D.2 Causal Engine concept
Causal Engine uses the following sequential approach to incident generation:
Formally define the root-cause problems and symptoms.
Perform analysis by relating symptoms to root-cause problems using the behavioral and object models. Symptoms come from two sources:
State Poller, where the symptoms are state changes
Events, where the symptoms are traps
Generate conclusions that relate to the root causes.
Causal Engine conclusions include the artifacts related to the model, which include the following details:
Generated incidents
Correlated incidents
Suppressed incidents
Canceled incidents
Status on relevant objects