Explainability-driven control of an alert suppression policy
An approach is provided for controlling an alert suppression policy. Using historical training data and for a time period, an expected alert reduction for an alert suppression policy (ASP) is computed. The ASP is recommended for an information technology (IT) environment. During runtime and for the time period, an observed alert reduction for the ASP is computed. A visualization of a benefit of the ASP is generated by generating a visualization of a comparison of the observed alert reduction and the expected alert reduction. An explanation of why the ASP is recommended for the IT environment is generated by determining persistent regions for respective event time series from the historical training data and generating a visualization of the persistent regions on a time graph that includes a duration and a number of events for a given persistent region. Each event time series corresponds to a given resource for the ASP.