Reporting Data Tables

Analytics reporting data tables are used for report metrics and data relationships.

👍

Unified Analytics

The new improved Unified Analytics feature is coming soon! With improved visualizations and customizable options, Unified Analytics will help you see the metrics you need to monitor and improve your IT Operations.

See the Unified Analytics documentation for more information on features and improvements, or reach out to us at [email protected] to learn about the rollout.

BigPanda Reporting will be deprecated following the migration to Unified Analytics.

BigPanda Analytics uses a transformed data table for report metrics and data relationships. This data table may have been adjusted to fit the custom tags of your organization.

560560

Sisense Data Tables Relationships

Table Joins

Tables join using specific table fields

Local TableColumnForeign TableColumnRelation Type
Incidents (Dim)incident_idIncident Activities (Fact)incident_idOne to Many
Incidents (Dim)incident_idEntities (Alerts Dim)incident_idOne to Many
Incidents (Dim)incident_idIncident Metrics (Fact)incident_idOne to Many
Incident Activities (Fact)user_idIncident Activities Users (Dim)creator_user_idMany to One
Entities (Alerts Dim)entity_idEntity Tags (Fact)entity_idOne to Many
Entity Tags (Fact)normalized_host, normalized_checkMean Time Between Failures (Fact)normalized_host, normalized_checkOne to Many

🚧

The Mean Time Between Failures table provides aggregated metrics on the frequency of alerts at the Host/Check level for ease of reporting in the Mean Time Between Failures widget. For details on TTx metrics (assign, detect, resolve) for individual incidents, refer to the Incident Metrics table instead.

Entities (Alerts Dim)

Each entity is a single aggregated alert in BigPanda. Each entity appears as its own row in the BigPanda timeline view. If incidents are merged, the incident id will be updated to the destination incident id for all merged entities.

Column NameDescriptionData TypeNotes
entity_id The unique identifier of the entityString
incident_idThe unique identifier of the incident to which this entity belongsString
source system (system code)The monitor system that sent this alertString
entity start time (epoch)The unix time the alert startedInteger
entity last changed time (epoch)The unix time for the last change made to an alertInteger
entity end time (epoch)The unix time for the resolution of the alertInteger
entity current statusThe current status of the entityStringOk, Critical, or Warning
entity highest severityThe highest status of the entityStringCan be used to find entities there were critical at any point
entity status changes (alerts)The number of times the entity has changed statusIntegerLimited to ~70 events
Changes to the “ok” statuses are not counted
entity start date/time (utc)The date/time that the alert (entity) startedDate/Time
entity start date/time (pst)The date/time that the alert (entity) startedDate/Time
entity start date/time (mst)The date/time that the alert (entity) startedDate/Time
entity start date/time (cst)The date/time that the alert (entity) startedDate/Time
entity start date/time (est)The date/time that the alert (entity) startedDate/Time
entity start date/time (india)The date/time that the alert (entity) startedDate/Time
entity end date/time (utc)The date/time when the alert (entity) resolvedDate/Time
entity end date/time (pst)The date/time when the alert (entity) resolvedDate/Time
entity end date/time (mst)The date/time when the alert (entity) resolvedDate/Time
entity end date/time (cst)The date/time when the alert (entity) resolvedDate/Time
entity end date/time (est)The date/time when the alert (entity) resolvedDate/Time
entity end date/time (india)The date/time when the alert (entity) resolvedDate/Time
source systemThe monitor system that sent the alert (cleaned)String
incident_hyperlinkURL with the org's "All incidents" environment and incident ID splicedStringCan be used used in Tables/Aggregated Tables to provide hyperlinks to the Incident

Entity Tags (Fact)

All tags of an entity with normalized fields

Column NameDescriptionData TypeNotes
entity_idThe unique identifier of the entityString
incident_idThe unique identifier of the incidentString
the tags in BP UIString value of tag, defined by column nameStringEach tag will have its own value column
the tags in BP UIString value of tag, defined by column nameStringEach tag will have its own value column
checkNormalized "check" related fields to a single field for easier reporting breakdownsString
hostNormalized "host" related fields to a single field for easier reporting breakdownsString
search_checkURL with BigPanda search ?query="_normalized_check*"StringCan be used used in Tables/Aggregated Tables to provide hyperlinks to the Universal Search
search_hostURL with BigPanda search ?query="_normalized_host*"StringCan be used used in Tables/Aggregated Tables to provide hyperlinks to the Universal Search

Incident Activities (Fact)

A single action a user performed in BigPanda.

