Integrating with Infrastructure Management and ProactiveNet

You can integrate with TrueSight Infrastructure Management and ProactiveNet to collect event data and perform the following functions:

Get events from Infrastructure Management (or ProactiveNet) and view metrics such as CPU utilization and memory utilization for those events.
Send events to Infrastructure Management (or ProactiveNet) while creating notifications.
Cross-launch from Infrastructure Management (or ProactiveNet) into TrueSight IT Data Analytics.

The steps required for integrating with Infrastructure Management are the same as those required for integrating with ProactiveNet. To see the features (or capabilities) supported with this integration, see the compatibility matrix at Integrating.

Additional information for Log collection users

If you plan to monitor only log collection and not event collection, you can install the Collection Station on the node hosting the Integration Service and thereby better utilize the available physical resources. For more information, see Deploying-Integration-Service-and-Collection-Station-on-the-same-node.

Before you begin

To integrate with Infrastructure Management, you need to ensure that Infrastructure Management is already registered with TrueSight Presentation Server.

Key steps to an effective integration

The high-level steps involved in performing this integration and enabling the functions available with the integration are described in the following table:

You can also cross-launch TrueSight IT Data Analytics from TrueSight Infrastructure Management (or ProactiveNet). For more information, see Cross-launching from Infrastructure Management (or ProactiveNet).

Integrating with Infrastructure Management (or ProactiveNet)

Navigate to Administration > External Configurations.
Select TSIM Configuration on the list at the top-left of your screen.
Provide the following details:
Click Save.

Searching for events and viewing metrics data for certain events

After you create an external configuration and data collector to connect with the Infrastructure Management (or ProactiveNet) server, you can perform a search to retrieve the event data. You can analyze the event data in the search results.

Note

By default, the following fields are extracted from the Infrastructure Management (or ProactiveNet) event data:

mc_host
pn_object_id
pn_object_class_id
mc_parameter
severity
mc_incident_time
mc_arrival_time

You can modify the fields extracted by modifying the bppm.reader.index.slotNames property in the custom directory for the Collection Station. For more information, see Modifying-the-configuration-files.

If all of the following fields exist in a particular data entry in the search results, you can view metrics data by clicking Show metrics to the left of the data entry.

pn_object_id
pn_object_class_id
mc_parameter

You can view the metrics chart in the section in which the timeline chart appears. You can toggle between the metrics chart and the timeline chart by clicking Show Timeline Chart Show Timeline Chart.png and Show Metrics Chart Show Metrics Chart.png , at the top-right corner of the chart that appears.

Tip

You can view metrics for events associated with the following core event slots on the ProactiveNet Operations Console (or the Infrastructure Management Console):

mc_host
mc_object
mc_object_class

When you click the Show metrics icon, you can view a chart containing values (metrics) over a certain time range for the parameter for which the event was raised. For example, you can view metrics data for CPU utilization, memory utilization, and so on. By default, the graph plots a time range of 24 hours before the event occurred and 30 minutes after the event occurred (if this data is available). The metrics chart remains available until you access metrics for the next Infrastructure Management (or ProactiveNet) event or you execute a new search.

Note

The metrics chart displays the graph for one metric at a time, because one event is associated with only one metric.

Cross-launching from Infrastructure Management (or ProactiveNet)

To enable cross-launch from ProactiveNet into TrueSight IT Data Analytics, you must select the Register for cross launch check box when you are configuring a Infrastructure Management (or ProactiveNet) server.

To cross-launch from ProactiveNet (or Infrastructure Management)

On the ProactiveNet Operations Console (or the Infrastructure Management Console), click Event Collectors on the left navigation pane.
On the right side of the window, click Tools Menu, select Launch into TrueSight IT Data Analytics, and then select the host name of the TrueSight IT Data Analytics server that is registered with ProactiveNet (or Infrastructure Management). You see only those host names that were registered for cross-launch at the time of configuring the ProactiveNet (or Infrastructure Management) server.
Provide the user credentials for logging on to TrueSight IT Data Analytics.
You can see search results for the search query, HOST="hostName" for 30 minutes before and 30 minutes after the event time.
where, hostName refers to the host name associated with the event.

