Dynamic Alarm Throttling for Self-Resolving Incident Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The immediate forwarding of alarms in communication networks, particularly those triggered by self-resolving incidents, leads to network congestion and inefficient processing, resulting in the creation of numerous invalid incident reports.
Innovation Solution
Implementing a method and system for dynamically throttling alarms based on self-resolving trends, where alarms exceeding a threshold are stored temporarily and summarized at predefined intervals, reducing network traffic and processing load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If alarms are immediately forwarded to processing entities, then incident response time is improved, but network congestion and processing load increase
Solution Approach 1:
The system performs preliminary analysis of alarm characteristics and self-resolution patterns before forwarding alarms to processing entities. By pre-identifying alarms that are likely to self-resolve based on historical data and current trends, the system can suppress these alarms proactively, preventing them from consuming network bandwidth and processing resources while still maintaining rapid response for genuine incidents.
Solution Approach 2:
The alarm management system acts as an intermediary between network elements and processing entities. It introduces an intermediate layer that analyzes, filters, and manages alarm traffic before forwarding to end systems. This intermediary function enables intelligent routing where only necessary alarms are forwarded immediately, while others are suppressed or aggregated, thus reducing network congestion without compromising incident response for critical alarms.
2Reliability
If all alarms are processed and forwarded, then complete incident tracking is achieved, but processing load and resource consumption increase
Solution Approach 1:
The system extracts and separates alarms that are likely to self-resolve from the main alarm processing stream. By identifying specific characteristics of self-resolving alarms and extracting them for separate handling (suppression or special routing), the system reduces the processing load on main incident management systems while maintaining reliable tracking through alternative monitoring mechanisms that track these extracted alarms without requiring full processing resources.
Solution Approach 2:
The system changes parameters such as alarm forwarding thresholds, suppression criteria, and routing decisions based on real-time analysis of alarm patterns and self-resolution rates. By dynamically adjusting these parameters, the system optimizes the balance between complete incident tracking and processing efficiency, ensuring that tracking reliability is maintained for critical incidents while processing resources are conserved through intelligent parameter-based filtering.
3Quantity of substance
If alarm forwarding is suppressed to reduce network load, then network capacity is improved, but incident detection capability may be reduced
Solution Approach 1:
The system implements feedback mechanisms that continuously monitor alarm patterns, self-resolution rates, and network conditions. This feedback information is used to dynamically adjust suppression decisions and routing policies. When feedback indicates genuine incident patterns rather than self-resolving behavior, the system automatically adjusts to forward these alarms, thus maintaining incident detection capability while optimizing network capacity utilization through intelligent, adaptive suppression of non-critical alarms.
Data Source
AI summary
A method comprises determining, by an alarm management system, that an alarm parameter exceeds a threshold value, transmitting, by the alarm management system, a throttle alarm to an incident reporting application in the communication network, in which the throttle alarm indicates that the second alarms describing the common incident will be throttled at the alarm management system for the throttle period, storing, by the throttle application, second alarms describing a common incident at a data store accessible by the alarm management system during a throttle period instead of forwarding the second alarms to a processing entity, transmitting, by the alarm management system, at pre-defined time intervals during the throttle period, an interval alarm report, and transmitting, by the incident management system to an incident reporting system, a throttled alarm report.