{"id":1156,"date":"2008-01-19T17:00:40","date_gmt":"2008-01-19T23:00:40","guid":{"rendered":"http:\/\/www.redmonk.com\/cote\/2008\/01\/19\/what-one-msp-needs-barcampesm-session\/"},"modified":"2008-01-19T17:00:40","modified_gmt":"2008-01-19T23:00:40","slug":"what-one-msp-needs-barcampesm-session","status":"publish","type":"post","link":"https:\/\/redmonk.com\/cote\/2008\/01\/19\/what-one-msp-needs-barcampesm-session\/","title":{"rendered":"What One MSP Needs &#8211; barcampESM session"},"content":{"rendered":"<p>This morning, David Winter from <a href=\"http:\/\/ctiusa.com\/\">Coleman<\/a> laid out what he wants as one of the consumers of IT Management. Their needs were the same as you&#8217;d expect: we&#8217;ve got a ton of IT stuff spitting out data and we need better ways to figure out what&#8217;s wrong. We&#8217;ve got a CMDB that we fill up with data (with <a href=\"http:\/\/www.networkcomputing.com\/showitem.jhtml?articleID=165701527&#038;pgno=2\">RANCID<\/a>, which I don&#8217;t know about) and archive off-site. But here&#8217;s something that goes all whacky, he said, most of these systems can&#8217;t do fail-over when the centralized server goes down. All of the little agents out there on the network just stop working. Sure, you can MacGyver that thing somewhere, but it&#8217;s not, like, a <i>real<\/i> feature.<\/p>\n<p>The list went on, but the most interesting point was a point of feeding back knowledge from one part of your whole IT Management suite to other parts. For example, David had kind words for <a href=\"http:\/\/www.splunk.com\">Splunk<\/a> as a tool for finding events. &#8220;Events&#8221; are records of (usually) bad things happening on your computers &#8211; the email server is down, there were 50 bad logins for an account in 3 minutes (probably someone hacking), or there&#8217;s no hard drive space left on the shared drive. Those are simple examples. &#8220;Events&#8221; can be more complex and esoteric, the equivalent of &#8220;the server says it&#8217;s tummy hurts and it just puked all over the raised floor.&#8221;<\/p>\n<p>Figuring out what to do about that hurt tummy and pouring saw-dust on that puke is a large part of &#8220;event management.&#8221; Simply finding out about the events is just the start.<\/p>\n<p>So, back to what I was hearing was the interesting point: we&#8217;ve got great tools to find these events, but we don&#8217;t have much when it comes to feeding how to respond to those events back into the system. So we hear that the server&#8217;s tummy hurts. That means to give it some Pepto. But then how can we feed that knowledge back into the other tools in our IT management suite so we don&#8217;t have to do it again?<\/p>\n<p>Those with deep pockets have what we call &#8220;automation&#8221; and &#8220;runbooks&#8221; now. Otherwise, it&#8217;s back to meat-ware: have a person do it.<\/p>\n<p><b>Disclaimer:<\/b> Splunk is a client.<\/p>\n<p><!-- technorati tags start --><\/p>\n<p style=\"text-align:right;font-size:10px\">Technorati Tags: <a href=\"http:\/\/www.technorati.com\/tag\/barcamp\" rel=\"tag\">barcamp<\/a>, <a href=\"http:\/\/www.technorati.com\/tag\/barcampesm\" rel=\"tag\">barcampesm<\/a><\/p>\n<p><!-- technorati tags end --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A managed service provider tells barcampESM what they want.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,34],"tags":[],"class_list":["post-1156","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","category-systems-management"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/posts\/1156","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/comments?post=1156"}],"version-history":[{"count":0,"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/posts\/1156\/revisions"}],"wp:attachment":[{"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/media?parent=1156"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/categories?post=1156"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/redmonk.com\/cote\/wp-json\/wp\/v2\/tags?post=1156"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}