310 results about "Alarm analysis" patented technology

A metric monitoring and analysis system including dynamic sampling agents located in monitored system elements and a service management platform. Each sampling agent includes a data adapter collecting metric data in a common format, a threshold generator for determining dynamic metric threshold ranges, an alarm detector generating an indicator when a metric deviates outside a dynamic threshold range or a static threshold, and a deviation tracker generating an alarm severity scores. The service platform includes an alarm analyzer identifying root causes of system alarm conditions by correlation of grouped metrics or forensic analysis of temporally or statistically correlated secondary forensic data or data items from a service model of the system.

Dynamic administration of event pools for relevant event and alert analysis during event storms including receiving, by an events analyzer from an events queue, a plurality of events from one or more components of the distributed processing system, each event including an occurred time and a logged time; creating, by the event analyzer, an events pool; determining whether an arrival rate of the events from the components of the distributed processing system is greater than a predetermined threshold; if the arrival rate is greater than the predetermined threshold, assigning, by the events analyzer, a plurality of events to the events pool in dependence upon their occurred time; and if the arrival rate is not greater than the predetermined threshold, assigning, by the events analyzer, a plurality of events to the events pool in dependence upon their logged time.

The invention provides an intelligent alarm monitoring method of a neural network. A brand-new intelligent communication network comprehensive monitoring analysis and fault locating system is built by adopting an alarm correlation analysis and locating technology based on an expert system of the neural network. The system guarantees effective monitoring of repeated alarming, alarm oscillation, alarm flash and alarm storm by collecting the alarm data of each piece of equipment of each network element system of each major, and filters out a storm alarm, a flash alarm, an invalid alarm and a secondary alarm correctly; and the system can pick out an important alarm event which is really required to be processed from the collected mass alarms based on a deep correlation rule analysis and neural network technology, and can locate and remove a network fault quickly and correctly. The correction rate of network alarm analysis and fault diagnosis can be improved obviously, customer satisfaction is improved, and operating cost and maintenance cost are reduced greatly, so that the aims of reducing the work load of an operator and a maintainer and improving the efficiency of fault management are fulfilled.

A fault identification system consisting of multiple reasoning engines and the blackboard analyzes alarm information and the associated contextual information to identify faults. The contextual information associated with an alarm is derived by analyzing the alarm along four spaces, namely, transaction-space, function-space, execution-space, and signal-space. The reasoning engines associated with these spaces infer and/or validate the occurrences of faults. Transaction reasoning engine, using the associated knowledge repository, processes the generated alarms to infer and validate faults. Monitor reasoning engine, using the associated knowledge repository, processes domain specific monitor variables to infer faults. Execution reasoning engine, using the associated knowledge repository, processes execution specific monitor variables to infer and validate faults. Function reasoning engine, using the associated knowledge repository, reasons to infer and validate faults. Signal reasoning engine, using the associated knowledge repository, processes hardware specific and environment variables to infer and validate faults. Global reasoning engine moderates the inferences and validations by other reasoning engines to provide consolidated fault inference. The invention also provides a process, "design for diagnosis," for designing electronic systems with maximum emphasis on fault diagnosis.

Methods, systems and products are provided for relevant alert delivery with event and alert suppression including identifying by the event analyzer in dependence upon the event arrival rules one or more alerts; closing, by the event analyzer in dependence upon the events pool operation rules, the events pool; determining, by the events analyzer in dependence upon the event suppression rules, whether to suppress one or more events in the closed events pool; identifying by the event analyzer in dependence upon the events pool closure rules and any unsuppressed events assigned to the events pool, one or more additional alerts; assigning by the alert analyzer the identified alerts to an alerts pool; determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and transmitting the unsuppressed alerts to one or more components of the distributed processing system.

A fault identification system analyzes alarm information and the associated contextual information to identify the occurred faults. The contextual information is based on usecases, transactions, and functions associated with the electronic system under consideration. Multiple detectors that form part of knowledge repositories are used in the process of fault identification.

Methods, systems, and computer program products for flexible event data content management for relevant event and alert analysis within a distributed processing system are provided. Embodiments include capturing, by an interface connector, an event from a resource of the distributed processing system; inserting, by the interface connector, the event into an event database; receiving from the interface connector, by a notifier, a notification of insertion of the event into the event database; based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database; receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database; in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database; and processing, by the monitor, the retrieved events.

