Xem mẫu
Front cover
Event Management and Best Practices
Implement and use best practices for event processing
Customize IBM Tivoli products for event processing
Diagnose IBM Tivoli Enterprise Console, NetView, Switch Analyzer
Tony Bhe Peter Glasmacher
Jacqueline Meckwood Guilherme Pereira Michael Wallace
ibm.com/redbooks
International Technical Support Organization
Event Management and Best Practices
June 2004
SG24-6094-00
Note: Before using this information and the product it supports, read the information in “Notices” on page ix.
First Edition (June 2004)
This edition applies to the following products:
Ê Version 3, Release 9, of IBM Tivoli Enterprise Console
Ê Version 7, Release 1, Modification 4 of IBM Tivoli NetView
Ê Version 1, Release 2, Modification 1 of IBM Tivoli Switch Analyzer
Note: This IBM Redbook is based on a pre-GA version of a product and may not apply when the product becomes generally available. We recommend that you consult the product documentation or follow-on versions of this IBM Redbook for more current information.
© Copyright International Business Machines Corporation 2004. All rights reserved.
Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ix Trademarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xi The team that wrote this redbook. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xi Become a published author . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii Comments welcome. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Chapter 1. Introduction to event management. . . . . . . . . . . . . . . . . . . . . . . 1 1.1 Importance of event correlation and automation. . . . . . . . . . . . . . . . . . . . . 2 1.2 Terminology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1.2.1 Event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1.2.2 Event management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1.2.3 Event processing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1.2.4 Automation and automated actions. . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1.3 Concepts and issues. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1.3.1 Event flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1.3.2 Filtering and forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 1.3.3 Duplicate detection and throttling . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 1.3.4 Correlation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 1.3.5 Event synchronization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 1.3.6 Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 1.3.7 Trouble ticketing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 1.3.8 Escalation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 1.3.9 Maintenance mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 1.3.10 Automation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 1.4 Planning considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 1.4.1 IT environment assessment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 1.4.2 Organizational considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 1.4.3 Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 1.4.4 Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 2. Event management categories and best practices. . . . . . . . . 25 2.1 Implementation approaches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 2.1.1 Send all possible events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 2.1.2 Start with out-of-the-box notifications and analyze reiteratively . . . . 27
2.1.3 Report only known problems and add them to the list as they are identified . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
2.1.4 Choose top X problems from each support area . . . . . . . . . . . . . . . 28
© Copyright IBM Corp. 2004. All rights reserved. iii
...
- tailieumienphi.vn
nguon tai.lieu . vn