Method, system, and computer program product, for correlating special service impacting events

• US 8,576,724 B2
• Filed: 11/24/2009
• Issued: 11/05/2013
• Est. Priority Date: 11/24/2009
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Kung, Yu-Lein, Stein, Jeffrey
• Primary Examiner(s): LEVITAN, DMITRY
• Application Number:
  US12/625,146
• Publication Number:
  US 20110122773A1
• Time in Patent Office: 1,442 Days
• Field of Search: 370241-245, 370/248, 370/250, 370/259, 370/351, 370/352, 379 101- 9, 379 2601- 2708
• US Class Current: 370/241
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis

Abstract

Special service impacting events in an IP network are collected and correlated. Real-time data representing occurrence of trunk group events impacting special services in trunk groups that are in service is collected, along with call detail records recorded by network elements representing occurrence of call events impacting special services and performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services. The collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements are correlated, and alarms are generated based on the correlated data.

Claims

1. A method, for processing data in an internet protocol network, comprising:

collecting, in the internet protocol network, by a system having at least one processor, real-time data representing occurrence of events impacting special services in trunk groups that are in service;

collecting, by the system, call detail records recorded by network elements representing occurrence of call events impacting special services;

collecting, by the system, performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services;

collecting, by the system, data representing faults in a network element server;

correlating, by the system, for special services associated with dedicated trunk groups, the collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements, wherein alarms are generated based on the correlated data; and

correlating, by the system, the collected data representing faults in the network element server with the generated alarms.

2. The method of claim 1, further comprising:

collecting, by the system, data representing occurrence of trunk group out of service events impacting special services in out-of service trunk groups;

correlating, by the system, the collected data representing occurrence of trunk group out of service events with the collected real-time data representing occurrence of trunk group events, the collected call detail records and the collected performance measurements, wherein the alarms are generated based on the correlated data.

3. The method of claim 1, wherein the trunk group events include occurrences of simple network management protocol trap events, the call events include at least one of call set-up, call prorates, and call-tear down, and the performance measurements includes data from managing information bases.

4. The method of claim 1, further comprising reducing the alarms generated by suppressing duplicate collected data, wherein the duplicate collected data includes data collected from multiple sources for the same event that is redundant in determining a root cause of an event.

5. The method of claim 1, wherein the network supports at least one of video teleconferencing services, voice communication, and data communication.

6. The method of claim 1, further comprising presenting the correlated data for display and for trouble ticket generation, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups, and faults in a network element server are reported in one display area and on one trouble ticket.

7. A system comprising:

a server that receives, in an internet protocol network, collected real-time data representing occurrence of trunk group events impacting special services in trunk groups that are in service, collected call detail records recorded by network elements representing occurrence of call events impacting special services, and collected performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services, and collected data representing faults in a network element server; and

a correlator that correlates special services associated with dedicated trunk groups to the collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements, wherein alarms are generated based on the correlated data, wherein the correlator further correlates the collected data representing faults in the network element server with the generated alarms.

8. The system of claim 7, wherein the collector further receives collected data representing occurrence of trunk group out of service events impacting special services in out-of service trunk groups, and the correlator correlates the collected data representing occurrence of trunk group out of service events with the collected real-time data representing occurrence of trunk group events, the collected call detail records and the collected performance measurements, and wherein alarms are generated based on the correlated data.

9. The system of claim 7, wherein the trunk group events include occurrences of simple network management protocol trap events, the call events include at least one of call set-up, call prorates, and call-tear down, and the performance measurements include data from managing information bases.

10. The system of claim 7, wherein the alarms generated by suppressing duplicate collected data are reduced by removing data collected from multiple sources for the same event that is redundant in determining a root cause of an event.

11. The system of claim 7, wherein the network supports at least one of video teleconferencing services, voice communication, and data communication.

12. The system of claim 7, wherein the correlator further outputs the correlated data for display and trouble ticket generation, such that events impacting special services in trunk groups, call detail records, performance measurements, out of service trunk groups and faults in a network element server are reported in one display area and on one trouble ticket.

13. A non-transitory computer-readable medium having stored thereon, computer-executable instructions that, when executed by a processor, cause the processor to perform operations comprising:

collecting real-time data representing occurrence of trunk group events impacting special services in trunk groups that are in service;

collecting call detail records recorded by network elements representing occurrence of call events impacting special services;

collecting performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services;

collecting data representing faults in a network element server;

correlating, for special services associated with dedicated trunk groups, the collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements, wherein alarms are generated based on the correlated data; and

correlating the collected data representing faults in the network element server with the generated alarms.

14. The non-transitory computer-readable medium of claim 13, wherein the instructions, when executed by the processor, further cause the processor to perform operations comprising:

collecting data representing occurrence of trunk group out of service events impacting special services in out-of service trunk groups; and

correlating the collected data representing occurrence of trunk group out of service events with the collected real-time data representing occurrence of trunk group events, the collected call detail records and the collected performance measurements, wherein alarms are generated based on the correlated data.

15. The non-transitory computer-readable medium of claim 13, wherein the instructions, when executed by the processor, further cause the processor to perform operations comprising:

reducing the alarms generated by suppressing duplicate collected data, wherein the duplicate collected data includes data collected from multiple sources for the same event that is redundant in determining a root cause of an event.

16. The non-transitory computer-readable medium of claim 13, wherein the network supports at least one of video teleconferencing services, voice communication, and data communication.

17. The non-transitory computer-readable medium of claim 13, wherein the instructions, when executed by the processor, further cause the processor to perform operations comprising:

presenting the correlated data for display, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups, and faults in a network element server are reported in one display area; and

presenting data for trouble ticket based on the correlated data, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups, and faults in the network element server are reported in one trouble ticket.