1. Insight & Analytics Deep Dive
WPC 2015
7/17/2018 6:15 AM
Any cloud
Insight & Analytics Deep Dive
L300
Any platform
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Operational excellence with Insight & Analytics
COLLECT AND
INDEX DATA
SEARCH AND
INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE
AND REPORT
MONITOR
AND ALERT
In a highly competitive world, organizations want to drive innovation faster to market
To support this need for speed, they have to

3. Simple and unified experience
Fast troubleshoot and auto remediate
Simple and unified experience
Gain immediate insight

4. Simple and unified experience
Challenges
Individual
monitoring
Platform and
Application
monitoring tool
Individual
monitoring
Network
monitoring tool
Security
analysis tool
Individual
monitoring
On premises datacenter
Application data
Platform data
Network data
Hosters
Individual
monitoring
Security data

5. Simple and unified experience
Solution
Security
analysis
Platform and
Application
monitoring
Network
Application data
Platform data
Network data
Security data
Individual
monitoring
Platform and
Application
monitoring tool
Security
analysis tool
Network
IT Operational excellence
Problem: Challenging to gain a unified experience as an IT admin due to multiple tools for different clouds and platforms, residing in distributed locations and services.
Solution: Single pane of control to gain insight across multiple different sources and solutions.
Hosters

6. Simple and unified experience
COLLECT AND
INDEX DATA
SEARCH AND
INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE
AND REPORT
MONITOR
AND ALERT
Expand your enterprise management with a consistent experience
Single platform for overall management
Access anywhere with a consistent user experience
Leverage existing management platform
Connect with all OMS capabilities within a single dashboard
Single pane of control for configuration, automation, monitor, protect, security
Leverage existing management platform (No rip and replace)
System Center, Zabbix, Nagios integration
OMS Gateway
Forward custom logs
Access anywhere with the same look and feel through your mobile
Mobile application for iPhone, Android and Windows Phone
Consistent user experience across OMS and Azure services
Single pane of control
Unified experience
Integrate with existing systems
Connect with isolated resources
Control from anywhere
Consistent user interface

7. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Single platform for overall management
Single pane of control for log analytics, automation, back up, site recovery and security
Unified experience to manage your resources in public, private cloud as well as traditional datacenters

8. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Windows agents
Log Analytics
Automation
Site Recovery
Backup
SCOM
Linux / FluentD
Operations Management Suite
REST Collection API
Sample list of log/metrics that OMS collects:
Custom Application/Infra logs
Windows event logs
Window performance counters
Security Event Logs
IIS Logs
ETW logs
Azure Diagnostics
SaaS services
O365
Azure Storage /
Azure Diagnostics
Event Hub
Log Stash

9. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Windows agents
Operations Management Suite
Connect to Windows computers in your on-premises infrastructure directly to OMS workspaces by using a customized version of the Microsoft Monitoring Agent (MMA).

10. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
SCOM
Operations Management Suite
Integrate Operations Manager with your OMS workspace to:
Continue monitoring the health of your IT services with Operations Manager
Maintain integration with your ITSM solutions supporting incident and problem management
Manage the lifecycle of agents deployed to on-premises and public cloud IaaS virtual machines that you monitor with Operations Manager

11. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Linux / FluentD
Operations Management Suite
Collect and act on data generated from Linux computers. Adding data collected from Linux to OMS allows you to manage Linux systems and container solutions like Docker regardless of where your computers are located—virtually anywhere.
OMI Server
(CIM Server)
Providers
Operating System
Apache
MySQL
Containers
syslog
Nagios
Zabbix
OMS Service
Linux Computer
omsconfig (DSC)
PS DSC
Firewall/proxy
Upload data (HTTPS)
Pull configuration
(https)
omsagent (FluentD)
Docker

12. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Linux / FluentD
Operations Management Suite
Supported Linux platform
5.x 32/64-bit 6.x 32/64-bit 7.x 64-bit
alpha
beta
stable
6.x 32/64-bit 7.x 32/64-bit 8.x 32/64-bit –
12.x 32/64-bit 14.x 32/64-bit
15.x 32/64-bit 16.x 32/64-bit
10.x 32/64-bit 11.x 32/64-bit
12.x 64-bit

13. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
REST Collection API
Operations Management Suite
Leverage REST collection API to ingest custom data to Operations Management Suite
Post json document to HTTPS endpoint
Ensure json is flattened and not nested
$json
[{ "slot_ID“ : 12345,
   "ID“ : "5cdad72f-c848-4df0-8aaa-ffe033e75d57",
   "availability_Value": 100,
   "measurement_Name“ : "last_one_hour",
   "duration“ : 3600,
   "ExecutionTime“ : " T20:00:00.625Z" },
{   … }]
Authenticated using workspace key to hash content
API
Log Search API
Create, manage and run searches
Alert API
Create and manage alerts
Powershell
Log Analytics cmdlets
Nouns
ComputerGroup
IntelligencePacks (solutions)
LinkTargets
SavedSearch
SavedSearchResults
StorageInsights
Workspace
WorkspaceManagementGroups
WorkspaceSharedKeys
WorkspaceUsage
OMS Linux agent (Syslog using fluentd and collectd)
Use collectd to bring metrics into OMS Log Analytics
Linux and Docker management
Monitor VMWare using OMS Log Analytics (custom logs)
HTTP Ingestion API
Documentation
Use your favorite language
Client-side bindings for c#, .NET, node js, Powershell, python
Custom data into OMS Log Analytics

14. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Leverage existing management platform
Do not rip and replace by leveraging your management platform such as System Center, Zabbix or Nagios
Operations Management Suite Gateway to connect with isolated environment

15. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Collect alerts from Operations Manager
To collect alerts from Operations Manager, you will need to
On the Operations Management Suite Onboarding Wizard: associate with your OMS subscription
If you have more than one workspace, select the workspace you want to register with the Operations Manager management group from the drop-down list, and then click Next.

16. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Collect alerts from Nagios and Zabbix
To collect alerts from Nagios and Zabbix, you will need to
Grant the user omsagent read access to the Nagios log file
Modify the omsagent.confconfiguration file (/etc/opt/microsoft/omsagent/conf/omsagent.conf).
Restart the omsagent daemon

17. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Access anywhere with a consistent user experience
Control from anywhere with iOS, Android and Windows Phone.
Consistent user interface across Operations Management Suite and Azure services

18. Fast troubleshoot and auto remediate
Simple and unified experience
Gain immediate insight

19. Gain immediate insight
Challenges
Security
analysis
Platform and
Application
monitoring
Network
Business owners?
Application owners?
Problem: Challenging to gain a unified experience as an IT admin due to multiple tools for different clouds and platforms, residing in distributed locations and services.
Solution: Single pane of control to gain insight across multiple different sources and solutions.
Infrastructure owners?

20. Gain immediate insight
Solution
Intelligence
Engine
Business owners
Application owners
Problem: Challenging to gain a unified experience as an IT admin due to multiple tools for different clouds and platforms, residing in distributed locations and services.
Solution: Single pane of control to gain insight across multiple different sources and solutions.
Infrastructure owners

21. Gain immediate insight
COLLECT AND
INDEX DATA
SEARCH AND
INVESTIGATE
MONITOR
AND ALERT
MONITOR
AND ALERT
UNIFIED
EXPERIENCE
Provide an immediate insight for your hybrid environment based on trusted sources.
CORRELATE AND ANALYZE
VISUALIZE
AND REPORT
Experienced sources of insight
Analyze petabytes of data from the cloud
Quick data collection
Automatic data collection
Custom log collection
Single source of truth
Experienced and trusted insight
Infrastructure free
Business insight

22. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Quick data collection
Automatic end point data selection and collection
Custom log collection including Windows and Linux

23. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Automatic data selection and collection
Log Analytics collects data from the Connected Sources in your OMS workspace and stores it in OMS repository. The data that is collected from each is defined by the Data Sources that you configure. Data in the OMS repository is stored as a set of records. Each data source creates records of a particular type with each type having its own set of properties

24. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Custom log collection
Logs data source in Log Analytics allows you to collect events from text files on both Windows and Linux computers. Many applications log information to text files instead of standard logging services such as Windows Event log or Syslog. Once collected, you can parse each record in the log into individual fields using the Custom Fields feature of Log Analytics.

25. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Gain immediate insight from containers
Containers are lightweight, pared-down virtual machines that can be easily provisioned, developers have created them sporadically as a solution to support their continuous delivery. As containers are being used widely in production and are exploding in numbers, demand for container monitoring has increased. A centralized approach to logging and monitoring is required. OMS Container Solution for Linux helps with these needs.

26. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Gain immediate insight from containers
With the OMS Container Solution, you’ll be able to:
Centralize and correlate millions of logs from Docker containers at scale
See real-time information about Container status, image, and affinity
Quickly diagnose “noisy neighbor” containers that can cause problems on Container hosts
Retrieve, visualize, and monitor CPU, memory, storage, and network usage with 10-second real-time performance metrics
View detailed and secure audit trail of all Docker actions on Container hosts
Two types of installation methods to support different operating system types, such as CoreOS.

27. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Experienced sources of insight
Correlate and analyze through Knowledge obtained by the trusted source such as product team, support team, MSIT, Digital Crime Unit
Single source of truth, gathering data from public cloud, private cloud, traditional datacenters

28. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions
Log Analytics solutions are a collection of logic, visualization and data acquisition rules that provide metrics pivoted around a particular problem area.

29. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions
Data collection details for OMS features and solutions

30. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions
Data collection details for OMS features and solutions

31. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions: VMware Monitoring
Aggregate all the ESXi Host logs in any location to a centralized repository for insightful analysis and monitoring. The solution consolidates and parses logs into a comprehensive dashboard which help monitor, alert, and quickly analyze the ESXi Host and VM activities.
VMware
ESXi Servers
Provide Visualization Dashboard
Monitor Event, Warning, Failure
Provides deep Log Analysis with search and trending
Assist Alerting VM
Activities
ESXi Events
ESXi Failure
SCSI/Disk
Status and Error …

32. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions
Example of JSON for Solution document {
"name":“MySolution",
"location":"eastus",
"properties": { 
               "sourceLink": {
"contentUrl":"
"solutionVersion":"1.0.0."
}  "managedResources":[{
"key":"Microsoft.Automation/AutomationAccount",
"resourceGroupName":"rg1",
"templateLink": {
"uri": "
"contentVersion": " "
}, }, { …
}], "referencedResources":[ {
"id":”resourceGroups/{rgName}/providers/Microsoft.Automation/automationAccount/{accountName}/credentials/{credName}”,
}, { } }

33. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions ecosystem example: AWS monitoring
What problem are you solving
Enterprise customers want access to Azure and AWS monitoring information in one place
Is your solution specific to a technology or broadly applied
Specific to AWS Cloudwatch (which gets data for all AWS resources)
What lifecycle areas are you addressing
Focus on monitoring
Which OMS Services fit your needs
Log Analytics initially
Runbooks and alerts in phase 2
Data read from Amazon Cloudwatch API
Which specific artifacts will you compose
Saved searches
Views
(custom data source via API – artifact is work-in-progress)
Are you targeting Marketplace or Community (github)
Publish to Github as open source to provide an example to partners

34. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions ecosystem example: AWS monitoring

35. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions ecosystem example: AWS monitoring
Customers install a VM instance
OMS
Ingestion API
AWS
CW API
Ruby binding
Python binding
PS binding
C# binding
OMS FluentD Agent
AWS I/P plugin
AWS transform plugin
OMS O/P plugin JS
Java
Enables testing of AWS value prop with preview customers.
Open source contribution credits
* Requires customers to standup infra to host the CW agent

36. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions ecosystem example: AWS monitoring
Simply Authorize AWS to send data to OMS (no infra)
AWS
CW API
Ingestion API
OMS
CW Azure Function
CW Azure Automation
CW Lambda
Integration Service
GA architecture.
Sweetspot - customers with <1000 servers
* Straight connection from one SaaS service to OMS

37. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Solutions ecosystem example: AWS monitoring
Simply authorize AWS to send data to OMS (no infra) – High Volume
AWS
CW API
Ingestion API
OMS CW
Web Service
Integration Service
GA architecture.
Sweetspot - customers with >1000 servers
* Straight connection from one SaaS service to OMS

38. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Analyze petabytes of data from the cloud
Infrastructure free, management as a service
On the fly metrics aggregation
PowerBI integration

39. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
View designer
Create visual tiles based on searches
Assemble tiles on a dashboard
Visualize your data your way
visualize-your-data-your-way/
Use OMS View Designer for SQL Server monitoring
sql-server-monitoring/
Customize your metrics chart visualization in OMS
chart-visualization-in-oms/
View Designer editing Overview Tile to show custom service’s front-end custom events and performance data

40. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
View designer
Create visual tiles based on searches
Assemble tiles on a dashboard
Visualize your data your way
visualize-your-data-your-way/
Use OMS View Designer for SQL Server monitoring
sql-server-monitoring/
Customize your metrics chart visualization in OMS
chart-visualization-in-oms/
Complete with metrics visualized in line charts, distributions of event levels for my service, and the amount of data getting for both types of events. Each visualization can drill down into OMS Log search.

41. Fast troubleshoot and auto remediate
Simple and unified experience
Gain immediate insight

42. Fast troubleshoot and auto remediate
Challenges
Security
analysis
Platform and
Application
monitoring
Network
Problem: Challenging to gain a unified experience as an IT admin due to multiple tools for different clouds and platforms, residing in distributed locations and services.
Solution: Single pane of control to gain insight across multiple different sources and solutions.
Too many alerts
Unclear with remediation
Manual process

43. Fast troubleshoot and auto remediate
Solution
Security
analysis
Platform and
Application
monitoring
Network
Filter alerts
Professional knowledge
Specific search alert
Community based
Problem: Challenging to gain a unified experience as an IT admin due to multiple tools for different clouds and platforms, residing in distributed locations and services.
Solution: Single pane of control to gain insight across multiple different sources and solutions.
Automated process
Problem
solved

44. Fast troubleshoot and auto remediate
UNIFIED
EXPERIENCE
COLLECT AND
INDEX DATA
SEARCH AND
INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE
AND REPORT
MONITOR
AND ALERT
MONITOR
AND ALERT
Solve issues as quickly as possible in an automated fashion to improve your SLA
CORRELATE AND ANALYZE
Community based automation
Auto remediate
Identify root cause with powerful search
Leverage PowerShell community for automating via PowerShell based runbooks
Leverage automation from the cloud
Connect existing alerts to auto remediate
Powerful search
Alert notification

45. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Identify root cause with powerful search
Powerful search
Alert notification

46. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Alert management

47. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Alert management

48. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Alert management

49. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Alert management

50. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Alert management

51. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Alert management

52. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Community based automation
Leverage PowerShell community for automating via PowerShell based runbooks

53. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Community based runbooks
Automate your task based on community gallery

54. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Auto remediate
Leverage automation from the cloud
Connect existing alerts to auto remediate

55. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Auto remediate based on alerts
Automate your task based on community gallery

56. SEARCH AND INVESTIGATE
UNIFIED EXPERIENCE
COLLECT AND INDEX DATA
SEARCH AND INVESTIGATE
CORRELATE AND ANALYZE
VISUALIZE AND REPORT
MONITOR AND ALERT
Auto remediate based on alerts
Setup alert rule to trigger automated task

57. What we’ve learned Fast troubleshoot and auto remediate
Simple and unified experience
Gain immediate insight
Single platform
Leverage existing platforms
Access anywhere
Quick data collection
Trusted insight
Petabytes of data
Identify root cause
Community based automation
Auto remediate

58. © 2016 Microsoft Corporation. All rights reserved
© 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.