Corrupted Document Analysis
Corrupted Document Analysis
Before starting on the software log onto the phones. ................................................................... 2 Managing Incidents and Problems .............................................................................................. 2 Sample Scenario: Managing Incidents and Problems.................................................................. 2 Scenarios for Managing Incidents and Problems ..................................................................... 2 Managing Incidents .............................................................................................................. 3 Troubleshooting Incidents .................................................................................................... 3 Managing Problems ............................................................................................................. 4 Managing an Incident ................................................................................................................. 4 How to Manually Create a New Incident...................................................................................... 5 How to Change an Existing Incident............................................................................................ 6 How to Contact a User From an Incident Form............................................................................ 8 How to Create an Incident View and and Personalize It .............................................................. 9 How to Resolve and Close an Incident .......................................................................................10 How to Publish an Announcement for an Incident ......................................................................11 Troubleshooting Incidents ..........................................................................................................12 How to Troubleshoot an Incident Using a Service Map...............................................................12 Managing a Problem..................................................................................................................13 How to Create and Edit Problem Records ..................................................................................14 How to Resolve Problem Records and Related Incidents Automatically .....................................16 How to Link an Incident or Change Request to a Problem Record..............................................17 Reports available in Service Manager ........................................................................................17 How to View the Report Catalog ................................................................................................18 How to Add Permissions for Reports..........................................................................................18 How to Run a Report .................................................................................................................19 How to Export Report Data ........................................................................................................20
Scenario
Description
Describes how incidents and incident views are created, edited, and resolved. Describes how to troubleshoot incidents using service maps, running tasks, and by publishing announcements. Describes how to create and edit problem records, resolve problems and related incidents automatically, and how to link incidents or change request to a problem record.
Managing a Problem
Managing Incidents
In the scenario that encompasses incident management, Phil uses incident management to restore regular operations as quickly and as cost-effectively as possible. For example, by using the E-mail Incident template to populate a new e-mail-related incident, he can quickly create an incident and ensure that the correct impact, urgency, assigned analyst, and support tier fields are configured. Carrying the example further, he creates a new incident for a user who is unable to view an e-mail that was sent with restricted permissions. Phil creates an incident view so that he can easily work with all incidents that are created for e-mail problems. When changes are made to an incident, the he edits the incident to reflect changes. In another example, an end user experiences a printer problem, so she sends an e-mail message to the help desk. Upon receipt, Service Manager automatically creates an incident from the message. Phil investigates the problem, in part, by viewing the service. After the underlying problem has been solved, the he resolves and closes the incident. At Woodgrove Bank, connectors are configured so that Service Manager imports configuration items and alerts from System Center Operations Manager, so some new incidents are automatically created. Phil reviews the automatically created incidents for accuracy.
Troubleshooting Incidents
In the scenario that encompasses troubleshooting incidents, Phil is conducting an initial investigation of the problem that Joe is experiencing. Phil suspects that the root cause of the problem is that Microsoft Exchange Server 2007 SP1 needs to be applied to Joes Exchange server. However, there are other Exchange servers at Woodgrove Bank that probably also need to be updated. Phil starts his investigation by viewing the service that Garret created for the Exchange Service. When any incidents affect a service component, that component is marked with an orange icon resembling a square containing an exclamation point. When a change request affects a service component, the component is marked with a special blue icon resembling a square containing a right-pointing arrow. Phil uses the map view on the Service 3
Components tab to view configuration items and view incidents associated with them. Then he opens other configuration items and adds them to the open incident. To further troubleshoot, Phil wants to ping a remote computer that is exhibiting problems. He can use tasks that are part of the Service Manager console instead of having to use various other tools. After Phil completes his troubleshooting, he can publish an announcement to all SelfService Portal users notifying them of the problem. He can remove the announcement after the problem has been resolved.
Managing Problems
In the scenario that encompasses problem management, Phil has created a change request asking the Exchange Administrators group to apply a service pack that is expected to resolve the problem. When a root cause is found and mitigated or resolved, the change request is completed and Phil is notified. He then uses the following procedures to resolve a problem and automatically resolve incidents associated with the problem.
Managing an Incident
Help desk analysts use incident management to restore regular operations as quickly and as cost-effectively as possible by creating new incidents. They also work in partnership with Service Manager administrators to ensure that incidents that are created automatically or by end-users are correctly categorized and reassigned to appropriate personnel. Methods that analysts use to accomplish these duties include: y y y y Using the E-mail Incident template to create new incidents Reviewing automatically created incidents Reviewing and updating incidents created by end-users who have sent requests by e-mail Publishing announcements for incidents to the Self-Service Portal, when necessary
Describes how to create new incidents in response to a call from a user or from an e-mail request. Also describes how to create new incidents automatically from the System Center Operations Manager Alert connector. Describes how to make changes to an incident in response to new information. Describes how to contact a user by e-mail or instant message while you have an incident 4
Task
Description
form open. Step 3: How to Create an Incident View and and Personalize It Step 4: How to Resolve and Close an Incident Describes how to create a view of incidents that match the criteria you define. Describes how to resolve and close an incident after the underlying problem is solved. Describes how to publish an announcement for an incident to all Self-Service Portal users.
