According to an alarm correlation analysis method, apparatus, and system, alarm analysis rules are grouped according to a certain policy; each alarm analysis rule group is correlated with one analysis engine, and the analysis engine performs, according to an alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine, correlation analysis for an alarm that has a correlation with the alarm analysis rule group, so that multiple analysis engines implement concurrent analysis on a large quantity of alarms, thereby fully utilizing a multi-core resource, and improving efficiency of alarm correlation analysis.
Please help me write a proper abstract based on the patent claims. CLAIM: 1. An alarm correlation analysis method, wherein the method is applied in an alarm correlation analysis apparatus with two or more analysis engines running, and the method comprises: receiving an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; and performing, by an analysis engine corresponding to the alarm analysis rule group that comprises an alarm indicated by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm analysis rule that is comprised in an alarm analysis rule group corresponding to any one of the analysis engines, wherein a same alarm analysis rule group comprises correlated alarm analysis rules, one alarm analysis rule group corresponds to one analysis engine, the alarm analysis rule is used to indicate an interrelationship between different alarms, and multiple correlated alarm analysis rules all comprise at least an alarm with a same alarm identifier. 2. The method according to claim 1, wherein performing, by the analysis engine corresponding to the alarm analysis rule group that comprises the alarm indicated by the same alarm identifier, correlation analysis for the received alarm according to the alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine comprises: transferring the received alarm to the analysis engine corresponding to the alarm analysis rule group that comprises the alarm indicated by the same alarm identifier; and performing, by the analysis engine, the correlation analysis for the transferred alarm according to the alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine. 3. The method according to claim 1, wherein performing, by the analysis engine corresponding to the alarm analysis rule group that comprises the alarm indicated by the same alarm identifier, correlation analysis for the received alarm according to the alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine comprises: correlating the received alarm with the analysis engine corresponding to the alarm analysis rule group that comprises the alarm indicated by the same alarm identifier; and obtaining, by using the analysis engine, the alarm according to the correlation and performing the correlation analysis for the obtained alarm according to the alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine. 4. The method according to claim 1, wherein the interrelationship between the different alarms comprises a root and correlative relationship between the different alarms, and wherein the correlated alarm analysis rules comprise a first alarm analysis rule and a second alarm analysis rule, and alarm identifiers are the same between a root alarm in the first alarm analysis rule and a root alarm in the second alarm analysis rule, or alarm identifiers are the same between a correlative alarm in the first alarm analysis rule and a correlative alarm in the second alarm analysis rule, or alarm identifiers are the same between a correlative alarm in the first alarm analysis rule and a root alarm in the second alarm analysis rule. 5. The method according to claim 1, wherein the interrelationship between the different alarms comprises a brother relationship between the different alarms, wherein the brother relationship indicates that the different alarms have a same root alarm, and wherein the correlated alarm analysis rules comprise a third analysis rule and a fourth analysis rule, and alarm identifiers are the same between one alarm in the third alarm analysis rule and one alarm in the fourth alarm analysis rule. 6. The method according to claim 1, wherein the method further comprises grouping the correlated alarm analysis rules to the same alarm analysis rule group. 7. The method according to claim 6, wherein the method further comprises receiving a user-defined correspondence between the correlated alarm analysis rules and an analysis engine, and wherein grouping the correlated alarm analysis rules to the same alarm analysis rule group comprises grouping, according to the received correspondence between the correlated alarm analysis rules and the analysis engine, the correlated alarm analysis rules to the alarm analysis rule group corresponding to the analysis engine. 8. An alarm correlation analysis apparatus, comprising: an alarm receiving module configured to receive an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; and an alarm processing module comprising two or more analysis engines, wherein the alarm processing module is configured to perform, by using an analysis engine corresponding to the alarm analysis rule group that comprises an alarm indicated by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm analysis rule that is comprised in an alarm analysis rule group corresponding to any one of the analysis engines, wherein a same alarm analysis rule group comprises correlated alarm analysis rules, one alarm analysis rule group corresponds to one analysis engine, the alarm analysis rule is used to indicate an interrelationship between different alarms, and multiple correlated alarm analysis rules all comprise at least an alarm with a same alarm identifier. 