While analyzing events in the TrueSight console, you can cross-launch into BMC TrueSight IT Data Analytics (IT Data Analytics) to perform root-cause analysis. To be able to cross-launch, you need to first integrate IT Data Analytics with the TrueSight Presentation Server.
Ensure that IT Data Analytics 2.1 is installed and configured.
Versions earlier than 2.1 of IT Data Analytics cannot be integrated with the TrueSight Presentation Server 10.1.
For information on installing and configuring BMC TrueSight IT Data Analytics 2.1, see .
On the Components page, click the action menu and select Add Component.
Select IT Data Analytics Server and enter the following details:
|Host Name/IP Address||Fully qualified domain name (FQDN) or IP address of the IT Data Analytics server.|
Protocol (HTTP or HTTPS) which you want to use for connecting with IT Data Analytics.
Port number that you want to use to connect to the IT Data Analytics server.
Depending on the kind of protocol you want to use, you can specify one of the following:
The tenant that you want to use for connecting with IT Data Analytics.
The following notes are important to keep in mind before deleting the IT Data Analytics registration details:
Ensure that IT Data Analytics is up and running.
This is important because otherwise the external configuration created on IT Data Analytics might not be deleted after you delete the component registration on the TrueSight Presentation Server. If the external configuration still continues to show on IT Data Analytics, you can run a CLI command on IT Data Anlaytics to delete the external configuration. For more information, see .
You can cross-launch into IT Data Analytics from applications and events available on the TrueSight console. Before you cross-launch into IT Data Analytics, it is important that you access the IT Data Analytics console and create a data collector for the following items:
. Creating data collectors beforehand ensures that you can search events after you cross-launch from the TrueSight console into IT Data Analytics.are objects that help you collect data records (or events) from the target hosts and make it available for search and analysis. For more information, see
Access the TrueSight console.
For more information, see .
From the navigation menu, navigate to one of the following pages:
|Monitoring > Applications||One of the application names, then click the action menu (vertical three dots) next to the application name, and then select Launch BMC TrueSight IT Data Analytics.|
|Monitoring > Events||The action menu next to one of the events that you want to investigate in IT Data Analytics, and then select Launch BMC TrueSight IT Data Analytics.|
|Monitoring > Applications||One of the application names, then click the Events tab. Click the action menu next to one of the events that you want to investigate in IT Data Analytics, and then select Launch BMC TrueSight IT Data Analytics.|
The system cross launches to IT Data Analytics, and the Search page is displayed. You can see search results for one of the following search queries depending on whether you are cross-launching from an application or event.
|Search query with time range||Notes|
|If you cross-launch from an application|
In the search query syntax, the following definitions apply:
By default, the search query displays a list of host names (corresponding to the devices) associated with the application.
If you have a large number of devices included in the application, then the default search query can be very long because it will have a large number of host names. Instead of searching for a list of host names to find event data associated with those hosts, you can search for the application context.
To be able to search by the application context, you need to perform the following steps in IT Data Analytics:
Performing the preceding steps in IT Data Analytics is optional, however this can be useful to simplify the search query.
|Time range: 30 minutes before and 30 minutes after the last time when the application state changed.|
|If you cross-launch from an event|
|In the search query syntax, |
|Time range: 30 minutes before and 30 minutes after the event time.|
|If you cross-launch from an event that is directly associated with the application|
Cross launching from an event directly associated with the application is similar to cross launching from an application, because an application level event is associated with a group of hosts or devices and not with a specific device or host. Therefore, use the same search query parameters that are used for cross launching from an application. For search query parameters, see the search query and notes on cross launching from an application.