(FYI - using 4.7.4)
How can you achieve exporting a daily event count (possibly by product) from the SSIM in order to accumulate daily counts for overall metrics and event density trending?
My theory in building a metrics framework for "SSIM Correlation Efficiency" is to compare three sets of figures:
1. Total Daily Event Count
2. Total Daily "Associated" Event Count - Achieved via SQL query that counts all events by day in the "Associated Event" Table
3. Total Daily Incident Count - Achieved via SQL query to "Incident" table
This shows a comparison of all events received the SSIM, what percentage of those are correlated, and into what percentage of Incidents. Then, by comparing incident count to the number of Incidents that are actually acted upon or escalated on, it will show a moving average of proportion. Doing so "by Product" would be ideal, but for now, I just want it to work at all.
In order to accomplish this, I need a way to just get a count of EVERY EVENT and I don't want to have to run a Top N search and transcribe the count from there for every single day. That would be a nightmare...
Anyone have advice?