Investigating ML-based situations

As a tenant administrator, you can view and investigate situations to:

  • Close all ML-based situations

  • Create incidents in BMC Helix IT Service Management
  • Remediate open or assigned events (requires enabling the Intelligent Automations feature)
Related topics

ML-based situations

Configuring ML-based situations

Investigating policy-based situations Open link

Remediating events for services and situations

To view and investigate a situation

As a tenant administrator, you can investigate situations as the need arises.

  1. Click Situations
  2. If using the tile view, on a Situation tile, click Investigate to view the following details:
    • Situation name, severity, incident ID (if available), status, last modification date, and number of events grouped by the top three host names
    • Correlation event details such as event message, the impacted host, occurrence, severity, priority, and status
  3. (Optional) If using the list view, click the Situation name to view the situation details. 
  4. (Optional) To create an incident for the situation, if not created yet, click Create Incident.
    An incident is created in BMC Helix IT Service Management and the incident ID appears for the situation. 
  5.  In the Automations column, automations that match the event are displayed.
    To run automations, see 
    Remediating events for services and situations
  6. (Optional) You can also request for creating automations or if you have the permissions, create automations for events. 
  7. Click any event message to view the following event details: 
    • Event name, severity, priority, and status
    • Event assignee details
    • Date when the event first occurred or was last modified
    • Event class details. For more information, see  EVENT base event class. Open link

    • Performance View tab: If the event slot value for the Class is Alarm, the tab displays the time-series data collected from key the attributes of the causal events of ML-based situations.

  8. (Optional) Click Close Situation if its status is Open or Assigned, and Click Yes.

    All the correlated events except the alarm events are closed. The Situation status changes to Closed. You can close a situation even if the incident created for the situation is not closed.

Was this page helpful? Yes No Submitting... Thank you