AIOps Value dashboard

Related topics

As an operator or Site Reliability Engineer (SRE), use the AIOps Value dashboard to view key performance and operational metrics, and the top offenders for events, and assess how effectively situations help improve incident handling, reduce noise, and accelerate issue identification and resolution over time. Top offenders are events that cannot be effectively correlated into situations due to a missing node or service context.

Operators or SREs can use this dashboard to perform the following actions:

Get real-time visibility into how BMC Helix AIOps improves service reliability and operational performance.
Track efficiency trends in event correlation, detection, and resolution over time.
Make data-driven decisions to proactively optimize service performance and operational efficiency.
Use an out-of-the-box, ready-to-use dashboard without requiring any custom setup.

Scenario

Jim is an SRE at Apex Global and wants to analyze BMC Helix AIOps performance indicators for the last 15 days to understand which issues and services had the greatest impact and how effectively situations reduced operational noise.

He logs on to the dashboard and navigates to the AIOps value dashboard. He specifies 15 days as the date range to view and analyse data.

He observes that event noise is reduced by 70.9% and incident noise by 78.4%, indicating that event correlation is significantly lowering alert volume and preventing unnecessary incident creation. The Mean Time to Identify (2.07 minutes) shows that issues are detected quickly, while the Mean Time to Resolve (13.6 minutes) reflects relatively fast remediation.

To further reduce MTTR, Jim reviews the Operational KPIs and sees that although most events have node (91.5%) and service (88%) associations, some gaps remain. The Top Offenders section highlights specific event classes and source hosts generating events without node or service context.

Using these insights, Jim identifies data and modeling gaps to address, thereby improving correlation accuracy, reducing standalone events, and further accelerating issue resolution.

The following image shows the AIOps Value dashboard with sample data:

To view the AIOps Value dashboard

Log in to BMC Helix Dashboards.
From the navigation menu , click Dashboards.
In the Service Monitoring folder, click AIOps Value Dashboard.

Tip: Quick access from the home page

To quickly open the dashboard from the home page, mark it as a favorite by using the star icon. Additionally, after you open a dashboard, it is available under Recently viewed dashboards on the home page.

Panels in the AIOps Value dashboard

The following table describes the panels in the AIOps Value dashboard:

Panel	Description	Example
Dashboard filter	By default, the dashboard displays the data for the last 24 hours. You can filter the data by using the time range global filter for up to the last 5 years.
Event Type filter	Allows you to refine dashboard data based on specific event classes. It displays a list of available class names, enabling you to select one or more event types to focus your analysis on relevant events. When applied, the filter updates the data in Operational KPIs, Top Offenders, and Raw Data sections, helping you analyze trends, identify patterns, and investigate issues for selected event types. This filter does not apply to Business KPIs, as these metrics are calculated using aggregated data that is not dependent on individual event classes.
Service Name filter	Allows you to select a specific service, multiple services, or all services. Except for the panels in the Top Offenders section and the Multi Service Situations Enabled panel, data in all panels on the dashboard is filtered based on the selected services. By default, the dashboard considers all events for calculations, except the following classes and severities: Classes: INCIDENT_INFO AUTOMATION_STATUS_EV Situation Change Prediction Severity: INFO

Important

The dashboard uses color-coded thresholds to indicate performance levels:

Red: Requires immediate attention. Indicates poor performance or high operational risk.
Yellow: Indicates moderate performance; improvement is recommended.
Green: Represents optimal performance with no immediate action required.
Informational - Neutral (Blue): Indicates metrics without defined thresholds, used for monitoring trends only.

