Actionability metric generation for events
Methods, systems, and computer program products are provided for generating an actionability measure for events occurring in a computing environment. A data retriever is configured to receive, in an event management system, an event indication generated in the computing environment regarding an event. In implementations, the event indication includes characteristics relating to the generation of the event. An actionability measure generator is configured to analyze the characteristics relating to the generation of the event. The actionability measure generator generates an actionability measure for the event indication based at least on the analysis of the characteristics, where the actionability measure defines an action level for the event indication. An automated action executor executes an action in the event management system for changing a state of the event indication that is dependent on the generated actionability measure.
1. A system for generating an actionability measure for events occurring in a computing environment, comprising:
at least one processor circuit; and
at least one memory that stores program code configured to be executed by the at least one processor circuit, the program code comprising:
a data retriever configured to receive, in an event management system, an event indication regarding an event generated in the computing environment, the event indication including characteristics relating to the generation of the event;
an actionability measure generator configured to:
analyze the characteristics, and
generate an actionability measure for the event indication based at least on the analysis of the characteristics, the actionability measure defining an action level for the event indication; and
an automated action executor configured to execute an action in the event management system for changing a state of the event indication that is dependent on the generated actionability measure.
2. The system of claim 1 , wherein the actionability measure comprises one of a plurality of values between a minimum actionability measure and a maximum actionability measure.
3. The system of claim 1 , wherein the actionability measure generator is configured to:
identify a previously resolved event indication that is similar to the event indication; and
generate the actionability measure based at least on an analysis of characteristics relating to a resolution of the previously resolved event indication and the analysis of the characteristics relating to the generation of the event indication.
4. The system of claim 3 , wherein the actionability measure generator is configured to generate the actionability measure by assigning different weights to the analysis of the characteristics relating to the resolution of the previously resolved event indication and the analysis of the characteristics relating to the generation of the event indication.
5. The system of claim 3 , wherein the characteristics relating to the resolution of the previously resolved event indication comprise an identification of a resolution action for the previously resolved event indication.
6. The system of claim 1 , wherein the executed action comprises automatically mitigating the event indication.
7. The system of claim 1 , wherein the automated action executor is configured to: select one of a plurality of notification types for the event indication, the selection of the notification type dependent on the generated actionability measure.
8. The system of claim 1 , wherein the automated action executor is further configured to:
execute the action at a time that is based on the generated actionability measure.
9. A method for generating an actionability measure for events occurring in a computing environment, comprising:
receiving, in an event management system, an event indication regarding an event generated in the computing environment, the event indication including characteristics relating to the generation of the event;
analyzing the characteristics;
generating an actionability measure for the event indication based at least on the analysis of the characteristics, the actionability measure defining an action level for the event indication; and
executing an action in the event management system for changing a state of the event indication that is dependent on the generated actionability measure.
10. The method of claim 9 , wherein the actionability measure comprises one of a plurality of values between a minimum actionability measure and a maximum actionability measure.
11. The method of claim 9 , further comprising:
identifying a previously resolved event indication that is similar to the event indication; and
generating the actionability measure based at least on an analysis of characteristics relating to a resolution of the previously resolved event indication and the analysis of the characteristics relating to the generation of the event indication.
12. The method of claim 11 , wherein the generating the actionability measure comprises:
assigning different weights to the analysis of the characteristics relating to the resolution of the previously resolved event indication and the analysis of the characteristics relating to the generation of the event indication.
13. The method of claim 11 , wherein the characteristics relating to the resolution of the previously resolved event indication comprise an identification of a resolution action for the previously resolved event indication.
14. The method of claim 9 , wherein the executed action comprises automatically mitigating the event indication.
15. The method of claim 9 , wherein the executing the action comprises:
selecting one of a plurality of notification types for the event indication, the selection of the notification type dependent on the generated actionability measure.
16. The method of claim 9 , wherein the executing the action comprises: executing the action at a time that is based on the generated actionability measure.
17. A computer-readable storage medium having program instructions recorded thereon that, when executed by at least one processor of a computing device, perform a method, the method comprising:
receiving, in an event management system, an event indication regarding an event generated in the computing environment, the event indication including characteristics relating to the generation of the event;
analyzing the characteristics;
generating an actionability measure for the event indication based at least on the analysis of the characteristics, the actionability measure defining an action level for the event indication; and
executing an action in the event management system for changing a state of the event indication that is dependent on the generated actionability measure.
18. The computer-readable storage medium of claim 17 , wherein the method further comprises:
identifying a previously resolved event indication that is similar to the event indication; and
generating the actionability measure based at least on an analysis of characteristics relating to a resolution of the previously resolved event indication and the analysis of the characteristics relating to the generation of the event indication.
19. The computer-readable storage medium of claim 18 , wherein the generating the actionability measure comprises:
assigning different weights to the analysis of the characteristics relating to the resolution of the previously resolved event indication and the analysis of the characteristics relating to the generation of the event indication.
20. The computer-readable storage medium of claim 17 , wherein the executing the action comprises:
selecting one of a plurality of notification types for the event indication, the selection of the notification type dependent on the generated actionability measure.