What does the Root cause analysis script in the Alarm section of an Event Process Policy rule do? I assume it's for identifying root cause of an alarm, obviously, but I can't find documentation on the feature (what script should return) and the workflow of the feature.
Script should find another alarm that is a root cause for current alarm. Script is expected to either return null (means no root cause) or alarm object. If root cause alarm is returned for current alarm then current alarm will be placed under root cause in alarm browser (so you'll see alarm as hierarchy instead of flat list). Acknowledging or terminating root alarm will also do the same to all sub-alarms.
Best regards,
Victor
Thanks for your help!