 This is a schematic diagram illustrating the principle of steps S1-S3 in the embodiment; Figure 4 This is a schematic diagram illustrating how the interception module intercepts the original alarm information in the embodiment. Figure 5 This is a schematic diagram illustrating how the interception module allows the original alarm information to pass through in this embodiment. Figure 6 This is a schematic diagram illustrating the principle of the online debugging module in the embodiment for determining whether the first entered information meets the preset conditions. Detailed Implementation

[0016] Terminology Explanation: Network equipment: Dedicated hardware devices used to connect various servers, PCs, application terminals, and other nodes to form an information and communication network. This includes information network equipment, communication network equipment, and network security equipment. Common network equipment includes: switches, routers, firewalls, bridges, hubs, gateways, VPN servers, network interface cards (NICs), wireless access points (WAPs), modems, 5G base stations, optical transceivers, and fiber optic transceivers. Regular expressions, also known as regex, regexp, or RE, are text patterns and a concept in computer science. They include ordinary characters (such as letters from a to z) and special characters (called "metacharacters"). Regular expressions use a single string to describe and match a series of strings that match a certain syntax rule. They are commonly used to search for and replace text that conforms to a specific pattern (rule).

[0017] To address the issue of network devices potentially reporting invalid alarms, real-time online multi-dimensional visual alarm blocking can be implemented. This includes real-time blocking of device alarms from multiple dimensions, such as the entire machine, boards, ports, power supplies, fans, protocols, IP addresses, and alarm keywords. This avoids misdiagnosis of faults caused by normal changes. Specifically, during alarm distribution, alarms that cannot be distributed are blocked. Blocking rules are generated in real-time by allowing users to fill in information such as the blocking scope and blocking time online. These rules are then filtered during the distribution process to various systems, resulting in more rational distribution of alarm data.

[0018] Traditional manual work order dispatching methods are hampered by slow response times, high mis-dispatch rates, and inefficient cross-departmental collaboration, making them unsuitable for modern operations and maintenance (O&M) needs. With increasingly complex network architectures, intelligent work order dispatching systems achieve breakthroughs through three core technologies: First, real-time monitoring of various network device transmission protocols combined with machine learning algorithms can predict potential problems such as switch packet loss rates exceeding thresholds. Second, a dynamic dispatch engine automatically matches fault levels with engineer qualifications using a rule base and links with SLA protocols to ensure rapid response to emergency faults. Third, knowledge graph technology stores historical fault cases in a structured manner, automatically matching new work orders with similar solutions, supplemented by device fingerprinting and topology analysis, significantly improving location efficiency. Currently, this system has been successfully applied to scenarios such as data center routing oscillations, enabling multi-team collaborative processing through automatic log association, while edge networks rely on power supply monitoring for nearest-neighbor dispatching. These technological upgrades have significantly shortened fault resolution time and reduced O&M costs, becoming a core support for enterprise digital transformation.

[0019] However, in the field of carrier network communication, dispatching fault reports based on information pushed by network devices is of great significance for timely handling of equipment failures. But normal equipment cutovers can also generate fault-related alarms, leading to the dispatch of incorrect fault reports and causing false alarms, resulting in many unnecessary problems. Against this backdrop, the controller urgently needs a solution that allows online input of blocking rules and real-time blocking of pushed information.

[0020] Based on the above principles, this embodiment provides a network device alarm masking method. This network device alarm masking method can be applied to... Figure 1 In the network control system shown.

[0021] Reference Figure 1 The network control system includes an online debugging module, an information rendering module, a regular expression parsing module, and an interception module. These modules are specifically hardware modules (such as computer equipment), software modules (such as software programs running on computer equipment), or a combination of hardware and software modules (such as computer equipment and the software programs running on computer equipment) with corresponding functions.

[0022] In this embodiment, refer to Figure 2 The method for blocking network device alarms includes the following steps: S1. Provide a user page; S2. Obtain the blocking rules through the user page; S3. Generate a regular expression based on the blocking rules; S4. Perform network device alarm masking based on regular expressions.

