MONITORING DEVICE AND MONITORING METHOD

Abstract

A monitoring device 1 includes an individual alarm reception unit 10 configured to receive individual alarms issued from a plurality of devices constituting an optical transmission network, a table 20 in which a search operator for searching for necessary information, that is information required for treating the individual alarms in the same manner when specifications of the individual alarms are different from each other, is associated with information included in the individual alarms, a search operator extraction unit 30 configured to extract the search operator using the information included in each of the individual alarms as a key, a rule 40 in which the search operator is associated with the necessary information; and a unified alarm information generation unit 50 configured to search the rule 40 using the search operator as a key, compare the information included in the individual alarms with the necessary information corresponding to the search operator, and add information, that is included in the necessary information but not included in the individual alarm, to the individual alarm to generate unified alarm information.

Claims

1. A monitoring device comprising: an individual alarm reception unit, including one or more processors, configured to receive individual alarms issued from a plurality of devices constituting an optical transmission network; a table in which a search operator for searching for necessary information required for treating the individual alarms in a same manner when specifications of the individual alarms are different from each other, is associated with information included in the individual alarms; a search operator extraction unit, including one or more processors, configured to extract the search operator using the information included in each of the individual alarms as a key; a rule in which the search operator is associated with the necessary information; and a unified alarm information generation unit, including one or more processors, configured to search the rule using the search operator as a key, compare the information included in the individual alarms with the necessary information described in the searched rule, and add information, that is included in the necessary information but not included in the individual alarms, to the individual alarms to generate unified alarm information.

2. The monitoring device according to claim 1, wherein the table includes a condition for extracting the search operator, and the search operator extraction unit extracts the search operator when a condition included in the individual alarms matches the condition included in the table.

3. The monitoring device according to claim 1, further comprising: an individual alarm suppression unit, including one or more processors, configured to transmit, when predetermined unified alarm information is issued, an individual alarm inhibition signal for inhibiting issuance of subsequent individual alarms to the plurality of devices constituting the optical transmission network.

4. A monitoring method executed by a monitoring device for monitoring an optical transmission network, the monitoring method comprising: receiving individual alarms issued from a plurality of devices constituting the optical transmission network; searching, using information included in each of the individual alarms as a key, a table in which a search operator for searching for necessary information required for treating the individual alarms in a same manner when specifications of the individual alarms are different from each other, is associated with the information included in the individual alarms, thereby extracting the search operator; searching, using the search operator as a key, a rule in which the search operator is associated with the necessary information; and comparing the information included in the individual alarms with the necessary information described in the searched rule, and adding information, that is included in the necessary information but not included in the individual alarms, to the individual alarms to generate unified alarm information.

5. The monitoring method according to claim 4, wherein the table includes a condition for extracting the search operator, and wherein extracting the search operator comprises extracting the search operator when a condition included in the individual alarms matches the condition included in the table.

6. The monitoring method according to claim 4, further comprising: when predetermined unified alarm information is issued, transmitting an individual alarm inhibition signal for inhibiting issuance of subsequent individual alarms to the plurality of devices constituting the optical transmission network.

Description

BRIEF DESCRIPTION OF DRAWINGS

[0010] FIG. 1 is a diagram illustrating an example of a configuration in which an integrated monitoring system is configured using a monitoring device according to an embodiment of the present invention.

[0011] FIG. 2 is a block diagram illustrating an example of a functional configuration of the monitoring device according to a first embodiment of the present invention.

[0012] FIG. 3 is a flowchart illustrating a processing procedure of the monitoring device illustrated in FIG. 1.

[0013] FIG. 4 is a diagram illustrating a portion of information included in an individual alarm when vendors of elements (devices) with the same functions may be different.

[0014] FIG. 5 is a diagram schematically illustrating an example of a table illustrated in FIG. 1.

[0015] FIG. 6 is a diagram schematically illustrating an example of a rule illustrated in FIG. 1.

[0016] FIGS. 7A and 7B are diagrams illustrating an example of an individual alarm and unified alarm information.

[0017] FIG. 8 is a diagram schematically illustrating a modification example of the table.

