SlideShare ist ein Scribd-Unternehmen logo
1 von 33
Function Event Management




                            Xymon
1     Mohamed Gabr
    for internal use only
Content
    •    Introduction
    •    Xymon in Orange
    •    Enhanced Xymon
    •    Function Monitoring.
    •    Alerting System.
    •    Success Stories.
    •    Xymon & Genergy (Remedy)
    •    Generating xymon alarms through emails
    •    Xymon One Screen Monitoring
    •    Xymon Reporting Mechanism
    •    Xymon License.
    •    Why Xymon is different.
    •    What could be offered.
    •    Links and portals
    •    Portal Demo




2
        for internal use only
Introduction


    •    Xymon is a tool for monitoring services. It collects information about
        the health of each service component, and their relevant network
        connectivity. All those information is presented in a set of simple,
        intuitive web pages that are updated frequently to reflect the
        changes in the service status.

    • Xymon is capable of monitoring any sort of service, on the server,
      application , and data flow level, e.g. mail-servers, web-servers
      (both plain HTTP and encrypted HTTPS).




3
          for internal use only
Xymon history


    •   Initial release of Big Brother was in November 1996.
    •   Big Brother owned by Quest Software.
    •   From 2005 until November 2008 the project was called "Hobbit"
    •   From 2008 until now the project name changed to Xymon




4
          for internal use only
Xymon in Orange



    • Big Brother impended in Equant in 2002.
    • Big Brother managed by IBNF.
    • It manage lot of services and applications, showing KPI and
      availability reports.




5
         for internal use only
Enhanced Xymon

    • Changes done in Xymon core packages to meet OBS business
      need.
    • Enhanced Xymon can works both Server-Client connection or
      Server only connection.
    • With Enhanced changes on Xymon no need to add client on the
      remote machine.
    • Xymon Can monitor any machine connected to network and have IP
      address (Linux, Unix, Windows, Router, Switch).




6
        for internal use only
Service monitoring

    • Today’s monitoring concept depends on functional monitoring which
      is far from availability monitoring.



    • Functional monitoring is to be sure that the a service along with it’s
      components, and processes is operating and functional as
      designed. (many applications/systems can be up and running but
      not functional).




7
         for internal use only
Service monitoring

    • Xymon is enhanced to meet the requirement of a fully integrated
      Event Management system.
       – The tool has the capabilities to monitor, detect and log all the different events.
       – Based on input from application management, the tool performs the required
         filtering of the events and automatic determination of each event significance
         [information, warning or exception].
       – Xymon is as well equipped with a correlation engine specifically designed to
         efficiently meet the business requirements in triggering the needed actions for
         each event while saving CPU and memory usage of the monitored CI.

    • Enhanced Xymon built on new IT market methodology called
      SMART MAN (Simulate human daily systematic checks into
      automation )




8
         for internal use only
Alerting System
     The tool has the capabilities to monitor, detect and log all the different events.


    • Alarms can be alerted through:
    • web browser
    • graphic screens




    • Email alerting to individuals or group of mails.
    • SMS alerting ( not implemented yet)
9
          for internal use only
Xymon alarm generation through emails

     What is macros ?

     •   Microsoft Outlook allow the user to define macros written in Visual Basic to
         automate certain activities.
     •   The doc. Shows brief steps for creating macros
                                                                     Microsoft Word
                                                                       Document




10
           for internal use only
Xymon alarm generation through emails

     How does it work ?

     •   The macro was developed by VB code
     •   It’s deployed on the monitoring machine
     •   When the monitoring agent receives any email from specific senders or to
         specific receivers (optional)
     •   The macro will open a connection to xymon and generate an alarm
     •   Alarm will then be cleared after opening the mail (mark as read)




11
           for internal use only
Xymon alarm generation through emails

     How it’s going to help ?

     •   A lot of services/processes are monitored only via mail
     •   A lot of this mails have high priority and large impact
     •   Some of them are missed by monitoring team
     •   Using macros to generate alarms will simply avoid missing any mails/alarms
     •   Providing effective monitoring




12
           for internal use only
Xymon ONE Screen Monitoring

     • Called Critical systems.
     • Consist of one window with refresh rate 1 minute, show only alarms
       occurred.




