peter e. greulich ibm tivoli sales enablement and customer advocate peter greulich/austin/ibm...

Peter E. GreulichIBM Tivoli Sales Enablement and Customer AdvocatePeter Greulich/Austin/[email protected]

IBM Tivoli Software | April 19, 2023 | © 2010 IBM Corporation

IBM Tivoli Software 2010

IBM Worldwide Software Sales

IBM Tivoli Event and Network Management Portfolio

2 | IBM Tivoli Software | April 19, 2023 | © 2010 IBM Corporation




Event and Network Management PortfolioIBM Tivoli Event/Fault Management Capabilities

IBM Tivoli/Netcool OMNIbus(Event/Fault Management Solution)

IBM Tivoli/Netcool Network Management

IBM Tivoli Network Manager (Network State)(Discovery, Topology Visualization for Root Cause Analysis)

IBM Tivoli Netcool Configuration Manager (Network Configuration)(Change and Configuration, Backup and Restore and Policy Management)

IBM Tivoli Netcool Performance Manager (Network Performance)(Monitor, Alert, Performance (streaming analytics) for Incident Avoidance)

IBM Tivoli Netcool/OMNIbusand Network Manager

Event/FaultManagement

ConfigurationManagement

PerformanceManagement

AvailabilityManagement

Event andAvailabilityManagement

The goal of EVENT MANAGEMENT is

EVENT CONSOLIDATION, PRIORITIZATION AND ENRICHMENT

from various management domains to improve

mean-time-to-recovery (MTTR).





Cost Reduction Revenue Increase

User Productivity Operations Productivity

* “A Return on Investment Analysis of IBM Tivoli Netcool”, IDC January 2009

Average Annual Benefit in Millions

1.7 Million

.01 Million

12.1 Million

9.7 Million

Hyperlink to report

IDC’s research indicates a high level of business value

Increased revenue by $1.7 million or $0.54 per subscriber

New services delivered to market 37% faster

Earlier and increasing revenue

Improved mean-time-to-repair adevice or system by 54%

Saved $9.5 million annually

Operations staff costs savingsof $482,162

Reduced capital expenditure by$1.3 million

Consolidated NOC’s

Reduced expenses by 70%

Annual savings of $293,801

IBM Tivoli Netcool/OMNIbus ROI Benefits





Event Consolidation





Would you drive your car in a rain storm without wipers?

Messages from IT tools can accumulate on consoles like rain on a windshield

Consolidated Operations ManagementThe Customer Problem Can Be Overwhelming!





Single user interface

Efficient and scalable

Automation

Correlation

Expansive coverage

Consolidated Operations ManagementThe Solution is Consolidated Operations Management

The problem is actually much, much worse!





It is about moving from a collection of “Productive Departments” to become an “Effective and Efficient Organization” “Single Pane of Glass” for all events

Faster problem resolution

Reduced training cost

Effective organization

Widest coverage of event sources Collect events from any source with over two hundred out-of-the-box probes to

consolidate events from virtually any management system or device


Correlation / Automation Out-of-the-box correlation

Event Deduplication

Correlate events across silos

IBM Tivoli Netcool/OMNIbusConsolidated Operations Management





Single Pane of Glass

Faster problem resolution

Reduced training cost

Widest coverage of event

sources

Correlate events across silos

Collect events from any source


Correlation and Automation

Out-of-the-box

Custom SQL-based

automations

Add network, topology-based “root cause” analysis

Network Discovery

Visualize Network Topology

Root Cause Analysis

IBM Tivoli OMNIbus and Network ManagerAdd Event Management’s “Single Pane of Glass”





Event Prioritization





This is my Mission-Critical Application!

Discovery has Defined the Relationships Monitoring Raises a Resource Alert

Enterprise Event ManagementDetermines that the “Mission-Critical Application” has failed!

Wake Someone Up!OK, to wait until 8 to 5

Which Application do I work first and when?

This is my Mission-Critical Application!

Prioritizing a Mission-Critical Event





Event Enrichment





Consolidated Operations ManagementAn Example of a Lack of Event Enrichment

Emergency Phone Operator scenario: EO: Hello, emergency operator speaking. How can I help you?

Caller: Help, I have an emergency. CLICK! (caller disconnected)

They lack information to take action to resolve the problem.

What is the problem with these scenarios?

IT Operator scenario:

144.124.108.101 Link Failed





Consolidated Operations ManagementAn Example of a Event EnrichmentEmergency Operator scenario: EO: Hello, emergency operator speaking. How can I help you? Caller: Help, I have an emergency. Come quickly. EO: What is your emergency? Caller: My house is on fire! EO: What is your address? Caller: 100 South Drive… EO: Is there anyone in the house? Caller: Yes, my two year old child is in the house. EO: Don’t worry, we are sending emergency services right

away!

