Summary of the invention
For solving the problems of the technologies described above, the embodiment of the present invention provides a kind of telecommunications network alarm method and system,Consider to realize the object that full telecommunications network relation is carried out alarm, technical scheme is as follows:
A kind of telecommunications network alarm method, is applied in telecommunications network warning system described telecommunications network warning systemBe connected with the large professional system of telecommunications network five respectively, the large professional system of described telecommunications network five comprises: exchange specialtySystem, data professional system, wireless professional system, transmission professional system and platform professional system, described inMethod comprises:
Business is monitored, obtained related being correlated with of this business in the large professional system of described telecommunications network fiveService data;
Judge whether described service data meets the alarm conditions that set in advance, if so, based in advanceThe relation that affects in the large professional system model of telecommunications network five of setting up between business and the impact between the each link of businessRelation is carried out alarming processing.
Preferably, the large professional system model of described telecommunications network five comprises: business model, index model, announcementAlert model and configuration data model,
Wherein, described configuration data model is for depositing the network element of the telecommunications network five large each network elements of professional systemType information, network element grouping information, network element attribute information and network element relation information;
Described index model, for depositing the performance data of the telecommunications network five large each network elements of professional system;
Described alarm model, for depositing the alarm data of the telecommunications network five large each network elements of professional system;
Described business model comprises: business process model and business support model,
Described business process model, for the stream between links and the links of storage service flow processJourney relation;
Described business support model, for storing telecommunications network infrastructure, module and application propping up businessSupport relation.
Preferably, described business is monitored, obtained this business in the large professional system of described telecommunications network fiveThe step of related relevant service data, comprising:
Use thread pool to monitor business, described in obtaining by the mode of each thread in poll thread poolThe related relevant service data of this business in the large professional system of telecommunications network five.
Preferably, the impact between business in the described large professional system model of telecommunications network five based on setting up in advanceThe relation that affects between the each link of relation and business is carried out the step of alarming processing, comprising:
Determine affiliated link and the affiliated industry of this link of service data that meets the alarm conditions that set in advanceBusiness, to the processing of reporting to the police of this link and this business;
According to the relation that affects between each link in this business, determine affected each link in this business,Affected each link in this business is carried out to early warning processing;
The relation that affects according to this business on other business in the large professional system model of described telecommunications network five, reallyFixed affected each business, carries out early warning processing to affected each business.
Preferably, described according to the relation that affects between each link in this business, determine in this business and be subject toEach link of impact, comprises the step that in this business, affected each link is carried out early warning processing:
By warning root positioning analysis, trouble point is positioned;
Determine other links with place, trouble point link with incidence relation by association analysis;
Degree of impact according to place, alarm degree of impact Analysis deterrmination trouble point link on these other links;
Carry out early warning processing according to described degree of impact.
Preferably, described according to this business to other business in the large professional system model of described telecommunications network fiveAffect relation, determine affected each business, the step that affected each business is carried out to early warning processingSuddenly, comprising:
By warning root positioning analysis, trouble point is positioned;
Determine other business with place, trouble point business with incidence relation by association analysis;
Degree of impact according to place, alarm degree of impact Analysis deterrmination trouble point business on these other business;
Carry out early warning processing according to described degree of impact.
A kind of telecommunications network warning system, described telecommunications network warning system respectively with the large professional system of telecommunications network fiveConnect, the large professional system of described telecommunications network five comprises: exchange professional system, data professional system, wirelessProfessional system, transmission professional system and platform professional system, described telecommunications network warning system comprises: monitoringUnit, judging unit and Alarm Unit,
Described monitoring unit, for business is monitored, obtains in the large professional system of described telecommunications network fiveThe relevant service data that this business is related;
Described judging unit, for judging whether described service data meets the alarm conditions that set in advance,If so, trigger described Alarm Unit;
Described Alarm Unit, between the large professional system model business of telecommunications network five based on setting up in advanceThe relation that affects and the each link of business between the relation that affects carry out alarming processing.
