Properties installed with Service Analytics

Service Analytics adds the following properties.

Note: To open the System Property [sys_properties] table, enter sys_properties.list in the navigation filter. And, updating these properties, requires the evt_mgmt_admin role.
Property Usage
Enable root cause analysis for business services

sa_analytics.rca_enabled

Enables RCA for alerts associated with business services, to identify root cause CIs.
  • Type: true | false
  • Default value: false
  • Location: Service Analytics > Properties
Enable alert aggregation

sa_analytics.aggregation_enabled

Enables aggregation of correlated alerts for services and alert groups.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Include CIs associated with business services, in alert aggregation

sa_analytics.aggregation.include_service

  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Time interval (in seconds) criteria for grouping alerts

sa_analytics.rca.learner_group_interval_secs

Interval that alerts must be created in, to be included in a group.

  • Type: integer
  • Default value: 60
  • Range of possible values: 60-900
  • Location: Service Analytics > Properties
Length of time period (in seconds) from which to include alerts for analysis

sa_analytics.rca.learner_query_interval_secs

The interval that the learner uses to chunk the alert data for processing.
  • Type: integer
  • Default value: 86400
  • Range of possible values: 43200-86400
  • Location: Service Analytics > Properties
Confidence score % threshold, above which correlated alert groups will be displayed in the Event Management dashboard and Alerts Console

sa_analytics.rca.query_probability_threshold

The confidence score that must be met by the identified root cause CI for the associated alerts to be displayed.
  • Type: integer
  • Default value: 0
  • Range of possible values: 0-100
  • Location: Service Analytics > Properties
Purge staging tables (in days)

sa_analytics.rca.input_purge_days

Number of days that RCA input is kept before it is purged.
  • Type: integer
  • Default value: 90
  • Range of possible values: 30-180
  • Location: Service Analytics > Properties

sa_analytics.rca.output_purge_days

Number of days that RCA output is kept before it is purged.
  • Type: integer
  • Default value: 3
  • Range of possible values: 3-5
  • Location: System Property [sys_properties] table
Generate event when MID Server file system usage space exceeds limit (0-100%)

sa_analytics.rca.mid_max_allowed_space

When the file system of the MID Server exceeds the percentage threshold, an event is generated.
  • Type: integer
  • Default value: 20
  • Range of possible values: 0-100
  • Location: Service Analytics > Properties
CMDB property to be used for grouping the alerts used in alert aggregation

sa_analytics.agg.learner_group_by_property

A property from the cmdb_ci table that can be used to group alerts by. The alert aggregation Learner then learns those alerts with respect to the grouping.

When left empty, the alerts are learned together without being grouped.

  • Type: string
  • Default value: none
  • Other possible values:
    • A column that is not a reference from the cmdb_ci table such as po_number.
    • A column that is a reference to another table such as location.name (the name field in the location table which is referenced from cmdb_ci)
  • Location: Service Analytics > Properties
sa_analytics.agg.learner_domain_level Sets the level of the domain to be used by the alert aggregation learner.

For optimal analysis, it is recommended that this is set to a domain level such that all the CIs that impact the services are contained within the domain, and that there are no shared infrastructures across domains.

  • Type: integer
  • Default value: 2
  • Location: System Property [sys_properties] table