Now we have “contextual” information needed to take action.

IT Operator scenario:Ecommerce One Inc Cisco ASR 1000 AZ, 3rd Floor, Rack 2 Mike Smith: 410-777-0987 SLA: 2 min

Application Name

Device Type

Contact Details

SLADetails

Device Location





IBM Tivoli Netcool/OMNIbus(Event/Fault Management Solution)

IBM Tivoli OMNIbusand Network Manager



IBM Tivoli Netcool Network Management

IBM Tivoli Netcool Performance Manager- - - - - - - - - - Network Performance - - - - - - - - - -

(Performance Optimization, Trending and Capacity Planning for Incident Avoidance)

IBM Tivoli Network Manager- - - - - Network State - - - - -

(Discovery, Topology Visualization, Availability Monitoring for Root Cause Analysis)

IBM Tivoli Netcool Configuration Manager- - - - - - - Network Configuration - - - - - - -

(Backup and Restore, Change and Configuration and Policy Management)




Event and Network ManagementIBM Tivoli’s Network Management Portfolio

The goal of NETWORK RESOURCE MANAGEMENT is to manage

NETWORK STATE, CONFIGURATION and PERFORMANCE

to improve mean-time-to-recovery (MTTR) and move to Incident Avoidance.





The Problems facing Network Administrators Network Growth Raises Capital and Operational Costs

Networking is having positive 2010 growth

“The first quarter was an exceptionally good quarter for the

Ethernet switch market…..typically, first calendar quarters

tend to be seasonally weak, but 1Q 2010 was quite different.”

Rohit Mehra, IDC analyst

New Technologies are driving the networking infrastructure

The Ethernet switch and router markets saw strong growth in the first quarter, driven by demand

for such applications as VOICE AND VIDEO OVER IP, VIRTUALIZATION and CLOUD

COMPUTING, according to research firm IDC.

“The breadth of the network market recovery is very encouraging, with all regions and market

segments making a contribution….of all enterprise IT priorities, NETWORKING CLEARLY

REMAINS A KEY BUILDING BLOCK, playing an important role in the next-generation IT

infrastructure.”

Cindy Borovick, IDC Analyst

“Virtualization, Cloud Fuel Rebound in Ethernet Switch, Router Markets”, eWeek IDC Share, May 26, 2010





Increasing number of vendors and network device types

Cisco, Juniper, Alcatel, Lucent, Nokia Siemens, Ericsson, Huawei,

Motorola, Tellabs and more. . . .

Routers, Switches, Gateways, DSLAM, Softswitches, IMS, LTE (4G),

SBCs, access points, fiber terminals and more

Increasing network complexity

100’s to 100,000’s of heterogeneous devices are being deployed

Manual processes don’t scale

Business conditions demand doing “better with less”

Each network vendor typically supports multiple operating system families

Customers typically have deployed multiple OS versions even within a

single vendor

Each network device model has its own unique set of commands and

operating system version

The Problems facing Network Administrators Network Complexity Raises Operational Costs





Caused by manual configuration errors60%

Configuration Errors largest cause of

network outages

Of engineering time spent on manual configurations

45%

Routine tasksconsuming resources

Of security breaches fromnon-compliant devices80% Inconsistent security

posture open to threat

Average configuration errors per device30Network complexity

outpacing scripting

Sources: Dataquest. EMA, Yankee, Infonetics Research

The Problems facing Network Administrators Documented Costs and Impacts of Network Complexity





IBM Tivoli Network ManagerNetwork StateDiscovery, Topology Visualization, Availability Monitoring for Root Cause Analysis





The Network is constantly changing

The network environment is dynamic

Impossible to visualize on a single screen all

the heterogeneous vendor’s networking environments

Difficult to visualize the "logical" with the “physical” network structure

Increased management complexity with new technologies such as VoIP, MPLS and VPN

Sense and Isolating that the network is the problem

Many times users know before us that the network has failed

How do we quickly sense and isolate the network as the problem

Identifying the root cause of an event storm is not easy

Things are getting worse…

Expected to do “better with less”

We are fighting fires rather than supporting new business initiatives

Does our current network state match our inventory systems.