[0023] In this embodiment, it can be derived from... Figure 1 The network control system shown executes the network device alarm masking method. Specifically, step S1 can be executed by the online debugging module in the network control system, step S2 by the information rendering module, step S3 by the regular expression parsing module, and step S4 by the interception module.

[0024] In this embodiment, the principle of steps S1-S3 is as follows: Figure 3 As shown. (Refer to...) Figure 3 The online debugging module can display a user page to the first user via a touch screen or mobile phone. In this embodiment, the first user can specifically be a maintenance personnel in the maintenance team responsible for managing network devices.

[0025] Reference Figure 3 The first user can edit the initial input information according to their needs for blocking invalid alarms, through voice or text input.

[0026] Specifically, in actual operation and maintenance work, the first user may find that a specific network device, i.e., the target network device, is frequently issuing invalid alarms, or that during network device cutover or other processes, it is not necessary to handle the alarms issued by the network device. For these reasons, the first user wants to block the alarms issued by the target network device. The first user can express their needs in natural language, such as which network device's alarms they want to block, the entire network device or a specific part of it, and the time period for which alarms are to be blocked, thereby obtaining initial input information. This initial input information includes the target network device's device name, device number, port address, protocol, components (power supply, fan, etc.), fault alarm type, and time period (date).

[0027] For example, the first user can enter the following two types of initial information on the user page: ①: Please block all physical DOWN alarms on the target network device's ports. You don't need to distinguish which specific port it is. As long as it is a physical port disconnection alarm, do not display or report any DOWN status alarms.

[0028] ②: I have blocked all remote fault alarms on the target network devices. I only need to block ports that are electrical ports, not optical ports. Regardless of the interface number, as long as a remote fault alarm is reported, it will be blocked without notification.

[0029] In this embodiment, by executing step S1, the first user does not need to understand the technical details such as field names and delimiters in the alarm message. They only need to express their needs using common terminology in the network management field. That is, they can express their need to block some alarms by describing the business failure phenomenon in natural language.

[0030] In this embodiment, refer to Figure 3 After completing step S1, the online debugging module can directly send the first input information (e.g., first input information ① or first input information ②) to the information rendering module, which will then execute step S2.

[0031] In this embodiment, when the information rendering module executes step S2, which is the step of obtaining the blocking rules through the user page, it can render the first entered information obtained through the user page to obtain the blocking rules.

[0032] In this embodiment, the rendering performed by the information rendering module is a process of converting the first input information in natural language form into internally standardized rule entries through NLP semantic parsing and fault terminology database mapping.

[0033] For example, specifically, for the first entered information ①, which reads "Help me block all physical DOWN alarms on the target network device's ports, regardless of which specific port it is. As long as it's a DOWN alarm reported by a physical port disconnection, don't display or report it," the information rendering module executes step S2 on the first entered information ①, and can output the following content: Blocking rule ①: Unique rule identifier: RULE-PORT-PHY-DOWN-001 Rule Name: Full Port Physical Down Alarm Masking Fault Classification: Physical Port Status Fault Fault scenario: Port physically down Matching dimension: Physical entity port name Matching mode: Matches are made if the field exists (no specific port value is required). Action to be performed: Alarm blocking (discard / do not enter into the database / do not display a pop-up) Scope of affected devices: All network devices Effective date: Within 6 months The blocking rule is the blocking rule ①.

[0034] For example, specifically, for the first entered information ②, which contains the content "I have blocked all remote fault alarms on the target network device's ports. Only ports belonging to electrical ports need to be blocked; ports belonging to optical ports do not need to be blocked. Regardless of the interface number, all alarms reporting remote faults are intercepted without notification," the information rendering module executes step S2 on the first entered information ② and can output the following content: Blocking rule ②: Unique rule identifier: RULE-PORT-REMOTE-FAULT-001 Rule Name: Full Port Remote Fault Alarm Masking Fault Classification: Interface Link Fault Fault scenario: Remote port failure Matching dimension: Interface name Matching mode: Matches are made if the field exists (no specific interface value is required). Action performed: Alarm masking Scope of affected devices: All network devices Effective date: Within 3 months The blocking rule is called blocking rule ②.