the affected user. 10. Click the Related Items tab. 11. In the Attached Files area, click Add. 12. In the Open dialog box, select the file that you want to attach to this incident, and then click Open. For example, select the screen shot of an error message that the affected user has received. 13. Click OK. To create a new incident by e-mail 1. In an e-mail program, create a new e-mail message, and then enter the help desk alias or e-mail address in the To box. For example, enter Helpdesk@Helpdesk.Woodgrove.com in the To box. 2. In the Subject box, type a subject. For example, type Unable to print checks. 3. In the message body, type additional information that the help desk analyst can use to correct the problem. For example, type The check printer has a paper jam. I will use a backup printer until the jam is fixed. 4. Optionally, attach files that the help desk analyst can use to correct the problem. To validate the creation of a new incident 1. In the Service Manager console, click Work Items. 2. In the Work Items pane, expand Incident Management, and then click All Incidents. New incidents appear in the All Incidents view.
To change the urgency of an incident 1. In the Service Manager console, click Work Items. 2. In the Work Items pane, expand Incident Management, and then click All Open E-Mail Incidents. 3. In the All Open E-Mail Incidents view, select the original incident. For example, select the Unable to print checks incident. 4. In the Tasks pane, click Edit. 5. In the Incident form, in the Urgency list, select High. 6. Optionally, type a comment in the Comment box. If you do not want end users to be able to read the comment, select the Private check box that is above the Comment box. For example, in the Comment box, type The user called to say that the backup printer is unavailable and that this issue is now urgent. Then, click Add. The new comment appears as a log entry. 7. Click OK to close the form and to save your changes. To edit an unassigned incident from Operations Manager 1. In the Service Manager console, click Work Items. 2. In the Work Items pane, expand Incident Management, and then click All Open Operations Manager Incidents. 3. In the All Open Operations Manager Incidents view, select an incident that was created automatically from an Operations Manager alert. 4. In the Tasks pane, click Edit. 5. In the Incident form, under Support Group, select Tier 1. 6. Under Assigned to, enter the name of the help desk analyst who will investigate the problem. 7. Click OK to close the form and to save your changes. To link a knowledge article to an incident 1. In the Service Manager console, click Work Items. 2. In the Work Items pane, expand Incident Management, and then click All Open Operations Manager Incidents. 3. In the All Open Operations Manager Incidents view, select the incident that was created automatically from an Operations Manager alert. 4. In the Tasks list, click Search for Knowledge Articles. 5. In the Knowledge Search dialog box, type a search term in the Search for box, and then click Go. For example, type MICR Check Printer Article. 6. Select the article, click Link to <IncidentName>, click OK to close the informational 7
dialog box, and then click Close. To validate incident edits y Open the incident, and then verify that your changes appear. For example, verify that the comment you entered appears as a log entry.
To validate the incident view creation y In the Work Items pane, ensure that an E-Mail Incidents view exists under Incident Management. Ensure the view displays all the incidents in the E-Mail Problems category. Note It might take a few seconds for the new incident view to appear.
It might take a few seconds for the new status to appear. To immediately view the change, click Refresh.
11
Troubleshooting Incidents
The procedure in this section describes how to troubleshoot incidents. For a detailed description of the complete scenario for troubleshooting incidents, see Sample Scenario: Managing Incidents and Problems.
Describes how to troubleshoot an incident using a service map to view the configuration items that are part of a service.
Note You might not be able to successfully troubleshoot all incidents with this step.
2. In the Configuration Items pane, expand Business Services, and then click All Business Services. 3. In the All Business Services list, double-click a business service. For example, doubleclick Exchange Service. 4. In the dialog box that opens, click the Service Components tab. Note that the list of service components includes configuration items. For example, the list might include computers running Microsoft Exchange Server. When a service component is marked with an icon, the icon indicates that an incident is associated with the service component. 5. Select a configuration item. For example, select the Exchange01.woodgrove.com server. Note the ID of the record that appears under Related work items for the selected item. To add related service components to an open incident 1. In the list of service components, select an item that has an active incident. 2. Under Related work items for the selected item, select a work item and then click Open to open the incident. 3. Under Affected Items, click Add. 4. In the Select objects dialog box, select the configuration item to add to the incident, click Add, and then click OK. 5. Click OK to update the incident, and then return to the Service Components tab for the service. 6. Repeat the previous steps to add other service components to the open incident. 7. Click OK to close the service item. To validate that the service components were added to an incident y Open the business service to which you added the incident, and then click the Related Items tab. Verify that the new incident appears under Work items affecting this configuration item.