Preferably, the large professional system model of described telecommunications network five comprises: business model, index model, announcementAlert model and configuration data model,
Wherein, described configuration data model is for depositing the network element of the telecommunications network five large each network elements of professional systemType information, network element grouping information, network element attribute information and network element relation information;
Described index model, for depositing the performance data of the telecommunications network five large each network elements of professional system;
Described alarm model, for depositing the alarm data of the telecommunications network five large each network elements of professional system;
Described business model comprises: business process model and business support model,
Described business process model, for the stream between links and the links of storage service flow processJourney relation;
Described business support model, for storing telecommunications network infrastructure, module and application propping up businessSupport relation.
Preferably, described monitoring unit comprises: thread monitor subelement, and for using thread pool to businessMonitor, obtain in the large professional system of described telecommunications network five by the mode of each thread in poll thread poolThe relevant service data that this business is related.
Preferably, described Alarm Unit comprises: warning subelement, link early warning subelement and business early warningSubelement,
Described warning subelement, for determining under the service data that meets the alarm conditions that set in advanceBusiness under link and this link, to the processing of reporting to the police of this link and this business;
Described link early warning subelement, for according to the relation that affects between the each link of this business, determinesAffected each link in this business, carries out early warning processing to affected each link in this business;
Described business early warning subelement, for according to this business to the large professional system model of described telecommunications network fiveIn the relation that affects of other business, determine affected each business, affected each business is carried outEarly warning processing.
By applying above technical scheme, a kind of telecommunications network alarm method that the embodiment of the present invention provides and beSystem, unified monitors the business in five large professional systems, and telecommunications network five based on foundation is in advance largeThe relation that affects between the relation that affects in professional system model between business and the each link of business carry out alarm placeReason. The present invention can use the whole network warning system to carry out alarming processing to whole communication network, therebyAvoid occurring in network the phenomenon of multiple warning systems. The present invention has not only saved system resource, andThe relation that can consider between whole telecommunications network data is carried out alarm, has improved the effect of alarm. ByIn carrying out alarm according to the relation of impact, therefore can have influence on the place link that goes wrong, businessOther links and business are carried out early warning, have further improved the effect of alarm, also perfect warning information.
Detailed description of the invention
In order to make those skilled in the art person understand better the technical scheme in the present invention, below in conjunction withAccompanying drawing in the embodiment of the present invention, retouches clearly and completely to the technical scheme in the embodiment of the present inventionState, obviously, described embodiment is only the present invention's part embodiment, instead of whole enforcementExample. Based on the embodiment in the present invention, those of ordinary skill in the art are not making before creative workPut obtained every other embodiment, all should belong to the scope of protection of the invention.
As shown in Figure 1, a kind of telecommunications network alarm method that the embodiment of the present invention provides, is applied to telecommunications networkIn warning system, described telecommunications network warning system is connected with the large professional system of telecommunications network five respectively, described electricityThe large professional system of letter net five comprises: exchange professional system, data professional system, wireless professional system, biographyDefeated professional system and platform professional system, described method can comprise:
S100, business is monitored, obtained in the large professional system of described telecommunications network five this business relatedRelevant service data;
Wherein, the large professional system model of described telecommunications network five comprises: business model, index model, alarmModel and configuration data model,
Wherein, described configuration data model is for depositing the network element of the telecommunications network five large each network elements of professional systemType information, network element grouping information, network element attribute information and network element relation information;
Described index model, for depositing the performance data of the telecommunications network five large each network elements of professional system;
Described alarm model, for depositing the alarm data of the telecommunications network five large each network elements of professional system;
Described business model comprises: business process model and business support model,
Described business process model, for the stream between links and the links of storage service flow processJourney relation;
Described business support model, for storing telecommunications network infrastructure, module and application propping up businessSupport relation.
Wherein, service data can comprise: infrastructure object data, application software object data and industryBusiness object data. In actual applications, may from a large amount of different equipment, gather service data,And the data-interface mode that different equipment is supported may be not quite similar. Therefore, in actual applications,The interface of image data of the present invention can be set to support the form of several data interface, then according to collectionThe data-interface mode that object uses this object to support. Concrete, the interface of image data of the present invention canBe set to support CORBA, MML, Socket, SNMP, SHELL, FTP, SQL,The acquisition interface mode of several main flows such as MQ, Rmi.
