ITIL V3 : Event Management

Dear Readers,

From today, we are starting the study of Service Operation Processes. There are 5 processes covered under Service Operations.

Event Management:
monitor all events and take proactive action to ensure normal operation.

Incident Management:
Reactive action to resolve any disruption to services.

Request Fulfillment: 
A small change to operations which has no impact on existing operations. 

Problem Management:
Finding RCA. Resolving the causes of event. Update known error database. This may be proactive or reactive.

Access Management:
Ensuring that only authorized users can access the services.

EVENT MANAGEMENT

We can define an event as an occurrence that has potential to impact or cause deviation to the services.

Event management is a proactive approach to insure least deviation or disruption to services as agreed in SLA.

                         

Active monitoring of all the key configuration items, services and components through an automatic tool is the building block to effective event management and hence valuable service operation.

Whatever we do in service life cycle is ultimately aimed to generating value to business. Event management is also no exception but the value generated by event management is mostly indirect because it focuses on early detection of incidents.

                        

Event management in integration with other processes like capacity management can help in early responses that help in avoiding major deviations resulting in to an effective and efficient service management. An effective event management can also help to reduce the cost involved in highly trained technical resources by reducing the number and replacing them with less skilled resources.

                    

Below mentioned are the major steps of event management-

Event occurrence: 
It occurs continuously with every action withing your server, application, router, Firewall, database and all other components of your infrastructure.

Event notification: 
Notifications are generated against the event (mostly using open standard like SNMP)

Event detection: 
Notification is detected by a management tool to understand the meaning of event.

Event filtering: 
It may or may not be possible. This actually tries to categorize the notification.

Event significance: 
The event may be informational(no exception)or warning (approaching threshold) are an actual exception.

Event correlation : 
This is done by a correlation engine that analyses all the events and provide a meaningful information.

Trigger: 
The result of correlation may initiate  a response known as trigger which may in form of incident, change etc.

Response selection : 
Response may be selected according to the trigger. We will discuss it in more detail in my next post.

Review action: 
Actions are reviewed for trend analysis an to generate other meaningful information.

Close event : 
This is the formal closer of event.

Keep reading for more on Service Operation Management.

Happy Reading!!!! Cheers!!