Managing a Problem
In Service Manager, problems are records that are created to help prevent future problems and incidents from happening, to eliminate recurring incidents, and to minimize the impact of incidents that cannot be prevented. Analysts can use the Service Manager console to create problem records and to associate incidents with problems.
13
Step 1: How to Create and Edit Problem Records Step 2: How to Resolve Problem Records and Related Incidents Automatically Step 3: How to Link an Incident or Change Request to a Problem Record
Describes how to create and edit problem records to group related incidents. Describes how to resolve a single problem to automatically close the related incidents. Describes how to link an incident or change request to an associated problem record.
permission. 4. In the search results, select the incidents for which you want to create a problem record. In the Tasks pane under Selected Items, click Create Problem. 5. In the Title box, type a title for the problem. For example, type Outlook E-Mail Restricted Permissions. When you create a problem by using this method, the problem form inherits the title from the open incident if a single incident was selected. If multiple incidents were selected, the Title box is blank. You can change the title of the problem record. 6. In the Description box, type a description of the problem. For example, type Users cannot view e-mail messages sent with restricted permissions. 7. If you want to assign the problem to an analyst, enter the name of the analyst in the Assigned to box. 8. In the Source list, select the source of the problem request. 9. Select the appropriate values in the Category, Impact, and Urgency boxes. 10. Click OK. To create a new problem record from an incident form 1. Make sure that an incident is already open. Then, under Tasks, click Create Problem. 2. In the Title box, type a title for the problem. For example, type Outlook E-Mail Restricted Permissions. When you create a problem using this method, the problem form inherits the title from the open incident. You can change the title of the problem record. 3. In the Description box, type a description of the problem. For example, type Users cannot view e-mail messages sent with restricted permissions. 4. If you want to assign the problem to an analyst, enter the name of the analyst in the Assigned to box. 5. In the Source list, select the source of the problem request. 6. Select the appropriate values in the Category, Impact, and Urgency boxes. 7. Click OK. To edit a problem record 1. In the Service Manager console, click Work Items. 2. In the Work Items pane, expand Problem Management, and then click Active Problems. 3. In the Active Problems view, double-click a problem. For example, double-click the Outlook E-Mail Restricted Permissions problem. 4. In the problem form, edit information that needs to be changed. For example, if a workaround is found for the problem, click the Resolution tab. Then, in the Workarounds field, type the workaround steps. 15
5. Click OK. To validate the creation of a new problem record y In the Tasks list, click Refresh to view the new problem record, or open the problem record to view the revised information.
16
Incident analyst report Incident detail Provides detailed information for a specific incident.
Incident SLA List of Incidents Provides a list of all incidents within a certain timeframe. 17
Report area
Report name
Description
Provides a list of all problems within a certain timeframe. Provides detailed information for a specified problem.
example, type woodgrove\SCSMReportAccess. 6. Set the roles for the group or user. Select the Browser check box to grant access to run reports. 7. Click OK.
y y y y y y y y y y y y y
Assigned To Priority ID Description Resolution Description Contact Method Source Status Classification Support Group Urgency Impact Resolution Category
5. In the Start Date list, select the date one week before the current date (today), and then click anywhere in the form. 6. Optionally, specify other criteria that you want to filter. 7. In the Tasks list, click Run Report. 8. In the report, review the data to ensure the incident information that you want to view is displayed. If you do not see the information you expect, revise the criteria, and then run the report again by clicking Run Report. In reports that show lists or additional detail (such as the associated sub-reports in the List of Incidents report), you might see multiple rows that contain the same information. This is because an instance can have multiple types (for example, a computer is a Computer and a Windows Computer and a Managed Windows Computer). The granularity for these reports is per type per instance, so these multiple types result in multiple rows. Note If there is no data in the report, ensure that the ETL process is complete. A delay might occur between the start of the process and when data is available for reports.
20
For example, you can export the report data into a comma-separated value (CSV) file and then import it into Microsoft Office Excel. To open the report and then export the report data 1. In the Service Manager console, click Reporting. 2. Expand Reports, and then click any view. For example, click Incident Management. 3. In the Incident Management view, select List of Incidents Report, and then in the Tasks list, click Run Report. 4. Click Parameter Control Header to display the parameter controls for the report. Use these parameters to customize the report. 5. In the Start Date list, select the date one week before the current date (today), and then click anywhere in the form. 6. Optionally, specify other criteria that you want to filter. 7. In the Tasks list, click Run Report. 8. In the List of Incidents report, review the data to ensure the incident information that you want to view is displayed. If you do not see the information you expect, revise the criteria, and then run the report again by clicking Run Report. 9. Click the Export icon, and then select the format in which you want to save the report. In the list, select one of the following: y y y y y y y XML file with report data CSV (comma delimited) Acrobat (PDF) file MHTML (web archive) Excel TIFF file Word
10. Save the file to the desktop with a file name of your choice, and then close the report form.
21