Wherein, CORBA(CommonObjectRequestBrokerArchitecture is common objectRequest broker architecture is the object-oriented application program body by a kind of standard of OMG tissue formulationIt is specification.
MML:MML interface refers to man-machine access interface, in telecommunication path business, also refers to that business supportsBusiness system interface in system.
Socket:Socket interface is the API of TCP/IP network, Socket interface definition many functionsOr routine, programmer can develop with them.
SNMP:SimpleNetworkManagementProtocol, Simple Network Management Protocol.
Shell: command analysis device.
FTP: FTP.
SQL: data base query language.
MQ: a kind of communication means of application program application programs, application program is by writing and retrieve discrepancyThe data for application program (message) of lining up are communicated by letter, and link them without special connection.
RMI: RMI.
The object of having relatively high expectations for real time data acquisition can directly arrange number in collected objectAccording to acquisition module, to carry out probe collection.
S200, judge that whether described service data meets the alarm conditions that set in advance, and if so, holdsRow step S300;
In other embodiments of the invention, when described service data does not meet the alarm conditions that set in advance,Can also continue to perform step S200, in this case, step S100 continues or periodically carries out.
Wherein, alarm conditions can comprise: according between different service datas to affect relation determinedAlarm conditions. Judge whether described service data meets default alarm conditions and can comprise: according to operationThe type of data is searched at least one alarm conditions matching, and judges whether described service data meetsThe alarm conditions that find. Because service data has multiple, and set for different service datasAlarm conditions be also not quite similar, therefore service data alarm conditions corresponding thereto can be compared.
The relation that affects in S300, the large professional system model of telecommunications network five based on setting up in advance between business andThe relation that affects between the each link of business is carried out alarming processing.
The large professional system model of telecommunications network five of setting up in advance can by choose in the whole network key object andKey index, then sets up between object and index, associated between each object, to set up telecommunications network fiveLarge professional system model. Wherein, key object can comprise: the resource occupying situation of each specialty,Hardware handles ability, business development situation, marketing activity situation and business demand change etc. Wherein, pre-If alarm conditions can be multiple, set up different alarm conditions for different objects respectively. As rightResource occupying situation, its alarm conditions can be: network traffics are not less than first threshold, when certainWhen the network traffics of specialty are not less than first threshold, determine that this specialized network resource occupation is too high, may be rightOther professional network traffics impact, so carry out alarm.
Certainly,, in other embodiments of the invention, can also different announcements be set to different alarm conditionsAlert grade, concrete, can be to some important object and the higher alarm grade of target setting thereof, rightThe alarm grade that not too important object and target setting thereof are lower. Also can be according to system platform maintenance etc.Level is divided, and also can divide in conjunction with the scope that affects user, also can need in conjunction with business developmentDivide.
For the association between the associated and each object between each index of object, can be according to actual conditionsJudge the incidence relation between them, incidence relation can comprise: comprise, side by side, quote, derivation etc.
The mode of alarm can be multiple, can adopt the mode of sound, image or their combination to enterRow alarm. Concrete, the present invention can adopt the form of unified view, carries out alarm with graph mode.User can see needed data intuitively from chart like this. In other embodiments of the invention,Data in predetermined amount of time all can be carried out to chart displaying, user can see data intuitively like thisThe development process of the state of affairs embodying.
It should be noted is that, alarm conditions can adopt the mode of predetermined threshold value. In actual applications,This threshold value can be static, can be also dynamic change. Static threshold is readily appreciated that, no longer superfluousState. A kind of mode of dynamic threshold is: according to the difference of time period, according to preset rules modulation theresholdsSize. For example: generally, within 10 o'clock to 22 o'clock, be the more stages of network traffics, all the other time periodsIt is the stage that network traffics are lower, so just can follow according to these two one different of stages settings timeBetween change threshold value.
