eng рус

SCEPTOR

A solution for registering and correlating of any events, collected from various sources.

This solution serves as an information bus, which receives, then processes and visualizes incidents. The system allows receiving and processing of the events that are coming from any monitoring system, multi-vendor network and IT-infrastructure with the wide set of supported interfaces and protocol adapters (ASCII, SNMP, SYSLOG, JDBC, HTTP, JMS, MQTT, STOMP). Events receiving, processing and visualization is being performed in real time. Moreover, events can be automatically enriched by data from network objects, inventory systems and other sources. Event receiving, processing and visualization branches are organized into a hierarchical structure.

Sceptor is capable of providing a way to fine-tune the correlations between events from different systems. The analysis is based on the rate of events occurrences and pauses between them, number of the same-type events, their sequence and attributes, and defined timeframe.

During setup, both manual and automatic definition of events’ quarantine can be specified. Settings specify the sequence of operations execution to enable execution of diagnostic scenarios with saving their outputs within the event context.

The system uses horizontal scaling model for the event management, which enables load balancing and load distribution between several instances.

Unified registration and reporting database is also a universal report builder. It supports table and static representations of data, stored in the database. This tool allows to build charts and reports of any complexity, as well as to perform the detailed root cause analysis for the events received by the system.

Logging allows making immediate and detailed registration of actions, performed within the system. Processing of the received information allows getting consolidated figures, analyzing trends and making required checks. Activity separation enables instant search and access to the necessary information.

Permissions engine enables flexible, precise and detailed tuning of interactions with the system using the defined set of rules. In common, a setup can be performed for specific system objects and for system scenarios.

Advanced Correlation Engine

Features:

  • Incident subscription mechanism supporting user-defined filters.
  • Incident classification based on configurable reference table with hierarchical structure.
  • Automated event priority definition.
  • Expandable “floating” attribute model for the events.
  • Notifications with escalation, based on escalation matrix, built in accordance to network-areas and severity of services fault.
  • Notification transporting (e-mail, sms, call, push), based on the time of day, day of the week and date/time.
  • SLA exceeding threshold indication.
  • Storing files in an event context.
  • Double-ended synchronization with Trouble.
  • Ticket system.

Why OS Cep?

  1. Single point for decision-making based on actual network status data.
  2. Events created by different systems are processed in a single interface.
  3. Correlation of events with different origins.
  4. Simple and convenient setup of new correlation rules.
  5. System scalability and hierarchical structure support event processing on different levels.
  6. Processing capabilities is over 3,000 incidents/sec. on a single instance.
  7. Domain specific language to setup correlation rules. It provides simple methods to implement comprehensive rules for complex event processing