13
          for internal use only
Xymon Admin
     •   Based on input from application management, the tool performs the required filtering
         of the events and automatic determination of each event significance [information,
         warning or exception].




14
            for internal use only
Xymon ONE Screen Monitoring

     • When monitoring team open the alert they read instruction of the
       action should be taken.




     • can acknowledge the alarm and add the incident number.

     •   Xymon is as well equipped with a correlation engine specifically designed to efficiently
         meet the business requirements in triggering the needed actions for each event while
         saving CPU and memory usage of the monitored CI.

15
            for internal use only
Xymon & Genergy (Remedy)

     • Integration between Xymon and Remedy to link alarms on Xymon
       with tickets created for these alarms.
     • This help to detect missing alarms or delay between alarm time and
       ticket creation time.
     • Built on ITIL concept to link alarm priority with incident priority and
       class of the application.




16
          for internal use only
Xymon Reporting Mechanism

     • Xymon consist of different kinds of reporting systems.
     • Customized reports for OBS which link alerts with remedy incidents,
       consist of:
     • Acknowledge Alerts: contains all alerts occurred on Xymon tool,
       which appeared on one screen monitoring




17
          for internal use only
Flow chart
                                                                                                                                                                                              Xymon
                                                                                                                                                                                          Reporting module




                                                                                                                                               g d
                                                                                                                                                   ol
                                                                                                                                           t in e n
                                                                                                                                                to
                                                                                                                                         or t s
                                                                                                                                       ep en
                                                                                                                                     er m
                                                                                                                                   th ge




                                                                                                                                                                                                             Extract reports
                                                                         Ala




                                                                                                                                 to na
                                                                            rm




                                                                                                                              ils a
                                                                                                                           t a lt m
                                                                               De
                                                                                 tec




                                                                                                                                                        Incidents details sent to Xymon
            Xymon




                                                                                                                         de fau
                                                                                    ted

     Critical view screen
                                                                                        by




                                                                                                                      rm on
                                                                                           Xym




                                                                                                                   ala ym
                                                                                              on




                                                                                                                      X
                                                         Arm
                                                         la D
                                                            ec
                                                             tete
                                                                dbX
                                                                  yy
                                                                   mno

                                                                                                                                                                                          Problem management                   SLM
                                                                                                            Xymon
                                                                                                   Service monitoring module
                                                 mE
                                                              li a
                                                            r s
                                                           at




                                                                                                                                                                                                                               Support
         m a at c e ed m e gnr oi no M




                                                       f sn




                                                Alarms sent via emails                                                                                                                             BO
                                                     ro




                                                  to monitoring team
                                                     m




                                                                                                            Xymon
                        at i t




                                                  on
                                                  ti




                                                                                                      Service Algorithm
                                                                                                      And core module
                                                               rala
                                                              sm




 Monitoring
                  t




                                                                               Open Incident thr
         r l




                                                                                                   ough Remedy


18
                                         for internal use only
Flow Chart
                                          Xymon
                                           Xymon
                                Operate 24x7 on 2 machines
                                Operate 24x7 on 2 machines
                                   located in DCO PAR
                                    located in DCO PAR




                                    IT helpdesk
                                    monitoring
                                        24x7




     DCO                                          CAS        Applicatio
                                                             n Level 3
     24x7                                         24x7


19
        for internal use only
Xymon Reporting Mechanism

     • Xymon consist of different kinds of reporting systems.
     • Customized reports for OBS which link alerts with remedy incidents,
       consist of:
     • Acknowledge Alerts: contains all alerts occurred on Xymon tool,
       which appeared on one screen monitoring




20
          for internal use only
Xymon Reporting Mechanism

     • Remedy Reports: All incidents detailed data created from IT
       helpdesk Monitoring team.




21
          for internal use only
Xymon Reporting Mechanism


     • Acknowledge Incidents: its link report between Alarms appeared on
       one screen monitoring and incidents created for these alarms.
     • All reports can be filtered by Application name , Priority, alarm date
       and time , or acknowledge date and time.
     • Future reporting will consist of trend analysis and charts for stored
       data.




