Microsoft Operations Manager (MOM) 2005 Microsoft Operations Manager (MOM) 2005

Allen G. AbrahamsonPrincipal Systems EngineerNational Technology TeamApril 18, 2023

AgendaAgenda

Introduction to MOM 2005 MOM 2005 Capabilities Reporting Extending MOM

Management Packs MOM Connector Framework

Enterprise Configurations (Complex Topologies) Target Delivery Schedule

Increase IT Quality of Service Reduce IT Operational Cost Enhance Manageability of Windows

Serv

ice L

evel

Operational Efficiency

Low

Hig

h

Low High

GoalGoal

ReportingReporting Web based management reports Scheduled Publishing

Event and performance managementEvent and performance management Enterprise event collection Rules based filtering and consolidation Proactive alerting/action response

Apps/service monitoringApps/service monitoring Rules libraries Built-in knowledge-base

Enterprise readyEnterprise ready Central console Full redundancy Extensible

MOM DeliversMOM Delivers

Automation Scripts Tasks Diagnostics

Canyon ParkBuilding 11

MOSWest

Los Colinas Charlotte

ChicagoDublin

TVPUK-IDC

Madrid

Les Ulis

Milan

Stockholm

Munich

TokyoKK-IDC

Sydney

Singapore

Benelux

Silicon Valley

Proof Point: Microsoft OTGProof Point: Microsoft OTG

Regional Collection

Global Event Forwarding

Centrally manages over 9,000 servers located in 225 sites Regionally collect events and forward critical alerts to the

console

Daily OTG Event ProcessingDaily OTG Event Processing

120 Million NT Events

35 Million Events/Alerts

1100 Alerts = 180 SRs

31.5 Million events

85 Million events discarded Agent processes 1,073 rules

Forwarded

Managed Servers

Collector/Gatherer

Alert Console

Security DB

Collected

Forwarded

31.5 Million Events

3.5 Million Alerts

90% security log, 8% application log and 2% system log Alert delay to the central Console under 2 minutes globally 86 tool servers for event management

Customers’ Needs Today Customers’ Needs Today

Help me deliver Help me deliver value right awayvalue right away

Help me run Help me run operations more operations more

productively productively

Help me Help me decrease my decrease my

workloadworkload

Broader/Better Management PacksBroader/Better Management Packs Virtual Server, SharePoint, Siebel, SAPVirtual Server, SharePoint, Siebel, SAP Fully language neutralFully language neutral

State monitoringState monitoring Integrated data warehouse Integrated data warehouse Tasks and DiagnosticsTasks and Diagnostics Topological viewsTopological views

Deploys in hours not weeksDeploys in hours not weeks Support for more complex Support for more complex

environmentsenvironments Rolling upgradesRolling upgrades

Reduced Time to ValueReduced Time to Value Improved Install based on MSI

Agentless Monitoring for evaluations

Rolling Upgrades allowing management during upgrade

Pre-requisite Checker to ensure successful install

Computer Discovery through simpler discovery wizard

Enhanced OperationsEnhanced Operations Operations Console optimized for all operational data

State Monitoring down to a service subcomponent level

Nested Groups for scoping users context

Topological Views with server status

Tasks for context sensitive diagnostics

MOM Connector Framework (MCF) for full bi-directional communication to other management systems

Maintenance Mode for servers to reduce noise

Refined IntelligenceRefined Intelligence

Improved Management Packs Reporting, tasks, diagnostics Transform into XML for editing and differencing

More Management Packs

Web Based Reporting Server and Data warehouse Historical reporting Authoring environment for customizing reports

What 3rd party MPs do you want to see? Tell your vendors to write MOM MPs!

Reporting Reporting Based on SQL Reporting Service and

the MOM Data Warehouse: Long term data storage Customization Dynamic/Sophisticated reports Per report security Exporting data to other formats

Service specific reports out of box Summary reports Capacity and performance trend graphs Operations reports Resources Availability and Reliability

Capabilities View or print Publish to Web site Schedule generation offline

Extending MOMExtending MOM

Management Packs (MP) Intelligent monitoring of server applications

MOM Connector Framework (MCF) Interoperability with other management

systems

Extensible API and configuration Development of custom solutions

Management PacksManagement Packs MOM’s knowledge distribution mechanism

Monitors a wide array of server health indicators

Calls attention to critical events that require administrator intervention

Provides guidance for administrators to resolve outstanding alerts

Developed by application providers Microsoft Third Parties Custom

Management Packs (cont.)Management Packs (cont.)

