Jeff Hart M2 Technology

2. Jeff Hart M2 Technology 2 IT Situational Awareness

3. 3 Situational Awareness Theoretical model of situation awareness, Dr. Mica Endsley, 1995

4. 4 Gathering Perception Baseline Discovery Inventory Hardware Discover Environment Identify Devices Inventory Software Recognize Applications Track Usage

5. 5 Perceiving Current Status Combining Top Down and Bottom Up Metrics Organization Organization Status Probe1 Mission Mission Probe2 N/W SYS APPS Other N/W SYS APPS Other Probe3 ProbeX Switch1 Server1 Process DNS

6. 6 Perceiving Context Beginning to define service models

7. 7 Automating Application Mapping Automated mapping of what you have and how it relates B2B Ordering CSO Accounting Business Process Model Retail store Accountspayable_app Customer support_app Shipping_app Accounts receivable_app Order_app Layer 2-7 of the OSI Model Physical Data Center

8. 8 Foundation of Comprehension Building comprehension from perception Application Performance Management Run-time Service Model Infrastructure Performance Management Integrated/Federated 3rd party CMDB HP CMS

9. 9 Creating Context Event mapping to CI‘s in the Run-Time service model • Relationship of events to dynamically updated CIs • Events and discovery / topology data are brought together • End-to-end visibility of infrastructure and alerts by showing relationships of events to CIs and business services that are impacted • Shows CIs in context BSM Platform Run-time Service Model hosts auto-discovered CIs Event consolidation through OMi

10. 10 Bringing Clarity to Complexity TBEC – Topology Based Event Correlation Efficiency gains per advanced event causal correlation Cause Cause and Symptom Use case addressed by TBEC: Something goes wrong in your environment Monitoring reports multiple problems via events Usually just one of the events describes the CAUSEof the problem Others are just SYMPTOMS Fix the CAUSE and also the SYMPTOMS go away Symptom

11. 11 Automating Correlation & Service Model Management The “T“ in TBEC - rules based on topology • Adaptive correlation – support for dynamic environments without addingadministrative burden Current discovered Topology utilized to correlate related events Cause Related events analyzed to determine SYMPTOMS and CAUSE. Symptoms As new CIs and relationships are automatically discovered, the TBEC rules are automatically applied. Experts define the rules ONCE and do NOT have to go back and update when the infrastructure changes

12. 12 Automatic prioritization of Events Based on Business / Mission Context Event Priority • is calculated based on severity and business / mission impact. CI business impact is calculated based on Business Criticality of all affected business services, applications and business process CIs and eg. SLAs. Event that affects business service of criticality 4 gets higher priority than event that affects business service of criticality 2.

13. 13 Customized console Optimize use of staff resources • Optimized use of operations staff resources • Mash-up UI: • Gallery allows user to compose new pages using provided components Role based consoles Operator Perspectives: Operator can configure his own operator console with the information he needs for his daily tasks

14. 14 Projection of Future Status HP Service Health Analyzer (SHA) Predictive Analytics Anticipate problems before the business is impacted and prevent downtime Automatically correlate information from multiple domains Reduce cost of handling events by proactively investigating anomalies Self learning system

15. 15 Operational Analytics Proactive Risk Reduction by fusing IA and Ops SECURITY User Provisioning Identity & Access Mgmt Database Encryption Anti-Virus, Endpoint Firewall, Email Security #1 SEE EVERYTHING #3 Act Appropriately Proactive Risk Reduction IT OPERATIONS User Management App Lifecycle Mgmt Information Mgmt Operations Mgmt Network Mgmt #2 Provide Context #1 SEE EVERYTHING

16. 16 Operational Analytics A unified approach to solving IT Operations Management (ITOM) problems Advanced Correlation Advanced Analytics Operations Analytics Proactive Monitoring Event Triage Log Management Reactive Monitoring Unknown Problems Known Problems

17. 17 Service Health Analyzer powered by RTSM • End-User Experience • Transactions • App Diagnostics • Business metrics Application Performance Management • Service Health Analyzer Run-time Service Model Comprehensive, automated and up-to-date model for dynamic services • Server • Network • Virtualization • 3rd party Infrastructure Performance Management

18. 18 Projection of Future Status SHA detected a problem and sent alert one full hour before the service failed Early morning: Metric performing within baseline 1 11:00am: Metric violates threshold 3 10:30am - SHA detects an anomaly and sends out an alert\event 11:30am: Service is now unavailable… 4 2

19. 19 Implementing the Ops Bridge Value to the Organization Experts • Experts • Can focus on mission / business initiatives • Less time spent on day to day operations tasks • Less time spent on administration • Are able to add incremental value to operations more rapidly • Spend less time working on day to day operations • Spend less time maintaining operational solutions • Optimize time engaged in evolving operational solutions • Maximize time spent on strategic activities Efficiency Workload • Reduce false alarms. • Work on causes and not symptoms. • Enable co-operative cross-domain working • Focus on what matters to the business • Handle a higher proportion of incidents without escalation • Fix issues more rapidly • Streamline incident management activities • Operations • Are more effective at day to day operations activities • Continued control of OpEx • Higher efficiency – lower MTTR • Higher Service levels Tier 1 Operators

20. Questions? Contact Information: Jeff Hart, M2 Technology Enterprise Software Specialist Jeff.hart@m2ti.com 202-595-1917

21. Thank you Contact Information: Jeff Hart, M2 Technology Enterprise Software Specialist Jeff.hart@m2ti.com 202-595-1917