22
          for internal use only
Xymon Reporting Mechanism


     • Availability Report is one of the major driver for Xymon reports
       which mainly used by support team to determine monthly KPI for the
       applications.
     • Currently used in Spectrum, Nest, IAS , Platine and Orchestre.
     • Extracted reports used by SLM team for building applications
       availability.
     • Used for first time in OBS to define service availability.




23
          for internal use only
Xymon Reporting Mechanism
                                                                    Link between
     •   Output reports depends on 99.95 for Class A applications. Availability report
                                                                   With
                                                                     and Incident
         detailed alarm history which can be stored for years.          number




24
           for internal use only
Xymon License

     • Xymon is open-source software, licensed under the GNU GPL
       license version 2. This means that You are free to use and
       customize Xymon for both personal and commercial use at no cost.




                                  Free as in Freedom
25
          for internal use only
Xymon License

     • Xymon customized to run in OBS environment, free license.
     • Hosted on 3 servers , 1 in Cairo and 2 in Paris with class H support
       from DCO.
     • Source code and hosting can be done in Orange with any
       Organization.
     • Can use external vendor for software support (Quest Software).
     • The tool core was redesigned within IT&S to be easily implemented
       as an Event Management System by the responsible team [to be
       coordinated with Event Management process owner]




26
          for internal use only
Why Xymon became different
     • Xymon is different than other monitoring tools because it collect
       many functions, process and procedure that can be a complete free
       license, customized package for event management.
     • Its unique because it can be run as Server-Client and in same time
       can run as Server Only monitoring.
     • Xymon can use any kind of connection methodology to do
       monitoring even by polling or trapping.
     • Its unique because all kind of powerful Correlation Engine
       (calculations, comparing/querying data or process), done local on
       the monitoring server which save CPU consumption and high
       memory usage of monitored CI.
     • Built to be fully integrated with ITIL guidance.
     • Customized to use FCAPS concept
     • We were able to transform Xymon from a normal monitoring tool,
       into a complete customized Event Management System.

27
          for internal use only
What could be offered

     • IP Reporting service
     • End – end data flow service.
     • Any service functionality monitoring.




28
          for internal use only
Success Stories


     • Now Xymon monitoring wide range of process
       and applications in different networks and
       different concepts.
     • Server-Client base monitoring for Spectrum
       pollers.
     • Automation monitoring for IAS, Nest,and
       Orchestre.
     • Mediation monitoring solution
     • Server based functional monitoring (smart man
       methodology) as IPER E2E.




29
          for internal use only
Xymon Reporting Mechanism

                                   Other Reports:
     •   Event log Report
     •   Top changes
     •   Snapshot Report
     •   Config Report
     •   Metrics Report
     •   Ghost Clients
     •   Notification Report




30
           for internal use only
Portal Demo




                     http://itsm.equant.com/




31
     for internal use only
Links and portals

     •   Major IT wikis added to Xymon links:
     •   http://itsm.equant.com/wiki/index.php/Main_Page
     •   http://itsm.equant.com/iperwiki/index.php/Main_Page
     •   http://itsm.equant.com/mss/index.php/Main_Page
     •   http://gini.equant.com/wiki/Main_Page




32
           for internal use only
Thank You


33
     for internal use only

Weitere ähnliche Inhalte

Ähnlich wie Enhanced event management Solution

Ibm Tivoli Endpoint Manager Executive Summary
Ibm Tivoli Endpoint Manager Executive SummaryIbm Tivoli Endpoint Manager Executive Summary
Ibm Tivoli Endpoint Manager Executive Summary
Talyam
 

Ähnlich wie Enhanced event management Solution (20)

Monitoring of computers
Monitoring of computers Monitoring of computers
Monitoring of computers
 
OPENSESAME: Unlocking Smartphone Through Handwaving Biometrics
OPENSESAME: Unlocking Smartphone Through Handwaving BiometricsOPENSESAME: Unlocking Smartphone Through Handwaving Biometrics
OPENSESAME: Unlocking Smartphone Through Handwaving Biometrics
 
Ce hv6 module 66 security convergence
Ce hv6 module 66 security convergenceCe hv6 module 66 security convergence
Ce hv6 module 66 security convergence
 
Revolutionising Site Monitoring and Maintenance
Revolutionising Site Monitoring and MaintenanceRevolutionising Site Monitoring and Maintenance
Revolutionising Site Monitoring and Maintenance
 