[0035] In this embodiment, by executing step S2, business semantics can be unified, and the structured output after rendering natural language can be obtained as a masking rule. For example, for the first entered information ①, no matter how the user describes "port is down", "physical down", or "port offline" in natural language, it will eventually be rendered into the same standard masking rule, namely masking rule ①. At the same time, it is decoupled from the underlying alarm format, and the same rule can be adapted to different manufacturers and different types of devices. For the first entered information ②, the obtained masking rule ② is completely consistent with the rule structure of "port physically down" in the first entered information ②. Only the business semantics of fault classification and matching dimensions are different, which reflects the business universality of the masking rule. That is, all requirements for "full masking by a certain type of field" can be expressed with a unified rule structure.

[0036] In this embodiment, refer to Figure 3 After the information rendering module completes step S2, it sends the blocking rules (such as blocking rule ① or blocking rule ②) to the regular expression parsing module, which then executes step S3.

[0037] In this embodiment, when the regular expression parsing module executes step S3, which is to generate a regular expression based on the blocking rules, it can specifically perform the following steps: S301. Parse the blocking rules to obtain the blocking logic; S302. Perform regularization processing on the masking logic to obtain a regular expression.

[0038] For example, for the above-mentioned blocking rule ①, the regular expression parsing module performs step S301 to perform syntax parsing and field mapping on blocking rule ①, obtaining an abstract description of the matching logic to obtain blocking logic ①. In this embodiment, the content of blocking logic ① is as follows: Shielding logic ①: Logical identifier: LOGIC-PHY-DOWN-001 Association rule ID: RULE-PORT-PHY-DOWN-001 Target alarm field: EntPhysicalName (Physical entity name, corresponding to the "Physical entity port name" in the business dimension) Field prefix delimiter: EntPhysicalName= Field value delimiter: English comma, Value matching strategy: Matches any non-empty field value, using a non-greedy matching mode. Judgment logic: If the original alarm text contains a field fragment that conforms to the above format, a blocking action is triggered. Compatible message types: SNMP Trap, standard Syslog alarms By executing step S301 on the blocking rule ①, the obtained blocking logic ① can take into account the business rules and the underlying text format, thereby clarifying the matching technical elements.

[0039] For example, for the above-mentioned blocking rule ②, the regular expression parsing module performs step S301 to perform syntax parsing and field mapping on the blocking rule ②, obtaining an abstract description of the matching logic to obtain the blocking logic ②. In this embodiment, the content of the blocking logic ② is as follows: Shielding logic ②: Logical identifier: LOGIC-REMOTE-FAULT-001 Association rule ID: RULE-PORT-REMOTE-FAULT-001 Target alert field: IfName (interface name, corresponding to the "interface name" in the business dimension) Field prefix delimiter: IfName= Field value delimiter: (English right parenthesis) Value matching strategy: Matches any non-empty field value, using a non-greedy matching mode. Judgment logic: If the original alarm text contains a field fragment that conforms to the above format, a blocking action is triggered. Compatible message types: Interface-based SNMP alarms, proprietary protocol alarms By executing step S301 on the blocking rule ②, the obtained blocking logic ② can also take into account business rules and underlying text formats, thereby clarifying the matching technical elements.

[0040] In this embodiment, by executing step S301 on the blocking rule ① (blocking rule ②), specifically mapping the "physical port name" dimension of the service layer to the actual field name EntPhysicalName in the corresponding alarm message according to the device type and alarm protocol type, and matching the native format of this type of alarm (fields are separated by commas), and determining that the end character is a comma, etc., the adaptation and decoupling of the blocking rule is achieved.

[0041] However, the masking logic ① (masking logic ②) obtained by performing step S301 on masking rule ① (masking rule ②) is not the final regular expression string.

[0042] In this embodiment, by executing step S302 on the shielding logic ① (shielding logic ②), the shielding logic ① (shielding logic ②) can be processed in a rule-based manner by combining the characteristics of the target network device, such as the manufacturer, product model, alarm format, etc.

