1. Moving Beyond Dynamic Baselines: Abnormality & Event Definition
Thad White
Technical Marketing

2. Leveraging Analytics for Events
Event Reduction
Analytics learns normal behavior for KPI’s, which eliminates events from poorly implemented static thresholds
Actionable Events
Accurate event generation based on analytics are true Operational events
Get Proactive
Predictive algorithm can give up to 3 hour window before breach
© Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only

3. Threshold Types
Agent Side - Event generated at the agent and sent to TrueSight
PATROL Agent – Static threshold applied to parameter data at the agent.
Server Side - Event generated on the TSIM server based on collected data
Abnormality – Generates an informational event based on behavioral learning. Must be a KPI.
Absolute - Generates an operational event. Static threshold applied to parameter data that can also be configured with baselines. Must be a KPI if using baselines.
Predictive - Early warning events that get generated before an event condition occurs on an existing metric.
Signature – Generates an operational event based on behavioral learning. Can also be configured with a static threshold. Must be a KPI.
Patrol Agent - Event content control, TSIM scalability, good for binary type data
Abnormality – Informational events based on learned behavior used in PCA as supporting information when error condition occurs. Used with performance data.
Absolute – Used for creating intelligent events by combining static thresholds and baselines. Also the base for predictive. Good for performance data
Signature – Creates events based on learned behavior. Good for performance data
© Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only
© Copyright 2017 BMC Software, Inc.

4. Configuration KPI’s Global Thresholds Policies
© Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only
© Copyright 2017 BMC Software, Inc.

5. Links / other things
with this deck will be sent to all registered attendees
Contact if you did not register via Communities and would like a copy
A recording of the session will be posted to the event Communities page
(Communities.bmc.com -> Events and User Groups -> Event Calendar -> “Moving Beyond Dynamic Baselines: Abnormality & Event Definition”
Threshold Documentation
© Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only

6. Q&A and Experience Sharing
© Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only

7. © Copyright 2018 BMC Software, Inc
© Copyright 2018 BMC Software, Inc. - BMC Confidential—Internal Use Only