The invention provides an alarm
processing method based on a
rule engine, an enhanced RAG and multi-
source data fusion, which comprises the following steps: after responding to a monitoring alarm, extracting a grade, an IP and a trigger text, and carrying out three-level rule
verification: if all passes, carrying out automatic self-healing and notifying a person in charge; if not, selecting an optimal case from the RAG
library by using a vector similarity + multi-dimensional weighting
algorithm, synchronously pulling real-time indexes in a preset time window of the host, fusing the optimal case and the real-time indexes, and inputting the two into a
large model to generate a disposal suggestion; if it is suggested that no high-similarity case exists, a multi-role session group collaborative generation scheme is established and stored, the disposal result is used for dynamically updating the
knowledge base, the plan is fused when the failure reaches the threshold value, and the successful scheme is written back to the RAG base. According to the invention, efficient
automation and intelligentization of alarm
processing can be realized, the operation and maintenance efficiency, accuracy and
knowledge management capability are improved, and the defects in a complex alarm scene in the prior art are overcome.