[0043] Specifically, for the aforementioned blocking logic ①, the regular expression parsing module executes step S302 to process blocking logic ① by directly concatenating prefixes, non-greedy wildcards, and suffixes, generating the final regular expression matching string while retaining the configuration of boundary delimiters, thereby obtaining regular expression ①. In this embodiment, the content of regular expression ① is as follows: Regular expression ①: [["EntPhysicalName=.+?,", ["EntPhysicalName=", ","]] Specifically, for the aforementioned blocking logic ②, the regular expression parsing module performs step S302 to adapt the blocking logic ② to the message format of alarms such as "port remote fault". It encloses the interface fields of this type of alarm in parentheses as parameters, determines that a right parenthesis is used as the delimiter, and concatenates the prefix, non-greedy wildcard, and suffix to obtain regular expression ②. In this embodiment, the content of regular expression ② is as follows: Regular expression ②: [["IfName=.+?\)", ["IfName=", ")"]]] In this embodiment, the following technical principle can be achieved by executing steps S2-S3: Obtaining the blocking rules: Obtain the first user's natural language input, i.e., the first input information, by executing step S2, and generate structured blocking rules through semantic rendering; Parse the blocking rules: By executing step S301, read the matching dimensions of the blocking rules, combine them with the device alarm format library, map out the actual field names, field delimiters, and matching patterns, and output the structured blocking logic; Regular expression generation: By executing step S302, the prefix, non-greedy wildcard, and suffix in the masking logic are concatenated into a complete matching regular expression, while retaining the boundary delimiter configuration, to obtain the final regular expression.

[0044] The core advantage of this three-layer translation design is that it balances ease of use and flexibility: users can configure rules using only natural language, while business rules and underlying message formats are decoupled. When adding a new device type or alarm format, only the mapping of "masking logic → regular expression" needs to be adjusted, without modifying the upper-layer rules or the user's usage.

[0045] In this embodiment, refer to Figure 3 After executing step S3, the regular expression parsing module sends both the blocking logic (including blocking logic ① and blocking logic ②) and the regular expressions (including regular expression ① and regular expression ②) to the interception module.

[0046] In this embodiment, the interception module can connect to multiple network devices and receive alarm information from each network device in real time. (Refer to...) Figure 3 The following explanation will be based on a specific network device among multiple network devices, namely the target network device, which is the target network device whose alarm information is to be blocked by the first user.

[0047] In this embodiment, when the interception module executes step S4, which is the step of blocking network device alarms according to regular expressions, it can specifically perform the following steps: S401. Obtain the original alarm text information pushed by the target network device; S402. Filter the original alarm information according to regular expressions.

[0048] In step S401, refer to Figure 4 The target network device can generate original alarm information by running its self-test function. In this embodiment, the original alarm information is the raw information generated by the target network device indicating a fault alarm. The original alarm information specifically includes information such as device name, device number, port address, protocol, component (power supply, fan, etc.), fault alarm type, and time period (date), thereby indicating which network device has failed, specifically which port in the network device, which protocol it is running, which component, and what type of fault occurred within what time period.

[0049] In step S401, refer to Figure 4The target network device sends the generated alarm text information to the interception module, so that the interception module receives the alarm text information.

[0050] In this embodiment, refer to Figure 4 After receiving the original alarm information, the interception module does not forward the original alarm information to any module. Instead, it determines whether to forward the original alarm information after executing step S402.

[0051] Specifically, in this embodiment, when the interception module performs step S402, which is to filter the original alarm information according to the regular expression, it can specifically perform the following steps: S40201. Perform regular expression matching on the original alarm text; S40202. When the regular expression match passes, extract the location information from the original alarm text. S40203. Search for blocking rules based on location information; S40204. When information corresponding to the location information is found in the blocking rules, the original alarm text information is blocked; S40205. If no information corresponding to the location information is found in the blocking rules, the original alarm information shall be allowed.

[0052] In step S40201, the interception module matches the original alarm information pushed by the target network device in real time with the parsed regular expression ① or regular expression ②.

[0053] Specifically, if a regular expression exists, such as regular expression ①, that matches the original alarm information with keywords such as device name, device number, port address, protocol, component (power supply, fan, etc.), fault alarm type, and time period (date), then the interception module determines that the regular expression, such as regular expression ①, has passed the regular expression match and extracts the aforementioned keywords.