[0018] FIG. 9 is a block diagram illustrating a functional configuration of a monitoring device according to a second embodiment of the present invention.

DESCRIPTION OF EMBODIMENTS

[0019] Embodiments of the present invention will be described below with reference to the drawings. The same portions are denoted by the same reference signs in a plurality of drawings, and will not be further described.

[0020] FIG. 1 is a diagram illustrating an example of a configuration in which an integrated monitoring system is configured using a monitoring device according to an embodiment of the present invention. An integrated monitoring system 100 illustrated in FIG. 1 includes a plurality of elements A, B, and C, an optical transmission network 2, a monitoring device 1, and an integrated monitoring unit 3.

[0021] The integrated monitoring system 100 illustrated in FIG. 1 monitors the optical transmission network 2 in which a plurality of elements A, B, and C are connected to each other. Each of the elements A, B, and C is, for example, a service provision server that provides services to an end-user terminal (not illustrated) connected to each element via a router which is not illustrated.

[0022] Further, when an anomaly of the optical transmission network 2 is detected, the respective elements A, B, and C issue individual alarms to the monitoring device 1. Specific examples of the individual alarms will be described below. Hereinafter, the elements A, B, and C are referred to as devices A, B, and C, respectively.

[0023] The monitoring device 1 converts the individual alarms received from each of the devices A, B, and C into unified alarm information that can be treated in the same manner (in a unified manner) and outputs the unified alarm information to the integrated monitoring unit 3. The integrated monitoring unit 3 notifies an administrator of the received unified alarm information, for example, by displaying the received unified alarm information.

First Embodiment

[0024] FIG. 2 is a block diagram illustrating an example of a functional configuration of the monitoring device 1 according to the first embodiment of the present invention. The monitoring device 1 includes an individual alarm reception unit 10, a table 20, a search operator extraction unit 30, a rule 40, and a unified alarm information generation unit 50.

[0025] FIG. 3 is a flowchart illustrating a processing procedure of a monitoring method that is executed by the monitoring device 1. A configuration and operation of the monitoring device 1 will be described with reference to FIG. 2 and FIG. 3.

[0026] The individual alarm reception unit 10 receives individual alarms issued from a plurality of devices A, B, and C constituting the optical transmission network 2 (step S1). The individual alarms vary when vendors that manufacture the respective devices A, B, and C are different from each other. Variations in individual alarms are noticeable in a disaggregation type optical transmission network in which devices are divided according to functions and products of different vendors are combined.

[0027] FIG. 4 is a diagram illustrating a portion of information included in a certain individual alarm when vendors of devices with the same functions are different. A first column in FIG. 4 shows the information included in the individual alarm. A second column shows content of individual failure information of a device of vendor A. A double circle (0) indicates information described in a standardized format (standard MIB). A circle (o) indicates information described in a format unique to each vendor (vendor MIB).

[0028] As illustrated in FIG. 4, a service impact and a alarm severity included in the individual alarms of vendor A are not included in the individual alarms of vendor B. Further, the alarm severity is not included in the individual alarms of vendor C.

[0029] The service impact is information of 1 bit (presence or absence) indicating whether a service is impacted. The alarm severity is information that represents a severity of a failure in four levels: critical, major, minor, and non-reported.

[0030] When this information is not included in an alarm, the integrated monitoring unit 3, which monitors the optical transmission network 2, cannot determine reaction to the individual alarms. Thus, the monitoring device 1 according to the first embodiment generates the unified alarm information in which information necessary for the integrated monitoring unit 3 to determine the reaction is added to the individual alarm.

[0031] In order to generate the unified alarm information, the monitoring device 1 first associates the individual alarms with a search operator using the table 20.

[0032] The table 20 is a table in which the search operator for searching for the necessary information, which is information necessary for treating the individual alarms in a unified manner, is associated with the information included in the individual alarms. Information necessary for treating individual information in the unified manner refers to information necessary for treating the individual alarms in the same manner when specifications of the individual alarms are different from each other.

