311 results about "Alarm analysis" patented technology

A metric monitoring and analysis system including dynamic sampling agents located in monitored system elements and a service management platform. Each sampling agent includes a data adapter collecting metric data in a common format, a threshold generator for determining dynamic metric threshold ranges, an alarm detector generating an indicator when a metric deviates outside a dynamic threshold range or a static threshold, and a deviation tracker generating an alarm severity scores. The service platform includes an alarm analyzer identifying root causes of system alarm conditions by correlation of grouped metrics or forensic analysis of temporally or statistically correlated secondary forensic data or data items from a service model of the system.

Dynamic administration of event pools for relevant event and alert analysis during event storms including receiving, by an events analyzer from an events queue, a plurality of events from one or more components of the distributed processing system, each event including an occurred time and a logged time; creating, by the event analyzer, an events pool; determining whether an arrival rate of the events from the components of the distributed processing system is greater than a predetermined threshold; if the arrival rate is greater than the predetermined threshold, assigning, by the events analyzer, a plurality of events to the events pool in dependence upon their occurred time; and if the arrival rate is not greater than the predetermined threshold, assigning, by the events analyzer, a plurality of events to the events pool in dependence upon their logged time.

The invention provides a method for rapidly detecting and positioning illegal base station intrusion. According to the method, basic network parameters such as LAC, CI and field intensity, acquired by a common user handset and user business behaviors are utilized to determine whether parameter change and the business behaviors are in accordance with various pre-set early warning characteristic conditions, summation of weights in accordance with the characteristic conditions is carried out, whether the present situation belongs to early warning of illegal base station intrusion is determined according to the total weight; when existence of the early warning is determined, a GPS switch of a user is in an open state, present GPS latitude and longitude information of a position of the user is recorded, first-level early warning information is transmitted to a remote central processing unit; report information of multiple terminals are classified by the central processing unit according to LAC codes before attack, secondary integrated alarm analysis on one type of early warning information is carried out to determine whether pre-set alarm characteristic conditions are satisfied, summation of weights in accordance with the alarm characteristic conditions is carried out, whether the present situation belongs to illegal base station intrusion alarm is determined according to the total weight, after existence of the alarm is determined, an illegal base station position during the present illegal base station intrusion is calculated, and real-time alarm is carried out.

The invention provides an intelligent alarm monitoring method of a neural network. A brand-new intelligent communication network comprehensive monitoring analysis and fault locating system is built by adopting an alarm correlation analysis and locating technology based on an expert system of the neural network. The system guarantees effective monitoring of repeated alarming, alarm oscillation, alarm flash and alarm storm by collecting the alarm data of each piece of equipment of each network element system of each major, and filters out a storm alarm, a flash alarm, an invalid alarm and a secondary alarm correctly; and the system can pick out an important alarm event which is really required to be processed from the collected mass alarms based on a deep correlation rule analysis and neural network technology, and can locate and remove a network fault quickly and correctly. The correction rate of network alarm analysis and fault diagnosis can be improved obviously, customer satisfaction is improved, and operating cost and maintenance cost are reduced greatly, so that the aims of reducing the work load of an operator and a maintainer and improving the efficiency of fault management are fulfilled.

A fault identification system consisting of multiple reasoning engines and the blackboard analyzes alarm information and the associated contextual information to identify faults. The contextual information associated with an alarm is derived by analyzing the alarm along four spaces, namely, transaction-space, function-space, execution-space, and signal-space. The reasoning engines associated with these spaces infer and / or validate the occurrences of faults. Transaction reasoning engine, using the associated knowledge repository, processes the generated alarms to infer and validate faults. Monitor reasoning engine, using the associated knowledge repository, processes domain specific monitor variables to infer faults. Execution reasoning engine, using the associated knowledge repository, processes execution specific monitor variables to infer and validate faults. Function reasoning engine, using the associated knowledge repository, reasons to infer and validate faults. Signal reasoning engine, using the associated knowledge repository, processes hardware specific and environment variables to infer and validate faults. Global reasoning engine moderates the inferences and validations by other reasoning engines to provide consolidated fault inference. The invention also provides a process, "design for diagnosis," for designing electronic systems with maximum emphasis on fault diagnosis.

