Research On Event Correlation Based Network Fault Management

With the scale-growing computer networks, large numbers of events are produced and effective management of the importance of the network has become increasingly prominent. In some ways, network management is the main task of monitoring, analyzing and processing network events. Network managers must be able to observe from the many events to identify the problems of these events. Event management operation is still mainly through artificial to complete. Manual processing in the network can not meet the speed, complexity and size of the areas growing demand, network management staff failed to keep pace with the speed of the network events generated.In this paper, it bases on the network fault management's the core technology that is event correlation technology research, through analysis of current events related technology, on the base of the log analysis and optimization of the code proposing a event correlation based network fault management model.The model's key technology is preprocessing technology and the engine based on data mining and codebook. This paper studies the following aspects: firstly, for causal map of symptoms cycle and other symptoms of redundant information, the reduction algorithm of the causal map utilizes topology sorting algorithm and the breadth-first traversal algorithm to reduce the causal map, which is able to handle the degree of automation; secondly in accordance with the characteristics of the log file, it uses dictionary with counting and filtering and presents an improved algorithm of the log line pattern, including key steps, the algorithm processes and simple analysis, improving the speed of processing; then on the code optimization technology, it uses dynamic weight and counting matrix to improve the model's adaptability, finding that frequent set and mode using, furtherly improving the processing speed and forecasting functions; the use of Hamming code decoders deal with noise fault under the match, the technical use of the code to reduce noise and timing relations to resolve the issue of variable length encoding; finally it states the event correlation technology in the network fault management of applications, and proposes a event correlation based fault management model, describing in the role of the various functionalmodules and systems deployment.