Method for determining a severity of a network incident

• US 9,680,722 B2
• Filed: 07/21/2011
• Issued: 06/13/2017
• Est. Priority Date: 09/30/2010
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Zee, Oscar, Nylander, Tomas, Pelecanos, Dimitrios, Rymert, Lars
• Primary Examiner(s): Jiang, Charles C
• Assistant Examiner(s): LIN, WILL W
• Application Number:
  US13/876,041
• Publication Number:
  US 20130176858A1
• Time in Patent Office: 2,154 Days
• Field of Search: 370241, 370242, 370328, 370338, 709223
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters

Abstract

The invention relates to a method for determining a severity of a network incident causing a network alarm in a communication network. The method comprises obtaining (201) a severity attribute associated with the network alarm, the severity attribute indicating an impact of the network incident on a communication service in the communication network, and relating (203) the severity attribute to a severity indicator from a predetermined set of severity indicators to determine the severity of the network incident.

Claims

1. A method, in a domain manager in a communication network, for determining a severity of a network incident causing a network alarm in the communication network, the method comprising:

obtaining, in the domain manager, a severity attribute associated with the network alarm, the severity attribute indicating an impact of the network incident on a communication service in the communication network, wherein said obtaining the severity attribute comprises receiving the network alarm together with the severity attribute over the communication network; and

relating, in the domain manager, the severity attribute to a severity indicator from a predetermined set of severity indicators to determine the severity of the network incident.

2. The method of claim 1, wherein the severity attribute indicates at least one of:

a number of subscribers affected by the network incident,

a type of a subscriber affected by the network incident,

a number of network cells affected by the network incident,

a number of communication sites affected by the network incident,

a communication service, in particular a voice service or a packet data service, affected by the network incident,

a degradation of a communication service, in particular of a voice service or of a packet data service, due to the network incident,

an importance of a communication service affected by the network incident,

a type of a communication service affected by the network incident,

a duration of a disturbance caused by the network incident,

a duration of the network incident,

a remaining time until an occurrence of a disturbance caused by the network incident, and

a remaining number of redundant communication resources which are available until an occurrence of a disturbance caused by the network incident.

3. The method of claim 1, wherein the predetermined set of severity indicators comprises at least one of the following severity indicators:

major service outage,

critical,

major,

minor, and

non service affecting.

4. The method of claim 1, wherein the network incident causes a number of correlated network alarms, the method further comprising:

correlating a plurality of network alarms with respect to the network incident to determine the number of correlated network alarms;

obtaining a number of severity attributes for the number of network alarms; and

relating the number of severity attributes to at least one severity indicator from the predetermined set of severity indicators to determine the severity of the network incident.

5. The method of claim 4, wherein relating the number of severity attributes to the at least one severity indicator comprises:

accumulating the number of severity attributes and relating the accumulated number of severity attributes to the at least one severity indicator;

or

relating a maximum severity attribute among the number of the severity attributes to the at least one severity indicator.

6. A method, in a domain manager in a communication network, for determining a severity of a network incident causing a network alarm in a communication network, the method comprising:

obtaining, in the domain manager, a severity attribute associated with the network alarm, the severity attribute indicating an impact of the network incident on a communication service in the communication network, wherein obtaining the severity attribute comprises receiving network information relating to an impact of the network alarm on the communication service, in particular a network alarm type, the network information enabling to determine the severity attribute, and determining the severity attribute upon the basis of the received network information; and

relating, in the domain manager, the severity attribute to a severity indicator from a predetermined set of severity indicators to determine the severity of the network incident.

7. The method of claim 6, wherein the severity attribute indicates at least one of:

a number of subscribers affected by the network incident,

a type of a subscriber affected by the network incident,

a number of network cells affected by the network incident,

a number of communication sites affected by the network incident,

a communication service, in particular a voice service or a packet data service, affected by the network incident,

a degradation of a communication service, in particular of a voice service or of a packet data service, due to the network incident,

an importance of a communication service affected by the network incident,

a type of a communication service affected by the network incident,

a duration of a disturbance caused by the network incident,

a duration of the network incident,

a remaining time until an occurrence of a disturbance caused by the network incident, and

a remaining number of redundant communication resources which are available until an occurrence of a disturbance caused by the network incident.

8. The method of claim 6, wherein the predetermined set of severity indicators comprises at least one of the following severity indicators:

major service outage,

critical,

major,

minor, and

non service affecting.

9. The method of claim 6, wherein the network incident causes a number of correlated network alarms, the method further comprising:

correlating a plurality of network alarms with respect to the network incident to determine the number of correlated network alarms;

obtaining a number of severity attributes for the number of network alarms; and

relating the number of severity attributes to at least one severity indicator from the predetermined set of severity indicators to determine the severity of the network incident.

10. The method of claim 9, wherein relating the number of severity attributes to the at least one severity indicator comprises:

accumulating the number of severity attributes and relating the accumulated number of severity attributes to the at least one severity indicator;

or

relating a maximum severity attribute among the number of the severity attributes to the at least one severity indicator.

11. A method, in a network node apparatus, for characterizing a network incident indicated by a network alarm in a communication network, the method comprising:

obtaining, in the network node apparatus, network information relating to an impact of the network alarm on a communication service to characterize the network incident; and

transmitting the network information over the communication network.

12. The method of claim 11, wherein the network information indicates a network alarm type enabling the determining of a severity attribute, the severity attribute characterizing the network incident.

13. The method of claim 11, wherein the network information is transmitted together with the network alarm towards a domain manager in the communication network.

14. The method of claim 11, wherein the network incident causes a number of correlated network alarms, the method further comprising:

correlating network alarms to determine the number of correlated network alarms;

analyzing an impact of the network incident as indicated by the number of correlated network alarms on the communication service, to obtain a number of severity attributes; and

associating the number of correlated network alarms with a severity indicator.

15. A domain manager apparatus configured to determine a severity of a network incident causing one or several network alarms in a communication network, the domain manager apparatus comprising:

a receiver adapted to receive a network alarm and a severity attribute associated with the network alarm, the severity attribute indicating an impact of the network incident on a communication service in the communication network; and

a processor adapted to relate the severity attribute to a severity indicator from a predetermined set of severity indicators to determine the severity of the network incident.

16. A domain manager apparatus configured to determine a severity of a network incident causing one or several network alarms in a communication network, the domain manager apparatus comprising:

a receiver adapted to receive network information relating to an impact of the network alarm or alarms on the communication service, said network information comprising a network alarm type and enabling the determining of a severity attribute, the severity attribute indicating an impact of the network incident on a communication service in the communication network, and

a processor for determining the severity attribute, based upon the received network information.

17. A network node apparatus adapted to characterize a network incident indicated by a network alarm in a communication network, the network node apparatus comprising:

a processor adapted to obtain network information relating to an impact of the network alarm on a communication service to characterize the network incident; and

a transmitter adapted to transmit the network information over the communication network.

18. The network node apparatus of claim 17, wherein the network node apparatus is a radio network controller or a base station.

19. The network node apparatus of claim 17, wherein the processor is adapted to analyze an impact of the network incident as indicated by the network alarm on a communication service to obtain a severity attribute.

20. The network node apparatus of claim 17, wherein the transmitter is adapted to transmit the network alarm together with the severity attribute associated therewith towards a domain manager in the communication network.