D.2 Causal Engine concept

Causal Engine uses the following sequential approach to incident generation:

1. Formally define the root-cause problems and symptoms.

2. Perform analysis by relating symptoms to root-cause problems using the behavioral and object models. Symptoms come from two sources:

   • State Poller, where the symptoms are state changes

   • Events, where the symptoms are traps

3. Generate conclusions that relate to the root causes.

   Causal Engine conclusions include the artifacts related to the model, which include the following details:

   • Generated incidents

   • Correlated incidents

   • Suppressed incidents

   • Canceled incidents

   • Status on relevant objects

To Page Top