Your Problem Management Data Template
Your Problem Management Data Template
- Essential data fields for root cause analysis
- Standardized process milestones for tracking
- Specific extraction guidance for BMC Helix ITSM
Problem Management Attributes
| Name | Description | ||
|---|---|---|---|
|
Activity
Activity
|
The specific task or status change event that occurred. | ||
|
Description
This attribute represents the specific step performed in the problem management lifecycle, such as 'Problem Record Logged', 'Root Cause Identified', or 'Solution Database Updated'. In BMC Helix, these are often derived from the Status History, Audit Logs, or specific transaction timestamps within the Problem Investigation module. This attribute is the core of process discovery. By analyzing the sequence of these activities, the process mining tool constructs the process map, revealing the actual flow of work compared to the designed process. It highlights loops, rework, and deviations from the standard operating procedure. Accurate activity names are crucial for understanding what actually happened during the lifecycle. This data allows for the measurement of transition times between specific steps, such as the time taken between identifying a root cause and initiating a change request.
Why it matters
It defines the nodes in the process map and allows for the visualization of the workflow.
Where to get
Derived from PBM:Problem Investigation status history or PBM:AuditLogSystem
Examples
Problem Record LoggedAssigned to Support GroupInvestigation CommencedRoot Cause Identified
|
|||
|
Event Time
EventTime
|
The timestamp when the specific activity occurred. | ||
|
Description
This attribute records the exact date and time when an activity took place. In BMC Helix ITSM, this corresponds to fields like 'Submit Date', 'Last Modified Date', or specific timestamps recorded in the history tables corresponding to status changes. In analysis, this attribute is used to sequence events chronologically and calculate durations. It enables the measurement of cycle times between any two points in the process, such as the 'Investigation Cycle Time' or the 'Workaround Publication Lead Time'. Precise timestamps are vital for identifying bottlenecks. By calculating the time difference between consecutive events, analysts can pinpoint exactly where delays are occurring, whether it is during the initial assignment or the final review phase.
Why it matters
It enables the calculation of all duration-based KPIs and the sequencing of events.
Where to get
History tables or audit logs associated with PBM:Problem Investigation
Examples
2023-10-15T08:30:00Z2023-10-15T09:15:22Z2023-10-16T14:20:10Z
|
|||
|
Problem Record
ProblemRecord
|
The unique identifier for the problem investigation case. | ||
|
Description
This attribute serves as the central case identifier for the problem management process. In BMC Helix ITSM, this is typically the 'Problem ID' field (e.g., PBI00000012345) found on the PBM:Problem Investigation form. It links all related activities, from the initial logging of the problem to the final closure and post-implementation review. In process mining analysis, this attribute is used to group individual events into a single process instance. It allows analysts to visualize the end-to-end journey of a specific problem investigation. Without this identifier, it would be impossible to correlate the sequence of actions taken by different support groups and coordinators. This field functions as the primary key for the event log and is essential for all case-level aggregations, such as calculating the total cycle time per problem or counting the number of problems per priority level.
Why it matters
It is the fundamental key required to construct the process view and track the lifecycle of specific issues.
Where to get
PBM:Problem Investigation form, field 'Problem ID'
Examples
PBI00000004512PBI00000004513PBI00000004514
|
|||
|
Last Data Update
LastDataUpdate
|
The timestamp when the data was extracted or last refreshed. | ||
|
Description
This attribute indicates when the data was last loaded into the process mining application. It ensures that analysts are aware of the currency of the data they are viewing. It is usually generated by the extraction script or the data pipeline tool. In analysis, this helps prevent decisions based on stale data. For example, if a manager is looking at 'Open Problem Records', knowing that the data was updated an hour ago versus a week ago significantly changes the interpretation of the current workload. It is also used for incremental data loads. By tracking the last update time, the ETL process can fetch only records that have changed since the previous extraction, optimizing performance and reducing system load.
Why it matters
It ensures data freshness and assists in incremental data loading strategies.
Where to get
System time at moment of extraction
Examples
2023-11-01T00:00:00Z2023-11-01T12:00:00Z
|
|||
|
Source System
SourceSystem
|
The system where the data originated. | ||
|
Description
This attribute identifies the software system from which the process data was extracted, in this case, 'BMC Helix ITSM'. It is particularly important in multi-system environments where process mining might aggregate data from various ITSM, development, or external vendor tools. In analysis, this field serves as a metadata tag that validates the origin of the record. If the process mining view combines data from BMC Helix for problem management and a separate system for software development (e.g., Jira), this attribute helps segment the analysis by the tool of origin. It also aids in technical troubleshooting. If data quality issues arise, knowing the source system allows data engineers to trace the issue back to the specific extraction routine or source database.
