Customize RCA settings
Modify default settings that determine RCA behavior.
Before you begin
Role required: evt_mgmt_admin
About this task
Default filter settings control which change requests RCA considers as possible root causes. You may want to change certain default settings, for example to make RCA ignore standard change requests.
You can also change the number of probable root causes shown in the list. By default, the list shows the five probable root causes with the highest root cause score.
By default the RCA calculation is enabled. You can disable it by changing the default sa_analytics.disable_prc value to True.
Procedure
Navigate to All > System Properties > All Properties.
Do one or both of the following, as needed.
- Change default filter settings:
- Select New.
In the Name field, specify the name of the property for which you want to change the default setting.
The new property must have the same name as the related property in the table.
- Change default filter settings:
| Property | Description | Type | Default value |
|---|---|---|---|
| sa_analytics.rca.filter_category | The categories of change requests that RCA considers as possible root cause. | string | " " |
| sa_analytics.rca.filter_type | The types of change requests that RCA considers as possible root cause. | string | "standard,normal,emergency" |
| sa_analytics.rca.filter_state | The state of change requests that RCA considers as possible root cause. | string | "-1,0,3,7,8,157"- Implement: -1 - Review: 0 - Closed: 3,7,8,157 |
| sa\_analytics.rca.filter\_interval\_in\_hour | The time frame, in hours, during which change requests occurred that RCA considers as possible root cause. | int | 168 |
| sa\_analytics.rca\_use\_legacy\_query | Use legacy queries for RCA calculation. | Boolean | True |
| sa\_analytics.rca.get\_tasks\_for\_impacted\_cis | Includes change requests for impacted services in the RCA list. | Boolean | True |
| sa\_analytics.rca\_scoring\_by\_alert\_proximity | Enables sorting of RCAs by time proximity to the alert. | Boolean | True |
| sa\_analytics.rca\_cmdb\_relations\_levels | Number of hops to search related configuration items. | int | 1 |
| sa\_analytics.rca\_time\_filtering\_by\_planned\_time | Enables filtering of change requests by planned time. | Boolean | True |
| sa\_analytics.rca\_time\_filtering\_by\_actual\_start\_time | Enables filtering of change requests by implementation time. | Boolean | True |
| sa\_analytics.rca.upper\_filter\_interval\_in\_hours | Determines the time upper bound for change requests filtering. | int | 1 |
| sa\_analytics.rca.order\_by\_scoring\_for\_virtual\_alerts | When calculating RCAs for virtual alert – order the records by scoring of PRCs of the corresponding secondaries. | Boolean | True |
| sa\_analytics.rca\_same\_reasoning\_use\_newer | When 2 PRCs have the same reasoning, prioritize the one with the most recent change request during scoring calculations. | Boolean | True |
| sa\_analytics.rca.prefer\_cr\_on\_app\_service | In case there is the same change request on application service and on CI, prefer the one from application service. | Boolean | False |
3. Enter a valid value for the property.
**Note:** The value you set for the new property overrides the default value for the related property.
- Change the maximum number of probable root causes shown in the list:
1. Find the property **sa\_analytics.rca\_task\_table\_max\_records**.
|Property name|Description|Type|Default value|
|-------------|-----------|----|-------------|
|**sa\_analytics.rca\_task\_table\_max\_records**|The maximum number of probable root causes shown in the Probable root causes list.|int|5|
2. Replace the default value with a new valid value.
- Disable RCA by creating the **sa\_analytics.disable\_prc** property.
1. Select **New**.
2. Fill in the form with the following values.
|Property name|Description|Type|Value|
|-------------|-----------|----|-----|
|**sa\_analytics.disable\_prc**|Disabling the Probable root cause.|Boolean|True|
- Click Submit.
Parent Topic:Probable Root Cause Analysis (RCA)