Column NameDescriptionData TypeNotes
activity_idThe unique identifier of the activityString
incident_idThe unique identifier of the incident the action was taken onString
activity type (system code)The type of activityStringformat is incident#ACTION
activity time (epoch)The unix time the action was takenInteger
activity environmentThe name of the environment the activity took place inString
activity commentThe comment that was included with the activityString
shared activity target (system code)The name of the system the related incident was shared toString
flapping_stateWhether or not the related incident is flappingBoolean
activity typeThe type of activity (cleaned)String
assignedIf assigned, shows incident idString
sharedIf shared, shows incident idString
snoozedIf snoozed, shows incident idString
manual resolvedIf manually resolved, shows incident idString
shared time (epoch)Epoch time of the action in the column nameInteger
assigned time (epoch)Epoch time of the action in the column nameInteger
snoozed time (epoch)Epoch time of the action in the column nameInteger
manual resolved time (epoch)Epoch time of the action in the column nameInteger
commented time (epoch)Epoch time of the action in the column nameInteger
incident dispositiondisposition of the Incident e.g. assigned, manual_resolvedString
incident disposition time (epoch)epoch time of the action in the column nameInteger
disposition incident idincident id when dispostion happenedString
incident engagementhow did the user engage with the incident e.g. commented/sharedString
incident engagement time (epoch)epoch time of the action in the column nameInteger
activity time (UTC)Activity Time/DateDate/Time
activity time (PST)Activity Time/DateDate/Time
activity time (MST)Activity Time/DateDate/Time
activity time (CST)Activity Time/DateDate/Time
activity time (EST)Activity Time/DateDate/Time
activity time (India)Activity Time/DateDate/Time

Incident Metrics (Fact)

Pre-aggregated metric totals for Time to Assign / Detect / Resolve (TTA, TTD, and TTR)

Column NameDescriptionData TypeNotes
incident_idThe unique identifier of the incidentString
incident start time (epoch)The unix time the incident startedInteger
time to assign (mins)number of minutes to assign the incidentInteger
time to detect (mins)number of minutes to detect the incidentInteger
incident time to resolve (mins)number of minutes to resolve the incidentInteger

Incidents (Dim)

A single BigPanda incident

Column NameDefinitionData TypeNotes
incident_idThe unique identifier of the incidentString
incident start time (epoch)The unix time the incident startedInteger
incident last changed time (epoch)The unix time for the last status changeInteger
incident end time (epoch)The unix time for the resolution of the incidentInteger
incident current statusThe current status of the incidentStringOk, Critical, or Warning
incident highest severitythe highest status of the incidentStringCan be used to differentiate incidents that were critical at any point
incident BP create time (epoch)The unix time when the incident was created in BigPandaInteger(Coming Soon)
Incident start date/time (UTC)The date/time the incident startedDate/Time
Incident start date/time (PST)The date/time the incident startedDate/Time
Incident start date/time (MST)The date/time the incident startedDate/Time
Incident start date/time (CST)The date/time the incident startedDate/Time
Incident start date/time (EST)The date/time the incident startedDate/Time
Incident start date/time (India)The date/time the incident startedDate/Time
Incident end date/time (UTC)The date/time for the resolution of the incidentDate/Time
Incident end date/time (PST)The date/time for the resolution of the incidentDate/Time
Incident end date/time (MST)The date/time for the resolution of the incidentDate/Time
Incident end date/time (CST)The date/time for the resolution of the incidentDate/Time
Incident end date/time (EST)The date/time for the resolution of the incidentDate/Time
Incident end date/time (India)The date/time for the resolution of the incidentDate/Time
Incident start day of week (UTC)Day of week (0-6) to map to weekdaysInteger
Incident start day of week (PST)Day of week (0-6) to map to weekdaysInteger
Incident start day of week (MST)Day of week (0-6) to map to weekdaysInteger
Incident start day of week (CST)Day of week (0-6) to map to weekdaysInteger
Incident start day of week (EST)Day of week (0-6) to map to weekdaysInteger
Incident start day of week (India)Day of week (0-6) to map to weekdaysInteger

Mean Time Between Failures (Fact)

Calculations to assist with querying the Alert Analysis Report. This table represents aggregated results of the data in the Incident Metrics table.

Column NameDescriptionData TypeNotes
MTBF hostThe host (not normalized)String
MTBF checkThe check (not normalized)String
MTBF Mean Time Between Failures (hrs)The mean time between failuresInteger
MTBF occurrencesThe number of mean time between failures occurrencesInteger
MTBF last seenThe date/time that the mean time between failures last seenDate/Time

Users (Dim)

A single BigPanda user

Column NameDescriptionData TypeNotes
user_idThe unique identifier of the userString
engineer (Incident Activity)The in-system name of the userString
engineer email (Incident Activity)The email of the userString

Next Steps

Learn about the new Unified Analytics platform

View information about BigPanda Reporting

Learn how to set up Live Dashboards