Methods, systems and products are provided for relevant alert delivery with event and alert suppression including identifying by the event analyzer in dependence upon the event arrival rules one or more alerts; closing, by the event analyzer in dependence upon the events pool operation rules, the events pool; determining, by the events analyzer in dependence upon the event suppression rules, whether to suppress one or more events in the closed events pool; identifying by the event analyzer in dependence upon the events pool closure rules and any unsuppressed events assigned to the events pool, one or more additional alerts; assigning by the alert analyzer the identified alerts to an alerts pool; determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and transmitting the unsuppressed alerts to one or more components of the distributed processing system.

A fault identification system analyzes alarm information and the associated contextual information to identify the occurred faults. The contextual information is based on usecases, transactions, and functions associated with the electronic system under consideration. Multiple detectors that form part of knowledge repositories are used in the process of fault identification.

Methods, systems, and computer program products for flexible event data content management for relevant event and alert analysis within a distributed processing system are provided. Embodiments include capturing, by an interface connector, an event from a resource of the distributed processing system; inserting, by the interface connector, the event into an event database; receiving from the interface connector, by a notifier, a notification of insertion of the event into the event database; based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database; receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database; in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database; and processing, by the monitor, the retrieved events.

The invention relates to a method and a system based on a northbound interface to realize network management. The northbound interface caches alarm information and the received alarm information is grouped and done with association analysis according to the ID of an element management system. The alarm information is divided into the following types: filtered alarm information, combined alarm information, compressed alarm information and inhibited alarm information. An alarm analysis device analyzes the alarm information according to alarm time to obtain association alarm information. A fault analysis device generates the dependency relationship of communication equipment according to the association alarm information sent by the alarm analysis device. An alarm treating device correspondingly treats the alarm information according to the types of the alarm information and conducts alarm notice or early fault alarm according to the dependency relationship in a network topological diagram generated by the fault analysis device. By treating the alarm information, the invention relieves the load of the northbound interface and improves the efficiency of the network management system in treating the alarm information.

The invention discloses an information safety operation and maintenance supervising platform for carrying out centralized monitoring, centralized maintenance and centralized alarm analysis on a network, a server, a data base, an intermediate piece, an application system and other monitored objects in an electrical secondary system. The platform comprises a data monitoring center and webmaster devices distributed in various safe areas, wherein the webmaster devices are used for acquiring and processing data information of the monitored objects and transmitting the data information to a data monitoring center through an output interface for centrally analyzing and storing and also provide a browse interface for the local monitoring. The platform enhances the control force on the network andthe whole information system, improves the operation and maintenance level and ensures the safe management of the electric power secondary system.

The invention discloses a technology support system of a marketing and distribution integration power supply service and a method thereof. The system comprises: a power supply area management module, an integrated receiving alarm analysis module, a prearranged power failure management module, a fault power failure management module, a switched power supply management module, a first-aid repair vehicle management module and an on-site work management module. Through adopting the technology support system of an unified and standard marketing and distribution integration power supply service, needs of information integration and sharing in power enterprises can be satisfied; distribution information is integrated as much as possible, which provides a comprehensive and visualized information support platform for the marketing and distribution integration power supply service.

The invention discloses a hierarchical alarm analysis method and a hierarchical alarm analysis system based on a content delivery network, which aim to realize precise real-time alarm and improve service quality of the CDN (content delivery network) of the internet. The technical scheme includes that the method includes the steps: data acquisition; single node analysis by dividing acquired data according to a target IP (internet protocol), and placing the data with the same nodes into an analysis container for single node analysis; regional analysis by summarizing abnormal data reported after single node analysis, and placing the abnormal data into corresponding analysis containers for analysis according to regions; source analysis by summarizing abnormal data after regional analysis, analyzing all the abnormal data, and judging whether the problem lies in a source according to the occupied proportion in all the regions; and alarm filtering by obtaining upper abnormal alarm information after single node analysis, regional analysis and source analysis, and filtering lower repeated alarming by means of reverse matching of the upper lower alarm data.