Certainly the threshold value, using in above embodiment can be real-time change. Concrete, canFor the business of continuous variation, calculate the threshold value making new advances. As: choose the cycle according to the business activity cycleInterior achievement data, calculates by computational methods such as averaging method, weighted mean methods the threshold value making new advances. WhenSo also can be according to the business activity cycle, choose the historical achievement data of part in the cycle, select different numbersIt is predicted and fitting algorithm (as: regression model, moving average model(MA model), mixed model etc.), prediction obtainsIndex value as threshold value.
In other embodiments of the invention, can also be first to gathered service data in conjunction with the whole network modelAnalyze, draw analysis result, then judge whether to meet default alarm conditions, if so,Alarm. Concrete, analytical method can comprise: unusual fluctuation analysis, trend analysis, comparative analysis, formationAnalyze and chain rate is analyzed etc. on year-on-year basis. Below above five kinds of analyses are briefly described:
Unusual fluctuation is analyzed: by current business achievement data and historical achievement data or operational indicator are predicted to numberAccording to contrast, find the abnormal of business activity, the starting point of further analyzing as traffic issues.
Trend analysis: the historical data of key business index is carried out to the trend analysis of specific period, reflectionThe variation tendency of key business link business activity quality.
Comparative analysis: realize comparative analysis between business procession key link index, related service placeComparative analysis between reason process key link index.
Component analysis: in operation flow, have constituent relation between some index (as whole business procedureOverall average duration is made up of the average duration of three business processing steps), can find base according to business experienceThis consistent composition, as composition curve occur abnormal, deployment analysis in time.
Chain rate is analyzed on year-on-year basis: on year-on-year basis: in the different large periods of key business index, and the going through of contemporaneityHistory data are analyzed, and the variation of reflection key business link business activity quality is dynamic. Chain rate:The historical data of key business index is carried out to the comparative analysis of adjacent periods, reflection key business link industryThe variation of business movable mass is dynamic.
In actual applications, concrete alarm method can have multiple, as SMS notification, mail notification,Carry out alarm etc. by alarm equipment.
In other embodiments of the invention, can also comprise: usage data storehouse is to meeting default alarmThe service data of condition is stored.
The technical scheme that the embodiment of the present invention provides, can be used the whole network warning system to whole electricityCommunication network carries out alarming processing, thereby has avoided occurring in network the phenomenon of multiple warning systems. The present inventionNot only saved system resource, and the relation that can consider between whole telecommunications network data is accusedAlert, improve the effect of alarm. Owing to carrying out alarm according to the relation of impact, therefore can be to going wrongOther links and business that place link, business have influence on carry out early warning, further improved alarmEffect, also perfect warning information.
As shown in Figure 2, in the another kind of telecommunications network alarm method that the embodiment of the present invention provides, step S100Can comprise:
S110, use thread pool are monitored business, obtain by the mode of each thread in poll thread poolObtain the related relevant service data of this business in the large professional system of described telecommunications network five.
Thread pool is a kind of multithreading processing form, in processing procedure, adds task to queue, then existsAfter creating thread, automatically start these tasks. Thread pool thread is all background thread, and each thread usesThe storehouse size of acquiescence, with the priority operation of giving tacit consent to, and in multiple thread units. If certain lineJourney is idle (as waited for certain event) in Managed Code, and thread pool will insert another worker threadMake all processors keep busy. If all thread pool threads all remain busy, but in queueThe work that comprises hang-up, thread pool will create another worker thread over time, but the number of threadOrder exceedes maximum never. Exceeding peaked thread can queue up, but they will wait until other linesAfter completing, journey just starts.
It will be appreciated by persons skilled in the art that and use thread pool to monitor multiple business, canBetter manage the increase of for example monitored object, deletion, the amendment of monitoring priority etc.
It should be noted is that, poll is a kind of handling process of obtaining thread service data, thread poolCan obtain relevant service data to the thread in pond successively samsara, can make the data of each thread canObtained in time.
As shown in Figure 3, in the another kind of telecommunications network alarm method that the embodiment of the present invention provides, step S300Can comprise:
Link and this link institute under S310, definite service data that meets the alarm conditions that set in advanceThe business belonging to, to the processing of reporting to the police of this link and this business;
S320, according to the relation that affects between each link in this business, determine in this business affectedEach link, carries out early warning processing to affected each link in this business;
S330, according to this business, the impact of other business in the large professional system model of described telecommunications network five is closedSystem, determines affected each business, and affected each business is carried out to early warning processing.
