Moving Beyond Dynamic Baselines: Abnormality & Event Definition Thad White Technical Marketing

Leveraging Analytics for Events Event Reduction Analytics learns normal behavior for KPI’s, which eliminates events from poorly implemented static thresholds Actionable Events Accurate event generation based on analytics are true Operational events Get Proactive Predictive algorithm can give up to 3 hour window before breach © Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only

Threshold Types Agent Side - Event generated at the agent and sent to TrueSight PATROL Agent – Static threshold applied to parameter data at the agent. Server Side - Event generated on the TSIM server based on collected data Abnormality – Generates an informational event based on behavioral learning. Must be a KPI. Absolute - Generates an operational event. Static threshold applied to parameter data that can also be configured with baselines. Must be a KPI if using baselines. Predictive - Early warning events that get generated before an event condition occurs on an existing metric. Signature – Generates an operational event based on behavioral learning. Can also be configured with a static threshold. Must be a KPI. Patrol Agent - Event content control, TSIM scalability, good for binary type data Abnormality – Informational events based on learned behavior used in PCA as supporting information when error condition occurs. Used with performance data. Absolute – Used for creating intelligent events by combining static thresholds and baselines. Also the base for predictive. Good for performance data Signature – Creates events based on learned behavior. Good for performance data © Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only © Copyright 2017 BMC Software, Inc.

Configuration KPI’s Global Thresholds Policies © Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only © Copyright 2017 BMC Software, Inc.

Links / other things Email with this deck will be sent to all registered attendees Contact seth_paskin@bmc.com if you did not register via Communities and would like a copy A recording of the session will be posted to the event Communities page https://communities.bmc.com/events/1249 (Communities.bmc.com -> Events and User Groups -> Event Calendar -> “Moving Beyond Dynamic Baselines: Abnormality & Event Definition” Threshold Documentation https://docs.bmc.com/docs/TSInfrastructure/113/managing-global-thresholds-on-the-truesight-console-774797056.html © Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only

Q&A and Experience Sharing © Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only

© Copyright 2018 BMC Software, Inc © Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only