Panel	Description	Example
Business KPIs
Event Noise Reduction	Displays how the overall event noise is reduced by correlating related events into situations. Formula: % Event Noise Reduction = ((E − (S + SA)) / E) × 100 where, E = Total impacting events associated with services (changed from: Total number of events) S = Number of situations formed SA = Number of standalone events (events that are not part of any situation) A higher percentage indicates that more impacting events associated with services are effectively grouped into situations, reducing operational noise and helping operators focus on meaningful issues. Thresholds: Red (< 40), Yellow (40–70), Green (> 70)
Incident Noise Reduction	Displays how the number of incidents created from correlated events is reduced. A higher incident noise reduction percentage indicates that duplicate or unnecessary incidents are avoided by grouping related events into situations. This helps teams focus on fewer, more meaningful incidents, improving productivity and service response time. Formula: % Incident Noise Reduction = ((Total qualified events associated with services – Unique incidents formed associated with services) / Total qualified events associated with services) × 100 where, Total qualified events associated with services = Total number of impacting events that have service association and are considered in the dashboard calculations Unique Incidents formed associated with services = Number of incidents created after correlation that are associated with services If the policy for incident criteria is disabled, the incident noise reduction value is zero. Thresholds: Red (< 40), Yellow (40–70), Green (> 70)
Mean Time To Resolve	Displays the average time to resolve an issue after it is identified. It reflects the end-to-end efficiency of the operations team in remediating the issue and restoring normal service. In BMC Helix AIOps, MTTR is measured from the moment a situation is identified until the situation is closed or the fix is applied and confirmed. Lower MTTR values indicate faster remediation and improved operational performance. Important: MTTR is a global business KPI computed solely from situations. Even when filtering by specific event types (for example, Anomaly), the MTTR value displayed represents the global situation-level metric across all event types. Formula: MTTR = mean(_lifecycle_time(closed_root_cause_events_of_situations)) where, _lifecycle_time represents the duration between the identification and closure of the root cause event associated with a situation. closed_root_cause_events_of_situations refers to the root cause events of situations that have been closed. Note: Because MTTR is calculated using closed root cause events of situations, the metric reflects overall situation resolution performance rather than metrics tied to a specific event type filter. Thresholds: Green (< 1 hr), Yellow (1–4 hr), Red (> 4 hr)
Mean Time To Identify	Shows the average time taken to detect and correctly identify an issue or anomaly in the monitored environment. In BMC Helix AIOps, this metric is calculated from the moment the first relevant event is ingested until the events are correlated into a situation and classified as actionable. A lower MTTI indicates faster detection, better operational efficiency, and effective event correlation in situations. Important: MTTI is a global business KPI computed from Situations only. Even when filtering by specific event types (for example, Anomaly), the MTTI value displayed represents the global situation-level metric across all event types. If no situations are formed for the selected event type, the displayed MTTI still reflects the overall situation performance, not event-specific data. Formula: MTTI = ∑(Time identified−Time first event occurred)/Number of situations where, Time first event occurred = Timestamp when the first relevant event for that situation was ingested. Time identified = Timestamp when the correlated situation is formed. Note: If the selected Event Type filter shows "Events part of Situation = 0", this indicates no situations were formed from that event type, but the MTTI value displayed is still the global situation metric, not specific to that event type. Thresholds: Green (< 30 mins), Yellow (30 mins–2 hr), Red (> 2 hr)
Operational KPIs
Total Impacting Events	The total number of events that are considered for impact analysis and correlation in BMC Helix AIOps within the selected time range. This time range includes all events, whether correlated into situations or standalone. Blue indicates that the metric is informational and has no defined threshold values.
Events with Node Association	The percentage of events that are linked to a node (infrastructure element) in BMC Helix Discovery and a service model. These events are mapped to infrastructure components. Thresholds: Red (< 40), Yellow (40–70), Green (> 70)
Events with Service Association	Displays the percentage of impacting events that are associated with a service in the BMC Helix AIOps service model. Formula: % Events with Service Association = (Events with Service Association / Total impacting events) × 100 where, Events with Service Association = Number of impacting events that are linked to a service Total impacting events = Total number of impacting events considered in the dashboard A higher percentage indicates better service context coverage in event data, enabling more accurate service impact analysis and improving the effectiveness of event correlation and situations. Thresholds: Red (< 40), Yellow (40–70), Green (> 70)
Events with Service Association	Displays the count of impacting events that are associated with a service in the BMC Helix AIOps service model. These events include service context and can participate in service-level correlation and impact analysis. Blue indicates that the metric is informational and has no defined threshold values.
Total Situations	The total number of situations created by BMC Helix AIOps by correlating related events using ML and topology-based analysis. Blue indicates that the metric is informational and has no defined threshold values.
Events part of Situations	Displays the percentage of impacting events associated with services that are correlated into situations. Formula: % Events part of situations = (Events part of situations / Impacting events associated with services) × 100 where: Events part of situations = Number of impacting events that are correlated into situations Impacting events associated with services = Total number of impacting events that have a service association A higher percentage indicates better event correlation coverage, meaning more impacting events with service context are grouped into situations instead of remaining as standalone events, which helps reduce operational noise. Thresholds: Red (< 40), Yellow (40–70), Green (> 70)
Events part of Situations	Displays the number of impacting events that are correlated into situations. These events are grouped by AIOps correlation logic to represent related issues affecting services. This metric shows how many impacting events are successfully grouped into actionable situations instead of remaining as standalone events. Blue indicates that the metric is informational and has no defined threshold values.
Multi-Service Situation Enabled	Displays the current configuration status of the multi-service situation feature. When enabled, a single situation can be associated with multiple services if the correlated events impact more than one service. This configuration helps improve cross-service impact visibility and reduces the creation of duplicate situations for related issues.
Top Offenders
Events classes without Node ID	Displays events that are not associated with any node. Events are grouped by event class and shown as a pie chart, with each slice representing the percentage contribution of that class to the total events without a node association.
Hostnames without Node ID for All event class	Displays events of the selected class from the Events without Node ID panel that are not associated with any node. These events are further grouped by the source_hostname topology facet and shown as a pie chart. Each slice represents the percentage contribution of a source host to the total events without a node association for the selected class.
Events classes with Node ID but without service	Displays events that are associated with a node but not linked to any service. Events are grouped by event class and shown as a pie chart. Each slice represents the percentage contribution of classes that are not qualified for service-level correlation.
Hostnames for All class events with Node ID but without service	Displays events of the selected class from the Events with Node ID, but without the Service panel, that are associated with a node but not linked to any service. These events are further grouped by the source_hostname topology facet and shown as a pie chart, where each slice represents the percentage contribution of a source host to the total events with a node association but without a service association for the selected class.
Raw data	Displays total events with the following details: Class: Represents the event classification used by BMC Helix AIOps to identify the type of event (for example, alarm, change, prediction, or incident-related information). Source Hostname: The name of the host or source system from which the event originated. This value is used to identify the originating source and group related events. Node Id: The unique identifier of the node (host, VM, or device) from which the event originated. Service Key: The internal key used by BMC Helix AIOps to link the event to a specific service entity in the database or service model. Service Name: Name associated with the service created in BMC Helix AIOps or discovered in BMC Helix Discovery. Impacted Service Name: The name of the business service impacted by the event. Impacted Service Key: The name of the business service determined to be impacted by the event based on BMC Helix AIOps correlation and dependency analysis. Creation time: The date and time stamp of the event creation. Arrival time: The date and time the event was received by BMC Helix AIOps. Incident ID: The identifier of the incident created from the event or Situation, if applicable. This field is populated when the event results in an incident. Message: The descriptive message or text associated with the event, providing additional context about the issue or anomaly. Severity: The severity level assigned to the event (for example, Critical, Major, Minor, or Info), indicating the urgency and impact of the issue. Errors: Indicates whether any errors were encountered in the event payload, such as missing or malformed fields, incorrect associations, or ingestion issues. Identifier: A unique ID assigned to each event. Situation: Indicates the Situation to which the event is correlated. If populated, it confirms that the event is part of a correlated Situation; if empty, the event is treated as a standalone event. Rstat: Indicates the relationship status or state of the event in relation to other events or situations. Tenant ID: Identifies the tenant or account to which the event belongs. Tenant Name: The display name of the tenant or account associated with the event.