Tip

You can also cross-launch into TrueSight IT Data Analytics from an event logged by using TrueSight IT Data Analytics. To do this, under Event Collectors, navigate to the Details panel of an event, and then click the Show in BMC TrueSight ITDA URL for Object URI.

Analyzing TrueSight Infrastructure Management data in IT Data Analytics

You can analyze TrueSight Infrastructure Management applications and events available on the TrueSight console in TrueSight IT Data Analytics to investigate a problem or perform root cause analysis. Before you access TrueSight IT Data Analytics from the TrueSight console, it is important that you access the TrueSight IT Data Analytics console and create a data collector for the following items:

Each device (host) included in the application from which you want to cross-launch.
Each host associated with the event from which you want to cross-launch.

Data collectors are objects that help you collect data records (or events) from the target hosts and make it available for search and analysis. For more information, see Setting up data collection. Creating data collectors beforehand ensures that you can search events after you access TrueSight IT Data Analytics from the TrueSight console.

To access IT Data Analytics from the TrueSight Console

Access the TrueSight console.
For more information, see Accessing and navigating the TrueSight console.

From the navigation menu, navigate to one of the following pages:

Navigate to	Click...
Monitoring > Applications	One of the application names, then click the action menu (vertical three dots) next to the application name and then select Launch BMC TrueSight IT Data Analytics.
Monitoring > Events	The action menu next to one of the events that you want to investigate in TrueSight IT Data Analytics, and then select Launch BMC TrueSight IT Data Analytics.
Monitoring > Applications	One of the application names, then click the Events tab. Click the action menu next to one of the events that you want to investigate in TrueSight IT Data Analytics, and then select Launch BMC TrueSight IT Data Analytics.

The system cross-launches into TrueSight IT Data Analytics, and the Search page is displayed. You can see search results for one of the following search queries depending on whether you tried to access TrueSight IT Data Analytics from an application or event.

Search query with time range	Notes
If you access TrueSight IT Data Analytics from an application
((HOST=HostName1.) \|\| HOST=HostName1) \|\| (HOST=HostName2.) \|\| (HOST=HostName2)	In the search query syntax, the following definitions apply: HostName1 and HostName2 refer to the various host names associated with the application node. ApplicationName refers to the name of the application. By default, the search query displays a list of host names (corresponding to the devices) associated with the application. If you have a large number of devices included in the application, then the default search query can be very long because it will have a large number of host names. Instead of searching for a list of host names to find event data associated with those hosts, you can search for the application context. To be able to search by the application context, you need to perform the following steps in TrueSight IT Data Analytics: Navigate to BMC_ITDA_HOME%\custom\conf\server. Edit the olaengineCustomConfig.properties file and locate the console.crosslaunch.type=host property. Change the property value from host to app. While creating data collectors for each of the devices (hosts) associated with the application, add a tag named ApplicationContext with the tag value set to the application name. For more information, see Creating data collectors in Log Analytics.. Performing the preceding steps in TrueSight IT Data Analytics is optional, however, this can be useful to simplify the search query.
(ApplicationContext="ApplicationName")
Time range: 30 minutes before and 30 minutes after the last time when the application state changed.
If you access TrueSight IT Data Analytics from an event
(HOST=hostName1 .) \|\| (HOST=HostName1*)	In the search query syntax, hostName1 refers to the host name associated with the event.
Time range: 30 minutes before and 30 minutes after the event time.
If you access TrueSight IT Data Analytics from an event that is directly associated with the application
Accessing TrueSight IT Data Analytics from an event directly associated with the application is similar to accessing TrueSight IT Data Analytics from an application because an application level event is associated with a group of hosts or devices and not with a specific device or host. Therefore, use the same search query parameters that are used for cross-launching from an application. For search query parameters, see the search query and notes on accessing Log Analytics from an application.

Where to go from here

Create data collectors to start collection of event data from ProactiveNet (or Infrastructure Management). For more information, see Monitor using external configuration data collector.

Add notifications on the event data collected and subsequently log events in ProactiveNet (or Infrastructure Management). For more information, see Setting-up-notifications-to-create-alerts-or-reports.

Create a host profile to inherit host-level tags and group access permissions of the host on which ProactiveNet (or Infrastructure Management) is installed, for use when creating data collectors. For more information, see Setting-up-host-profiles-for-target-computers.