Splunk Search

Root Cause Analysis of Tickets from Application Maintenance Service

analiaeg
Explorer

Hello everyone.

In my team we are investigating how to build a new application that does "Root Cause Analysis" (similar to Machine Learning or Analytics) having as input the description and solution of tickets of an Application Maintenance Service.

The idea is to identify repetitive incidents (tickets) to launch improvement initiatives on these recurring incidents, before they occur.

We have the idea of identifying words or terms that are repeated in the fields of description of incidents. But we do not know how to do it.

We are novice developers with little experience in Splunk and we would appreciate all suggestions and advice on how to do this development, the existence of possible already developed app that we could use, or another Splunk solutions that are already developed and / or that we can improve or investigate .

Many thanks in advance for all the help and suggestions you can give us.

Tags (1)
0 Karma

crendon_splunk
Splunk Employee
Splunk Employee

Q como va el proyecto?

0 Karma

DalJeanis
Legend

@analiaeg - This is a great idea, but NLP (natural language processing) is a deep and wide subject. You are going to need a senior guy who understands the theory, or at least a mid-level guy who has been on this trip before. If your manager wants to do it cheaply, then he needs to give the lead to someone who can do it fast and right. Forty to sixty hours at $125 per hour is MUCH cheaper than 400-800 hours at $25/hour.

0 Karma

woodcock
Esteemed Legend

This general concept is known as Sentiment Analysis and there are some apps on Splunkbase to give you a headstart:
https://splunkbase.splunk.com/apps/#/search/sentiment/

0 Karma

hardikJsheth
Motivator

You will be able to implement this with Splunk. You need to ingest data from the Application Maintenance Service with one of many ways in which splunk can ingest data. Once data is ingested you can write search queries to create necessary dashboards.

0 Karma

analiaeg
Explorer

Thanks for your answer.

Our problem is that we don't know what search queries we could write to identify repetitive incidents by identifying words or terms that are repeated in the description fields.

Could you give some ideas to investigate in this way?

Thank you very much.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...