Customize RCA settings

  • Release version: Xanadu
  • Updated August 1, 2024
  • 2 minutes to read

    • Modify default settings that determine RCA behavior.

    Before you begin

    Role required: evt_mgmt_admin

    About this task

    Default filter settings control which change requests RCA considers as possible root causes. You may want to change certain default settings, for example to make RCA ignore standard change requests.

    You can also change the number of probable root causes shown in the list. By default, the list shows the five probable root causes with the highest root cause score.

    By default the RCA calculation is enabled. You can disable it by changing the default sa_analytics.disable_prc value to True.

    Procedure

    1. Navigate to All > System Properties > All Properties.
    2. Do one or both of the following, as needed.
      • Change default filter settings:
        1. Select New.
        2. In the Name field, specify the name of the property for which you want to change the default setting.
          The new property must have the same name as the related property in the table.
          Property Description Type Default value
          sa_analytics.rca.filter_category The categories of change requests that RCA considers as possible root cause. string " "
          sa_analytics.rca.filter_type The types of change requests that RCA considers as possible root cause. string "standard,normal,emergency"
          sa_analytics.rca.filter_state The state of change requests that RCA considers as possible root cause. string "-1,0,3,7,8,157"
          sa_analytics.rca.filter_interval_in_hours The time frame, in hours, during which change requests occurred that RCA considers as possible root cause. int 168
          sa_analytics.rca_use_legacy_query Use legacy less efficient queries for RCA calculation. Boolean False
          sa_analytics.rca.get_tasks_for_impacted_cis Includes change requests for impacted services in the RCA list. Boolean True
          sa_analytics.rca_scoring_by_alert_proximity Enables sorting of RCAs by time proximity to the alert. Boolean True
          sa_analytics.rca_cmdb_relations_levels Number of hops to search related configuration items. int 1

          sa_analytics.rca_time_filtering_by_planned_time

          		 Enables filtering of change requests by planned time. Boolean True
          sa_analytics.rca_time_filtering_by_actual_start_time Enables filtering of change requests by implementation time. Boolean True
          sa_analytics.rca.upper_filter_interval_in_hours Determines the time upper bound for change requests filtering. int 1
          sa_analytics.rca.order_by_scoring_for_virtual_alerts When calculating RCAs for virtual alert – order the records by scoring of PRCs of the corresponding secondaries. Boolean True
          sa_analytics.rca_same_reasoning_use_newer When 2 PRCs have the same reasoning, prioritize the one with the most recent change request during scoring calculations. Boolean True
          sa_analytics.rca.prefer_cr_on_app_service In case there is the same change request on application service and on CI, prefer the one from application service. Boolean False
        3. Enter a valid value for the property.
          Note:
          The value you set for the new property overrides the default value for the related property.
      • Change the maximum number of probable root causes shown in the list:
        1. Find the property sa_analytics.rca_task_table_max_records.
          Property name Description Type Default value
          sa_analytics.rca_task_table_max_records The maximum number of probable root causes shown in the Probable root causes list. int 5
        2. Replace the default value with a new valid value.
      • Disable RCA by creating the sa_analytics.disable_prc property.
        1. Select New.
        2. Fill in the form with the following values.
          Property name Description Type Value
          sa_analytics.disable_prc Disabling the Probable root cause. Boolean True
    3. Click Submit.