OroCRM CTO Yoav Kutner Presents at Meet Magento
OroCRM CTO Yoav Kutner Presents at Meet MagentoOroCRM CTO Yoav Kutner Presents at Meet Magento
OroCRM CTO Yoav Kutner Presents at Meet Magento
 
Hp open view(hp ov)
Hp open view(hp ov)Hp open view(hp ov)
Hp open view(hp ov)
 
Buisness strategy
Buisness strategy Buisness strategy
Buisness strategy
 
Ibm Tivoli Endpoint Manager Executive Summary
Ibm Tivoli Endpoint Manager Executive SummaryIbm Tivoli Endpoint Manager Executive Summary
Ibm Tivoli Endpoint Manager Executive Summary
 
Apache flink
Apache flinkApache flink
Apache flink
 
FME 2020 Unleashed: Automating
FME 2020 Unleashed: AutomatingFME 2020 Unleashed: Automating
FME 2020 Unleashed: Automating
 
Free OpManager training Part 4 - Monitoring Network Performance and Network Maps
Free OpManager training Part 4 - Monitoring Network Performance and Network MapsFree OpManager training Part 4 - Monitoring Network Performance and Network Maps
Free OpManager training Part 4 - Monitoring Network Performance and Network Maps
 
QueueMetrics Icon Agent Page and Elastix Integration
QueueMetrics Icon Agent Page and Elastix IntegrationQueueMetrics Icon Agent Page and Elastix Integration
QueueMetrics Icon Agent Page and Elastix Integration
 
Princeton-NJ-Meetup-Troubleshooting-with-AnyPoint-Monitoring
Princeton-NJ-Meetup-Troubleshooting-with-AnyPoint-MonitoringPrinceton-NJ-Meetup-Troubleshooting-with-AnyPoint-Monitoring
Princeton-NJ-Meetup-Troubleshooting-with-AnyPoint-Monitoring
 
Iommu tracing reviewed
Iommu tracing reviewedIommu tracing reviewed
Iommu tracing reviewed
 
SIEM - Your Complete IT Security Arsenal
SIEM - Your Complete IT Security ArsenalSIEM - Your Complete IT Security Arsenal
SIEM - Your Complete IT Security Arsenal
 
IBM IT Operations Analytics for z Systems
IBM IT Operations Analytics for z SystemsIBM IT Operations Analytics for z Systems
IBM IT Operations Analytics for z Systems
 
IBM IT Operations Analytics for z systems
IBM IT Operations Analytics for z systemsIBM IT Operations Analytics for z systems
IBM IT Operations Analytics for z systems
 
WinAutomation Features
WinAutomation FeaturesWinAutomation Features
WinAutomation Features
 
What's New in the Timeseries Toolkit for IBM InfoSphere Streams V4.0
What's New in the Timeseries Toolkit for IBM InfoSphere Streams V4.0What's New in the Timeseries Toolkit for IBM InfoSphere Streams V4.0
What's New in the Timeseries Toolkit for IBM InfoSphere Streams V4.0
 
