Event Orchestration runbook

Event Orchestration runbook provides a framework for launching Orchestration actions from TrueSight Operations Management.

The Event Orchestration process starts when an operator selects Launch Orchestration Action for an event in the TrueSight Presentation Server. TrueSight Orchestration receives the event data along with action ID. TrueSight Orchestration then performs triage, creates or updates an incident (optional), creates a change request (if required), and after a change is approved, performs the remediation and validation actions. By default, TrueSight Orchestration integrates with BMC Remedy ITSM. 

At each stage of the process, a related event (associated with the main event) appears in TrueSight Presentation Server, which provides a real-time update about the Event Orchestration process. 

Orchestration actions for Service Down and Host Down type of events are available out-of-the-box. An operator can launch the Restart Service Orchestration action that appears for any event generated when a service (Windows or Linux) stops on a target server. If an event is generated where a host is no longer displayed in a network, an operator can launch the Check Host Connection Orchestration action to verify whether the host is reachable by performing ping and traceroute actions. For information about how to launch the actions and the end-to-end process for the out-of-the-box use cases, seeUsing Orchestration actions to enable triage and remediation of events.

The runbook framework can be used to add Orchestration actions for any event (only PATROL Events and Alarms supported) for which you want to perform the triage and remediation actions. 

Use the following topics to install the runbook and refer to the framework configurations for the out-of-the-box use cases.