The invention discloses a subway shield construction surface deformation warning method based on temporal and spatial information fusion. According to the method, shield construction surface deformation warning sign fusion and regional warning decision fusion are realized by combining an information fusion theory and a hierarchical fusion thought with surface deformation monitoring information and through a feature fusion algorithm based on a RBF neural network and a decision fusion algorithm based on a D-S evidence theory. A warning means and informationization tool integrating the functions of alarm identification, alarm analysis, alarm prediction, alarm evaluation and alarm decision is provided for the construction site. The method is of important significance to the enhancement of shield construction surface deformation safety risk monitoring and the improvement of shield construction safety risk management level.

The embodiment of the invention discloses an alarm correlation analysis method, device, equipment and medium. The method comprises the following steps of: acquiring alarm data, and carrying out line segment deduplication and standardization on the alarm data to obtain standardized alarm data; corresponding each alarm data according to the standardized alarm data and the characteristic field; excavating an alarm association rule according to a preset alarm rule mining parameter based on an alarm family spectrum so as to obtain an alarm association rule after mining; obtaining a preset alarm social network according to the mining alarm association rules; presetting to carry out alarm analysis on the real time alarm data, according to the alarm family spectrum, the minded alarm association rule, and the alarm social network. The invention can effectively de-emphasize the massive alarm data, improve the calculation efficiency through association rule mining, and quickly grasp the main features of the alarm storm, and the complex relationship between the alarms, in particular to the root cause alarm the chain alarm occurs. Derived alarms have a more in-depth analysis.

The invention discloses a disk detection system, a disk detection method and a network storage system. The disk detection system comprises a disk dynamic detection module, a parameter configuration module, an intelligent analysis module and an alarm module. The parameter configuration module is used to configure a time interval of extracting the disk status information for the disk dynamic detection module as well as the disk self-monitoring, analysis and reporting technology (S. M. A. R. T.) information threshold. The disk dynamic detection module is used to extract the disk status information according to the time interval configured by the parameter configuration module. The intelligent analysis module is used to judge the disk current health status according to the status information of the disk and the disk S. M. A. R. T. information threshold, and to determine whether alarm information is sent to the alarm module according to the current disk health status; and the alarm module is used to alert a user after receiving the alarm information sent by the intelligent alarm analysis module. According to the invention, the health status of the disk can be analyzed in real-time manner, and alarm information is sent to the user according to the degree of health status.

Relevant alert delivery including determining, by an events listener associated with an event queue, whether one or more events in an events queue have not been assigned to any events pool by any event analyzer; and if one or more events in the events queue have not been assigned to any events pool, identifying by the events listener in dependence upon the event analysis rules one or more alerts; sending by the event listener to an alerts queue all the alerts identified by the event listener; the alerts queue having an associated alerts listener; determining whether one or more alerts in the alerts queue have not been assigned to any alert pool; if one or more alerts in the alerts queue have not been assigned to any alerts pool, and determining in dependence upon alert analysis rules whether to suppress the alerts; and transmitting the unsuppressed alerts.

Restarting event and alert analysis after a shutdown in a distributed processing system includes identifying a shutdown condition of the distributed processing system; determining whether the shutdown was a planned shutdown or an unplanned shutdown; if the shutdown was planned, storing an identification of the last event in an event log that was injected in an event queue at the time of the planned shutdown and restarting event and alert analysis using the next event identified in the event log; and if the shutdown was unplanned, for each event analyzer, identifying the last event included in the last event pool that the event analyzer closed; and restarting event and alert analysis at the event analyzer using the next event received by the event analyzer after the identified last event.

The invention belongs to a monitoring technology field and especially discloses a multi-device cooperation alarm analysis processing system. The system comprises: a PLC control system and an image monitoring system. The PLC control system is used to realize electrical control operation of a field device. The image monitoring system is used to realize video monitoring displaying of the field device. The image monitoring system possesses a video switching control matrix and several front-end cameras. A process database SCADA server forms communication connection with a matrix control management server of an image through the PLC control system. The video switching control matrix forms the communication connection with a matrix control management server through a data line so as to realize switching of the image video and PLC system equipment fault alarm in real time and realize image tracking alarm. Monitoring personnel can conveniently check and analyze an operation state of the device. Once an abnormity phenomenon is discovered, early intervention and timely processing can be achieved. Accident processing time can be shortened. Therefore, preventative measures can be performed or an accident scope can be substantially reduced and the fault time can be shortened.

