Probable Cause Analysis focuses on events and anomalies that are related to each other according to impact and grouping relationships. Events and anomalies that are not related are not included in an analysis. Therefore, the following events are not considered during probable cause analysis:
The computation of Probable Cause Analysis in TrueSight Infrastructure Management is useful in troubleshooting performance related issues, some of which are listed below.
You can perform Probable Cause Analysis on internal events and external events. An internal event is an event that is generated by the TrueSight Infrastructure Management Server. Internal events also are referred to as intelligent events.
External events are events that are received from an external source such as generated from a PATROL Agent, a remote cell, or an event adapter. Because external events come from a source that is external to TrueSight Infrastructure Management, unlike internal events, they do not have any data associated with them.
Internal and external events vary in the amount and type of data that they supply. Therefore, they are handled differently during the Probable Cause Analysis process.
Because internal events are supported with statistical data, these events go through more steps in the analysis process than external events. WhenTrueSight Infrastructure Management is analyzing an internal event to determine whether it can be a probable cause for another event, it applies a series of filters to the internal event.
Because external events are not supported with statistical data as internal events are, the Probable Cause Analysis process for external events uses fewer filters.
The Probable Cause Analysis process leverages impact relationships in the service models when service models are available.
BMC highly recommends that you create a service model in order to derive the most accurate results out of Probable Cause Analysis. For information about service modeling, see the Administering service models.