Describe below in conjunction with example:
As shown in Figure 4, in telecommunications network, certain product is made up of three business of carrying out successively, is respectively firstBusiness 001, the second business 002 and the 3rd business 003, wherein, the second business 002 need be in the first businessAfter 001 successful execution, carry out, and the 3rd business 003 need to be carried out after the second business 002 successful execution.
Meanwhile, the second business 002 is made up of five links, is respectively: the first link 004, the second link005, the 3rd link 006, Fourth Ring joint 007 and five rings joint 008. Wherein, the second link 005 needsAfter the first link 004 successful execution, just can be carried out, the 3rd link 006 is 005 one-tenth of the second linkMerit is carried out rear and is carried out in the first situation, and Fourth Ring joint 007 is successfully held in the second link 005Go rear and carried out in the second situation, the first situation and the second situation have comprised institute likelySituation, and the first situation occupies 40% of all situations, the second situation occupies all situations60%; Five rings joint is carried out after saving 007 successful execution at the 3rd link 006 or Fourth Ring.
In the process that above-mentioned three business are monitored, find the 3rd link 006 of the second business 002Service data there is problem, therefore, can be first for the 3rd link 006 and the second business 002The processing of reporting to the police, informs that the 3rd link 006 and the second business 002 are in abnormal running state.
Meanwhile, because the 3rd link 006 only can have influence on five rings joint 008, therefore only need five ringsJoint 008 carries out early warning processing, informs that five rings joint 008 will be in abnormal operating state. In addition,Because being subject to the second business 002, the 3rd business 003 affects, and therefore further can be to the 3rd business 003Carry out early warning processing, inform that the 3rd business 003 will be in abnormal operating state.
As shown in Figure 5, in the another kind of telecommunications network alarm method that the embodiment of the present invention provides, step S320Can comprise:
S321, by warning root positioning analysis, trouble point is positioned;
Be understandable that, obtaining after service data, just can be by fault according to the source of service dataPoint positions. Preferably, can be by localization of fault on corresponding underlying device, for example base station.
S322, determine with place, trouble point link to there are other links of incidence relation by association analysis;
Please refer to Fig. 4, in the time that the underlying device of the 3rd link 006 goes wrong, due to the 3rd link 006There is incidence relation with five rings joint 008, therefore can determine that five rings joint 008 will be affected.Certainly, other links that share the underlying device going wrong with the 3rd link 006 also can be affected,Can determine by association analysis equally.
S323, degree of impact according to place, alarm degree of impact Analysis deterrmination trouble point link on these other links;
Still describe for example with shown in Fig. 4, in the time that the 3rd link 006 goes wrong, five rings is saved008 degree of impact is 40%. Certainly, shown in Fig. 4, the degree of impact in for example only carries out in probabilistic mannerObtain, in actual applications, can also determine degree of impact according to other modes, for example influence time.
S324, carry out early warning processing according to described degree of impact.
Concrete, in the time carrying out early warning, can degree of impact be exported simultaneously, for example export early warning letterBreath is: five rings joint will not maintain this state 10 seconds, possibility in off working state after 5 seconds40%, combined influence degree is 2.
As shown in Figure 6, in the another kind of telecommunications network alarm method that the embodiment of the present invention provides, step S330Can comprise:
S331, by warning root positioning analysis, trouble point is positioned;
Be understandable that, obtaining after service data, just can be by fault according to the source of service dataPoint positions. Preferably, can be by localization of fault on corresponding underlying device, for example base station.
S332, determine with place, trouble point business to there are other business of incidence relation by association analysis;
Please refer to Fig. 4, in the time that the underlying device of the second business 002 goes wrong, due to the 3rd business 003There is incidence relation with the second business 002, therefore can determine that the 3rd business 003 will be affected.Certainly, other business that share the underlying device going wrong with the second business 002 also can be affected,Can determine by association analysis equally.