The invention relates to a method and a system based on a northbound interface to realize network management. The northbound interface caches alarm information and the received alarm information is grouped and done with association analysis according to the ID of an element management system. The alarm information is divided into the following types: filtered alarm information, combined alarm information, compressed alarm information and inhibited alarm information. An alarm analysis device analyzes the alarm information according to alarm time to obtain association alarm information. A fault analysis device generates the dependency relationship of communication equipment according to the association alarm information sent by the alarm analysis device. An alarm treating device correspondingly treats the alarm information according to the types of the alarm information and conducts alarm notice or early fault alarm according to the dependency relationship in a network topological diagram generated by the fault analysis device. By treating the alarm information, the invention relieves the load of the northbound interface and improves the efficiency of the network management system in treating the alarm information.

The invention discloses an information safety operation and maintenance supervising platform for carrying out centralized monitoring, centralized maintenance and centralized alarm analysis on a network, a server, a data base, an intermediate piece, an application system and other monitored objects in an electrical secondary system. The platform comprises a data monitoring center and webmaster devices distributed in various safe areas, wherein the webmaster devices are used for acquiring and processing data information of the monitored objects and transmitting the data information to a data monitoring center through an output interface for centrally analyzing and storing and also provide a browse interface for the local monitoring. The platform enhances the control force on the network andthe whole information system, improves the operation and maintenance level and ensures the safe management of the electric power secondary system.

The invention discloses a technology support system of a marketing and distribution integration power supply service and a method thereof. The system comprises: a power supply area management module, an integrated receiving alarm analysis module, a prearranged power failure management module, a fault power failure management module, a switched power supply management module, a first-aid repair vehicle management module and an on-site work management module. Through adopting the technology support system of an unified and standard marketing and distribution integration power supply service, needs of information integration and sharing in power enterprises can be satisfied; distribution information is integrated as much as possible, which provides a comprehensive and visualized information support platform for the marketing and distribution integration power supply service.

The invention discloses a hierarchical alarm analysis method and a hierarchical alarm analysis system based on a content delivery network, which aim to realize precise real-time alarm and improve service quality of the CDN (content delivery network) of the internet. The technical scheme includes that the method includes the steps: data acquisition; single node analysis by dividing acquired data according to a target IP (internet protocol), and placing the data with the same nodes into an analysis container for single node analysis; regional analysis by summarizing abnormal data reported after single node analysis, and placing the abnormal data into corresponding analysis containers for analysis according to regions; source analysis by summarizing abnormal data after regional analysis, analyzing all the abnormal data, and judging whether the problem lies in a source according to the occupied proportion in all the regions; and alarm filtering by obtaining upper abnormal alarm information after single node analysis, regional analysis and source analysis, and filtering lower repeated alarming by means of reverse matching of the upper lower alarm data.

The invention discloses a subway shield construction surface deformation warning method based on temporal and spatial information fusion. According to the method, shield construction surface deformation warning sign fusion and regional warning decision fusion are realized by combining an information fusion theory and a hierarchical fusion thought with surface deformation monitoring information and through a feature fusion algorithm based on a RBF neural network and a decision fusion algorithm based on a D-S evidence theory. A warning means and informationization tool integrating the functions of alarm identification, alarm analysis, alarm prediction, alarm evaluation and alarm decision is provided for the construction site. The method is of important significance to the enhancement of shield construction surface deformation safety risk monitoring and the improvement of shield construction safety risk management level.

The embodiment of the invention discloses an alarm correlation analysis method, device, equipment and medium. The method comprises the following steps of: acquiring alarm data, and carrying out line segment deduplication and standardization on the alarm data to obtain standardized alarm data; corresponding each alarm data according to the standardized alarm data and the characteristic field; excavating an alarm association rule according to a preset alarm rule mining parameter based on an alarm family spectrum so as to obtain an alarm association rule after mining; obtaining a preset alarm social network according to the mining alarm association rules; presetting to carry out alarm analysis on the real time alarm data, according to the alarm family spectrum, the minded alarm association rule, and the alarm social network. The invention can effectively de-emphasize the massive alarm data, improve the calculation efficiency through association rule mining, and quickly grasp the main features of the alarm storm, and the complex relationship between the alarms, in particular to the root cause alarm the chain alarm occurs. Derived alarms have a more in-depth analysis.