9. The apparatus according to claim 8, wherein the alarm processing module is specifically configured to: transfer the received alarm to the analysis engine corresponding to the alarm analysis rule group that comprises the alarm indicated by the same alarm identifier; and perform, by using the analysis engine, the correlation analysis for the transferred alarm according to the alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine when the alarm identifier of the received alarm is the same as the alarm identifier of any alarm in any alarm analysis rule that is comprised in the alarm analysis rule group corresponding to any one of the analysis engines. 10. The apparatus according to claim 8, wherein the alarm processing module is specifically configured to: correlate the received alarm with the analysis engine corresponding to the alarm analysis rule group that comprises the alarm indicated by the same alarm identifier; and obtain, by using the analysis engine, the alarm according to the correlation and perform the correlation analysis for the obtained alarm according to the alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine when the alarm identifier of the received alarm is the same as the alarm identifier of any alarm in any alarm analysis rule that is comprised in the alarm analysis rule group corresponding to any one of the analysis engines. 11. The apparatus according to claim 8, wherein the interrelationship between the different alarms comprises a root and correlative relationship between the different alarms, and wherein the correlated alarm analysis rules comprise a first alarm analysis rule and a second alarm analysis rule, and alarm identifiers are the same between a root alarm in the first alarm analysis rule and a root alarm in the second alarm analysis rule, or alarm identifiers are the same between a correlative alarm in the first alarm analysis rule and a correlative alarm in the second alarm analysis rule, or alarm identifiers are the same between a correlative alarm in the first alarm analysis rule and a root alarm in the second alarm analysis rule. 12. The apparatus according to claim 8, wherein the interrelationship between the different alarms comprises a brother relationship between the different alarms, wherein the brother relationship indicates that the different alarms have a same root alarm, and wherein the correlated alarm analysis rules comprise a third analysis rule and a fourth analysis rule, and alarm identifiers are the same between one alarm in the third alarm analysis rule and one alarm in the fourth alarm analysis rule. 13. The apparatus according to claim 8, wherein the apparatus further comprises a rule grouping module configured to group the correlated alarm analysis rules to the same alarm analysis rule group. 14. The apparatus according to claim 13, wherein the apparatus further comprises a correlation receiving module configured to receive a user-defined correspondence between the correlated alarm analysis rules and an analysis engine, and wherein the rule grouping module is specifically configured to allocate, according to the received correspondence between the correlated alarm analysis rules and the analysis engine, the correlated alarm analysis rules to the alarm analysis rule corresponding to the analysis engine. 15. An alarm correlation analysis method, wherein the method is applied in an alarm correlation analysis apparatus with two or more analysis engines running, and the method comprises: receiving an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; and performing, by an analysis engine corresponding to an alarm group that comprises an alarm identified by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm group, wherein a same alarm group comprises correlated alarms, one alarm group corresponds to one analysis engine, and the correlated alarms refer to alarms generated by network element devices that belong to a same logical area, wherein the network element devices in the same logical area have a service correlation. 16. The method according to claim 15, wherein performing, by the analysis engine corresponding to the alarm group that comprises the alarm identified by the same alarm identifier, correlation analysis for the received alarm according to the alarm analysis rule comprises: transferring the received alarm to the analysis engine corresponding to the alarm group that comprises the alarm indicated by the same alarm identifier; and performing, by using the analysis engine, the correlation analysis for the transferred alarm according to the alarm analysis rule. 17. The method according to claim 15, wherein performing, by the analysis engine corresponding to the alarm group that comprises the alarm identified by the same alarm identifier, correlation analysis for the received alarm according to the alarm analysis rule comprises: correlating the received alarm with the analysis engine corresponding to the alarm group that comprises the alarm indicated by the same alarm identifier; and obtaining, by using the analysis engine, the alarm according to the correlation and performing the correlation analysis for the obtained alarm according to the alarm analysis rule. 18. The method according to claim 15, further comprising grouping the correlated alarms to the same alarm group. 