[0033] FIG. 5 is a diagram schematically illustrating an example of the table 20. A first column in FIG. 5 shows the search operator, and a second column and subsequent columns are individual alarms associated with the search operator in the first column. The individual alarms illustrated in FIG. 5 are abstracted. The individual alarms of A_01/AAA, B_02/AAB, and C_03/AAC are associated with a search operator 0001. A portion before / indicates a device name, and a portion after / indicates an alarm name.

[0034] The search operator extraction unit 30 extracts the search operator using the information included in the individual alarms received by the individual alarm reception unit 10 as a key (step S2). The information included in the individual alarms is, for example, an alarm object identification (OID) included in all of the individual alarms.

[0035] For example, when an individual alarm C_03/AAC is issued from a terminal C, the search operator extraction unit 30 searches the table 20 using C_03/AAC as a key to extract the search operator 0001. The extracted search operator 0001 is output to the unified alarm information generation unit 50.

[0036] The unified alarm information generation unit 50 searches the rule 40 using the search operator extracted by the search operator extraction unit 30 as a key. The unified alarm information generation unit 50 compares the information included in the individual alarms received by the individual alarm reception unit 10 with the necessary information described in the rule that has been searched for, and adds information, which is included in the necessary information but not included in the individual alarm, to the individual alarm thereby generating the unified alarm information (step S3).

[0037] The rule 40 is a rule in which the necessary information necessary for the unified alarm information is associated with the search operator. FIG. 6 schematically illustrates an example of the rule 40. A first column in FIG. 6 shows the search operator, and a second column and subsequent columns show the necessary information necessary for the unified alarm information.

[0038] FIGS. 7A and 7B illustrate an example of the individual alarm and the unified alarm information. FIG. 7A illustrates information included in the individual alarms C_03/AAC. FIG. 7B illustrates information included in the unified alarm information corresponding to FIG. 7A.

[0039] For example, the individual alarm C_03/AAC corresponds to the search operator 0001 according to the table 20 (FIG. 5). On the other hand, the necessary information associated with the search operator 0001 in the rule 40 includes an alarm name, a severity, and a service impact.

[0040] In this example, information which is included in the necessary information associated with the search operator 0001 and not included in the individual alarm C_03/AAC, is the severity. Thus, the unified alarm information generation unit 50 generates unified alarm information in which a severity: Major is added to the individual alarm C_03/AAC (FIG. 7B).

[0041] As a result, the integrated monitoring unit 3 that receives the unified alarm information can treat alarms issued from devices of different vendors as the same information, and can correctly identify the alarms.

[0042] The processing steps S1 to S3 described above are repeated until the monitoring device 1 stops operation (NO in step S4).

[0043] The monitoring device 1 according to the first embodiment includes: the individual alarm reception unit 10 configured to receive individual alarms issued from a plurality of devices constituting the optical transmission network 2; a table 20 in which a search operator for searching for necessary information, which is information necessary for treating the individual alarms in the unified manner, is associated with information included in the individual alarms; a search operator extraction unit 30 configured to extract the search operator using the information included in each of the individual alarms as a key; a rule 40 in which the search operator is associated with the necessary information; and a unified alarm information generation unit 50 configured to search the rule using the search operator as a key, compare the information included in the individual alarms with the necessary information corresponding to the searched rule, and add information, which is included in the necessary information but not included in the individual alarm, to the individual alarm to generate unified alarm information. As a result, even when the vendors of the devices constituting the optical transmission network 2 are different from each other, the alarms can be displayed as the same information by the integrated monitoring unit 3.

[0044] Further, with the above configuration of the monitoring device 1, because the necessary information is added autonomously to the individual alarms, it is possible to significantly reduce the processing in the integrated monitoring unit 3. The processing that can be reduced is processing of confirming content of the individual alarms.

[0045] Adding any necessary information required by the administrator to the necessary information included in the rules 40 is also possible. Thus, in a disaggregation type optical transmission network, the integrated monitoring system desired by the administrator can be configured later.

Modification Example

[0046] A condition may be added to the above described table 20. The condition is for changing content of unified alarm information of individual alarms with the same device names/alarm names.