S333, degree of impact according to place, alarm degree of impact Analysis deterrmination trouble point business on these other business;
In actual applications, can be according to tightness degree or action time etc. between business because usually determining shadowLoudness.
S334, carry out early warning processing according to described degree of impact.
Fig. 5 and embodiment illustrated in fig. 6 can localization of faults place link, business and other links, industryDegree of impact between business, and carry out early warning processing according to degree of impact, make early warning effect more remarkable.
Corresponding to embodiment of the method above, the present invention also provides a kind of telecommunications network warning system.
A kind of telecommunications network warning system that the embodiment of the present invention provides connects with the large professional system of telecommunications network five respectivelyConnect, the large professional system of described telecommunications network five comprises: exchange professional system, data professional system, wireless specialIndustry system, transmission professional system and platform professional system, as shown in Figure 7, described telecommunications network warning systemCan comprise: monitoring unit 100, judging unit 200 and Alarm Unit 300,
Described monitoring unit 100, for business is monitored, obtains the large professional system of described telecommunications network fiveIn the related relevant service data of this business;
Wherein, the large professional system model of described telecommunications network five comprises: business model, index model, alarmModel and configuration data model,
Wherein, described configuration data model is for depositing the network element of the telecommunications network five large each network elements of professional systemType information, network element grouping information, network element attribute information and network element relation information;
Described index model, for depositing the performance data of the telecommunications network five large each network elements of professional system;
Described alarm model, for depositing the alarm data of the telecommunications network five large each network elements of professional system;
Described business model comprises: business process model and business support model,
Described business process model, for the stream between links and the links of storage service flow processJourney relation;
Described business support model, for storing telecommunications network infrastructure, module and application propping up businessSupport relation.
Wherein, service data can comprise: infrastructure object data, application software object data and industryBusiness object data. In actual applications, may from a large amount of different equipment, gather service data,And the data-interface mode that different equipment is supported may be not quite similar. Therefore, in actual applications,The interface of image data of the present invention can be set to support the form of several data interface, then according to collectionThe data-interface mode that object uses this object to support. Concrete, the interface of image data of the present invention canBe set to support CORBA, MML, Socket, SNMP, SHELL, FTP, SQL,The acquisition interface mode of several main flows such as MQ, Rmi.
The object of having relatively high expectations for real time data acquisition can directly be established in collected objectPut data acquisition module, to carry out probe collection.
Described judging unit 200, for judging whether described service data meets the alarm bar setting in advancePart, if so, triggers described Alarm Unit 300;
Wherein, alarm conditions can comprise: according between different service datas to affect relation determinedAlarm conditions. Judge whether described service data meets default alarm conditions and can comprise: according to operationThe type of data is searched at least one alarm conditions matching, and judges whether described service data meetsThe alarm conditions that find. Because service data has multiple, and set for different service datasAlarm conditions be also not quite similar, therefore service data alarm conditions corresponding thereto can be compared.
Described Alarm Unit 300, for the large professional system model business of telecommunications network five based on setting up in advanceBetween the relation that affects and the relation that affects between the each link of business carry out alarming processing.
The large professional system model of telecommunications network five of setting up in advance can by choose in the whole network key object andKey index, then sets up between object and index, associated between each object, to set up telecommunications network fiveLarge professional system model. Wherein, key object can comprise: the resource occupying situation of each specialty,Hardware handles ability, business development situation, marketing activity situation and business demand change etc. Wherein, pre-If alarm conditions can be multiple, set up different alarm conditions for different objects respectively. As rightResource occupying situation, its alarm conditions can be: network traffics are not less than first threshold, when certainWhen the network traffics of specialty are not less than first threshold, determine that this specialized network resource occupation is too high, may be rightOther professional network traffics impact, so report to the police.
Certainly,, in other embodiments of the invention, can also different announcements be set to different alarm conditionsAlert grade, concrete, can be to some important object and the higher alarm grade of target setting thereof, rightThe alarm grade that not too important object and target setting thereof are lower. Also can be according to system platform maintenance etc.Level is divided, and also can divide in conjunction with the scope that affects user, also can need in conjunction with business developmentDivide.
