Examples of root cause analysis

These examples show how the RCA process performs root cause analysis based on consideration of different types of network devices and interfaces. The examples are for illustrative purposes only and are meant to show only the principles that RCA uses. RCA in larger networks is more complex.

The root cause analysis system suppresses events on entities based on the following hierarchy: of suppression:
  1. Same entity suppression.
  2. Contained suppression
  3. Isolated suppression
  4. Connected suppression
For example, if an event is suppressed by another event on the same entity then that event cannot be contained-suppressed, isolated-suppressed or connected-suppressed. Similarly, if an event on an interface is suppressed by an event on the containing device, then that event cannot be isolated-suppressed or connected-suppressed.
The colors shown in the diagrams match the following event colors in the Event Viewer:
  • Red: root-cause event.
  • Purple: symptom (suppressed) event.