Management Packs consist of: Processing Rule Groups Processing Rules Computer Group Rules and Attributes Views Relationships Text, links, and other info Tasks (new in MOM 2005) Reports (new in MOM 2005)

Improved InfrastructureImproved Infrastructure

Improved Infrastructure to support better MOM Knowledge Instance Aware monitoring Service Discovery Cluster Monitoring New reports, tasks, views and diagnostics XML based import /export MP refresh

Reporting Reporting MOM 2004 reporting is based on

SQL Reporting Service and the MOM Data Warehouse: Long term data storage Customization Dynamic/Sophisticated reports Per report security Exporting data to other formats

Service specific reports out of box Summary reports Capacity and performance trend

graphs Operations reports Resources Availability and Reliability

View or print reports on demand Publish reports to Web site Schedule generation of reports

offline

Rule: Unit of Instruction/PolicyRule: Unit of Instruction/Policy Event Processing Rules

Collection rules Filtering rules Missing event rules Consolidation rules Duplicate Alert Suppression

Performance Processing Rules Sample Data Threshold

Alert Processing Rules

Processing rule

Provider NT event log Perfmon data WMI SNMP Log files Syslog

Criteria Response Alert Script SNMP trap Pager Email

•Wheresource=DCOM and Event ID=1006

Knowledge Shipped

Company

MOM Connector FrameworkMOM Connector Framework

Interoperability Legacy management system Trouble-ticketing system

Expose MOM and MP intelligence Forwarding MOM alerts Collecting alerts from other systems Tracking which alerts have been forwarded Synchronizing alerts

MCF OperationMCF Operation

ConsoleTop LevelServer

Database

ConsoleMOMSP1

Database

Other MgmtSysteme.g. Tivoli, OpenView, etc…

MOMSP1CG

MCF/WS

Prod Con

Prod Con

MCF ArchitectureMCF Architecture

ProductConnectorsReskit

MCFSDK

* Machine boundaries not displayed

MOMSP1

MCF

Acknowledge

MOM2004

GetNewAlerts UpdateAlert IIS

PC

Tivoli PC

PC

Generic

PC

MOMSP1

Tivoli EnterpriseConsole

Other ManagementTool

MOMSP1

Enterprise ConfigurationsEnterprise Configurations

Availability and Scalability Security Partitioning Multiple management authorities Large scale management Distributed Topologies and Firewall

configurations Integrating with other mgmt tools

A Single Config GroupA Single Config Group

ConsoleManagement

Server

MOMDatabase

Agent Agent Agent

MOM Database• Storage• Reporting

Management Server• Discovery• Grouping• Aggregation

MOM Agent• Rules Engine• Providers• Responses•

UI Console• MMC Admin• Ops Console

Reporting

Availability And ScalabilityAvailability And Scalability

DBDB

MOM Server

Agents

MOM Server

Agents

MOM Server

Agents

Multiple Management Authorities (Multi Homing)Multiple Management Authorities (Multi Homing)

DB

MOM Server

Agents

MOM Server

Agents

MOM Server

Agents

DB

Config Group A Config Group B

Large Scale ManagementLarge Scale Management

MOM Server

Agents

DB

MasterConfig Group

MOM Server

Agents

DB

ZoneConfig Group A

MOM Server

Agents

DB

ZoneConfig Group B

Ale

rts A

lerts

Most scalable solution

Good for geographically dispersed agents

Network-efficient as only “Alerts” travel between zones

Currently supportstwo tier model

Also allows regional operations model

Managing Across FirewallsManaging Across Firewalls

MOM Server

DB

Agents

Master Config Group Zone Config Group

External/Internet

TCP 270

TCP 270

MOM Server

DB

Internal Domain A DMZ Domain B

Alerts

MOM ImprovementsMOM Improvements

Feature AreaScalability

Max agents per CG

Max agents per DCAMMax DCAMS per CGMax zones per Master Max nodes/ console

InternationalizationGlobalizedLocalizable

MOM

1000700466000

NONO

MOMSP1

20001000101020000

YESNO

MOM2005

35001200101035000

YESYES

MOM Improvements (cont.)MOM Improvements (cont.)

Feature AreaSecurity (AD Based)

EncryptionAuthenticationService PrivilegesScripts

Management PacksExtensibility

Across FirewallSecurity Partition

MOM

Fixed KeyAM AuthHighIn Proc

21MPs

Agents, Zones1 Per DCAM

MOMSP1

Fixed KeyAM AuthHighIn Proc

28WMI (MCF)SQL ViewsAgents, Zones1 Per DCAM

MOM2005

DynamicMutual (all)LowOut of Proc

29Richer MCFRulesDCAMSUnlimited

Target MOM 2005 ScheduleTarget MOM 2005 Schedule

Public Beta 12/03 RC Q3FY04 RTM Q4FY04

Deploys in hours not weeks Support for more complex

environments Rolling upgrades

State monitoring & diagnostics Integrated data warehouse for

off-line reporting Tasks and Diagnostics Topological views

Broader/Better Management Packs

Virtual Server, SharePoint, Siebel, SAP

Fully language neutral

“Make MOM easier to deploy.”

Customer RequirementsCustomer Requirements

“Make MOM easier to use.”

“Improve MOMknowledge.”

© 2003 Microsoft Corporation. All rights reserved.© 2003 Microsoft Corporation. All rights reserved.This This presentationpresentation is for informational purposes only. is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.OR IMPLIED, IN THIS SUMMARY.

aabraham@microsoft.comaabraham@microsoft.com