AI Event Correlation and Root Cause Analysis

Virtually all IT operations professionals are familiar with ‘event storms’—a term for when a problem triggers hundreds (or sometimes thousands) of redundant alerts from interconnected systems, making it harder to pinpoint the underlying cause. AI event correlation makes sense of the noise, grouping redundant notifications and isolating the likely root cause of the problem. When an issue arises, such as an outage, you can avoid spending hours investigating a long list of redundant alerts. Instead, go to the tool's Overview page, which presents a birds-eye view of the current status of your business services and calls out Situations—groups of related events—that require your attention.

Click the Situations tab to see a more detailed view of current Situations, including severity, timeline, and the number of individual events that have been grouped into each. The tool groups events in two ways: by using machine learning (ML) and by referencing event policies that you can configure to control grouping logic. The "Type" icon in this view indicates whether the event grouping was done by ML or by referencing your event policy.

You can dive deeper into each Situation to see related metrics, logs, and changes.

The tool also identifies which individual event is the likeliest root cause of the underlying issue. This is based on calculating the impact of the event, and the event with the greatest impact is chosen as the probable source of the larger problem. You can quickly take action on the root cause by triggering Automated Remediation scripts directly from the tool or set policies to automatically trigger Automated Remediation scripts when certain conditions are met.