The invention discloses a tunnel cable grounding current safety alarm expert analysis method. The tunnel cable grounding current safety alarm expert analysis method includes setting alarm threshold values and filtering conditions in a monitoring platform; loading serial numbers and name information of monitoring terminals in the monitoring platform; dividing grounding current abnormalities into three categories including jumping abnormality, absolute value abnormality and inter-phase comparison abnormality; sequentially judging whether grounding current acquired by the monitoring terminals are abnormal or not; filtering current abnormality analysis results and alarm when all the filtering conditions are met; outputting the filtered grounding current abnormality analysis results in the monitoring platform. The tunnel cable grounding current safety alarm expert analysis method has the advantages that alarm analysis of the tunnel grounding current can be achieved, so that current abnormalities can be monitored effectively; through the set threshold values of the filtering conditions of the abnormal current, the abnormal current meeting the filtering conditions can be alarmed, false alarm is prevented and alarm accuracy is improved.

The embodiment of the invention discloses an alarm analysis method, a device and a system, and relates to the field of network management. When the structure of an information system has changed, time and energy that spent by technical staff in a network management system can be minimized, and alarm analysis performance of the network management system can be raised to some extent. The method comprises the following steps: alarm information is obtained, and the alarm information is classified; frequency of occurrence of the alarm information of the same kind is obtained, and correlation between the alarm information of different kinds is determined according to the frequency of occurrence of the alarm information of each kind; and causality between the alarm information of different kinds is determined according to the correlation between the alarm information of different kinds, and the causality is indicated as an association rule for alarm analysis. The method is suitable for the scene of analysis of alarm information.

The invention provides an alarm processing method, which is applied in a network management system for alarm analysis on a managed network device. The method comprises that a network management system records the events reported by a managed network device, the network management system judges whether the events meet a preset alarm trigger condition or not, if meeting, an alarm corresponding to the alarm trigger condition is generated. In the embodiment of the invention, flexible alarm filtering analysis is realized by presetting alarm trigger condition, thereby meeting various requirements of different users, besides, because all events are stored in the network management system, associated events can be checked through the alarm, specific event reporting situation also can be checked afterwards, and further, the alarm filtering function is realized by defining rules, thereby facilitating extension.

An alarm analysis method capable of multi-purpose function. A plurality of efficiency indices are defined, comprising statistical-data-configuration, data-set, background-alarm-rate, peak-alarm-rate, active-alarm-distribution, bad-actors-identification, and alarm-report indices. A data warehouse is created according to the efficiency indices and using an online analytical processing method. A plurality of user interfaces are created according to the data warehouse and analysis results. The data warehouse is accessed using the user interfaces to retrieve the analysis results.

An alarm analysis system for providing statistics on alarms collected by a process control system including an alarm server receiving and storing alarms from one or more processes supervised by the control system. The alarm analysis system is run on the alarm server and the alarm analysis system is adapted to automatically produce and display the statistics in real time based on the alarms stored in the alarm server.

The invention relates to a power grid equipment monitoring oriented multi-subject intelligent integrated alarm analysis method which comprises the steps that (1) alarm information is subscribed, and classified by taking an interval as a unit; and (2) when a certain interval is accessed, the following subject data is provided for selection: 1) corresponding wiring diagram data is obtained according to the accessed interval; 2) holographic telemeasuring data of a key parameter of the interval within a period before and after the generated time of the alarm information is acquired according to the interval to which the alarm information belongs; 3) the latest alarm information of the interval is obtained according to the interval to which the alarm information belongs; 4) listing information of the interval is obtained according to the interval to which the alarm information belongs; and 5) equipment electric parameter static information and equipment overhaul records of the interval are obtained according to the interval to which the alarm information belongs. The multi-subject analysis and statistical method provides a quicker and richer means for dispatching automation personnel to check and analyze the alarm information generated during power grid running and for overall monitoring on equipment.

