Alarm information processing method and device

The embodiment of the invention discloses an alarm information processing method and device which can be used in the financial field or other technical fields, and the method comprises the steps: obtaining alarm information of target equipment within a preset time range; an alarm knowledge graph corresponding to the device type of the target device is obtained, the alarm knowledge graph comprises alarm information nodes and a causal edge used for connecting the alarm information nodes, and the causal edge is led out from one alarm information node to point to another alarm information node; the causal relationship is used for representing a causal relationship between two pieces of alarm information; and through matching the alarm information of the target device in the preset time range with the alarm knowledge graph, determining root cause alarm information of the target device in the preset time range. According to the invention, a network manager can quickly position an alarm source from massive alarm inf