19. The method according to claim 15, wherein the logical area is divided according to a subnet in which the network element device is located, or wherein the logical area is divided according to a maintenance area that is divided by maintenance personnel. 20. An alarm correlation analysis apparatus, comprising: an alarm receiving module configured to receive an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; and an alarm processing module comprising two or more analysis engines, wherein the alarm processing module is configured to perform, by using an analysis engine corresponding to an alarm group that comprises an alarm identified by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm group, wherein a same alarm group comprises correlated alarms, one alarm group corresponds to one analysis engine, and the correlated alarms refer to alarms generated by network element devices that belong to a same logical area, wherein the network element devices in the same logical area have a service correlation. 21. The apparatus according to claim 20, wherein the alarm processing module is configured to: transfer the received alarm to the analysis engine corresponding to the alarm group that comprises the alarm indicated by the same alarm identifier; and perform, by using the analysis engine, the correlation analysis for the transferred alarm according to the alarm analysis rule when the alarm identifier of the received alarm is the same as the alarm identifier of any alarm in any alarm group. 22. The apparatus according to claim 20, wherein the alarm processing module is configured to: correlate the received alarm with the analysis engine corresponding to the alarm group that comprises the alarm indicated by the same alarm identifier; and obtain, by using the analysis engine, the alarm according to the correlation and perform the correlation analysis for the obtained alarm according to the alarm analysis rule when the alarm identifier of the received alarm is the same as the alarm identifier of any alarm in any alarm group. 23. The apparatus according to claim 20, wherein the apparatus further comprises an alarm grouping module configured to group the correlated alarms to the same alarm group. 24. The apparatus according to claim 20, wherein the logical area is divided according to a subnet in which the network element device is located, or wherein the logical area is divided according to a maintenance area that is divided by maintenance personnel. 25. A network management system, comprising: an alarm correlation analysis apparatus; and at least one network element device that has a communication connection with the alarm correlation analysis apparatus, wherein the network element device is configured to report an alarm to the alarm correlation analysis apparatus when a fault occurs, and wherein the alarm correlation analysis apparatus comprises: an alarm receiving module configured to receive an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; and an alarm processing module comprising two or more analysis engines, wherein the alarm processing module is configured to perform, by using an analysis engine corresponding to an alarm analysis rule group that comprises an alarm indicated by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule in the alarm analysis rule group corresponding to the analysis engine when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm analysis rule that is comprised in the alarm analysis rule group corresponding to any one of the analysis engines, wherein a same alarm analysis rule group comprises correlated alarm analysis rules, one alarm analysis rule group corresponds to one analysis engine, the alarm analysis rule is used to indicate an interrelationship between different alarms, and multiple correlated alarm analysis rules all comprise at least an alarm with a same alarm identifier. 26. A network management system, comprising: an alarm correlation analysis apparatus; and at least one network element device that has a communication connection with the alarm correlation analysis apparatus, wherein the network element device is configured to report an alarm to the alarm correlation analysis apparatus when a fault occurs, and wherein the alarm correlation analysis apparatus comprises: an alarm receiving module configured to receive an alarm reported by a network element device, wherein the alarm comprises an alarm identifier that can uniquely identify the alarm; and an alarm processing module comprising two or more analysis engines, wherein the alarm processing module is configured to perform, by using an analysis engine corresponding to an alarm group that comprises an alarm identified by the same alarm identifier, correlation analysis for the received alarm according to an alarm analysis rule when the alarm identifier of the received alarm is the same as an alarm identifier of any alarm in any alarm group, wherein a same alarm group comprises correlated alarms, one alarm group corresponds to one analysis engine, and the correlated alarms refer to alarms generated by network element devices that belong to a same logical area, wherein the network element devices in the same logical area have a service correlation.