Today’s Network Challenges





IBM Tivoli Network ManagerDiscovery and Topology Visualization for Root Cause Analysis

Scalable Flexible Network Discovery

Provides end to end visibility of heterogeneous networks

Optimize network asset utilization and extract the maximum return from existing investments

Reconcile the ‘as-built’ view of the network vs. ‘as-planned’ views stored in off-line network design,

inventory and provisioning systems

Real time web-based Network Visualization

Centralizes the management of complex networks into one user interface

Task-oriented UI helps operations staff locate, troubleshoot and resolve network problems

Integrate fault management with network availability, configuration and performance views

Accurate Monitoring and Root Cause Analysis (RCA)

Reduces the mean time to resolution of network faults and increase reliability

Automatically determines root cause separating actionable events from symptom events

Ensures staff have meaningful, contextual information at their fingertips





DMZ

Multiple Device Failure Events

ASingleDeviceFailure

ApplicationFailure

Application Slowdown

SwitchOne

IBM Tivoli Network ManagerNetwork Events without Root Cause Analysis





DMZ

ASingleDeviceFailure

Application Failure

Application Slowdown

Root Cause Event Multiple Symptom Events

SwitchOne

IBM Tivoli Network ManagerNetwork Events with Root Cause Analysis





IBM Tivoli Network ManagerUnique Networking Capabilities

Accuracy Dynamic root cause analysis (RCA) is based on

discovered network topology not static rules

End-to-end network connectivity out to the desktop

IT Operations views for “sense and isolation” of the

problem (generic device) combined with Subject

Matter Expert (SME) views for problem resolution

Flexible Discovery

Full or partial scheduling

Network change can trigger incremental discovery

Customization

Support new devices on-the-fly

Control what attributes are retrieved

Add new root cause analysis (RCA) algorithms

based on unique environments

Data Access

Discovery information available for TADDM and

3rd party integrations

Breadth of coverage

Unparalleled vendor, device and protocol support

New technology support provided at no additional

charge

Rapid new device and version deployment model

IBM Tivoli Netcool/OMNIbus integration

Lower cost of ownership with an integrated Tivoli

Integrated Portal (TIP) user environment

Shared user management

Single sign-on

Increased Operator Efficiency

Launch in-context between network health,

configuration and connectivity information

Common reporting model





Tivoli Netcool Configuration ManagerNetwork ConfigurationBackup and Restore, Change and Configuration and Policy Management





IBM Tivoli Netcool Configuration ManagerNetwork Backup and Recovery Management

When you need it the most . . . . .

Backup & restore device configurations with a non-disruptive roll back

Full historical or incremental backup and restore capability

Deploy operating system patches and updates

then automatically reapply device configurations

Achieve higher service availability by shortening

and/or eliminating configuration backup and

restore maintenance windows.





Tivoli Netcool Configuration Manager manages network device configurations by storing each devices’ specific configuration in an external, centralized common data store in near real-time to determine

Which device was touched

Who touched the device

What was changed on the device

When was the change made

Why was the change made

Centralize and automate the configuration changes in a reliable and errorless manner in the network and rollback when necessary.

Enables near real-time policy enforcement of access, security and configuration changes

Alerts on configuration changes and policy violations

IBM Tivoli Netcool Configuration ManagerNetwork Change and Configuration Management





Policies capture a company’s unique best practices and enforce or replay those policies in a consistent, repetitive and error-free manner

Out-of-the-box policies such as the National Security Agency (NSA) Router Guidelines provide faster time to value

Easy to use drag-and-drop interface Sophisticated, centralized policy repository

Establishes and enforces enterprise wide policies

Automatically discovers policy violations

Prioritizes violations by severity

Eliminates manual validation processes

Intelligent remediation Dynamic remediation actions for non-compliant conditions

Key Performance Indicators (KPI) Scores Executive level dashboard for tracking and prioritizing policy violations

Detailed violation list, prioritized by severity, for easy remediation

Scalable Policy Management to hundreds of thousands of devices

IBM Tivoli Netcool Configuration ManagerNetwork Policy Management





A change is made to a

device configuration

either out of band or

within TNCM

This configuration

change causes a

violation of a defined

policy

This triggers a trap to

the fault management

system as a (1) change

event and a (2) policy

violation

Policy violation could trigger a

remedial action to automatically

correct this violation

Policy re-evaluation

correlates and

clears events

from the fault

management system

Netcool Configuration Manager

IBM Tivoli Netcool Configuration ManagerPolicy Management Lifecycle Example

Alternatively, TNCM can submit the

remedial action into workflow process





Tivoli Netcool Performance ManagerNetwork PerformancePerformance Optimization, Trending and Capacity Planning for Incident Avoidance





Where are we going?

Network Performance

IBM Tivoli Netcool Performance ManagerThe Importance of Performance Management

If you can not measure it, you can not improve it.

GC Carlton

Things that are measured tend to improve.

John Kenneth Galbraith

Every service delivered today is connected to “the network”.

Multiple times.





Ability to monitor, alert, collect, analyse, store and visualize performance data Moves beyond availability to include volume, latency, errors, usage data over time

Complements Fault/Event Management Two faults/events are received below. By utilizing performance management data the network

organization can be proactive and address a “resource constrained” slowdown or outage.