To improve the noise reduction accuracy in dashboard calculations

From the AIOps Value dashboard, click the Dashboard Settings icon.
Select Variables.
Click the eventType variable.
In the Custom all value field, add the event classes that you do not use for forming situations and want to exclude from the dashboard calculations.
Save the changes.

Important

When excluding event classes from the dashboard calculations, specify them using the following format in the Custom all value field:

-class:"INCIDENT_INFO" AND -class:Situation AND -class:Change AND -class:Prediction AND -severity:INFO

If a class name includes special characters, make sure it is enclosed in double quotes so that the filter is parsed correctly.

Excluding irrelevant event classes ensures that the noise-reduction metrics more accurately reflect the effectiveness of situations, rather than being influenced by events that are intentionally not correlated.

FAQs

Why do I see MTTR or MTTI values when filtering by Anomaly event type, even though no situations are formed (Events part of situation=0)?

MTTR and MTTI are global business KPIs calculated from all situations, regardless of the Event Type filter selection. These metrics are situation-level performance indicators and are not filtered by event type.

When you filter by an event type that does not form situations (for example, INFO-severity Anomalies), the operational KPIs will correctly show Events part of situation=0 for that event type. However, the business KPIs (MTTR or MTTI) continue to display the global situation metrics across all event types.

This is because:

Business KPIs measure overall system performance and situation handling efficiency.
Operational KPIs provide event-type-specific metrics.
Dashboard panels cannot be conditionally hidden based on filter selections.

Which metrics are affected by the Event Type filter?

The Event Type filter affects operational KPIs like Total Events, Events part of situations, Events not part of situations, Events with Node Association, Events with Service Association, Events with Errors, and the raw data table.