Detection of misbehavior and failures is one of the key capabilities of EYE. EYE uses a combination of active and passive polling to determine actual outages and it uses up-to-date connectivity information to suppress alerts for ports and devices behind the root cause. Information about detected problems goes through noise filtering before it is presented to operators in a form of actionable events and UIs that make it easy to troubleshoot and fix problems before they turn into major impacts.
Key capabilities
- Active continuous polling for status of network devices and interfaces and fast escalation of detected problems
- Continuous passive listening for problems communicated via SNMP Traps or Syslog messages
- Grouping of individual network components to Network services for automated impact assesment and escalation of problems
- Real-time rolling list of current events with the ability to annotate and acknowledge open issues
- Root Cause Analysis allows users distinguish between causes and symptoms of outages
Benefits
- Up-to-date knowledge of availability of all monitored network devices and interfaces
- Fully automated Root Cause Analysis allows administrators focus on actual point of failure and ignore collateral damage
- Instant visibililty of network alerts and problems as reported by devices and servers
- Automated assessment of impact of outages of network components and reporting for both technical and business audience
- Presentation of faults alongside detailed inventory, performance, netflow and configuration management data in a single pane of glass allows users troubleshoot problems with excellent effeciency
Root Cause Analysis
In complex networks, no fault is an island. Each creates cascades of related faults and symptoms that can quickly overwhelm the network operation center, turning screens red with undifferentiated alerts.
Root Cause Analysis was invented to make sense of the mass of error messages by calculating which ones were causes and which were symptoms. Some management tools are forced to compare 'symptom signatures' to a pre-constructed database which always needs updating. Others use complex analytical tools to deduce root causes.
EYE Root Cause Analysis is fully automated and free of user configuration because it uses EYE's continous discovery of up-to-date network topology for determination of the real point of failure.
Network Services
Fault monitoring systems traditionally allows operators observe behavior of isolated network components. Impacts of outages of indivial ports or devices then need to be manually correlated with the knowledge of status and design of additional components in the system in order to tell the actual impact.
Network Services in EYE allow grouping of inidividual ports, devices, applications and IP SLA probes into complex structured sets that can use rich impacting rules to determine how outages of individual components affect the delivery of the whole services. These services are used not only for real time alerting via dashboards and events, but they also serve as an excellent reporting vehicle that allows managers understand the quality of delivery of these services in the past and causes of their outages.
Alerts and Notifications
EYE displays information about all visible alerts or about a selected subset in a real time Event Viewer in EYE's Web UIs. The Event Viewer displays most important information about detected issues and it allows single click drill-down to additional complementary information for the fastest troubleshooting. Alerts that are no longer current are automatically removed from list of open events, and users have the ability to annotate and acknowledge known problems to further simplify the list of problems that need attention. EYE offers a set of reports that lets users drill down into history for audit and history research use cases. Events can be selectively forwarded to email addresses or to 3rd pary applications via one of the integrations APIs that are discussed in the Technology section.
