1. Objectives
This article explains how to use the OCC MAI_ALERTING data provider.
2. Supported Renderers
The MAI Alerting data provider supports this following renderers:
- Line chart
- Area chart
- Column chart
- Bar Chart
- Line Column
- SLR renderer
- Dynamic table
Here is an example for the Dynamic Table renderer:
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Test|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter_Cur|CONTEXT_ID=OTO~ABAP|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=
When clicking on the link, a window to the Alert Inbox is displayed :
3. Metrics Description
Here is a table explaining all possible attributes for the metrics:
Attributes | Description | Default Value |
KPI | The metrics list:
| Number of alerts created |
Managed Object | The Managed Object of the Alert : system, instance, database,... | ALL |
Alert Name | Name of the alert | ALL |
Technical Scenario | The list of the Technical Scenario : Advanced Monitoring, Business Process Monitoring, Connection Monitoring, Early Watch Alerts Integration,... | ALL |
Managed Object Type | The Managed Object type : database, host, job, robot, script, technical component, technical instance, technical system,... | ALL |
Category | The category of the alert : Availability, Configuration, Exceptions and Performance | ALL |
Rating | The rating of the alert : Yellow or Red | ALL |
With Incident | to indicates that an incident attached to the alert. (Yes/No) | ALL |
Severity | The severity of the alert : 1, 2, 3, 4, 5, 6, 7, 8, and 9. | ALL |
Threshold Unit | The unit of the threshold : Minute, Hour and Day | ALL |
Threshold Value | The value of the threshold : 1,2,3...60 | ALL |
With Processor | to indicates that a processor attached to the alert (Yes/No). | ALL |
4. Attributes Description
The DP for MAI Alerting has 4 tabs for attributes:
- KPI
- Filters
- Options
- Duration
4.1 KPI Tab
To add a MAI Alerting data provider in a gadget:
- Select data provider /STDF/DP_MAI_Alerting
- Select a KPI
Number of alerts created : Number of new alerts created during the time period.
Current number of alerts : Current number of open alerts in the alert inbox during the requested time period.
Average alert processing duration (min): Average processing time (in minutes) of open alerts in the alert inbox during the requested time period.
Average time from Alert is opened till confirmed by Operator (Min): Average time (in minutes) between the alert is opened (i.e. created by the system) until the alert is closed manually by the operator
Number of alerts confirmed by Operator: Number of alerts closed by operator
Maximum time from Alert is opened till confirmed by Operator (Min): Maximum time (in minutes) between the alert is opened (i.e. created by the system) until the alert is closed manually by the operator
Average time from Alert is opened till manual Incident is created (Min): Average time in minutes between the alert is opened (i.e. created by the system) until the operator open an incident for this alert
Number of manual Incidents created: Number of incidents opened by operator
Maximum time from Alert is opened till manual Incident is created (Min): Maximum time in minutes between the alert is opened (i.e. created by the system) until the operator open an incident for this alert.
4.2 Filters tab
The Filters Tab displays 3 columns:
- Managed Object (1): select a Managed Object .
- Alert Name (2) : select a specific Alert Name from the list.
- Technical Scenario (3): select a specific Technical Scenario from the list.
4.3 Options tab
The Options Tab displays 5 columns:
- Managed Object Type: To select the Type for the Managed Object .
- Category: To select the category for the chosen alert.
- Rating: It can be: Yellow or Red.
- With Incident: To indicate that an incident is attached to the alert.
- Severity: To select the Severity of the incidents.
4.4 Duration tab
The Options Tab displays 3 columns:
- Threshold Unit : To select Unit of the Threshold.
- Threshold Value: To select Unit of the Threshold.
- With processor: To indicate if a processor is attached to the alert.
