Leveraging RCA Results in Incident Manager

You can use the RCA results to focus on the non-symptom incidents in Incident Manager. This involves using the Causal Analysis Update incident attribute when creating custom views.

  1. From the Enterprise menu, select Monitoring, and then Incidents. The Indicent Manager page displays.
  2. From the Views region, click Create. The Search page displays.
  3. Click Add Fields... and then choose Causal analysis update. The Causal analysis update displays as additional search criteria.

    causal analysis update

  4. Choose 'Do Not Show Symptoms' from the list of available criteria. This will automatically exclude incidents that have been marked as 'symptom'. Incidents that are not marked as symptom or root cause will be included as long as it matches any other criteria you may have specified.

    causal analysis update search

  5. Click Create View, enter a View Name when prompted, and then click OK.

Showing RCA Results in an Incident Detail

An incident that is a root cause or symptom will be identified prominently as part of the details of the incident in Incident Manager. In addition, in case the incident is a symptom, a Causes section will be added to identify the root cause(s) of the incident. In case the incident has, in turn, caused other target down incidents, an Impacted Targets section will also be added to show the targets that have been affected, that is. other targets that are down as a result of the original target down.