Why it matters
It provides traceability and context, especially in multi-system process views.
Where to get
Hardcoded during the extraction process
Examples
BMC Helix ITSMRemedy OnDemandBMC ITSM Prod
|
|||
|
Investigation Driver
InvestigationDriver
|
The reason why the problem investigation was initiated. | ||
|
Description
This attribute classifies the trigger for the problem record, such as 'Incident Volume', 'Major Incident', 'Vendor Notification', or 'Proactive Trend Analysis'. In BMC Helix, this is the 'Investigation Driver' field. This attribute supports the 'Proactive Identification Trends' dashboard. It allows the organization to measure the shift from reactive firefighting (responding to incidents) to proactive problem management (identifying risks before they manifest). Analyzing process flows by 'Investigation Driver' can reveal different behaviors. For instance, 'Proactive' problems might sit in the queue longer because they are not causing immediate outages, whereas 'Major Incident' driven problems are rushed through the process.
Why it matters
It distinguishes between reactive and proactive work, a key maturity indicator.
Where to get
PBM:Problem Investigation form, field 'Investigation Driver'
Examples
ReactiveProactiveRecurring Incidents
|
|||
|
Is SLA Breached
IsSLABreached
|
A flag indicating if the problem resolution exceeded the allowed time. | ||
|
Description
This boolean attribute indicates whether the problem record breached its service level agreement. It is calculated by comparing the 'Resolution Verified' timestamp against the 'SLA Due Date' or extracted directly from the SLM status. This attribute is critical for the 'SLA Compliance and Breach Trends' dashboard. It allows for a simple binary segmentation of the process: compliant vs. non-compliant. This makes it easy to isolate the characteristics of failed processes (e.g., 'Do breached cases always involve Support Group X?'). It serves as a primary filter for root cause analysis of process failures. Analysts can filter for 'IsSLABreached = True' and then examine the process map to see where the time was lost (e.g., long wait times for vendor approval).
Why it matters
It simplifies compliance reporting and failure analysis.
Where to get
SLM:Measurement form or calculated
Examples
truefalse
|
|||
|
Priority
Priority
|
The calculated priority of the problem based on impact and urgency. | ||
|
Description
This attribute indicates the priority level of the problem record (e.g., Critical, High, Medium, Low). In BMC Helix, this is usually a calculated field derived from Impact and Urgency selections. In analysis, this is used for the 'Throughput and Priority Volume' dashboard. It allows organizations to verify if resources are correctly aligned with business needs. For instance, 'Critical' problems should theoretically have faster initial assignment times and shorter overall cycle times compared to 'Low' priority ones. Filtering by priority helps focus improvement efforts. A bottleneck in a 'Low' priority process might be acceptable, but the same delay in a 'Critical' process represents a significant risk to business continuity and SLA compliance.
Why it matters
It segments analysis by business criticality and supports SLA analysis.
Where to get
PBM:Problem Investigation form, field 'Priority'
Examples
CriticalHighMediumLow
|
|||
|
Problem Coordinator
ProblemCoordinator
|
The individual user assigned to coordinate the investigation. | ||
|
Description
This attribute names the specific person responsible for the problem record. In BMC Helix ITSM, this is the 'Problem Coordinator' field. This person owns the lifecycle of the problem even if tasks are delegated to others. This attribute supports the 'Support Group Workload Distribution' dashboard. It helps managers identify if specific individuals are overloaded with investigations while others have capacity. It also allows for performance analysis at the individual level, helping to identify training needs or high performers. In process mining, this field acts as a resource attribute. It helps visualize how work flows between individuals and can highlight single points of failure where a process relies too heavily on one specific expert.
Why it matters
It allows for resource analysis and workload balancing at the individual level.
Where to get
PBM:Problem Investigation form, field 'Problem Coordinator'
Examples
John DoeJane SmithSystem Admin
|
|||
|
Related Incident Count
RelatedIncidentCount
|
The number of incidents linked to this problem record. | ||
|
Description
This attribute quantifies the impact of the problem by counting the number of incidents associated with it. In BMC Helix, this is usually a count of records in the HPD:Help Desk form that are related to the PBM record. This attribute drives the 'Incident Linkage Density' KPI. A high count indicates a high-impact problem that is generating significant noise for the service desk. Correlating this with 'Priority' ensures that high-volume problems are actually being treated as critical. It also helps prioritize the backlog. A problem record with 500 linked incidents should likely be prioritized over a 'Critical' problem with only 1 linked incident, as resolving the former will free up more service desk capacity.