[0054] In step S40202, if a regular expression (e.g., regular expression ①) matches the original alarm information, the interception module extracts the location information from the original alarm information. In this embodiment, the location information is information that can distinguish a network device from other network devices, thereby identifying a specific network device, i.e., the target network device. For example, in this embodiment, the port name of the target network device is used as the location information. Therefore, in step S40202, the interception module extracts the port name of the target network device from the original alarm information as the location information.

[0055] In step S40203, the interception module searches for blocking rules based on the location information determined in step S40202. The search objective is to determine which blocking rule contains the corresponding location information.

[0056] If the interception module finds a blocking rule, such as blocking rule ②, that contains location information corresponding to the target network device, then the interception module executes step S40204 to intercept the original alarm information according to blocking rule ②. For example, refer to... Figure 4 Within the scope of fault scenarios, effective devices, and effective time determined by blocking rule ②, the interception module will not forward the original alarm information to any module, but will retain the original alarm information locally in the interception module or delete it, and mark the original alarm information with a blocking tag, so that the first user can not receive the original alarm information, thus meeting the first user's need to not receive the original alarm information.

[0057] If the blocking module does not find any blocking rules containing location information corresponding to the target network device, then the blocking module executes step S40205 to allow the original alarm information to pass. For example, refer to... Figure 5 The interception module can immediately forward the original alarm information to the first user, such as to the user terminal such as the mobile phone used by the first user, so that the first user can receive the original alarm information.

[0058] In this embodiment, by executing steps S1-S4, the user's needs can be identified through the user page, and corresponding regular expressions can be generated to block alarms reported by the target network device in real time, thereby completing the real-time blocking function of target network device alarm information. Specifically, by obtaining the first user's input information through the user page, the first user can debug whether the blocking rules are effective through the page, ensuring the accuracy of the rules after input. The first user can control the blocking time and blocking rules in real time from the user page. After editing on the user page, the blocking rules for network device alarms take effect immediately, with strong real-time performance. The first user can customize the blocking rules through a scripting language, not limited to network element information and... This allows the blocking rules to be more applicable to various scenarios and better support diverse business needs. By generating blocking logic based on the blocking rules, various business fields of the original alarm information are accurately extracted, and the structured processing of the extracted fields is supported. This enables the primary user to better control the alarm blocking situation and achieve precise interception of network device alarms. When businesses face new alarm blocking requirements, the primary user only needs to enter the desired blocking rules on the user page. The system automatically blocks the alarms through the processes of blocking rule rendering, rule parsing, alarm location matching, and alarm interception. This eliminates the need for the primary user to submit requirements to the development team and undergo a lengthy software development process before release, greatly improving efficiency and reducing costs.

[0059] The network device alarm masking method in this embodiment can mask all network device alarms required by the controller in real time, enabling rapid iteration of alarms and subsequent dispatching services; it can improve the alarm analysis and fault diagnosis performance of backbone network devices, such as masking faults during device cutover, better monitoring the operation of devices, thereby discovering device problems earlier and ensuring stable network operation.

[0060] In this embodiment, as Figure 3 As shown, if the alarms of the target network device are blocked in response to the first entered information only when the first user has entered the first information, the first user may be granted excessive privileges, which may lead to network security risks due to the arbitrary blocking of alarms of the target network device.

[0061] To address the potential issues of granting excessive privileges to the first user, this embodiment, when executing step S2 (i.e., obtaining the blocking rules through the user page), can, in addition to... Figure 3As shown, the online debugging module directly sends the first input information from the first user to the information rendering module for rendering. Alternatively, it can first determine whether the first input information meets the preset conditions. Only if the first input information meets the preset conditions will the first input information be sent to the information rendering module for rendering.

[0062] Specifically, refer to Figure 6 The operations and maintenance team of the first user also includes other operations and maintenance personnel such as Second User 1 and Second User 2. Just as the first user needs to disable alarms on specific target network devices due to their work, thus inputting the first set of information into the user page, these second users may also need to disable alarms on specific target network devices, thus inputting the second set of information into the user page.