For the association between the associated and each object between each index of object, can be according to actual conditionsJudge the incidence relation between them, incidence relation can comprise: comprise, side by side, quote, derivation etc.
The mode of alarm can be multiple, can adopt the mode of sound, image or their combination to enterRow alarm. Concrete, the present invention can adopt the form of unified view, carries out alarm with graph mode.User can see needed data intuitively from chart like this. In other embodiments of the invention,Data in predetermined amount of time all can be carried out to chart displaying, user can see data intuitively like thisThe development process of the state of affairs embodying.
It should be noted is that, alarm conditions can adopt the mode of predetermined threshold value. In actual applications,This threshold value can be static, can be also dynamic change. Static threshold is readily appreciated that, no longer superfluousState. A kind of mode of dynamic threshold is: according to the difference of time period, according to preset rules modulation theresholdsSize. For example: generally, within 10 o'clock to 22 o'clock, be the more stages of network traffics, all the other time periodsIt is the stage that network traffics are lower, so just can follow according to these two one different of stages settings timeBetween change threshold value.
Certainly the threshold value, using in above embodiment can be real-time change. Concrete, canFor the business of continuous variation, calculate the threshold value making new advances. As: choose the cycle according to the business activity cycleInterior achievement data, calculates by computational methods such as averaging method, weighted mean methods the threshold value making new advances. WhenSo also can be according to the business activity cycle, choose the historical achievement data of part in the cycle, select different numbersIt is predicted and fitting algorithm (as: regression model, moving average model(MA model), mixed model etc.), prediction obtainsIndex value as threshold value.
In other embodiments of the invention, can also be first to gathered service data in conjunction with the whole network modelAnalyze, draw analysis result, then judge whether to meet default alarm conditions, if so,Alarm. Concrete, analytical method can comprise: unusual fluctuation analysis, trend analysis, comparative analysis, formationAnalyze and chain rate is analyzed etc. on year-on-year basis. Below above five kinds of analyses are briefly described:
Unusual fluctuation is analyzed: by current business achievement data and historical achievement data or operational indicator are predicted to numberAccording to contrast, find the abnormal of business activity, the starting point of further analyzing as traffic issues.
Trend analysis: the historical data of key business index is carried out to the trend analysis of specific period, reflectionThe variation tendency of key business link business activity quality.
Comparative analysis: realize comparative analysis between business procession key link index, related service placeComparative analysis between reason process key link index.
Component analysis: in operation flow, have constituent relation between some index (as whole business procedureOverall average duration is made up of the average duration of three business processing steps), can find base according to business experienceThis consistent composition, as composition curve occur abnormal, deployment analysis in time.
Chain rate is analyzed on year-on-year basis: on year-on-year basis: in the different large periods of key business index, and the going through of contemporaneityHistory data are analyzed, and the variation of reflection key business link business activity quality is dynamic. Chain rate:The historical data of key business index is carried out to the comparative analysis of adjacent periods, reflection key business link industryThe variation of business movable mass is dynamic.
In actual applications, concrete alarm method can have multiple, as SMS notification, mail notification,Carry out alarm etc. by alarm equipment.
In other embodiments of the invention, can also comprise: usage data storehouse is to meeting default alarmThe service data of condition is stored.
The technical scheme that the embodiment of the present invention provides, can be used the whole network warning system to whole electricityCommunication network carries out alarming processing, thereby has avoided occurring in network the phenomenon of multiple warning systems. The present inventionNot only saved system resource, and the relation that can consider between whole telecommunications network data is accusedAlert, improve the effect of alarm.
As shown in Figure 8, in the another kind of telecommunications network warning system providing in the embodiment of the present invention, described prisonControl unit 100 can comprise: thread monitor subelement 110, and for using thread pool to monitor business,Obtain in the large professional system of described telecommunications network five this business by the mode of each thread in poll thread pool relatedAnd relevant service data.
