|
|
|
Event Correlation |
|
|
ViewITpro provides several sophisticated event correlation techniques designed to eliminate alarm floods and ensure optimum response capabilities for support teams. Each of these techniques are described below: Pre-filtering ViewITpro works inversely to many network management platforms that collect all raw events, and then filters them for alarm triggers. ViewITpro pre-filters the events in their sources. This eliminates the streaming of alarms into the real-time views for NOC engineers. Alarms are generated in a manageable flow and are bona fide events that are, by definition, items that must be addressed. No screen is cluttered with "information only" or "no action required" events.
Alarm Consolidation Alarm Consolidation means that once an alarm is triggered, ViewITpro will not continue to trigger the same alarm multiple times. In jargon, it will not "page you to death." ViewITpro time stamps the alarm when it is first detected and displays how many times (incrementing up as they occur) an alarm is detected and provides a time stamp for the last time it was detected. This way it can be seen that an alarm might have been triggered 12 times over a 1 hour period instead of receiving 12 page notifications or emails. Further, ViewITpro performs Alarm Consolidation by host by default. For example, if a switch goes down and it has 48 network interfaces, ViewITpro will create one Parent alarm, any subsequent or related alarms from that host device becomes Child alarms and can be hidden from view and not create unnecessary notifications or events.
|
|