[0063] For example, Figure 6 In the example, second user 1 inputs second input information 1, and second user 2 inputs second input information 2. Similar to the first input information, second input information 1, etc., can also express the need to block alarms corresponding to specific network devices, specific ports, specific fault types, specific time periods, etc., in natural language. In this embodiment, it is assumed that the first input information and all second input information, including second input information 1, correspond to the same target network device. This means... Figure 6 The first user 1, the second user 1, and the second user 2, etc., expressed their requests to block alarms corresponding to the same target network device (which may also require the same port, the same fault type, the same time period, etc.) in the form of natural language.

[0064] When the online debugging module executes step S2, it acquires the first input information, as well as the second input information 1 and the second input information 2, and other second input information.

[0065] In this embodiment, when the online debugging module receives the first input information, the second input information 1, and the second input information 2, it can also record the user information vectors of the users who input this input information.

[0066] In this embodiment, the user information vector is a vector that includes multiple components, where each component represents an attribute dimension related to the work of each user.

[0067] For example, in this embodiment, the form () can be used , ... ... )of The dimension vector serves as the user information vector. Specifically, assume... =4, Specifically, it refers to "total length of service". Specifically, it refers to "length of service in the position". Specifically, it refers to "years of work experience". Specifically, it is "job level", thus obtaining a user information vector containing (total years of service, years of service in the current position, years of service in the industry, job level), where each component represents the user's value in the attribute dimensions such as "total years of service", "years of service in the current position", "years of service in the industry" and "job level".

[0068] For example, when the first user enters the first piece of information, the online debugging module can determine the user information vector corresponding to the first user through the first user's account as (total years of service, years of service in the current position, years of service in the industry, job level) = (8, 5, 7, 9), indicating that the first user's total years of service is 8 years, the years of service in the current position is 5 years, the years of service in the current industry is 7 years, and the job level in the operation and maintenance team is level 9.

[0069] In this embodiment, it is assumed that Figure 6 The online debugging module obtained a total of One user (including the first user and) The input information sent by -1 second user (including the first input information and -1 second user) respectively -1 second entry information), these entry information all correspond to the same target network device, among which, the first The specific value of the user information vector for each user is ( , ... ... ),in Indicates the first In the user information vector of the i-th user The values ​​can be taken from each attribute dimension.

[0070] In this embodiment, for all Each user's corresponding user information vector , ... ... )( =1,2,3… ), will this Each user information vector is considered to form a hyperrectangle in a high-dimensional space, where all sides are parallel to the coordinate axes, i.e., an axis-aligned bounding box (AABB). Its corresponding normalized axis-aligned bounding box volume... This means The actual values ​​of a user information vector cover the entire possible value space of the user information vector.

[0071] In this embodiment, the normalized axis-aligned bounding box volume is used. It can be calculated using the following formula:

[0072] In the above formula, Indicates all Each user's corresponding user information vector , ... ... )( =1,2,3… The first in ) The actual values ​​of each attribute dimension, i.e. , ... The maximum value in, i.e. = { , , ..., },and Indicates all Each user's corresponding user information vector , ... ... )( =1,2,3… The first in ) The minimum value among the actual values ​​of each attribute dimension, i.e. = { , , ..., }

[0073] In the above formula, Indicates the first The maximum value that each attribute dimension can achieve. Indicates the first The minimum possible value for each attribute dimension.

[0074] For example, with =1, taking the first attribute dimension, namely "total years of service", as an example. This represents the maximum value among the actual total length of service for the first user and all second users. This represents the minimum of the actual total length of service for the first user and all second users. and All are related to the samples of the first user and all second users; This represents the maximum possible "total seniority" within the operations and maintenance team. This represents the minimum possible total seniority of the operations and maintenance team. For example, the maximum possible total seniority is 40 years, and the minimum is 0. The constant value is 40. It is always 0.

