Infrastructure Management cells and Knowledge Base
Cells are event-processing engines that store all events and data in memory as well as on disk in near real-time. The following sections describe the types of cells used in Infrastructure Management, the functions a cell performs, and how the Knowledge Base (KB) manages the event management functions of the cell.
Infrastructure Management cell types
There are three types of cells used in Infrastructure Management:
- Server Cell—Functions as part of the BMC TrueSight Infrastructure Management Server to provide local event and service impact management. The Infrastructure Management Server Cell also associates events with service model components and calculates the components’ statuses.
- Event Management Cell (Remote Cell)—Installed separately from the Infrastructure Management Server, a Remote Cell functions as part of a larger distributed network of cells that propagate events to the Server Cell. If service impact management is implemented, a Remote Cell also associates events with service model components and calculates the components’ statuses. If service impact management is not implemented, then the cell is simply an event management cell. Networks of Remote Cells can be organized to serve any business hierarchy (such as geographical, functional, or organizational) or configured to meet technical issues (such as network or system limitations). A Remote Cell can be configured for high availability by configuring a primary cell server and a secondary cell server to be used for failover if the primary cell server fails.
A cell runs either as a Windows service or as a UNIX daemon on supported platforms.
Functions of a cell
An Infrastructure Management cell performs the following functions:
- Receives source event data from an adapter, an integration, another cell, an API, the Rate processor, or the cell Command Line Interface (CLI).
- Analyzes and processes events according to the event management rules and policies defined in its Knowledge Base.
- Responds to events by executing actions, as defined in scripts or programs in its Knowledge Base.
- Propagates selected events to specified destinations (typically, other cells) and updates propagated events when those events are changed at the event source or event destination.
- Records the event operations performed on an event.
- Relates an event to the appropriate service model component.
- Computes the status of service model components and propagates their status to the related components using the designated status computation models.
The behavior of a cell is governed by its Knowledge Base.
Functions of the Knowledge Base
A Knowledge Base (KB) defines the behavior of an Infrastructure Management cell (also referred to as an instance). The Knowledge Base instructs the cell how to format incoming event data, process received events, and display events in the operator console. KB classes define what information is contained in each event. KB rules define how the events are processed. The KB is similar to a script and the cell is the engine that runs the script.
A KB is installed with each cell. The KB files are loaded by a cell at start time. During installation of a cell, a KB that serves as a template for all cell KBs is created for the cell. The KB provides the cell with the data definitions, data instances, collector definitions, and rules for a fully functional environment in which to process events and service components. You must specify a KB for any new cell you create.
Although many KBs can exist within a distributed Remote Cell environment, each cell can be associated with only one KB at a time.
You can modify the KB to customize its behavior in your environment.
Components of a Knowledge Base
The KB is a compiled collection of files, such as event processing rules, class definitions, and executables, organized in a directory structure. A KB includes the following elements:
- Event classes—Define the types of events to accept and classify source event data for processing.
- Data classes—Define the classes and slots of dynamic data instances and service model component instances.
- Dynamic data—Function as contextual variables that can provide data values to rules and policies during event processing.
- Global records—Persistent structured global variables that maintain data values across all phases of event processing.
- Event management rules—Event processing statements that use the data associated with an event, data instances or records to determine if, when, and how to respond to new events or event modifications.
- Event management policies—One of several generic rule types that perform actions against events that meet selection criteria specified in an associated event selector. An event management policy selects the events that you want to process, defines the processes needed to manage those events, and schedules when the events are processed.
- Event collectors—Filters that query the event repository and display the results in a cell event list in an organized manner.
- Action executables—Executable programs or scripts that perform an automated task on a particular event.
In addition, if service impact management is enabled, the KB also includes a reference copy of the following elements:
- The BMC Atrium Configuration Management Database (CMDB) Common Data Model (CDM) Service class definitions used in the service model of a cell.
- The service model of the cell, published by a BMC Impact Publishing Server.
For more information about the cell Knowledge Base, see Working with the Knowledge Base.