5. How to validate
5.1 Number of alerts created:
To validate the Number of alerts created, we have to use 2 different sources :
- For the granularity Day or Superior : From infocube 0SMALMMP1
- For the granularity Hour: Alert Search
1- For the granularity Day or Superior :From infocube 0SMALMMP1
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Test|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter|CONTEXT_ID=SHM110~ABAP~frncelhsm_SHM_01|ALERT=|TECHNICAL_SCENARIO=T_SYS_MON|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false
Period : Last 2 weeks|Day
- Use the transaction LISTCUBE
- Choose time range and System ID
- Click on Execute button
2- For the granularity Hour: Alert Search
Query:
/STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Test|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter|CONTEXT_ID=SHM110~ABAP~frncelhsm_SHM_01|ALERT=|TECHNICAL_SCENARIO=T_SYS_MON|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false
Period : Custom: 04/07/2018|Hour
We will check the displayed data by the OCC Dashboard with the Alert Inbox and we have to select a value for Managed Object field.
SAP Solution Manager → Technical Monitoring → Alert Inbox → Alert Search
5.2 Current number of alerts :
To validate the Current number of alerts, we have to use 2 different methods:
- Without Duration
- With Duration
5.2.1 Current number of alerts without Duration:
The applied filters on this test case are mentioned in those screenshots:
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Current|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter_Cur|CONTEXT_ID=
|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false
PS: The Current alerts number metric returns the current alert open.
The result returned by the Alert Inbox is:
PS: We count only the Alerts having current rating status red or yellow.
For checking those results, we have to select each alert apart to get its details.
5.2.2 Current number of alerts with Duration:
The returned results by the OCC Dashboard will be compared to the results returned by the Alert Inbox.
Sm_workcenter (transaction) à System and Application Monitoring à Alert Inbox
The applied filters on this test case are mentioned in those screenshots:
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Current|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Counter_Cur|CONTEXT_ID=OTO~ABAP|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=Day|Threshold_value=1 |processor=|display_value=false
Renderer = DYNAMIC_TABLE
PS: In this case, the returned result will show the alerts of the specified managed object that has a duration (Duration= END_TIME - START_TIME) equal or greater than 1 Day.
The result returned by the Alert Inbox is:
5.3 Average alert Processing duration (min) :
To validate the Average Alert Processing duration, we have to use 2 different sources :
- For the granularity Day or Superior : From infocube 0SMALMMP1
- For the granularity Hour: Alert Search
1- For the granularity Day or Superior : From infocube 0SMALMMP1
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Average Duration|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Duration AVG|CONTEXT_ID=OFT~ABAP~ldcioft_OFT_78|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=
Period: This month/ Day
- Use the transaction LISTCUBE and enter the infoprovider 0SMALMMP1
- Choose the right filter parameters:
- Click on Execute button
We can calculate the average duration of the alert : (Total Alert Duration in second / 60) / Number of Alert Groups
Average Duration= (3206 / 60) / 36 = 1.48 min
2- For the granularity Hour : From Alert Search
Query : /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Average Duration|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=Duration AVG|CONTEXT_ID=OFT~ABAP~ldcioft_OFT_78|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=3|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=
Period : Today/Hour
We will check the displayed data by the OCC Dashboard with the Alert Inbox ; and we have to select a value for Managed Object field.
