Regular-expression-based alarm correlation analysis method for monitoring system

The invention discloses a regular-expression-based alarm correlation analysis method for a monitoring system, comprising the following steps of: building an alarm element model and a definition correlating rule through a regular expression, and timely analyzing and matching the rule, and realizing the fault root positioning and the early warning of an influence range under the monitoring system. According to the method, the alarm analysis experience which is originally accumulated in a knowledge range of monitoring personnel is realized in the monitoring system in a concentrated way, so that the problem that the correlation analysis of the conventional monitoring system can not flexibly set the rule, and the problem positioning and the fault removing can not be quickly carried out on massive alarm information can be solved. The method mainly comprises the following steps: a correlation rule module traverses a model base, and packaging alarm element data (time, addresses, alarm generating sources, alarm types and the like); the correlation rule module combines metadata, so that a correlation analysis rule is formed; an analysis module obtains alarm information, matches with the regular expression, and extracts the metadata; and the analysis module combines the metadata, and matches with the rule, so that a correlation analysis result is obtained.