IBM zAware
IBM zAwareIBM zAware
IBM zAware
 

Enhanced event management Solution

  • 1. Function Event Management Xymon 1 Mohamed Gabr for internal use only
  • 2. Content • Introduction • Xymon in Orange • Enhanced Xymon • Function Monitoring. • Alerting System. • Success Stories. • Xymon & Genergy (Remedy) • Generating xymon alarms through emails • Xymon One Screen Monitoring • Xymon Reporting Mechanism • Xymon License. • Why Xymon is different. • What could be offered. • Links and portals • Portal Demo 2 for internal use only
  • 3. Introduction • Xymon is a tool for monitoring services. It collects information about the health of each service component, and their relevant network connectivity. All those information is presented in a set of simple, intuitive web pages that are updated frequently to reflect the changes in the service status. • Xymon is capable of monitoring any sort of service, on the server, application , and data flow level, e.g. mail-servers, web-servers (both plain HTTP and encrypted HTTPS). 3 for internal use only
  • 4. Xymon history • Initial release of Big Brother was in November 1996. • Big Brother owned by Quest Software. • From 2005 until November 2008 the project was called "Hobbit" • From 2008 until now the project name changed to Xymon 4 for internal use only
  • 5. Xymon in Orange • Big Brother impended in Equant in 2002. • Big Brother managed by IBNF. • It manage lot of services and applications, showing KPI and availability reports. 5 for internal use only
  • 6. Enhanced Xymon • Changes done in Xymon core packages to meet OBS business need. • Enhanced Xymon can works both Server-Client connection or Server only connection. • With Enhanced changes on Xymon no need to add client on the remote machine. • Xymon Can monitor any machine connected to network and have IP address (Linux, Unix, Windows, Router, Switch). 6 for internal use only
  • 7. Service monitoring • Today’s monitoring concept depends on functional monitoring which is far from availability monitoring. • Functional monitoring is to be sure that the a service along with it’s components, and processes is operating and functional as designed. (many applications/systems can be up and running but not functional). 7 for internal use only
  • 8. Service monitoring • Xymon is enhanced to meet the requirement of a fully integrated Event Management system. – The tool has the capabilities to monitor, detect and log all the different events. – Based on input from application management, the tool performs the required filtering of the events and automatic determination of each event significance [information, warning or exception]. – Xymon is as well equipped with a correlation engine specifically designed to efficiently meet the business requirements in triggering the needed actions for each event while saving CPU and memory usage of the monitored CI. • Enhanced Xymon built on new IT market methodology called SMART MAN (Simulate human daily systematic checks into automation ) 8 for internal use only
  • 9. Alerting System The tool has the capabilities to monitor, detect and log all the different events. • Alarms can be alerted through: • web browser • graphic screens • Email alerting to individuals or group of mails. • SMS alerting ( not implemented yet) 9 for internal use only
  • 10. Xymon alarm generation through emails What is macros ? • Microsoft Outlook allow the user to define macros written in Visual Basic to automate certain activities. • The doc. Shows brief steps for creating macros Microsoft Word Document 10 for internal use only
  • 11. Xymon alarm generation through emails How does it work ? • The macro was developed by VB code • It’s deployed on the monitoring machine • When the monitoring agent receives any email from specific senders or to specific receivers (optional) • The macro will open a connection to xymon and generate an alarm • Alarm will then be cleared after opening the mail (mark as read) 11 for internal use only
  • 12. Xymon alarm generation through emails How it’s going to help ? • A lot of services/processes are monitored only via mail • A lot of this mails have high priority and large impact • Some of them are missed by monitoring team • Using macros to generate alarms will simply avoid missing any mails/alarms • Providing effective monitoring 12 for internal use only
  • 13. Xymon ONE Screen Monitoring • Called Critical systems. • Consist of one window with refresh rate 1 minute, show only alarms occurred. 13 for internal use only
  • 14. Xymon Admin • Based on input from application management, the tool performs the required filtering of the events and automatic determination of each event significance [information, warning or exception]. 14 for internal use only
  • 15. Xymon ONE Screen Monitoring • When monitoring team open the alert they read instruction of the action should be taken. • can acknowledge the alarm and add the incident number. • Xymon is as well equipped with a correlation engine specifically designed to efficiently meet the business requirements in triggering the needed actions for each event while saving CPU and memory usage of the monitored CI. 15 for internal use only
  • 16. Xymon & Genergy (Remedy) • Integration between Xymon and Remedy to link alarms on Xymon with tickets created for these alarms. • This help to detect missing alarms or delay between alarm time and ticket creation time. • Built on ITIL concept to link alarm priority with incident priority and class of the application. 16 for internal use only