[0047] FIG. 8 is a diagram schematically illustrating a table of the modification example to which a condition has been added. The table 22 illustrated in FIG. 8 is different from the table 20 illustrated in FIG. 5 in that a column for the condition is added to the table 20.

[0048] As illustrated in FIG. 8, the device names/alarm names of search operators 000A and 000B are the same. For example, when the device with a device name A_01 includes a backup device (a standby system), the action the administrator would like to take may be different between the case where an active system has failed and the case where the standby system has failed.

[0049] Thus, content of the rule 40 is changed by setting the table 22 to which a condition is added, as illustrated in FIG. 8. For example, the severity when an individual alarm A_01/AAB is issued from the active system is minor, whereas the severity when an individual alarm A_01/AAB is issued from the standby system can be changed to major or the like. That is, content of the necessary information included in the respective rules corresponding to the search operators 000A and 000B illustrated in FIG. 8 is changed.

[0050] The table 22 of the modification example includes a condition for extracting the search operator, and the search operator extraction unit 30 extracts the search operator when the condition included in the individual alarm matches the condition included in the table 22. Here, the condition included in the individual alarm is, for example, an IP address for identifying the device. The location of the device in the optical transmission network 2 can be determined using the IP address. Thus, it is possible to determine whether the backup device has failed in the search operator extraction unit 30.

[0051] According to the modification example, it is possible to change the content of the unified alarm information even when the individual alarms are the same.

[0052] In the optical transmission network 2 of the first embodiment described above, it is conceivable that a large number of ripple alarms are issued due to the individual alarms transferred between the devices A, B, and C. Next, a monitoring device 12 according to a second embodiment for suppressing issuance of the ripple alarms will be described.

Second Embodiment

[0053] FIG. 9 is a block diagram illustrating a functional configuration of a monitoring device according to a second embodiment of the present invention. The monitoring device 12 illustrated in FIG. 9 is different from a monitoring device 1 (FIG. 2) in that the monitoring device 12 includes an individual alarm suppression unit 60.

[0054] When a predetermined unified alarm information is issued, the individual alarm suppression unit 60 transmits an individual alarm inhibition signal for inhibiting issuance of subsequent individual alarms to each of a plurality of devices A, B, and C constituting an optical transmission network 2. The individual alarm inhibition signal is a signal for inhibiting issuance of all individual alarms after the predetermined unified alarm information is issued. Alternatively, the individual alarm inhibition signal may be a signal for inhibiting issuance of individual alarms for failure information transferred from the device after the predetermined unified alarm information is issued.

[0055] With the monitoring device 12 according to the embodiment, it is possible to suppress ripple alarms.

[0056] As described above, with the monitoring device 1 and a monitoring method according to the embodiment, it is possible to correctly identify issued alarms in the optical transmission network 2 configured by connecting optical transmission devices manufactured by different vendors. Further, with the monitoring device 12 according to the embodiment, it is possible to suppress the ripple alarms that occur in the optical transmission network 2.

[0057] Further, because the monitoring device autonomously generates the unified alarm information using a table 20 and a rules 40, it is possible to significantly reduce processing in an integrated monitoring unit 3. Further, even when the devices are of the same type and have different IPs, it is possible to treat the alarms in the same manner simply by associating device names of the devices with a search operator in the table 20.

[0058] In the embodiment described above, an example in which the table 20 and the rule 40 are included has been described, but the table 20 and the rule 40 may be configured integrally. That is, the table 20 illustrated in FIG. 5 and the rule 40 illustrated in FIG. 6 may be integrated by means of the search operator to configure a database. Thus, the present invention is not limited to the above described embodiment, and modifications can be made within the scope of the gist of the present invention.

REFERENCE SIGNS LIST

[0059] 1, 12: Monitoring Device [0060] 2: Optical transmission network [0061] 3: Integrated monitoring unit [0062] 10: Individual alarm reception unit [0063] 20: Table [0064] 30: Search operator extraction unit [0065] 40: Rule [0066] 50: Unified alarm information generation unit [0067] 60: Individual alarm suppression unit [0068] A, B, C: Device (element)