Abstract: Embodiments herein disclose a method and alarm monitoring device (200) for alarm monitoring and de-duplicating alarms in a wireless network (100). The method comprises receiving a first alarm event (404) and second alarm events from a plurality of devices (100A-100N) in the wireless network. The method further comprises de-duplicating the second alarm events by merging the second alarm events with the first alarm event (404) based on a retrieved current status of the first alarm event (404) when the second alarm events are received within a predefined time period. The method further comprises inserting the second alarm events separately in a database based on the retrieved current status of the first alarm event (404) when the second alarm events are not received within the predefined time period.

Abstract: A system for collecting discarded alarm includes a non-transitory computer readable medium configured to store instructions thereon. The system further includes a processor connected to the non-transitory computer readable medium. The processor is configured to execute the instructions for receiving alarm data from a device within a telecommunication network. The processor is further configured to execute the instructions for determining whether the alarm data is missing identifying information. The processor is further configured to execute the instructions for subjecting the alarm data to suppression in response to a determination that the alarm data is missing at least one piece of identifying information. The processor is further configured to execute the instructions for generating instructions for addressing an alarm in response to a determination that the alarm data includes all identifying information.

Abstract: In some embodiments, a method includes determining whether a network serving cell serving a building is highly utilized; and determining an amount of users of the network serving cell that are included in the building per twenty-four-hour period.

Abstract: Capacity breaches are forecast in a mobile network. A Key Performance Indicators (KPI) database is accessed to obtain KPI data associated capacity of cells in a mobile network. Based on the KPI data, critical cells and non-critical cells are identified, wherein the critical cells exhibit high utilization affecting performance, and the non-critical cells do not exhibit high utilization. For the non-critical cells, a prediction model is applied to identify at least one predetermined forecast time window associated with capacity issues associated with at least one of the non-critical cells. Based on applying the prediction model, a report is generated identifying actions to execute to address capacity issues. An action from the report is executed to configure the mobile network to address the capacity issues of the critical cells, and/or capacity issues of the non-critical cells having forecasted capacity issues within one of the predetermined forecast time windows.

Abstract: A method for cloud-native centralized fault monitoring in a telecommunication network, the method performed by a processor and comprising receiving one or more raw fault messages associated with one or more respective network devices, wherein the one or more raw fault messages are received using one or more network protocols associated with the one or more respective network devices; identifying fault information from the one or more raw fault messages; enriching the fault information based on continuously processing the fault information and additional contextual information; and storing the enriched fault information in a plurality of databases, wherein a first subset of the enriched fault information is stored in a first database and a second subset of the enriched fault information is stored in a second database.

Abstract: A system for collecting discarded alarm includes a non-transitory computer readable medium configured to store instructions thereon. The system further includes a processor connected to the non-transitory computer readable medium. The processor is configured to execute the instructions for receiving alarm data from a device within a telecommunication network. The processor is further configured to execute the instructions for determining whether the alarm data is missing identifying information. The processor is further configured to execute the instructions for subjecting the alarm data to suppression in response to a determination that the alarm data is missing at least one piece of identifying information. The processor is further configured to execute the instructions for generating instructions for addressing an alarm in response to a determination that the alarm data includes all identifying information.

Abstract: A system for aggregating alarms for a network includes a non-transitory computer readable medium configured to store instructions thereon. The system further includes a processor connected to the non-transitory computer readable medium. The processor is configured to execute the instructions for receiving information for configuring alarm data. The processor is configured to execute the instructions for aggregating alarm data based on the information for configuring alarm data. The processor is configured to execute the instructions for generating a visual representation of the aggregated alarm data. The processor is configured to execute the instructions for instructing a display to display the visual representation on a graphical user interface (GUI). The processor is configured to execute the instructions for receiving filter criteria through the GUI. The processor is configured to execute the instructions for updating the display on the GUI based on the filter criteria.

Abstract: A system for identifying recurring alarms includes a non-transitory computer readable medium configured to store instructions; and a processor. The processor is configured to execute the instructions for correlating an alarm log with a rule, the alarm log includes information related to a plurality of faults. The processor is configured to execute the instructions for determining whether any of the plurality of faults satisfy criteria of the rule; and identifying an earliest fault of the plurality of faults that satisfies all of the criteria of the rule in response to a determination that at least one fault of the plurality of faults satisfies all of the criteria of the rule. The processor is configured to execute the instructions for comparing the earliest fault with an incident log; and generating an incident in response to a determination that the earliest fault does not match any open entry in the incident log.

Abstract: A system for identifying correlated alarms includes a non-transitory computer readable medium configured to store instructions thereon; and a processor connected to the non-transitory computer readable medium. The processor is configured to execute the instructions for identifying a parent alarm from an alarm log based a plurality of rules, wherein the alarm log comprises a plurality of alarm, and the plurality of alarms contains the identified parent alarm. The processor is configured to execute the instructions for determining whether the plurality of alarms includes a child alarm associated with the identified parent alarm based on the plurality of rules. The processor is configured to execute the instructions for generating an incident in response to a determination that the plurality of alarms includes the child alarm, wherein the incident includes instructions for resolving the parent alarm.

Abstract: A system includes a non-transitory computer readable medium configured to store instructions thereon; and a processor. The processor is configured to receive alarm data related to equipment in a telecommunication network. The processor is configured to receive a correlation rule and a mass outage rule, wherein each mass outage rule is associated with a correlation rule. The processor is configured to perform a first aggregation using the alarm data based on domain, vendor, equipment type, classification, or geographic information; and associate the aggregated alarm data with a corresponding correlation rule. The processor is configured to determine a number of pieces of equipment that are associated with each correlation rule; determine whether the determined number is equal to or greater than a threshold value; and generate an incident report in response to the number of pieces of equipment being equal to or greater than the at least one threshold value.

Abstract: A faulty node is identified in a cloud native environment by retrieving a topology that describes a relationship between a plurality of nodes in a network, retrieving a list of alarms in the network, determining a child node in the network located at the bottom of the topology that has a first alarm based on the alarm list, determining a parent node of the child node located above the child node and below or on an apex node of the network that has a second alarm based on the topology, determining whether the parent node is an apex node in the network based on the topology, and based on a determination that the parent node is the apex node in the network, identify the parent node as the faulty node.