Why it matters
It quantifies the operational impact and user pain associated with the problem.
Where to get
Calculated by counting related rows in HPD:Associations or HPD:Help Desk
Examples
15120
|
|||
|
Root Cause Category
RootCauseCategory
|
The classification of the underlying cause of the problem. | ||
|
Description
This attribute contains the category selected when the root cause is identified (e.g., 'Software Error', 'Hardware Failure', 'Process Gap'). In BMC Helix, this is typically selected from the 'Root Cause' or 'Generic Categorization' menus. This attribute is essential for the 'Fix Effectiveness and Quality' view. It allows the organization to correlate specific types of root causes with rework rates or long investigation times. For example, it might reveal that 'Software Error' problems consistently take twice as long to resolve as 'Hardware Failure' problems. It is also used to calculate the 'Root Cause Categorization Rate'. A high percentage of 'Unknown' or 'Other' values in this field suggests a need for better technical training or more granular categorization options.
Why it matters
It enables trend analysis of systemic issues and supports proactive problem management.
Where to get
PBM:Problem Investigation form, 'Root Cause' or categorization tab fields
Examples
Software ModuleNetwork InfrastructureHuman Error
|
|||
|
Service CI
ServiceCI
|
The primary business service or configuration item affected. | ||
|
Description
This attribute identifies the Service Configuration Item (CI) related to the problem, such as 'Email Service', 'SAP ERP', or 'Wi-Fi Network'. In BMC Helix, this is often the 'Service+' field or the primary CI relationship. In analysis, this allows for the segmentation of problem records by product or service. It helps IT leadership understand which services are most fragile and generating the most problem investigations. This feeds into the 'Throughput and Priority Volume' dashboard by adding a product dimension. Correlating this attribute with 'Investigation Cycle Time' can show if certain complex services (like a core banking system) inherently require longer investigation periods compared to commodity services (like printing).
Why it matters
It links the process performance to specific business products or services.
Where to get
PBM:Problem Investigation form, field 'ServiceCI' or 'CI Name'
Examples
Email ServicePayroll SystemCorporate VPN
|
|||
|
SLA Due Date
SLADueDate
|
The target date and time by which the problem must be resolved. | ||
|
Description
This attribute holds the deadline for the problem resolution based on the service level agreement. In BMC Helix, this is often the 'Target Resolution Date' or a calculated SLA milestone timestamp. This attribute is the baseline for the 'SLA Compliance and Breach Trends' dashboard. By comparing this timestamp with the 'Resolution Verified' activity timestamp, the system calculates whether the SLA was met or breached. Visualizing this date allows analysts to see how close the team cuts it. Are they resolving problems days in advance, or are they consistently finishing just minutes before the breach? This insight drives capacity planning.
Why it matters
It is the reference point for calculating all compliance and timeliness metrics.
Where to get
PBM:Problem Investigation form, 'Target Resolution Date' field
Examples
2023-12-01T17:00:00Z2023-12-02T09:00:00Z
|
|||
|
Support Group
SupportGroup
|
The technical team currently assigned to the problem investigation. | ||
|
Description
This attribute reflects the specific support group (e.g., 'Server Admin', 'Database Support') responsible for the problem record at the time of the event. In BMC Helix, this is the 'Assigned Group' field. This attribute is critical for the 'Support Group Workload Distribution' and 'Support Group Reassignment Analysis' dashboards. It allows analysts to slice the process map by team, revealing which groups are handling the most volume and which are bottlenecks in the investigation process. Analyzing handovers between support groups helps identify 'ping-pong' behavior, where a ticket bounces between teams without resolution. This often points to unclear responsibilities or inadequate knowledge management within the organization.
Why it matters
It enables organizational analysis and bottleneck detection at the team level.
Where to get
PBM:Problem Investigation form, field 'Assigned Group'
Examples
Service Desk Level 1Back Office SupportNetwork Administration
|
|||
|
Investigation Cycle Time
InvestigationCycleTime
|
The duration from investigation start to root cause identification. | ||
|
Description
This is a calculated duration attribute measuring the time between the 'Investigation Commenced' activity and the 'Root Cause Identified' activity. It represents the core value-add time of the problem management process. This metric feeds the 'Root Cause Investigation Cycle Time' dashboard. It helps managers understand the technical complexity of issues and the efficiency of the investigation teams. Anomalies here (e.g., extremely short times) might indicate guessing, while extremely long times indicate stalled investigations. By comparing this metric across 'Support Groups' and 'Priorities', the organization can identify which teams need better tools, training, or vendor support to diagnose issues faster.