[0075] In this embodiment, the calculated normalized axis-aligned bounding box volume The value range is [0,1], and a range threshold of 0.5 can be set. This value is used to calculate the normalized axis-aligned bounding box volume. If the normalized axis-aligned bounding box volume is greater than or equal to the range threshold of 0.5, then determine the volume. The data is sufficiently large, meaning that the first and second users who input the first and second data are widely distributed across work-related factors such as total years of service, length of service in their respective positions, years of experience, and job level. The online debugging module can then determine if the first data input meets preset conditions and send it to the information rendering module to render the masking rules. Conversely, the calculated normalized axis-aligned bounding box volume... If the value is less than the range threshold of 0.5, determine the normalized axis-aligned bounding box volume. If the number of users is too small, meaning that the distribution of the first and second users who input the first and second information is too narrow in terms of work-related factors such as total years of service, years of service in the current position, years of service, and job level, the online debugging module can determine that the first information does not meet the preset conditions and therefore will not send the first information to the information rendering module for rendering.

[0076] In this embodiment, the normalized axis-aligned bounding box volume is calculated based on the user information vectors of the first user and the second user who have input the first and second input information. and aligned the bounding box volume along the normalized axis. Only when the value is sufficiently large will the first entered information be determined to meet the preset conditions, and then the first entered information will be sent to the information rendering module for rendering. The first entered information will only be sent to the information rendering module for rendering when the distribution of the first and second users who entered the first and second information is sufficiently wide. Ultimately, alarms of specific target network devices will be blocked, avoiding the need for multiple users with certain attributes or even only a few users such as the first user to block alarms of specific target network devices, thus helping to ensure the stable operation of the network system.

[0077] A computer program that executes the network device alarm blocking method in this embodiment can be written into a computer device or storage medium. When the computer program is read out and run, the network device alarm blocking method and / or network device alarm blocking method in this embodiment will be executed, thereby achieving the same technical effect as the network device alarm blocking method and / or network device alarm blocking method in the embodiment.

[0078] It should be noted that, unless otherwise specified, when a feature is referred to as "fixed" or "connected" to another feature, it can be directly fixed or connected to the other feature, or indirectly fixed or connected to the other feature. Furthermore, the descriptions of "upper," "lower," "left," and "right" used in this disclosure are only relative to the relative positional relationships of the components of this disclosure in the accompanying drawings. The singular forms "a" and "the" used in this disclosure are also intended to include the plural forms, unless the context clearly indicates otherwise. Moreover, unless otherwise defined, all technical and scientific terms used in this embodiment have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this embodiment specification is only for describing particular embodiments and is not intended to limit the invention. The term "and / or" as used in this embodiment includes any combination of one or more of the associated listed items.

[0079] It should be understood that although various elements may be described in this disclosure using terms such as "second," "third," etc., these elements should not be limited to these terms. These terms are used only to distinguish elements of the same type from one another. For example, an element may also be referred to as a second element without departing from the scope of this disclosure, and similarly, a second element may also be referred to as an element. The use of any and all instances or exemplary language ("e.g.," "such as," etc.) provided in this embodiment is intended only to better illustrate embodiments of the invention and, unless otherwise required, does not impose a limitation on the scope of the invention.

[0080] It should be recognized that embodiments of the present invention can be implemented or carried out by computer hardware, a combination of hardware and software, or by computer instructions stored in a non-transitory computer-readable storage medium. The method can be implemented using standard programming techniques—including a non-transitory computer-readable storage medium configured with a computer program, wherein such a storage medium causes the computer to operate in a specific and predefined manner—according to the methods and drawings described in the specific embodiments. Each program can be implemented in a high-level procedural or object-oriented programming language to communicate with the computer system. However, if desired, the program can be implemented in assembly or machine language. In any case, the language can be a compiled or interpreted language. Furthermore, for this purpose, the program can run on a programmed application-specific integrated circuit (ASIC).

[0081] Furthermore, the procedures described in this embodiment can be performed in any suitable order unless otherwise indicated by this embodiment or otherwise obviously contradict the context. The procedures (or variations and / or combinations thereof) described in this embodiment can be executed under the control of one or more computer systems configured with executable instructions, and can be implemented by hardware or a combination thereof as code (e.g., executable instructions, one or more computer programs, or one or more applications) that commonly executes on one or more processors. A computer program includes a plurality of instructions executable by one or more processors.