The invention discloses a disk detection system, a disk detection method and a network storage system. The disk detection system comprises a disk dynamic detection module, a parameter configuration module, an intelligent analysis module and an alarm module. The parameter configuration module is used to configure a time interval of extracting the disk status information for the disk dynamic detection module as well as the disk self-monitoring, analysis and reporting technology (S. M. A. R. T.) information threshold. The disk dynamic detection module is used to extract the disk status information according to the time interval configured by the parameter configuration module. The intelligent analysis module is used to judge the disk current health status according to the status information of the disk and the disk S. M. A. R. T. information threshold, and to determine whether alarm information is sent to the alarm module according to the current disk health status; and the alarm module is used to alert a user after receiving the alarm information sent by the intelligent alarm analysis module. According to the invention, the health status of the disk can be analyzed in real-time manner, and alarm information is sent to the user according to the degree of health status.

The invention belongs to a monitoring technology field and especially discloses a multi-device cooperation alarm analysis processing system. The system comprises: a PLC control system and an image monitoring system. The PLC control system is used to realize electrical control operation of a field device. The image monitoring system is used to realize video monitoring displaying of the field device. The image monitoring system possesses a video switching control matrix and several front-end cameras. A process database SCADA server forms communication connection with a matrix control management server of an image through the PLC control system. The video switching control matrix forms the communication connection with a matrix control management server through a data line so as to realize switching of the image video and PLC system equipment fault alarm in real time and realize image tracking alarm. Monitoring personnel can conveniently check and analyze an operation state of the device. Once an abnormity phenomenon is discovered, early intervention and timely processing can be achieved. Accident processing time can be shortened. Therefore, preventative measures can be performed or an accident scope can be substantially reduced and the fault time can be shortened.

The embodiment of the invention discloses an alarm analysis method, a device and a system, and relates to the field of network management. When the structure of an information system has changed, time and energy that spent by technical staff in a network management system can be minimized, and alarm analysis performance of the network management system can be raised to some extent. The method comprises the following steps: alarm information is obtained, and the alarm information is classified; frequency of occurrence of the alarm information of the same kind is obtained, and correlation between the alarm information of different kinds is determined according to the frequency of occurrence of the alarm information of each kind; and causality between the alarm information of different kinds is determined according to the correlation between the alarm information of different kinds, and the causality is indicated as an association rule for alarm analysis. The method is suitable for the scene of analysis of alarm information.

An alarm analysis method capable of multi-purpose function. A plurality of efficiency indices are defined, comprising statistical-data-configuration, data-set, background-alarm-rate, peak-alarm-rate, active-alarm-distribution, bad-actors-identification, and alarm-report indices. A data warehouse is created according to the efficiency indices and using an online analytical processing method. A plurality of user interfaces are created according to the data warehouse and analysis results. The data warehouse is accessed using the user interfaces to retrieve the analysis results.

The invention relates to a power grid equipment monitoring oriented multi-subject intelligent integrated alarm analysis method which comprises the steps that (1) alarm information is subscribed, and classified by taking an interval as a unit; and (2) when a certain interval is accessed, the following subject data is provided for selection: 1) corresponding wiring diagram data is obtained according to the accessed interval; 2) holographic telemeasuring data of a key parameter of the interval within a period before and after the generated time of the alarm information is acquired according to the interval to which the alarm information belongs; 3) the latest alarm information of the interval is obtained according to the interval to which the alarm information belongs; 4) listing information of the interval is obtained according to the interval to which the alarm information belongs; and 5) equipment electric parameter static information and equipment overhaul records of the interval are obtained according to the interval to which the alarm information belongs. The multi-subject analysis and statistical method provides a quicker and richer means for dispatching automation personnel to check and analyze the alarm information generated during power grid running and for overall monitoring on equipment.

The invention relates to an intelligent agricultural machinery management platform based on the IoT (Internet of Things). The intelligent agricultural machinery management platform comprises a map position monitoring module, a system setting module and a product data module and is characterized by further comprising an operation data module and an external data module, wherein the product data module comprises all agricultural machinery information in the management platform, dealer information of each agricultural machinery and terminal user information of each agricultural machinery; the operation data module comprises operation information and fault alarm information of agricultural machineries; and the external data module comprises repair record information, maintenance record information and non-warranty vehicle management information. By an agricultural machinery operation state monitoring module, an agricultural machinery alarm condition monitoring module, a system fault reporting condition monitoring module, an agricultural machinery maintenance notification condition monitoring module and the like, functions of product data tracking statistics, big data fault analysis, repair resource scheduling, pre-alarm analysis, presentation and the like on intelligent agricultural machineries in a certain region are achieved.