Why it matters
It is the primary efficiency metric for the technical investigation phase.
Where to get
Calculated from activity timestamps
Examples
4500000120000
|
|||
|
Reassignment Count
ReassignmentCount
|
The total number of times the support group was changed. | ||
|
Description
This attribute counts the number of times the 'Assigned to Support Group' activity occurs for a single case. It is a direct measure of process friction and routing efficiency. This attribute populates the 'Support Group Reassignment Analysis' chart. High values (ping-ponging) indicate that the initial triage is failing or that there is no clear ownership for complex issues. It is a leading indicator of increased cycle time. Managers use this to identify training opportunities. If the Service Desk consistently reassigns 'Database' problems to 'Network' first, and then 'Network' sends them to 'Database', the Reassignment Count will spike, highlighting the need for better initial diagnosis scripts.
Why it matters
It identifies waste, friction, and lack of ownership in the process.
Where to get
Calculated from activity history
Examples
015
|
|||
|
Region
Region
|
The geographical region associated with the problem. | ||
|
Description
This attribute specifies the geographic location (e.g., 'North America', 'EMEA') where the problem originated or is being managed. In BMC Helix, this is often found in the 'Region' or 'Site' fields associated with the requester or the affected asset. In analysis, this supports geographical segmentation. It helps identify if specific regions are experiencing higher problem volumes or slower resolution times. This can highlight disparities in support staffing or infrastructure quality across different locations. It is valuable for global organizations to ensure consistent service delivery. If the 'Investigation Cycle Time' in 'APAC' is double that of 'NAM', it prompts an investigation into resource allocation or process adherence in that region.
Why it matters
It enables geographical comparison of process performance.
Where to get
PBM:Problem Investigation form, 'Region' field
Examples
AmericasEMEAAPAC
|
|||
|
Related Change Request ID
RelatedChangeRequestId
|
The identifier of the change request initiated to fix the problem. | ||
|
Description
This attribute contains the ID of the Change Request (e.g., CRQ0000...) linked to the problem record. It represents the transition from investigation to implementation of a permanent fix. This attribute is necessary for the 'Root Cause to Change Lead Time' KPI. It allows the process mining tool to measure the delay between finding the root cause and starting the change process. This is a common handover point where momentum is lost. It also helps verify the 'process completeness'. A problem record closed with a status of 'Completed' but without a related change request (or a workaround) might indicate a process violation where the root cause was found but never actually fixed.
Why it matters
It links the problem management process to the change management process.
Where to get
PBM:Investigation Associations or Relationship tab
Examples
CRQ00000021345CRQ00000021346
|
|||
|
Workaround Status
WorkaroundStatus
|
Indicates if a valid workaround has been identified and published. | ||
|
Description
This attribute tracks the state of the temporary solution (Workaround). It might be a simple boolean (Has Workaround) or a status string. In BMC Helix, this is often derived from the presence of text in the 'Workaround' field or a specific status flag. This attribute is key to the 'Workaround Publication Performance' dashboard. It answers how effectively the team mitigates impact while researching the root cause. A process view filtered by 'No Workaround' highlights cases where the business is suffering full impact during the investigation. It also supports quality audits. Closing a problem record without a permanent fix (Change Request) AND without a workaround is generally a process failure that needs review.
Why it matters
It measures the effectiveness of impact mitigation during the investigation.
Where to get
PBM:Problem Investigation form, 'Workaround' field content check
Examples
ActiveNoneRetired
|
|||
Problem Management Activities
| Activity | Description | ||
|---|---|---|---|
|
Assigned to Support Group
|
The assignment of the problem record to a specific technical team. Captured by monitoring changes to the 'Assigned Group' field. | ||
|
Why it matters
Essential for measuring handoffs, ping-pong effects, and the 'Mean Time to Initial Assignment' KPI.
Where to get
PBM:Problem Investigation form, 'Assigned Group' field history or audit log.
Capture
Compare 'Assigned Group' field before and after update
Event type
inferred
|
|||
|
Change Request Initiated
|
The linking of an Infrastructure Change Request to the Problem Investigation. This signals the start of the implementation phase. | ||
|
Why it matters
Critical for the 'Root Cause to Change Lead Time' KPI and identifying silos between Problem and Change processes.
Where to get
PBM:Investigation_Associations table or 'Infrastructure Change ID' field population.
Capture
Logged when association created in PBM:Investigation_Associations
Event type
explicit
|
|||
|
Investigation Commenced
|
The transition of the problem record into an active analysis phase. This is inferred when the Status field changes to 'Under Investigation'. | ||
|
Why it matters
Marks the beginning of the actual work phase, supporting the 'Investigation Cycle Time' KPI.