[0082] Furthermore, the method can be implemented in any suitable type of computing platform, including but not limited to personal computers, minicomputers, mainframes, workstations, networked or distributed computing environments, standalone or integrated computer platforms, or in communication with charged particle tools or other imaging devices, etc. Aspects of the invention can be implemented as machine-readable code stored on a non-transitory storage medium or device, whether removable or integrated into a computing platform, such as a hard disk, optical read and / or write storage medium, RAM, ROM, etc., such that it is readable by a programmable computer, and when the storage medium or device is read by the computer, it can be used to configure and operate the computer to perform the processes described herein. Furthermore, the machine-readable code, or portions thereof, can be transmitted via wired or wireless networks. The invention of this embodiment includes these and other different types of non-transitory computer-readable storage media when such media comprises instructions or programs that implement the steps above in conjunction with a microprocessor or other data processor. When programmed according to the methods and techniques of the invention, the invention also includes the computer itself.

[0083] A computer program can be applied to input data to perform the functions of this embodiment, thereby transforming the input data to generate output data stored in non-volatile memory. The output information can also be applied to one or more output devices, such as a display. In a preferred embodiment of the invention, the transformed data represents physical and tangible objects, including specific visual depictions of physical and tangible objects generated on the display.

[0084] The above are merely preferred embodiments of the present invention. The present invention is not limited to the above-described embodiments. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention, as long as they achieve the technical effects of the present invention by the same means, should be included within the scope of protection of the present invention. Within the scope of protection of the present invention, the technical solutions and / or implementation methods can have various modifications and variations.

Claims

1. A method for blocking alarms in network devices, characterized in that, The network device alarm blocking method includes the following steps: Provide a user page; The blocking rules are obtained through the user page; the blocking rules originate from the first user. Generate a regular expression based on the aforementioned blocking rules; Network device alarm blocking is performed based on the regular expression.

2. The network device alarm blocking method according to claim 1, characterized in that, The step of generating a regular expression based on the blocking rules includes: The blocking rules are parsed to obtain the blocking logic; The blocking logic is processed into regular expressions to obtain the regular expressions.

3. The network device alarm blocking method according to claim 1, characterized in that, The step of performing network device alarm blocking based on the regular expression includes: Obtain the original alarm text information pushed by the target network device; The alarm text information is filtered according to the regular expression.

4. The network device alarm blocking method according to claim 3, characterized in that, The step of filtering the original alarm information according to the regular expression includes: The alarm text information is matched using regular expressions. When the regular expression match passes, the location information is extracted from the original alarm information; the location information includes the port name of the target network device. Based on the location information, the blocking rules are searched; When information corresponding to the location information is found from the blocking rules, the original alarm information is blocked according to the blocking rules.

5. The network device alarm masking method according to claim 4, characterized in that, The step of filtering the original alarm information according to the regular expression includes: If no information corresponding to the location information is found in the blocking rules, the original alarm information is allowed to pass.

6. The network device alarm masking method according to any one of claims 1-5, characterized in that, The process of obtaining blocking rules through the user page includes: The first entered information is obtained through the user page; the first entered information is entered by the first user. The first entered information is judged; When it is determined that the first entered information meets the preset conditions, the first entered information is rendered to obtain the masking rules.

7. The network device alarm masking method according to claim 6, characterized in that, The judgment of the first entered information includes: At least one second piece of information is obtained through the user page; the second piece of information is entered by a corresponding second user; When the target network device corresponds to the same first entered information and each of the second entered information, the coverage area of ​​the first entered information and each of the second entered information is obtained; When the coverage area is greater than the range threshold, it is determined that the first entered information meets the preset conditions.

8. The network device alarm masking method according to claim 7, characterized in that, The step of obtaining the coverage range of the first entered information and each of the second entered information includes: Obtain the user information vectors of the first user and each of the second users; the user information vectors include multiple components, each component representing the value of a corresponding attribute dimension; Determine the normalized axis-aligned bounding box volume based on each of the user information vectors; The normalized axis-aligned bounding box volume is used as the coverage area.

9. A computer device, characterized in that, The device includes a memory and a processor, wherein the memory is used to store at least one program and the processor is used to load at least one program to execute the network device alarm masking method according to any one of claims 1-8.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the network device alarm masking method according to any one of claims 1-8.

Images