Investigating ML-based situations

To view and investigate a situation

As a tenant administrator, you can investigate situations as the need arises.

1. Click Situations. 
2. On a Situation tile, click Investigate to view the following details:
   
   • Situation name, severity, incident ID (if available), status, last modification date, and number of events grouped by the top three host names
   • Correlation event details such as event message, the impacted host, occurrence, severity, priority, and status
3. In the Automations column, automations that match the event are displayed. To run automations, see Remediating-events-for-services-and-situations. 
   You can also request for creating automations or if you have the permissions, create automations for events. 
   
4. Click any event message to view the following event details: 
   • Event name, severity, priority, and status
   • Event assignee details
   • Date when the event first occurred or was last modified

   • Event class details. For more information, see EVENT base event class.

   • Performance View tab: If the event slot value for the Class is Alarm, the tab displays the time-series data collected from key the attributes of the causal events of ML-based situations.

     

5. (Optional) Click Close Situation if its status is Open or Assigned, and Click Yes.

   All the correlated events except the alarm events are closed. The Situation status changes to Closed.