Gradient processing method for alarm storm in network management system

Abstract

The invention relates to the field of network communication. The method comprises the steps: collecting an original alarm of a network element; carrying out the alarm format processing of the originalalarm, obtaining the alarm at the unified format, carrying out the global slight alarm according to a slight alarm filtering rule, recording an alarm with the time abnormality in an abnormality alarmdatabase, and carrying out the filtering, and uploading the alarm to an alarm server when a network element alarm switch giving an alarm is started; enabling the alarm server to receive and collect all alarms of the server, recording the alarm of abnormal equipment in the abnormality alarm database, carrying out the filtering, carrying out the personalized filtering, transient alarm processing, alarm correlation and preprocessing of the alarm of normal equipment, and uploading a centralized alarm. The method can achieve the quick location of an equipment problem through the format unificationof the original alarm, achieves the control of the normal alarm storm through three threshold values of slight alarm global filtering, time abnormality alarm filtering and lifting, upgrading alarm filtering, and improves the alarm processing effect.

Description

technical field [0001] The invention relates to the field of network communication, in particular to a gradient processing method for an alarm storm in a network management system. Background technique [0002] In the telecommunications industry, when a network element (that is, a network device) fails, it will be reported to the professional network management in the form of an alarm, and then reported to the centralized alarm system for processing after processing by the professional network management. Alarm storm refers to: when network elements or network equipment manufacturers experience network management abnormalities, a large number of alarms are generated and reported in a short period of time, causing the professional network management alarm server to be blocked and affecting the normal reporting of alarms of other network elements. The current methods to solve this problem are: detect the real-time traffic of the alarm interface (that is, the collection source)...

AI Technical Summary

Problems solved by technology

[0003] Although the Chinese invention application with the application number 200910244191.5 titled "A Processing Method and Device for Alarm Storm" can avoid the backlog of alarms in the monitoring client, there are still some problems: (1) There are many models of lower-layer network management or network elements, However, the alarm format reported by each device is different at present, and it is very troublesome for maintenance personnel to deal with

(3) The reasons for the alarm storm generally include: A. The network management interface is abnormal, and the historical alarm is reported after restarting; B. The network element or the network management board is upgraded or upgraded; C. The network element cannot recover and compress by itself, and frequent failures occur Alarm; D. A major network failure occurs, and multiple network elements generate a large number of alarms at the same time

The above-mentioned Chinese invention application does not specifically address the situations of these types of warning storms

Images