Phase 1: Logging

Input to the problem identification activity comes from two sources, incident Management and proactive Problem Management. When an incident does not match existing problems or known errors, incident Management passes the information to problem Control. Opening a new problem record stores the relevant details in the rootcause table.

Creating a problem

An administrator or user creates a problem record when one or more conditions occur:

  • When you analyze incident Management data, there are recurring incidents caused by a single error.
  • A problem or known error record does not exist for the identified error.
  • There are incidents that do not have problem or known error record matches.
  • Independent infrastructure analysis identifies a potential problem that is not yet related to a reported incident.
  • A critical incident requires an immediate solution.

The problem record captures all critical data to ensure that you can track the error to a final resolution.

Identify the problem

If you analyze incident data, you may find more than one incident that describes the same error, or incidents that do not match identified problems or known errors. For example, three separate service desk interactions in a single day report a network outage. The circumstances are similar and the affected Configuration Items are the same. The three incidents generate a problem record that describes the outage.

Ongoing analysis of the infrastructure might also identify a problem that is likely to cause errors in the future. For example, a technician finds a computer virus on the mail server, or the network administrator learns that there is a powerful new virus propagated by e-mail attachments.

When you identify the problem, there is a permanent record that contains information about the affected Configuration Item (CI) and related CIs, as well as the primary and secondary assignment groups who own the problem.