Viewing multiple metrics on the metric anomaly chart

Procedure

Two methods are available to view the Related alerts table. Use the Alert viewer or the Incident viewer.

• To access from Alert viewer

  1. In the Alerts tab, open the side panel that contains the metric anomaly details. If multiple alerts are grouped or in an Incident, they are shown in the Related Alerts table. For more information, see Viewing metric anomaly details.

  2. Click the View expanded chart link beneath the chart.

  3. In the expanded view, any alerts (metric and nonmetric) related to the selected alert are listed in the Related Alerts table.

• To access from Incident viewer

  1. In Incidents and alerts, click the Incidents tab.

  2. For the Incident metric you want to investigate, hover over the text in the Title column and click the link.

  3. The Incidents Overview page opens. Click a metric anomaly in the Probable cause alerts or Top alerts (when probable cause ranking is not available) column and the metric anomaly chart opens.

     

  4. Click to open the chart in its own window.

  5. If related alerts are present, they are listed in the Related alerts table. Depending on your screen size, you might have to scroll down to view this table.

Related alerts table

Use the checkboxes in this table to enable or disable Key Performance Indicators (KPIs) on the chart.

Note: A KPI is made up of a resource, which is a physical entity such as a network interface card, and a metric. For example, if a server has 2 network interface cards and you want to analyse data for 10 metrics on each network card in the server, the total number of KPIs is 20. KPIs are often interchangeably referred to as metrics, so a metric can sometimes refer to a measurement that is taken for a type of device - for example CPU_Context_Switches, and sometimes it can refer to an instance of that metric - for example CPU_Context_Switches on server ABC.acme.com.

The checkbox of the main KPI is enabled by default and cannot be deselected. The Baseline radio button is also selected by default, but it can be deselected by clicking the radio button (circle icon) of another KPI.

Up to 4 KPIs from the Related alerts table can appear on the timeseries chart at the same time.

Note: You cannot apply multiple baselines to a chart. Only one baseline can appear at any one time.

Tooltip: Hover the cursor over any part of a time-series graph to view tooltip information that is related to multiple anomalies at a particular point in time.

First occurrence

When a nonmetric alert is selected on the Related Alerts table, a blue vertical line or bar can display, if it is in the same timeline as the metric data displayed. The line indicates the first occurrence of this alert in the selected time period.

Additional metrics

To find and add up to 3 more KPIs to the chart, do the following.

1. Click the Additional metrics tab.
2. Find a particular metric by selecting an available value from each field, Metric group, Metric, and Resource.
3. When selection is complete, the KPI is added to the chart.

To modify a selection, remove the current item by clicking in the Metric group, Metric, or Resource fields. Then, click inside the empty field and a drop-down displays all available items for that field.

To delete a KPI, click in the Metric group field or the icon.

Note: Entering part of a string in a field filters the drop-down menu so that it displays only the items that contain that element. In the following example, in the Resource field, entering 02 brings up all resources that contain the string 02.

Normalization

The different scales of different metrics can make it difficult to compare them when viewing absolute values together. For example, some metrics can have values of less than 100, while others can have values of more than 10 million. Normalization is used to accommodate comparison, so the scale-bar for the y-axis is not shown. To view absolute values of a metric, uncheck selected metrics until all remaining metric time-series are on the same scale, with the y-axis visible.

Note: If a tooltip is applied to the chart, the absolute value displays, not the normalized value.