Patent ID: 9256828
Filing Date: 2016-02-09
CPC Classification: G06N

Claim Text:
1. An alarm correlation analysis method, wherein the method is applied in an alarm correlation analysis apparatus with two or more analysis engines running, and the method comprises: receiving an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; performing, by an analysis engine corresponding to an alarm analysis rule group that comprises an alarm indicated by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm analysis rule that is comprised in an alarm analysis rule group corresponding to any one of the analysis engines, wherein a same alarm analysis rule group comprises correlated alarm analysis rules, one alarm analysis rule group corresponds to one analysis engine, the alarm analysis rule is used to indicate an interrelationship between different alarms, and multiple correlated alarm analysis rules all comprise at least an alarm with a same alarm identifier; receiving a second alarm reported by another network element device, wherein the second alarm has a second alarm identifier, and wherein the second alarm identifier is the same as the alarm identifier; and balancing loads of the two or more analysis engines, wherein each one of the two or more analysis engines has a current load of alarms, and wherein the second alarm is correlated with the one of the two or more analysis engines with a lowest current load of alarms.