Learned patterns report

The Learned Patterns report helps assess the efficiency of alert aggregation and identify recurring alert patterns. It enables proactive issue resolution, enhancing overall system performance by providing insights into frequent alerts.

Navigating and sorting the report

To access the Learned Patterns report, navigate to Event Management > Reporting > Learned Patterns.

Sorting Options: You can sort patterns by Pattern Score, Frequency, and Size to prioritize which alerts to address first.

Metrics and data in the report

The report displays key metrics associated with learned patterns, including:

• Frequency: The occurrence count of pattern identifier attributes (CI/MetricName).
• Pattern Identifier Attributes: Describes how alert grouping combines relevant pattern attributes to create a learned pattern. These patterns can reappear across multiple alerts, often indicating the same underlying issue.
• Presentation Format: Metrics are shown in a table format, organized by learned patterns.

This report allows you to:

• Focus on Higher Frequency Alerts: Allocate resources to higher-frequency alerts to expedite the resolution of numerous alerts.
• Target Larger Patterns with Lower Frequency: Allocate resources to larger learned patterns with lower frequency for targeted analysis.

Pattern group details and identifier attributes

• Expand a pattern group to display details about all the identifier attributes that are associated with the pattern.
• Sort the entries within each pattern by Configuration Item and Feature Identifier.