Shulou(Shulou.com)06/03 Report--

Event management (Event Management), formerly known as event management, is one of the main processes in the ITIL operation management system. The so-called Event (state) refers to the state change that is important to the configuration item or IT service. Such as the server in the IT system.

From startup state to shutdown state, the state change of an application service from Up to down, and so on. The word Event is also used to refer to any IT service, configuration item, or monitoring tool creation notification. Events usually require action by IT operators and usually result in events being logged. In ITIL V4, event management has been updated to monitor and manage events.

Efficient operation of IT services depends on timely understanding of the state of IT systems such as infrastructure, operating systems and applications, and finding any deviations from normal and expected work. In order to take measures to correct the deviation of the system as soon as possible, this function needs to be realized through an excellent monitoring system.

People often confuse monitoring and situation management, although the two are closely related, but there is still an essential difference. Monitoring is usually carried out in a highly automated way, and the status of the monitored items can be collected actively or passively. Event management focuses on recording and managing state monitoring and state changes defined by the organization as events. Emphasize and manage state changes that are meaningful to operations management, determine the importance of events, and identify and initiate correct actions to manage them.

Monitoring is necessary for situation management, but not all monitoring leads to detection of events, and not all events have the same meaning or require the same response. Events can be graded, usually divided into information (Information), alarm (Warning), Exception (exception). Information does not need to take action at the time of identification, but data support can be provided during ex post analysis to take measures to improve services. Alarms are usually triggered under certain conditions, enabling the team to take action before the actual negative impact of the business occurs. The exception indicates that a violation of the predefined norms has actually taken place, and measures must be taken for the abnormal situation.

Monitoring tools or automated monitoring objects may generate large amounts of data, but it will be worthless without clear policies and policies on how to limit, filter, and use this data.

JITStack integrates the mainstream open source monitoring platform and combines the implementation experience in the monitoring field to create a flexible, mature and scalable visual unified monitoring solution that is vertically hierarchical and horizontally scalable. The solution takes Zabbix, Prometheus, ELK as open source monitoring platform, Grafana technology framework as open source visualization platform, combined with Ansible open source automation technology, to create a vertical monitoring omni-directional information system from hardware infrastructure, system, application status, business data, virtualized environment, container, log and so on, as well as the analysis and display of monitoring data. Horizontally, it can be realized from monitoring a few small-scale to dozens of small-scale centralized high-availability deployment, to monitoring thousands of devices of distributed monitoring system deployment.

Customer organizations use the JITStack monitoring system platform to carry out important activities in the monitoring and event management process:

Define monitoring items: determine which configuration items, devices, systems, services and their components, and determine monitoring policies.

Implement and maintain monitoring: monitoring can be realized by using the monitoring functions of the equipment and the system itself, or by using special monitoring tools. A large number of monitoring data generated by different systems, and all kinds of events are distributed in different systems. For example, hosts and network devices often have different monitoring systems, and their monitoring information and alarm are distributed in their respective monitoring systems. Collecting all kinds of monitoring data into the unified monitoring system through the JITStack unified monitoring system is helpful to simplify the complexity of situation management and improve the efficiency of operation and maintenance.

Correction and noise reduction: due to the coupling between systems, the same fault may cause different levels of related systems to produce a series of related information, alarms and exceptions, making the operation team submerged in a large number of alarms, making it more difficult to troubleshoot and deal with problems. By revising the noise reduction scheme, JITStack merges alerts of the same reason to show only a limited number of notifications, helping the operations team to focus on dealing with meaningful alerts and improve efficiency.

Establish maintenance thresholds: determine which state changes will be considered a state of affairs, and select criteria to rank the situation. The JITStack monitoring system supports 6-level security level definition by default, which meets the requirements of finer and more flexible response operation management.

JITStack monitoring system supports hierarchical multi-channel notification, combined with the reality of customer organizations, to establish and maintain policies and appropriate management of how to deal with each level of events, to implement defined thresholds, standards and policies in the JITStack monitoring platform, and to automate operation and maintenance management with automation tools.

Using the JITStack monitoring platform for monitoring and event management is of value to business and operational management:

Its important point is that the monitoring system provides a mechanism for early fault detection combined with the situation management process, which can detect the fault and assign it to the relevant team to take measures before the actual service interruption occurs. When integrating other processes of service management, such as fault management and problem management, event management can use monitoring information as input to provide basic data, showing state changes and abnormal phenomena, so that relevant personnel or teams can respond as soon as possible and improve response efficiency, so that the business can benefit from the improvement of overall operation and maintenance efficiency. Monitoring and event management have laid the foundation for automation. Operation and maintenance automation can improve operational efficiency and liberate expensive human resources into more innovative work.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.