一种分级的基于智能代理的事件关联技术

A HIERARCHICAL EVENT CORRELATION TECHNIQUE USING INTELLIGENT AGENTS

事件关联是网络管理中的一项关键技术 ,尽管已经提出了多种解决方法 ,但都没有很好地解决这个 NP完全问题 .提出了一种分级的、基于智能代理的事件关联技术 ,该方法分成两个部分 :1在设备上驻留智能代理 ,对设备发出的告警事件进行分类、过滤和关联工作 ;2管理平台上的事件服务器对智能代理的关联结果进行汇总 ,将MBR技术和 CBR技术有机地结合起来 ,得出最可能的故障假设 .这种方法对事件关联问题的难度进行了分解 ,有利于实现网络的实时管理和自动管理 .另外 ,按照这种方法建立的事件关联系统具有通用性和灵活性 。

Event correlation is a key problem of network management. Though quite a number of event correlation methods have been proposed to solve this NP complete problem, none of them can deal with it completely. A hierarchical event correlation technique based on intelligent agents is proposed in this paper. It can be divided into two parts: ① The intelligent agent, which resides on a network device, classifies, filters, and correlates all the alarms emitted by the device directly; ② The correlation results of all intelligent agents are collected by an event correlation server that resides on a network management center. According to different kinds of data, knowledge, and experience, this server application uses model based reasoning and case based reasoning techniques to reason out the most possible fault hypothesis. This method decomposes the complexity of event correlation problem, so it is of great benefit to realizing real time and automated network management. Additionally, the event correlation system in this method is general enough to be used in different networks, and is adaptable to the evolvement of a network.