The invention provides a method for analyzing monitoring system operation and maintenance alarm data. The method comprises the steps that configuration information of all servers and configuration information of all client terminals are acquired, and a plurality of parameters are set to correspond to the configuration information to obtain an IT architecture topology model; alarm information of all the servers and alarm information of all the client terminals are collected, and unified classification and standardized processing are performed on the alarm information according to the IT architecture topology model; alarm levels in the alarm information of all the servers and alarm levels in the alarm information of all the client terminals after standardized processing are acquired, and the alarm levels corresponding to all the servers and the alarm levels corresponding to all the client terminals are re-determined under the condition of the same IT component according to a preset alarm analysis algorithm; the re-determined alarm levels corresponding to all the servers and the re-determined alarm levels corresponding to all the client terminals are pushed to be displayed on a display device. By the implementation of the method, the requirements for management simplicity and convenience can be met, and the complexity of data processing is lowered; meanwhile, the requirements for real-time performance and accuracy in the performance for processing alarm events are satisfied, and therefore the purposes of saving time and labor are achieved.

The invention provides an alarm generation method and system. The alarm generation method is carried out in a cloud computing environment on the basis of a big data analysis technology. The method includes the following steps that: the operation data of a monitoring object and the operation data of at least one association object are collected on the basis of a predetermined collection policy, wherein the association objects are objects directly or indirectly affecting the operation state of the monitoring object; the pre-stored historical operation data of the monitoring object and the at least one association object are acquired on the basis of a predetermined data analysis policy, and data analysis is performed on the collected operation data of the monitoring object, the operation dataof the at least one association object and the acquired historical operation data of the monitoring object and the at least one association object, so that the performance trend and state change of the monitored object is obtained; and intelligent alarm analysis decision is performed on the performance trend and state change of the monitored object on the basis of an alarm policy, whether an alarm is to be generated is determined.

The invention discloses a communication network transmission type alarm uniform analysis device and method and relates to the field of communications. The device comprises a display module, an adaptive module, an interface module, a preprocessing analysis module, a secondary analysis module and a static data read-only module, wherein the display module, the adaptive module, the interface module, the preprocessing analysis module, the secondary analysis module and the static data read-only module are sequentially connected, the adaptive module completes delivery and transition of the service path and alarm correlation analysis services and is communicated with the display module, the interface module provides data for the preprocessing analysis module, and outputs alarm correlation analysis results, the preprocessing analysis module conducts preprocessing analysis on the alarm correlation analysis, and the secondary analysis module conducts secondary analysis on the alarm correlation analysis. Software service technologies are adopted on the implementation forms of the modules, different service analysis modules are reused in a binary mode conveniently, the preprocessing and asynchronous parallel processing are adopted, the alarm analysis efficiency can be effectively improved, the secondary analysis mechanism is adopted, and interference possibly existing in the analysis results can be effectively avoided.

The invention relates to an intelligent agricultural machinery management platform based on the IoT (Internet of Things). The intelligent agricultural machinery management platform comprises a map position monitoring module, a system setting module and a product data module and is characterized by further comprising an operation data module and an external data module, wherein the product data module comprises all agricultural machinery information in the management platform, dealer information of each agricultural machinery and terminal user information of each agricultural machinery; the operation data module comprises operation information and fault alarm information of agricultural machineries; and the external data module comprises repair record information, maintenance record information and non-warranty vehicle management information. By an agricultural machinery operation state monitoring module, an agricultural machinery alarm condition monitoring module, a system fault reporting condition monitoring module, an agricultural machinery maintenance notification condition monitoring module and the like, functions of product data tracking statistics, big data fault analysis, repair resource scheduling, pre-alarm analysis, presentation and the like on intelligent agricultural machineries in a certain region are achieved.

This invention relates to the communication network alarm method and alarm system. The said system includes: the alarm processing unit, the system master database, and the alarm acquisition unit; the said alarm processing unit completes the alarm analysis; the said alarm acquisition unit includes the alarm acquisition management unit and the local storage unit, the said alarm acquisition management unit receiving the alarm data from the network element, and according to the preset masking rules to determine whether to discard the alarm data, and if not, it stores the said alarm data to the local storage unit, and sends it to the alarm processing unit; the said system master database keeps synchronization with the local storage unit, and according to the alarm processing message of the alarm processing unit, it dynamic updates the alarm data. The alarm system of the invention has a higher disaster-tolerant ability, and the system processing speed is higher, which can meet the real-time requirements.