The Changes Tab
Use the Changes Tab within the Incident Details pane to view data on changes possible related to the selected incident.
Advanced Insight Module
This feature is part of the Advanced Insight Module. If your organization has not purchased this module, you may not have access to the feature.
If you are interested in upgrading to the Advanced Insight Module, contact your BigPanda account team.
The Changes Tab displays data on changes that are possibly related to the selected incident.
The Changes tab lists the details of changes that occurred shortly before or during the incident. BigPanda digests change records from change management integrations and correlates them by start time with incoming incidents in real-time. By default, the change table chronologically displays changes made in the 4 hours before the incident.
BigPanda uses algorithms to correlate and suggest changes that may have caused an incident. If BigPanda has found a change to be highly correlated with an incident, it will appear at the top of the change table and in the Overview tab as a potential root cause change.
Navigate the Changes Tab
The Changes Tab
The change table contains columns that provide background information on the change.
| Column | Description |
|---|---|
| 1 - Status | The status of the change. Possible change statuses are Planned, In Progress, and Done. Canceled changes persist in BigPanda but are not displayed in the change table. |
| 2 - Key | The key is the original ID from the integrated change. Click the hyperlinked change ID in the Key column of the table to view changes in the external change feed. |
| 3 - Summary | A short description of the change. |
| 4 - Start Time/End Time | Timestamps marking the duration of the change. |
| 5 - Change columns | Depending upon what data you send to BigPanda, additional change columns containing information such as Environment, Risk Impact, etc., appear in the table. |
| 6 - Diff | The difference between the change start time and the incident start time, in minutes. |
| 7 - Root Cause | You can manually mark a change as Suspect, Match, or None. Changes that were automatically marked as Suspect appear with a purple icon. |
| 8 - Score | The change causation score. A higher score indicates a more likely suspect. |
You are able to change the size and order of the columns within the change table. Hover over the space between column names to bring up the dividing line or the 6 dots.
- To resize a column, click and drag the dividing line to the desired column width
- To move a column, click and drag the 6 dots icon to the desired column placement
Show Potential RCC Only Toggle
Use the Show potential RCC only toggle to limit the change table to only show changes BigPanda has found highly correlated with the incident.
Click any one of the changes in the table to see a pop-up with the full list of tags and other data associated with the change.
Change Details
In the classic version of the console, if the BigPanda change correlation algorithm marked the change as a suspected match, it will include a note about why the algorithm suspects the change. Hover over the information icon beside the note to get more details about why BigPanda suspects that change.
In the new incident console, any environments configured with Automated Incident Analysis will automatically include an AI-generated explanation for why BigPanda marked a change as a potential root cause. This explanation provides more context and better insights into matches, saving you time as you hunt down the root cause of an incident.
BigPanda will only mark changes as Suspect to give users the final say on whether or not the change is the incident's root cause.
Updated 3 months ago