Method and apparatus for suppressing duplicate alarms

• US 9,286,784 B2
• Filed: 12/20/2013
• Issued: 03/15/2016
• Est. Priority Date: 12/29/2005
• Status: Active Grant

• Current Assignee: ServiceNow Incorporated
• Original Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Inventors: Sheleheda, Daniel, Singer, Michael
• Primary Examiner(s): Girma, Fekadeselassie
• Assistant Examiner(s): BURGDORF, STEPHEN R
• Application Number:
  US14/137,330
• Publication Number:
  US 20140104058A1
• Time in Patent Office: 816 Days
• Field of Search: 340/286.02, 340/506, 702/185, 702/191, 709/224
• US Class Current: 1/1
• CPC Class Codes: G08B 25/001 Alarm cancelling procedures or alarm forwarding decisions, e.g. based on absence of alarm confirmation
• CPC Class Codes: H04L 41/0627 by acting on the notification or alarm source

Abstract

A method and apparatus for ignoring a duplicated alarm in a communications network are described. In one embodiment, at least one alarm message associated with at least one event is received. A determination of whether the at least one event exists in a database is subsequently made. The at least one event is recorded in the database if the at least one event does not exist in the database. Conversely, the at least one alarm message is suppressed if the at least one event exists in the database.

Claims

1. A method for processing an alarm message in a communications network, the method comprising:

receiving, by a processor, the alarm message, wherein the alarm message is associated with an event;

determining, by the processor, if the event exists in a memory, wherein the determining comprises determining whether a hash key of the event is identical to a hash key of an existing event that is stored in the memory;

recording, by the processor, the event in the memory if the event does not exist in the memory; and

ignoring, by the processor, the alarm message if the event exists in the memory, wherein the event is designated as a duplicate event when the event exists in the memory, wherein the duplicate event is characterized by an event name, an identical source internet protocol address, an identical destination internet protocol address, an identical source port, an identical destination port, and an identical protocol as compared to the event that exists in the memory.

2. The method of claim 1, wherein the memory comprises a hash table.

3. The method of claim 1, further comprising:

forwarding the alarm message to a central management console after the event is recorded in the memory.

4. The method of claim 1, further comprising:

deleting the event from the memory upon an expiration of a predefined time period.

5. The method of claim 1, wherein the communications network comprises an internet protocol network.

6. A tangible computer readable medium storing a plurality of instructions which, when executed by a processor, causes the processor to perform operations for processing an alarm message in a communications network, the operations comprising:

receiving the alarm message, wherein the alarm message is associated with an event;

determining if the event exists in a memory, wherein the determining comprises determining whether a hash key of the event is identical to a hash key of an existing event that is stored in the memory;

recording the event in the memory if the event does not exist in the memory; and

ignoring the alarm message if the event exists in the memory, wherein the event is designated as a duplicate event when the event exists in the memory, wherein the duplicate event is characterized by an event name, an identical source internet protocol address, an identical destination internet protocol address, an identical source port, an identical destination port, and an identical protocol as compared to the event that exists in the memory.

7. The tangible computer readable medium of claim 6, wherein the memory comprises a hash table.

8. The tangible computer readable medium of claim 6, further comprising:

forwarding the alarm message to a central management console after the event is recorded in the memory.

9. The tangible computer readable medium of claim 6, further comprising:

deleting the event from the memory upon an expiration of a predefined time period.

10. The tangible computer readable medium of claim 6, wherein the communications network comprises an internet protocol network.

11. An apparatus for processing an alarm message in a communications network, the apparatus comprising:

a processor; and

a computer readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

receiving the alarm message, wherein the alarm message is associated with an event;

determining if the event exists in a memory, wherein the determining comprises determining whether a hash key of the event is identical to a hash key of an existing event that is stored in the memory;

recording the event in the memory if the event does not exist in the memory; and

ignoring the alarm message if the event exists in the memory, wherein the event is designated as a duplicate event when the event exists in the memory, wherein the duplicate event is characterized by an event name, an identical source internet protocol address, an identical destination Internet protocol address, an identical source port, an identical destination port, and an identical protocol as compared to the event that exists in the memory.

12. The apparatus of claim 11, wherein the memory comprises a hash table.

13. The apparatus of claim 11, further comprising:

forwarding the alarm message to a central management console after the event is recorded in the memory.

14. The apparatus of claim 11, further comprising:

deleting the event from the memory upon an expiration of a predefined time period.