Aiming at a DC filter differential protection alarm event, by analyzing the waveform of transient fault and steady-state operation of the filter protection, combining with the structure and sampling principle of the filter CT, the reasons causing the protection alarm are eliminated one by one. Finally, the shunt path of the primary equipment is found and the fault points are located, which provides the basis for the DC filter to carry out maintenance work.