  • 17. Xymon Reporting Mechanism • Xymon consist of different kinds of reporting systems. • Customized reports for OBS which link alerts with remedy incidents, consist of: • Acknowledge Alerts: contains all alerts occurred on Xymon tool, which appeared on one screen monitoring 17 for internal use only
  • 18. Flow chart Xymon Reporting module g d ol t in e n to or t s ep en er m th ge Extract reports Ala to na rm ils a t a lt m De tec Incidents details sent to Xymon Xymon de fau ted Critical view screen by rm on Xym ala ym on X Arm la D ec tete dbX yy mno Problem management SLM Xymon Service monitoring module mE li a r s at Support m a at c e ed m e gnr oi no M f sn Alarms sent via emails BO ro to monitoring team m Xymon at i t on ti Service Algorithm And core module rala sm Monitoring t Open Incident thr r l ough Remedy 18 for internal use only
  • 19. Flow Chart Xymon Xymon Operate 24x7 on 2 machines Operate 24x7 on 2 machines located in DCO PAR located in DCO PAR IT helpdesk monitoring 24x7 DCO CAS Applicatio n Level 3 24x7 24x7 19 for internal use only
  • 20. Xymon Reporting Mechanism • Xymon consist of different kinds of reporting systems. • Customized reports for OBS which link alerts with remedy incidents, consist of: • Acknowledge Alerts: contains all alerts occurred on Xymon tool, which appeared on one screen monitoring 20 for internal use only
  • 21. Xymon Reporting Mechanism • Remedy Reports: All incidents detailed data created from IT helpdesk Monitoring team. 21 for internal use only
  • 22. Xymon Reporting Mechanism • Acknowledge Incidents: its link report between Alarms appeared on one screen monitoring and incidents created for these alarms. • All reports can be filtered by Application name , Priority, alarm date and time , or acknowledge date and time. • Future reporting will consist of trend analysis and charts for stored data. 22 for internal use only
  • 23. Xymon Reporting Mechanism • Availability Report is one of the major driver for Xymon reports which mainly used by support team to determine monthly KPI for the applications. • Currently used in Spectrum, Nest, IAS , Platine and Orchestre. • Extracted reports used by SLM team for building applications availability. • Used for first time in OBS to define service availability. 23 for internal use only
  • 24. Xymon Reporting Mechanism Link between • Output reports depends on 99.95 for Class A applications. Availability report With and Incident detailed alarm history which can be stored for years. number 24 for internal use only
  • 25. Xymon License • Xymon is open-source software, licensed under the GNU GPL license version 2. This means that You are free to use and customize Xymon for both personal and commercial use at no cost. Free as in Freedom 25 for internal use only
  • 26. Xymon License • Xymon customized to run in OBS environment, free license. • Hosted on 3 servers , 1 in Cairo and 2 in Paris with class H support from DCO. • Source code and hosting can be done in Orange with any Organization. • Can use external vendor for software support (Quest Software). • The tool core was redesigned within IT&S to be easily implemented as an Event Management System by the responsible team [to be coordinated with Event Management process owner] 26 for internal use only
  • 27. Why Xymon became different • Xymon is different than other monitoring tools because it collect many functions, process and procedure that can be a complete free license, customized package for event management. • Its unique because it can be run as Server-Client and in same time can run as Server Only monitoring. • Xymon can use any kind of connection methodology to do monitoring even by polling or trapping. • Its unique because all kind of powerful Correlation Engine (calculations, comparing/querying data or process), done local on the monitoring server which save CPU consumption and high memory usage of monitored CI. • Built to be fully integrated with ITIL guidance. • Customized to use FCAPS concept • We were able to transform Xymon from a normal monitoring tool, into a complete customized Event Management System. 27 for internal use only
  • 28. What could be offered • IP Reporting service • End – end data flow service. • Any service functionality monitoring. 28 for internal use only
  • 29. Success Stories • Now Xymon monitoring wide range of process and applications in different networks and different concepts. • Server-Client base monitoring for Spectrum pollers. • Automation monitoring for IAS, Nest,and Orchestre. • Mediation monitoring solution • Server based functional monitoring (smart man methodology) as IPER E2E. 29 for internal use only
  • 30. Xymon Reporting Mechanism Other Reports: • Event log Report • Top changes • Snapshot Report • Config Report • Metrics Report • Ghost Clients • Notification Report 30 for internal use only
  • 31. Portal Demo http://itsm.equant.com/ 31 for internal use only
  • 32. Links and portals • Major IT wikis added to Xymon links: • http://itsm.equant.com/wiki/index.php/Main_Page • http://itsm.equant.com/iperwiki/index.php/Main_Page • http://itsm.equant.com/mss/index.php/Main_Page • http://gini.equant.com/wiki/Main_Page 32 for internal use only
  • 33. Thank You 33 for internal use only