Where to get
PBM:Problem Investigation form, 'Status' field = 'Under Investigation'.
Capture
Compare status field for transition to Under Investigation
Event type
inferred
|
|||
|
Problem Record Cancelled
|
The termination of a problem record before resolution. Captured when status becomes 'Cancelled' or 'Rejected'. | ||
|
Why it matters
Identify wasted effort or valid duplicates. Represents an alternative end point.
Where to get
PBM:Problem Investigation form, 'Status' field = 'Cancelled' or 'Rejected'.
Capture
Compare status field for transition to Cancelled
Event type
inferred
|
|||
|
Problem Record Closed
|
The final administrative closure of the problem record. This event terminates the process instance. | ||
|
Why it matters
The standard end event. Necessary for full cycle time analysis and 'Incident Linkage Density' calculation.
Where to get
PBM:Problem Investigation form, 'Status' field = 'Closed'.
Capture
Compare status field for transition to Closed
Event type
inferred
|
|||
|
Problem Record Logged
|
The initial creation of a Problem Investigation record in the system. This event is explicitly captured when a new entry is saved in the PBM:Problem Investigation form. | ||
|
Why it matters
Marks the start of the process instance. Critical for calculating overall cycle times and initial response metrics.
Where to get
PBM:Problem Investigation form, 'Submit Date' timestamp or 'Status' = 'Draft' creation log.
Capture
Logged when PBM:Problem Investigation record is created
Event type
explicit
|
|||
|
Resolution Verified
|
The point where the permanent fix is confirmed successful. Inferred from Status changing to 'Solution Implemented' or 'Completed'. | ||
|
Why it matters
Used for 'Problem SLA Adherence Rate'. Confirms the technical work is finished.
Where to get
PBM:Problem Investigation form, 'Status' field = 'Solution Implemented' or 'Completed'.
Capture
Compare status field for transition to Solution Implemented
Event type
inferred
|
|||
|
Root Cause Identified
|
The moment the problem record transitions to a state indicating the cause is known. Inferred when the Status changes to 'Root Cause Identified'. | ||
|
Why it matters
A critical milestone for the 'Root Cause Investigation Cycle Time' dashboard. Signals the shift from analysis to solutioning.
Where to get
PBM:Problem Investigation form, 'Status' field = 'Root Cause Identified'.
Capture
Compare status field for transition to Root Cause Identified
Event type
inferred
|
|||
|
Workaround Defined
|
The entry or update of text in the Workaround field of the problem record. This event indicates a temporary solution has been documented. | ||
|
Why it matters
Supports the 'Workaround Publication Lead Time' KPI. Indicates incident impact mitigation.
Where to get
PBM:Problem Investigation form, changes to the 'Workaround' text field.
Capture
Compare 'Workaround' field content for non-null updates
Event type
inferred
|
|||
|
Coordinator Reassigned
|
A change in the individual Problem Coordinator within a support group. Captured by monitoring the 'Problem Coordinator' field. | ||
|
Why it matters
Helps analyze workload distribution and individual resource bottlenecks.
Where to get
PBM:Problem Investigation form, 'Problem Coordinator' field history.
Capture
Compare 'Problem Coordinator' field before and after update
Event type
inferred
|
|||
|
Known Error Promoted
|
The creation of a Known Error record linked to the problem investigation. This is a related record creation event. | ||
|
Why it matters
Indicates the formalization of the problem for broader communication and long-term tracking.
Where to get
Creation of a record in PBM:Known Error linked to the PBM:Problem Investigation ID.
Capture
Logged when PBM:Known Error record is created
Event type
explicit
|
|||
|
Post-Implementation Review Conducted
|
The completion of the PIR phase. Captured by a status transition out of a PIR state or the closure of a linked PIR Task. | ||
|
Why it matters
Directly supports 'Post Implementation Review Compliance' and process quality audits.
Where to get
PBM:Problem Investigation form, specific flag 'PIR Required' or completion of linked Task type 'PIR'.
Capture
Derived from PIR status completion or PIR Task closure
Event type
inferred
|
|||
|
Solution Database Updated
|
The transition of the record to the 'Solution Database' status, indicating a permanent fix has been proposed or identified. | ||
|
Why it matters
Tracks the progress of solution definition before implementation.
Where to get
PBM:Problem Investigation form, 'Status' field = 'Solution Database'.
Capture
Compare status field for transition to Solution Database
Event type
inferred
|
|||