Business behavioral monitoring Use of forecast weather prediction to monitor business aberrant behavior

Transcription

1 Business behavioral monitoring Use of forecast weather prediction to monitor business aberrant behavior OVERVIEW We've come up with a business behavioral monitoring to demonstrate how OpMon can be used to act in a predictive way and identify aberrant behavior in our clients business, using the time forecast algorithm. OpMon platform allows the automatic creation of baselines, representing the normal and expected behavior of the IT environment and of the business. Historical data analysis can generate real-time alarms in behavior changes. Baselines sampling period is configurable for Aberrant behavior interface any metric being monitored. The configuration can be by week, month, year or custom calendar, so that the seasonality can be measured. The sampling frequency of a baseline is also configurable by metric. Business environment metrics monitoring is performed upon the collection of information by SNMP, WMI, system's own agents, agents from other sources, queries in databases or development of customized subagents. Notifications are sent automatically to those responsible for detecting aberrant behaviors, without the need for settings. OpMon allows companies to anticipate the problems and resolve them before having to manage impacts on business. The expected behavior or baseline allows the setting of a metric by calendar: week, month, year or custom period.

2 OpMon calculates the expected behavior (baseline) using historical data. The analyzis is done by the predictive algorithm. In order to avoid false positives and excess alerts, it is possible to configure confidence limits, making the alarms and alerts more or less sensitive to variation of this expected behavior. Expected behavior or baseline = historical behavior x predictive algorithm Business anomaly detection, calculated from the predictive algorithm, generates upper and lower confidence limits based on the historical behavior, allowing the detection of resource utilization spikes other than expected, for both up and/or down limits. With each new verification from OpMon, a forecast calculation is made, based on the settings defined by the administrator or business analyst. This model allows for a business behavioral and adaptive monitoring, getting more accurate with the passing of time and the bigger historical data. Upper Limit Baseline Lower Limit Confidence limit = standard deviation x multiplier factor HOW DOES IT WORK An example ca be applied to the monitoring of credit card companies like Visa and MasterCard. Using metrics like confirmed, denied and undone transactions, a behavior pattern can be identified for each time of day. If, in a comparative journal, a sharp increase of annulment is found, which exceeds the confidence limit previously set, an alarm of aberrant behavior is generated. You can filter, for example, by working days, which is very used by banks that have higher transaction volume in the first and fifth working day of each month.

3 OpMon dashboard model monitoring the volume of transactions. If the sales show a non-standard behavior history, alerts are generated. The great advantage of the behavioral monitoring concept is that the detection of aberrant behavior is performed in real-time, at the moment that the data arrives at OpMon. In a traditional monitoring, sending alarms is based on the limits set statically. For example: when you reach 80% of CPU use, an alarm is generated automatically. However, in the adaptive monitoring, you can use historical data, so that the threshold is set dynamically: It may be that every Friday from 6:00 pm to 10:00 pm, the CPU use is actually above 80% in some usual processing function and absolutely normal". In traditional monitoring, alarms would be generated every Friday, between 6:00 pm and 10:00 pm, whereas in the adaptive monitoring, based on historical data, this behavior would be considered normal and no false alarm would be generated. The graph above represents the breaking of a baseline or expected behavior in a specific time of the day.

4 MANAGING THE CRITICAL BUSINESS INDICATORS Having information about the main critical systems that support the company s business is not enough for IT to support the Business. The volume of information available already allows for analysis of the performance of the organizations businesses. However, there comes the challenge of how to centralize the information and how to refine it so that the decision maker can work with the data in order to produce results. We have done work with some of our clients with a high degree of maturity, which allows for centralizing information from various systems plotted in dynamic dashboards with drill-down to the granularity of information. Key features are the OpMon platform applied to the business monitoring, alarms for baseline, thresholds setting, and alarms when SLA is not OK, alarms to figure out unexpected behavior, among other advanced features. In this advanced service package, we offer dashboards of critical indicators for the business. From the expertise of our professionals, we conduct a mapping of the systems that support these processes and present, in the form of visual panels, the most relevant data to facilitate decision making. Data can generate alarms from non-achieved results (SLAs), via setting thresholds. See some of the indicators managed by our customers, according to the line of business: $ FINANCIAL SERVICES Transactional dashboards, behavioral monitoring of transactions, cards authorizing, monitoring of banks services (denied transactions and undoing). INDUSTRY BSC (Balanced Scorecard) indicators, production line, industrial components, aberrant behavior, time cuts at specific times in the industry. INFRASTRUCTURE Help Desk teams goals management / Service Desk, monitoring of Internet links, service catalog with the possibility to map all logical dependencies for delivering a service. Facilities can be organized in hierarchical, serial, contingent/parallel ways and even with interdependencies between services to discover the root cause of the problems, the impact of the incident and the affected users. RETAIL Electronic Tax Invoice, SiTef, real-time transactions, card brands, store performance, PCI (Payment Card Industry) metrics. HEALTH Availability of hospital beds (patient and managerial vision), billing, authorization for appointments, medical exams (online versus manuals), payment of insured people.

5 EDUCATION Viewing new enrollments in real time, SLA to serve students and teachers of the Help Desk team, management of electronic turnstiles. GOVERNMENT Public transparency via understandable data visualization, management accounting, governance factors and compliance with government targets. IT SERVICES AND TELECOM Help Desk / Service Desk teams goals management, monitoring of Internet links, service catalog with the possibility to map all logical dependencies for delivering a service. Facilities can be organized in hierarchical, serial, contingent/parallel ways and even with interdependencies between services to discover the root cause of the problems, the impact of the incident and the affected users. OpMon is a complete platform for Telecom and IT governance, business processes monitoring and management of networks and systems. OpMon allows you to track, in real time, the performance of the business activities and their results. It generates reports of availability, capacity and performance, SLA, SLM, among others. Allows reduction in spending on skilled professionals and reduction in loss / hour derived from system failures. Monitoring of IT infrastructure and business processes. More information: Porto Alegre/RS - Brasil Sete de Setembro Street, 745, 7º floor Phone: +55 (51) Copyright 2016 OpServices.