1. Objectives

This article explains how to use the OCC MAI_ALERTING data provider.

2. Supported Renderers

The MAI Alerting data provider supports this following renderers:

• Line chart
• Area chart
• Column chart
• Bar Chart
• Line Column
• SLR renderer
• Dynamic table

Here is an example for the Dynamic Table renderer:

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Test|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter_Cur|CONTEXT_ID=OTO~ABAP|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=

When clicking on the link, a window to the Alert Inbox is displayed :

3. Metrics Description

Here is a table explaining all possible attributes for the metrics:

4. Attributes Description

The DP for MAI Alerting has 4 tabs for attributes:

• KPI
• Filters
• Options
• Duration

 4.1 KPI Tab

To add a MAI Alerting data provider in a gadget:

• Select data provider /STDF/DP_MAI_Alerting
• Select a KPI
  

• Number of alerts created : Number of new alerts created during the time period.

• Current number of alerts  : Current number of open alerts in the alert inbox during the requested time period.

• Average alert processing duration (min): Average processing time (in minutes) of open alerts in the alert inbox during the requested time period.

• Average time from Alert is opened till confirmed by Operator (Min): Average time (in minutes) between the alert is opened (i.e. created by the system) until the alert is closed manually by the operator

• Number of alerts confirmed by Operator: Number of alerts closed by operator

• Maximum time from Alert is opened till confirmed by Operator (Min): Maximum time (in minutes) between the alert is opened (i.e. created by the system) until the alert is closed manually by the operator

• Average time from Alert is opened till manual Incident is created (Min): Average time in minutes between the alert is opened (i.e. created by the system) until the operator open an incident for this alert

• Number of manual Incidents created: Number of incidents opened by operator

• Maximum time from Alert is opened till manual Incident is created (Min): Maximum time in minutes between the alert is opened (i.e. created by the system) until the operator open an incident for this alert.

4.2 Filters tab

The Filters Tab displays 3 columns:

• Managed Object (1): select a Managed Object . 
  
• Alert Name (2) : select a specific Alert Name from the list.
  
• Technical Scenario (3): select a specific Technical Scenario from the list.

4.3 Options tab

The Options Tab displays 5 columns:

• Managed Object Type: To select the Type for the Managed Object . 
  
• Category: To select the category for the chosen alert.
  
• Rating: It can be: Yellow or Red.
• With Incident: To indicate that an incident is attached to the alert.
• Severity: To select the Severity of the incidents. 

4.4 Duration tab

The Options Tab displays 3 columns:

• Threshold Unit : To select Unit of the Threshold. 
  
• Threshold Value: To select Unit of the Threshold.
  
• With processor: To indicate if a processor is attached to the alert.

5. How to validate

5.1 Number of alerts created:

To validate the Number of alerts created, we have to use 2 different sources :

• For the granularity Day or Superior :  From infocube 0SMALMMP1
• For the granularity Hour: Alert Search

1-  For the granularity Day or Superior :From infocube 0SMALMMP1

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Test|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter|CONTEXT_ID=SHM110~ABAP~frncelhsm_SHM_01|ALERT=|TECHNICAL_SCENARIO=T_SYS_MON|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false

Period : Last 2 weeks|Day

- Use the transaction LISTCUBE

-  Choose time range and System ID

- Click on Execute button

2- For the granularity Hour: Alert Search

Query:

/STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Test|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter|CONTEXT_ID=SHM110~ABAP~frncelhsm_SHM_01|ALERT=|TECHNICAL_SCENARIO=T_SYS_MON|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false

Period : Custom: 04/07/2018|Hour

 We will check the displayed data by the OCC Dashboard with the Alert Inbox and we have to select a value for Managed Object field.

SAP Solution Manager →  Technical Monitoring →  Alert Inbox →  Alert Search      

5.2 Current number of alerts :

To validate the Current number of alerts, we have to use 2 different methods:

• Without Duration
• With Duration

5.2.1  Current number of alerts without Duration:

The applied filters on this test case are mentioned in those screenshots:

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Current|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter_Cur|CONTEXT_ID=

|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false

PS: The Current alerts number metric returns the current alert open.

The result returned by the Alert Inbox is:

PS: We count only the Alerts having current rating status red or yellow.

For checking those results, we have to select each alert apart to get its details.

5.2.2  Current number of alerts with Duration:

The returned results by the OCC Dashboard will be compared to the results returned by the Alert Inbox.

Sm_workcenter (transaction) à System and Application Monitoring à Alert Inbox

The applied filters on this test case are mentioned in those screenshots:

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Current|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter_Cur|CONTEXT_ID=OTO~ABAP|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=Day|Threshold_value=1 |processor=|display_value=false

Renderer = DYNAMIC_TABLE

PS: In this case, the returned result will show the alerts of the specified managed object that has a duration (Duration= END_TIME - START_TIME) equal or greater than 1 Day.

