Investigating ML-based situations
To view and investigate a situation
As a tenant administrator, you can investigate situations as the need arises.
- Click Situations.
- If using the tile view, on a Situation tile, click Investigate to view the following details:
- Situation name, severity, incident ID (if available), status, last modification date, and number of events grouped by the top three host names
- Correlation event details such as event message, the impacted host, occurrence, severity, priority, and status
- (Optional) If using the list view, click the Situation name to view the situation details.
- (Optional) To create an incident for the situation, if not created yet, click Create Incident.
An incident is created in BMC Helix IT Service Management and the incident ID appears for the situation. - In the Automations column, automations that match the event are displayed.
To run automations, see Remediating-events-for-services-and-situations. - (Optional) You can also request for creating automations or if you have the permissions, create automations for events.
- Click any event message to view the following event details:
- Event name, severity, priority, and status
- Event assignee details
- Date when the event first occurred or was last modified
Event class details. For more information, see EVENT base event class.
Performance View tab: If the event slot value for the Class is Alarm, the tab displays the time-series data collected from key the attributes of the causal events of ML-based situations.
(Optional) Click Close Situation if its status is Open or Assigned, and Click Yes.
All the correlated events except the alarm events are closed. The Situation status changes to Closed. You can close a situation even if the incident created for the situation is not closed.