Properties installed with Service Analytics

Service Analytics adds the following properties.

Note: To open the System Property [sys_properties] table, enter sys_properties.list in the navigation filter. And, updating these properties, requires the evt_mgmt_admin role.
Property Usage
Enable root cause analysis for business services

sa_analytics.rca_enabled

Enables RCA for alerts associated with business services and manual services, to identify root cause CIs.
  • Type: true | false
  • Default value: false
  • Location: Service Analytics > Properties
Enable alert aggregation

sa_analytics.aggregation_enabled

Enables aggregation of correlated alerts for services and alert groups.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Include CIs associated with business services, in alert aggregation

sa_analytics.aggregation.include_service

  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Time interval (in seconds) criteria for grouping alerts

sa_analytics.rca.learner_group_interval_secs

Interval that alerts must be created in, to be included in a group.

  • Type: integer
  • Default value: 60
  • Range of possible values: 60–900
  • Location: Service Analytics > Properties
Length of time period (in seconds) from which to include alerts for analysis

sa_analytics.rca.learner_query_interval_secs

The interval that the learner uses to chunk the alert data for processing.
  • Type: integer
  • Default value: 86400
  • Range of possible values: 43200-–86400
  • Location: Service Analytics > Properties
Confidence score % threshold, above which correlated alert groups will be displayed in the Event Management dashboard and Alert Console

sa_analytics.rca.query_probability_threshold

The confidence score that must be met by the identified root cause CI for the associated alerts to be displayed.
  • Type: integer
  • Default value: 0
  • Range of possible values: 0–100
  • Location: Service Analytics > Properties
Purge staging tables (in days)

sa_analytics.rca.input_purge_days

Number of days that RCA input is kept before it is purged.
  • Type: integer
  • Default value: 90
  • Range of possible values: 30–180
  • Location: Service Analytics > Properties
sa_analytics.rca.output_purge_days Number of days that RCA output is kept before it is purged.
  • Type: integer
  • Default value: 3
  • Range of possible values: 3–5
  • Location: System Property [sys_properties] table
Generate event when MID Server file system usage space exceeds limit (0–100%)

sa_analytics.rca.mid_max_allowed_space

When the file system of the MID Server exceeds the percentage threshold, an event is generated.
  • Type: integer
  • Default value: 20
  • Range of possible values: 0–100
  • Location: Service Analytics > Properties
CMDB property to be used for grouping the alerts used in alert aggregation

sa_analytics.agg.learner_group_by_property

A property from the [cmdb_ci] table that can be used to group alerts by. The Alert Aggregation Learner then learns those properties and uses them for grouping.

When left empty, the alerts are learned together without being grouped.

  • Type: string
  • Default value: none
  • Other possible values:
    • A column that is not a reference from the cmdb_ci table such as po_number.
    • A column that is a reference to another table such as location.name (the name field in the location table which is referenced from cmdb_ci)
  • Location: Service Analytics > Properties
sa_analytics.agg.learner_domain_level Sets the level of the domain to be used by the alert aggregation learner.
For optimal analysis, you should set the domain level such that:
  • All CIs that impact the services are contained within the domain
  • There are no shared infrastructures across domains
  • Type: integer
  • Default value: 2
  • Location: System Property [sys_properties] table
Enable CMDB Correlation for Alert Aggregation

sa_analytics.agg.query_cmdb_correlation_enabled

Enables alert correlation based on CMDB CIs and relationships.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
CMDB Groups: Relationship level

sa_analytics.agg.query_cmdb_graph_walk_nodes

Number of levels of CMDB hosting rules, containment rules, and endpoints to walk and to be considered for CMDB group formation during alert aggregation.
  • Type: integer
  • Default value: 5
  • Location: Service Analytics > Properties
Enable Suggested Relations for CMDB Correlation

sa_analytics.agg.query_cmdb_suggested_relationship_enabled

Use any manually defined suggested relationship when forming CMDB alert groups, in addition to using hosting and containment relationships.

Helpful when Discovery was not used for discovering relationships, and instead, users manually define them.

  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
Use customer feedback in forming new Alert Aggregation Groups

sa_analytics.agg.query_customer_feedback_enabled

Incorporate customer feedback of manually adding/removing alerts while forming automated alert groups.
  • Type: true | false
  • Default value: false
  • Location: Service Analytics > Properties
Enable Alert Prediction

sa_analytics.pred.cl_enabled

Enables alert prediction for automated alert groups.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties
sa_analytics.agg.mi_graph_enabled Internal property that enables alert prediction for automated alert groups.
  • Type: true | false
  • Default value: true
  • Location: System Property [sys_properties] table
Alert Prediction Minimum Confidence Score (%) Threshold

sa_analytics.pred.cl_mon_conditional_probability

Predicted alerts probability threshold. The probability of a predicted alert to be actually generated, must meet this threshold to be displayed in the Alert Console.
  • Type: integer
  • Default value: 10
  • Location: Service Analytics > Properties
Enable Alert Correlation RCA

sa_analytics.agg.learner_rca_detection

Enable RCA for automated alert groups.
  • Type: true | false
  • Default value: true
  • Location: Service Analytics > Properties