Thread pool is a kind of multithreading processing form, in processing procedure, adds task to queue, then existsAfter creating thread, automatically start these tasks. Thread pool thread is all background thread, and each thread usesThe storehouse size of acquiescence, with the priority operation of giving tacit consent to, and in multiple thread units. If certain lineJourney is idle (as waited for certain event) in Managed Code, and thread pool will insert another worker threadMake all processors keep busy. If all thread pool threads all remain busy, but in queueThe work that comprises hang-up, thread pool will create another worker thread over time, but the number of threadOrder exceedes maximum never. Exceeding peaked thread can queue up, but they will wait until other linesAfter completing, journey just starts.
It will be appreciated by persons skilled in the art that and use thread pool to monitor multiple business, canBetter manage the increase of for example monitored object, deletion, the amendment of monitoring priority etc.
It should be noted is that, poll is a kind of handling process of obtaining thread service data, thread poolCan obtain relevant service data to the thread in pond successively samsara, can make the data of each thread canObtained in time.
As shown in Figure 9, in the another kind of telecommunications network warning system that the embodiment of the present invention provides, described alarmUnit 300 can comprise: warning subelement 310, link early warning subelement 320 and business early warning subelement330,
Described warning subelement 310, for determining under the service data that meets the alarm conditions that set in advanceLink and this link under business, to the processing of reporting to the police of this link and this business;
Described link early warning subelement 320, for according to the relation that affects between the each link of this business, trueAffected each link in fixed this business, carries out early warning processing to affected each link in this business;
Described business early warning subelement 330, for according to this business to the large professional system mould of described telecommunications network fiveThe relation that affects of other business in type, determines affected each business, and affected each business is enteredRow early warning processing.
For convenience of description, while describing above device, being divided into various unit with function describes respectively. Certainly,In the time that enforcement is of the present invention, the function of each unit can be realized in same or multiple software and/or hardware.
As seen through the above description of the embodiments, those skilled in the art can be well understood toThe mode that the present invention can add essential general hardware platform by software realizes. Based on such understanding,The part that technical scheme of the present invention contributes to prior art in essence in other words can be with software productForm embody, this computer software product can be stored in storage medium, as ROM/RAM,Magnetic disc, CD etc., comprise some instructions in order to make a computer equipment (can be personal computer,Server, or the network equipment etc.) some part institute of carrying out each embodiment of the present invention or embodimentThe method of stating.
Each embodiment in this description all adopts the mode of going forward one by one to describe, identical between each embodimentSimilar part mutually referring to, what what each embodiment stressed was from other embodiment is differentPart. Especially, for system embodiment, because it is substantially similar in appearance to embodiment of the method, so retouchState fairly simplely, relevant part is referring to the part explanation of embodiment of the method. Described above isSystem embodiment is only schematically, and the wherein said unit as separating component explanation can be or alsoCan physically not separate, the parts that show as unit can be or can not be also physics listsUnit, can be positioned at a place, or also can be distributed on multiple NEs. Can be according to realityThe needs on border select some or all of module wherein to realize the object of the present embodiment scheme. This areaThose of ordinary skill, in the situation that not paying creative work, is appreciated that and implements.
The present invention can be used in numerous general or special purpose computing system environment or configuration. For example: Ge RenjiCalculation machine, server computer, handheld device or portable set, laptop device, multicomputer system,System based on microprocessor, set top box, programmable consumer-elcetronics devices, network PC, small-sized calculatingMachine, mainframe computer, the DCE that comprises above any system or equipment etc.
The present invention can describe in the general context of computer executable instructions,For example program module. Usually, program module comprises execution particular task or realizes specific abstract data classThe routine of type, program, object, assembly, data structure etc. Also can be in DCEPut into practice the present invention, in these DCEs, by the long-range place being connected by communication networkReason equipment is executed the task. In DCE, program module can be positioned at and comprise memory deviceIn interior local and remote computer-readable storage medium.
It should be noted that, in this article, the relational terms such as the first and second grades is only usedAn entity or operation are separated with another entity or operating space, and not necessarily requirement orImply the relation or the order that between these entities or operation, there are any this reality.
The above is only the specific embodiment of the present invention, it should be pointed out that general for the artLogical technical staff, under the premise without departing from the principles of the invention, can also make some improvement and profitDecorations, these improvements and modifications also should be considered as protection scope of the present invention.