Skip to main content

Insights summary

Moogsoft Cloud Insights Summary provides a high-level performance summary of your Moogsoft Cloud instance. The Summary views show the state of what’s going on in your Moogsoft Cloud instance and trends that occur over specified time ranges. You can view summaries for the previous day, previous week, or previous month.These insights can be of value when you need an overview or an analytical look at data to:

  • Track your systems activity to meet your agreements, such as system uptime.

  • Know your aggregate incident close rate over time, both automatic and manual. This can help you understand your staffing, tooling, or productivity needs.

  • See data trends showing the difference in magnitude between events, alerts, and incidents over time.

  • Explore correlation trends to see spikes or dips at a specific time and whether they are sustained over time. You can use the insights gained to adjust, for example, your correlation engine configuration.

To see the Insights Summary view, in your Moogsoft Cloud instance, navigate to Insights > Insights Summary.

Moogsoft Cloud Insights Summary shows how the product works at a high-level so you can see metrics and trends over time. For real-time information, you can go to the  Moogsoft Cloud Insights > Dashboard view and directly track the numbers.

Note

The Insights Summary requires alert information to provide useful values. If you have no alerts, the rollup view will not display values.

View your Moogsoft Cloud Insights Summary

To view the Moogsoft Cloud Insights Summary dashboard:

  1. Log into your Moogsoft Cloud instance.

  2. Click the Insights piechart icon in the left navigation bar and click Summary, to see a visual display of values and trend charts.

Each value or trend chart features an info icon  that provides key information or additional details about that metric or trend.

Set the time range for your Insights

To set the time range for your insights Summary, click the drop-down menu in the upper right of the Summary UI page. Your choices are:

  • Yesterday - shows metrics from the last 24 hours.

  • Last Week - shows metrics from the last 7 days. This is the default setting.

  • Last Month - shows metrics from the last 30 days.

For the Insights Summary view, the product fetches data at midnight UTC time. For this reason, clicking the refresh button does not change the data, unless you happen to click refresh at midnight UTC. Also, the information is based on your data sources and time frame, if you only have two days of data, the view shows numbers only for the last two days of information even if you select Last Month. The display does not show real-time data.

Time is calculated based on the Universal Time Coordinated (UTC) standard, formerly known as GMT.

Summary

The insights Summary UI page gives you a high-level overview of activity for your data sources. Metrics can appear with negative values based on how they are calculated.

The insights Summary displays the following types of information:

  • Events – Total number of events ingested.

  • Alerts – Total number of alerts created, from events or metrics using  Moogsoft Cloud Deduplication.

  • Incidents – Total number of incidents created, using Moogsoft Cloud Correlation.

  • MTTR (Mean Time to Resolve) – The average time (minutes) to close incidents over the time window. Only incidents that were closed over the time window are considered in this average. The calculation is made from the time an incident was opened to the time it was closed, whether closed manually or automatically at a specified time. The metric does not include resolved incidents, only closed incidents. Based on the configuration, MTTR times can vary significantly by instance.

  • Events Deduplicated – The percentage of events that Moogsoft Cloud identified as duplicates and grouped into alerts. A high percentage means that Moogsoft Cloud ingested a lot of duplicate events. Deduplication percentages are calculated at 1 minus alerts divided by events.

  • Alerts Correlated – The percentage of alerts that Moogsoft Cloud correlated into one or more incidents. A high percentage means that most alerts were correlated and that there were few “stand-alone” alerts with no correlations.

    • Correlation rates are calculated at one minus incidents divided by alerts. This rate may appear as a negative value.

    • The correlation rate can go into a negative range, if you configure your correlation definition such that an alert ends up in multiple incidents and the number of incidents is higher than the number of alerts.

  • Noise Reduction –This percentage expresses the ratio of raw events to incidents, which includes both Moogsoft Cloud Deduplication and Correlations. The percentage encompasses the entire pipeline, from events ingested (start) to the final set of incidents (end).

  • Top 10 Managers – The top 10 event generators in your system. These totals include all ingested events before deduplication and noise reduction. Event generators are your data sources such as the Moogsoft Cloud collector, collector plugins and integrations with tools such as AppDynamics, Datadog, Splunk, and others.

Note

You can view multiple types of data sources from one Manager by mapping your Source fields to the Manager field during ingestion or enrichment.