sm_workcenter → System and Application Monitoring → Alert Search
5.4 Number of manual incidents created
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Number |OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=NBR_INCIDENT|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=
Time Range: Last week/Day
Find the alert groups with manual incident created on selected period
- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG
- Click on "Table Contents" then choose the appropriate filter: ACTION_ID=INC_MAN
- Click on Execute Button
=> We have 7 manual incidents created on the 01/08/2018
5.5 Number of alerts confirmed by operator
Period: Last Month|Month
- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG
Click on "Table Contents" then choose the appropriate filters:
- ACTION_ID = CONF_AL
- PERFORMED_AT : Last Month|Month in UTC
- ALERTTYPE_ID
Click on “Number of Entries”
1. Use the transaction SE16 for browsing data in table E2EA_ALERTCONF
2. Click on "Table Contents" then choose the appropriate filter:
- Copy all the CONTEXT_ID from E2EA_ACTIONLOG and paste them in CONTEXT_ID
- Copy all the ALERTTYPE_ID from E2EA_ACTIONLOG and paste them in ALERTTYPE_ID
- Copy all the PERFORMED_AT from E2EA_ACTIONLOG and paste them in CONFIRMED_AT
3. Click on ‘Number of Entries’
5.6 Average time from Alert is opened till manual incident is created (min)
Query:/STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Query 0|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=MAX_INCIDENT|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false
Period: This week/Day
Step 1: Find alert groups with manual incident created on the selected period
- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG
- Click on "Table Contents" then choose the appropriate filter: ACTION_ID=INC_MAN
- Click on execute button
=> 2 alert groups with manual incident are created on the 08/08/2018
Step 2: Get the start time of the alert group in the table E2EA_ALERTCONF
- Use the Table E2EA_ALERTCONF
- In the field Group_ID use the option "Multiple selection" then enter the group_Ids that you have already found then click on execute button
=> The alert groups are not yet confirmed
Step 3: Get the start time of the alert group from the table E2EA_ALERTGROUP (if the alert group is not confirmed).
- Use the Table E2EA_ALERTGROUP
- In the field ALGroup_ID use the option "Multiple selection" then enter the group_Ids that you have already found then click on execute button
Step 4: Calculate the duration between the start time and the creation of the manual incident of an alert group
Alert Group 1 | Alert Group 2 | |
Start Time | 20.180.807.221.201 | 20.180.807.230.154 |
Incident Creation time | 20.180.808.094.443 | 20.180.808.094.146 |
Duration (min) | 693 | 640 |
Step 5: Calculate the average time from alert is opened till manual incident is created
Average Time= Sum of duration /number of alert groups with manual incidents=(640+693) /2 = 666.5 min
5.7 Maximum time from Alert is opened till manual incident is created (min)
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Max Time|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=MAX_INCIDENT|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false
Time Range: This week/Day
To validate this metric we use the same steps are previous section:
Step 1: Find alert groups with manual incident created on the selected period
Step 2: Get the start time of the alert group in the table E2EA_ALERTCONF
Step 3: Get the start time of the alert group from the table E2EA_ALERTGROUP (if the alert group is not confirmed).
Step 4: Calculate the duration between the start time and the creation of the manual incident of an alert group
Step 5: Calculate the Maximum time from alert is opened till the creation of the manual incident
Maximum Time= Max (durations) = 693 min
5.8 Average time from Alert is opened till confirmed by Operator (min)
Query: /STDF/DP_MAI_ALERTING:COLOR=#1f77b4|legend=Average|OCC_JUMP_IN=|SLA=|TREND=|G2Y=|Y2R=|COLOR_RATING=|DISPLAY_ATTRIBUTES=|visible=true|KPI=AVG_CONFIRMED|CONTEXT_ID=|ALERT=|TECHNICAL_SCENARIO=|CONTEXT_TYPE=|CATEGORY=|RATING=|Incident=|SEVERITY=|Threshold_unit=|Threshold_value=|processor=|display_value=false
Time Range: This week/day
Step 1: Find the confirmed alert groups
- Use the transaction SE16 for browsing data in table E2EA_ACTIONLOG
- Click on "Table Contents" then choose the appropriate filter: ACTION_ID=CONFIRM
Step 2: Find the confirmed alert types
- Use the Table E2EA_ACTIONLOG
- Choose ACTION_ID=CONF_AL
=> No alert types where confirmed on 08/08/2018
Step 3: Find the alertgroup related to the alert types confirmed on Specific Date in the table E2EA_ALERTCONF.
=> In this example we found no alert types
Step 4: Select the found alert groups in the table E2EA_ALERTCONF
Step 5: Calculate the duration between the start and the confirmation of the alert groups