Properties installed with Service Analytics

Service Analytics adds the following properties.

Note: To open the System Property [sys_properties] table, enter sys_properties.list in the navigation filter.
Property Usage
Enable alert aggregation

sa_analytics.aggregation_enabled

Enables aggregation of correlated alerts for services and alert groups.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Enable root cause analysis for business services

sa_analytics.rca_enabled

Enables RCA for alerts associated with business services, to identify root cause CIs.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Include CIs associated with business services, in alert aggregation

sa_analytics.aggregation.include_service

  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
sa_analytics.rca.output_purge_days Number of days that RCA output is kept before it is purged.
  • Type: integer
  • Default value: 3
  • Range of possible values: 3-5
  • Location: System Property [sys_properties] table
Purge staging tables (in days)

sa_analytics.rca.input_purge_days

Number of days that RCA input is kept before it is purged.

  • Type: integer
  • Default value: 90
  • Range of possible values: 30-180
  • Location: Service Analytics > Properties
Time interval (in seconds) criteria for grouping alerts

sa_analytics.rca.learner_group_interval_secs

Interval that alerts must be created in, to be included in a group.

  • Type: integer
  • Default value: 300
  • Range of possible values: 60-900
  • Location: Service Analytics > Properties
Length of time period (in seconds) from which to include alerts for analysis

sa_analytics.rca.learner_query_interval_secs

The period of past time from which to include alerts in alert aggregation analysis.
  • Type: integer
  • Default value: 86400
  • Range of possible values: 43200-86400
  • Location: Service Analytics > Properties
Confidence score % threshold, above which RCA correlated alert groups will be displayed in the Event Management dashboard and alerts console

sa_analytics.rca.query_probability_threshold

The confidence score that must be met by RCA correlated alert groups before the groups are displayed on the Event Management dashboard and alerts console.
  • Type: integer
  • Default value: 0
  • Range of possible values: 0-100
  • Location: Service Analytics > Properties
Alert severity threshold, above which alerts will be included in analysis

sa_analytics.alert.severity_threshold

Only alerts with severity that is above the threshold will be included in alert aggregations and root cause CI analysis.

  • Type: choice list
  • Default value: Info
  • Other possible values:
    • Warning
    • Minor
    • Major
    • Critical
  • Location: Service Analytics > Properties