A dynamic risk-based alarm processing method and system

Abstract

The present invention relates to a dynamic risk-based alarm processing method and system, including S1: inputting alarm information; S2: judging the input alarm information based on a historical fault blueprint, and outputting a judgment result; S4: matching and generating a dynamic Decision-making; S5: According to the judgment result of S2 and the dynamic decision of S4, perform topology layer merging; S6: According to the dynamic decision and the merging result of topology layer, redundantly merge faults to obtain suspected faults; S7: Output a list of suspected faults. The invention combines the dynamic risk level to update the historical fault blueprint, then judges the input alarm information based on the historical fault blueprint, and outputs the judgment result; at the same time, it combines dynamic decision-making to determine whether to merge the alarms, thus realizing the dynamic processing of the alarms , the blueprint can be updated at any time, and the accuracy of alarm judgment can be improved.

Description

technical field [0001] The invention relates to a dynamic risk-based alarm processing method and system. Background technique [0002] In a conventional data center, the amount of alarm data is large, and there will be a lot of redundancy, so it is difficult to quickly make a final fault judgment based on the original data. In order to reduce redundancy, the existing technology usually merges in the alarm list. In the process of merging, there are two common ways: the first way is to fully judge the set conditions of the alarm, such as figure 1 As shown, when all the alarms of the child node and the parent node exist, the same-level merge will be performed at the parent node layer, but this method is poor in predictability. The second way is to skip the parent node directly by setting the risk aggressively, and do the same-level merge at the virtual parent node. This method is prone to misjudgment and reduces the accuracy of dynamic decision-making. [0003] Existing metho...

AI Technical Summary

Problems solved by technology

[0002] In a conventional data center, the amount of alarm data is large, and there will be a lot of redundancy, so it is difficult to quickly make a final fault judgment based on the original data

In order to reduce redundancy, the existing technology usually merges in the alarm list. In the process of merging, there are two common ways: the first way is to fully judge the set conditions of the alarm, such as figure 1 As shown, when all the alarms of the child node and the parent node exist, the same-level merge will be performed at the parent node layer, but this method is poor in predictability

The second method is to skip the parent node directly by setting the risk aggressively, and do the same-level merger at the virtual parent node. This method is prone to misjudgment and reduces the accuracy of dynamic decision-making.

[0003] Existing methods are all based on specific rules. In actual scenarios, individual analysis, discussion, and rule setting are required for each situation. The workload is heavy and the operability is poor.

Images