Monitoring service risk


As a Vulnerability manager, use the Services risk heatmap to get real-time, comprehensive information about the vulnerabilities affecting your services. The risk data is consolidated into an intuitive, color-coded view that allows you to visually assess the impact of vulnerability risks across services. You can quickly identify and prioritize critical services for remediation. Monitoring service risk helps detect issues early, proactively resolve them, and prevent outages and service disruptions. 

To monitor service risk

In the BMC Helix AIOps console, the service risk heatmap is displayed on the Services page.

  1. Click Services and then select Risk View to view the following information: 
    • All services color-coded by risk score in a heatmap or tile view
    • Search and advanced filters for services
        

      About the heatmap box sizes

      The number of services to be displayed on this page determines the size of a heatmap box. The box size is dynamic and relative to other boxes.

  2. Hover over a service to view a quick summary of the vulnerability impact. The following parameters are displayed:
    Service_risk_heatmap_253
    • The number of open critical vulnerabilities
    • The number of impacted assets
    • Risk score: The risk score is based on the service criticality and the CVSS score imported from BMC Helix Automation Console.
    • Service criticality 
  3. Click a service to navigate to the service details page. For more information, see To investigate vulnerabilities for an impacted service.​​​
  4. (Optional) Choose how to view services on the heatmap view:
    • Basic search: Enter a service name in the search box and click Search Search icon.png
    • Basic filters: Select or clear the Risk Score filter checkboxes to view services based on the selected risk score. You can also click Select all to view all services. Filter selection is retained even if you access other pages and navigate back to the Services page. 
    • Advanced filter: Click to view services by Service Kind (Business Service, Technical Service, Business Application). By default, business services and technical services are displayed. Search and filter options are retained even if you switch between the heatmap and tile views.
    • Number of services per page: Click to select the number of services to be displayed on the page. 
    • Refresh page: Click Refresh Refresh icon.png to refresh the page.
      By default, the Services page is automatically refreshed every five minutes. The automatic refresh interval is applicable only for active browser sessions. If you navigate to any other browser tab, the session no longer remains active, and the UI pages do not get automatically refreshed. To change the refresh interval duration, see User interface overview.
  5. (Optional) Click Tile View Tile view icon.png to view services in a tile view.
    Each tile represents a service and displays the service name, risk score, the number of impacted assets, and the service criticality. Search results or filters are retained across both the tile view and the heatmap view. 

  6. (Optional) Save a set of preferences (advanced filters and the page view (Heatmap view or Tile view)) in a preset. These preferences are saved across sessions:
    1. Click Add Preset.
    2. Enter a name for the preset.
    3. (Optional) Set the preset as the default preset.
    4. Click Create.
  7. (Optional) Click Save Preferences to save your page preferences.
    Your selected advanced filters and the page view (Heatmap view or Tile view) are saved until you change your page preferences again. 
Why don't I see any services on the Services page?

Services start appearing on the Services > Risk View page as soon as they are impacted by vulnerabilities. 

Where to go from here

Based on the impact of a vulnerability on a service, you can perform any of the following tasks:

  • Derive actionable insights by viewing all services, vulnerabilities, and remediation owners. For more information, see Monitoring vulnerabilities.
  • View service and vulnerability details and generate best action recommendations. For more information, see Investigating vulnerabilities.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*