The result returned by the Alert Inbox is:

5.3 Average alert Processing duration (min) :

To validate the Average Alert Processing duration, we have to use 2 different sources :

• For the granularity Day or Superior :  From infocube 0SMALMMP1
• For the granularity Hour: Alert Search

1-  For the granularity Day or Superior : From infocube 0SMALMMP1

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Average Duration|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Duration AVG|CONTEXT_ID=OFT~ABAP~ldcioft_OFT_78|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=

Period: This month/ Day

- Use the transaction LISTCUBE and enter the infoprovider 0SMALMMP1

-  Choose the right filter parameters:

- Click on Execute button

We can calculate the average duration of the alert : (Total Alert Duration in second / 60) / Number of Alert Groups

Average Duration= (3206 / 60) / 36 = 1.48 min

2-  For the granularity Hour : From Alert Search

Query : /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Average Duration|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Duration AVG|CONTEXT_ID=OFT~ABAP~ldcioft_OFT_78|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=

Period : Today/Hour

We will check the displayed data by the OCC Dashboard with the Alert Inbox ; and we have to select a value for Managed Object field.

sm_workcenter  →  System and Application Monitoring  → Alert Search

 5.4 Number of manual incidents created

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Number |OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=NBR_INCIDENT|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=

Time Range: Last week/Day

Find the alert groups with manual incident created on selected period

- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG

- Click on "Table Contents" then choose the appropriate filter: ACTION_ID=INC_MAN

- Click on Execute Button

=> We have 7 manual incidents created on the 01/08/2018

5.5 Number of alerts confirmed by operator

Period: Last Month|Month

• Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG

Click on "Table Contents" then choose the appropriate filters:

•  ACTION_ID = CONF_AL
• PERFORMED_AT :  Last Month|Month in UTC

• ALERTTYPE_ID 

Click on “Number of Entries”

1.       Use the transaction SE16 for browsing data in table E2EA_ALERTCONF

2.       Click on "Table Contents" then choose the appropriate filter:

•      Copy all the CONTEXT_ID from E2EA_ACTIONLOG and paste them in CONTEXT_ID
•      Copy all the ALERTTYPE_ID from E2EA_ACTIONLOG and paste them in ALERTTYPE_ID
•      Copy all the PERFORMED_AT from E2EA_ACTIONLOG and paste them in CONFIRMED_AT

3.    Click on ‘Number of Entries’

5.6 Average time from Alert is opened till manual incident is created (min)

Query:/STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Query 0|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=MAX_INCIDENT|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false

Period: This week/Day

Step 1: Find alert groups with manual incident created on the selected period

- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG

- Click on "Table Contents" then choose the appropriate filter: ACTION_ID=INC_MAN

- Click on execute button

=> 2 alert groups with manual incident are created on the 08/08/2018

Step 2: Get the start time of the alert group in the table E2EA_ALERTCONF

- Use the Table E2EA_ALERTCONF

- In the field Group_ID use the option "Multiple selection" then enter the group_Ids that you have already found then click on execute button

=> The alert groups are not yet confirmed

Step 3: Get the start time of the alert group from the table E2EA_ALERTGROUP (if the alert group is not confirmed).

- Use the Table E2EA_ALERTGROUP

- In the field ALGroup_ID use the option "Multiple selection" then enter the group_Ids that you have already found then click on execute button

Step 4: Calculate the duration between the start time and the creation of the manual incident of an alert group

Step 5: Calculate the average time from alert is opened till manual incident is created

Average Time= Sum of duration /number of alert groups with manual incidents=(640+693) /2 = 666.5 min

5.7 Maximum time from Alert is opened till manual incident is created (min)

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Max Time|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=MAX_INCIDENT|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false

Time Range: This week/Day

To validate this metric we use the same steps are previous section:

Step 1: Find alert groups with manual incident created on the selected period

Step 2: Get the start time of the alert group in the table E2EA_ALERTCONF

Step 3: Get the start time of the alert group from the table E2EA_ALERTGROUP (if the alert group is not confirmed).

Step 4: Calculate the duration between the start time and the creation of the manual incident of an alert group

Step 5: Calculate the Maximum time from alert is opened till the creation of the manual incident

Maximum Time= Max (durations) = 693 min

5.8 Average time from Alert is opened till confirmed by Operator (min)

Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Average|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=AVG_CONFIRMED|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false

Time Range: This week/day

Step 1: Find the confirmed alert groups

- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG

- Click on "Table Contents" then choose the appropriate filter: ACTION_ID=CONFIRM

Step 2: Find the confirmed alert types

- Use the Table E2EA_ACTIONLOG

- Choose ACTION_ID=CONF_AL

=> No alert types where confirmed on 08/08/2018

Step 3: Find the alertgroup related to the alert types confirmed on Specific Date in the table E2EA_ALERTCONF.

=> In this example we found no alert types

Step 4: Select the found alert groups in the table E2EA_ALERTCONF

Step 5: Calculate the duration between the start and the confirmation of the alert groups