Alarm correlation in a large communications network
First Claim
1. A system for correlating alarms from a plurality of network elements (NEs) in a large communications network, said system comprising:
- a plurality of alarm reporters that report alarms from the NEs when faults are detected; and
an alarm correlator that partitions the alarms into correlated alarm clusters such that alarms of one cluster have a high probability that they are caused by one network fault;
said alarm correlator including;
means for creating an alarm set by selecting an alarmed NE at the highest hierarchy level which is not tagged, finding all lower level NEs that are contained in the selected alarmed NE, finding all peer-related NEs for each alarmed lower level NEs and placing the highest level alarmed NE and all the found contained and peer-related NEs in the set; and
means for creating additional alarm sets by repeating the steps for creating the alarm set for each alarmed NE in the network which is not tagged.
1 Assignment
0 Petitions
Accused Products
Abstract
A system and method of correlating alarms from a plurality of network elements (NEs) in a large communications network. A plurality of uncorrelated alarms are collected by an alarm collector from alarm reporters. An alarm correlator then partitions the alarms into correlated alarm clusters such that alarms of one cluster have a high probability that they are caused by one network fault. The partitioning of the alarms is performed by creating alarm sets, expanding the alarm sets into alarm domains, and merging the alarm domains into alarm clusters if predefined conditions are met. The sets are formed by selecting an alarmed NE at the highest network hierarchy level which is not tagged, finding all of its contained NEs, and finding NEs that are peer-related to those contained NEs that are in an alarmed state. The sets are expanded into domains by finding NEs that are not in an alarmed state which contain the highest level alarmed NE in each alarm set. The domains are merged into one alarm cluster if the two domains have at least one common NE, at least one of the common NEs is not tagged, and the majority of the NEs contained by the non-tagged common NE are in an alarmed state.
-
Citations
9 Claims
-
1. A system for correlating alarms from a plurality of network elements (NEs) in a large communications network, said system comprising:
-
a plurality of alarm reporters that report alarms from the NEs when faults are detected; and
an alarm correlator that partitions the alarms into correlated alarm clusters such that alarms of one cluster have a high probability that they are caused by one network fault;
said alarm correlator including;
means for creating an alarm set by selecting an alarmed NE at the highest hierarchy level which is not tagged, finding all lower level NEs that are contained in the selected alarmed NE, finding all peer-related NEs for each alarmed lower level NEs and placing the highest level alarmed NE and all the found contained and peer-related NEs in the set; and
means for creating additional alarm sets by repeating the steps for creating the alarm set for each alarmed NE in the network which is not tagged. - View Dependent Claims (2, 3, 4)
-
-
5. In a large communications network having a plurality of network elements (NEs), a method of correlating alarms from the NEs comprising the steps of:
-
collecting a plurality of uncorrelated alarms from the NEs; and
partitioning the alarms into correlated alarm clusters such that alarms of one cluster have a high probability that they are caused by one network fault, wherein the steps of partitioning the alarms include;
creating a plurality of alarm sets;
expanding the alarm sets into a plurality of alarm domains; and
merging the plurality of alarm domains into alarm clusters if predefined conditions are met. - View Dependent Claims (6, 7, 8, 9)
creating a first alarm set, said step of creating a first alarm set comprising;
selecting an alarmed NE at the highest network hierarchy level which is not tagged;
finding all lower level NEs that are contained in the selected alarmed NE;
finding all peer-related NEs for each contained lower level NE which is in an alarmed state; and
placing the highest level alarmed NE and all the found contained and peer-related NEs in the first set; and
creating additional alarm sets, said step of creating additional alarm sets comprising;
selecting additional alarmed NEs in the network which are not tagged; and
repeating the steps for creating the first alarm set for each selected additional alarmed NE in the network which is not tagged.
-
-
7. The method of correlating alarms of claim 6 wherein the step of expanding the alarm sets into a plurality of alarm domains includes the step of finding NEs that are not in an alarmed state which contain the highest level alarmed NE in each alarm set.
-
8. The method of correlating alarms of claim 7 wherein the step of finding NEs that are not in an alarmed state which contain the highest level alarmed NE in each alarm set includes the step of expanding the alarm sets to create alarm domains, the step of expanding the alarm sets including the steps of:
-
(a) selecting one of the alarm sets;
(b) selecting an alarmed NE which is at the highest network hierarchy level in the selected set;
(c) finding all NEs that are span-related to the selected alarmed NE;
(d) finding all NEs that are span-related to each of the found NEs that are span-related to the selected alarmed NE;
(e) adding all the found span-related NEs to the alarm set to create an alarm domain; and
(f) repeating steps (b) through (e) for all of the alarm sets.
-
-
9. The method of correlating alarms of claim 8 wherein the step of merging the plurality of alarm domains into alarm clusters if predefined conditions are met includes the steps of:
-
determining that two alarm domains have at least one common NE;
determining that the common NE is not tagged; and
determining that a majority of the NEs contained by the non-tagged common NE are in an alarmed state.
-
Specification