IP is everywhere now and does not have quality built in – it needs to be monitored

Alarm AlarmAlarm Alarm

The same two traps are received . . . . but one is a much bigger problem. . . . . .

IBM Tivoli Netcool Performance ManagerMoving to Incident Avoidance





IBM Tivoli Netcool Performance Manager Network performance solution that addresses

both operational and business intelligence

requirements:

Operational requirement - provide real-time

operational data and monitoring views using the

operations console

Business Intelligence requirement – provide

business intelligence through ad-hoc reporting with

TCR/Cognos

Expansive performance management scope

End-to-end network performance reporting

Cross domain performance reporting (network,

server and application) with ITM’s Tivoli Data

Warehouse

Converged wireless and wireline (fixed/IP)

networks

Streaming analytics for real-time aggregation

and threshold monitoring

Temporal and Spatial capabilities

Proven, scalable distributed architecture





Over 150 technology packs: QOS Network Traffic Management

Latency / jitter

Carrier and Enterprise Unified Communications

IP Telephony (Call managers)

Flow Monitoring

IPFix, Netflow

MPLS

Access

WIFI, WIMAX

DSL, GPON, CMTS, MSAN

Service Aware Probes (VoIP, IPTV)

IPTV (probes, PEVQ, IP Multicast, Video servers)

IMS

CSCF / BGCF, MGW, AS, MGC, MGW

Largest set of out-of the-box management

capabilities for strategic services, technologies

and hardware vendors

Integrates Best Practices for managing a

specific technology

Includes Data Collection, KPI Definitions,

Analytics, Threshold Definitions and Reports

Consolidated Tech Pack process for fixed and

wireless

Enablement for Business Value Report Packs

(e.g. across technologies and across vendors)

Technology Pack Dev Kit (TPDK) for

Customers/Partners for rapid deployment of

custom wireless Technology Packs

IBM Tivoli Netcool Performance ManagerTechnology Packs for Rapid Technology Deployment





VoIP is becoming integral to many corporations global voice strategy

Managing the availability and performance of these VoIP environments

is viewed as a mission critical application

VoIP is becoming an “IT solution” that has to be managed

appropriately

TNPM provides VoIP performance monitoring for Cisco Unified

Communications Manager, Call Manager and Cisco

Gateway and Gatekeepers

Gatekeeper

Headquarters

IP PBX Application Servers

Router/Media Gateway

IP Phones

IBM Tivoli Netcool Performance ManagerTechnology Pack Example - Cisco IP Telephony

PSTNIP - WAN

Branch Office A

IP Phones

Branch Office B

IP Phones





IBM Tivoli Netcool Performance ManagerComposite Resources for End-User Experience

A Composite Resource models multiple wireline resources as a single entity Allows for reporting against a single network logical entity or end-to-end service path

Benefits of composite resources Better reflection of the end-user network experience (e.g. health indices)

Makes performance indicators more relevant to Service Quality Management (SQM)

More intuitive way to report on complex configuration metrics

Generate smarter alarms

NetworkNetwork Network

End-UserMission Critical

ApplicationManaging the end-to-end network experience





TNPM Network Composite ResourcesFrench Customer Solution – SLA Verification

Data Center Data Center

CSP

Who identifies the network is slow and who isolates the problem when it slows down?

IBM Tivoli Netcool Performance Manager

Raises an alert when objective is not being met

Identifies and isolates potential networking issue

Provides Predictive Analytics on the near and far horizon

Ensures Service Level Objective (SLO) met by the Communication Service Provider (CSP)

Customer CustomerCommunication Service Provider

Is this “black box” affecting my mission critical application performance?





IBM Tivoli Netcool/OMNIbus(Event/Fault Management Solution)

IBM Tivoli OMNIbusand Network Manager



IBM Tivoli Netcool Network Management

IBM Tivoli Netcool Performance Manager- - - - - - - - - - Network Performance - - - - - - - - - -

(Performance Optimization, Trending and Capacity Planning for Incident Avoidance)

IBM Tivoli Network Manager- - - - - Network State - - - - -

(Discovery, Topology Visualization, Availability Monitoring for Root Cause Analysis)

IBM Tivoli Netcool Configuration Manager- - - - - - - Network Configuration - - - - - - -

(Backup and Restore, Change and Configuration and Policy Management)




Event and Network ManagementSummary

peter e. greulich ibm tivoli sales enablement and customer advocate peter greulich/austin/ibm...

Documents

goal of event management

various management domains

customer problem

consolidated nocs

operations staff costs

annual savings

revenue improved meantime

rain storm