value of combining apm and log analytics

© 2013 IBM Corporation

Value of Combining APM and Log Analytics Ben Stern: Executive IT Specialist / Monitoring and Analytics Best Practices and

Technical Evangelist

[email protected]

© 2013 IBM Corporation 2

Agenda

• Application Performance Management (APM) Overview

• Why combine APM and Log Analytics

• APM details

• Overview of SmartCloud Analytics Log Analysis

• Demo


Please note

IBM’s statements regarding its plans, directions, and intent are subject to change or

withdrawal without notice at IBM’s sole discretion.

Information regarding potential future products is intended to outline our general product

direction and it should not be relied on in making a purchasing decision.

The information mentioned regarding potential future products is not a commitment, promise,

or legal obligation to deliver any material, code or functionality. Information about potential

future products may not be incorporated into any contract. The development, release, and

timing of any future features or functionality described for our products remains at our sole

discretion.

Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon many factors, including considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve results similar to those stated here.


Understand the

end-user experience

Follow changing

workloads

Mobile devices & smart endpoints Private, public & hybrid clouds Highly virtualized applications, storage & networks

Discovery

Quickly find application resources

End User Experience

Ensure SLA compliance

Transaction Tracking

Rapid problem isolation

Diagnostics

Infrastructure & Domain-specific deep-dive and repair

Analytics

Reduce outages & improve business performance

shared data & common services

See steps

across the cloud

Visibility, control and automation to intelligently manage critical applications in cloud, mobile, physical and hybrid environments

What is Application Performance Management


What we can do with APM:

Identify performance and availability problems for infrastructure and middleware

components

Identify applications with slow response time

Using Transaction Tracking, identify the slow component

Identify the metrics or log message that is causing the problem

What we sometimes can’t do with APM:

Provide root cause of the problem

Provide a solution to the problem

Problem Isolation Through Transaction Tracking

5


31st

Mar – 4th

April

Madrid

Log Analytics


The next big focus is Operational Big Data

Source: Analytics: The real-world use of big data, How innovative enterprises extract value from uncertain data, IBM Institute for Business Value and Saïd Business School at the University of Oxford, 2012

http://public.dhe.ibm.com/common/ssi/ecm/en/gbe03519usen/GBE03519USEN.PDF


Challenge: To diagnose service problems in applications and the infrastructure supporting them involves analyzing

incredible amounts of data

Logs Metrics Events Docs

IT Operations

App Support

Service Desk

Search and Visualize

Normalize Consolidate Collect

Insight Packs

Search


APM can help you isolate the problem

Use Transaction Tracking to identify slow

component

Use Resource Monitoring to go deeper

Use Deep Dive Diagnostics to potentially identify the

J2EE method or .NET line of code

But, sometimes knowing where the problem is

doesn’t tell you how to solve it.

Using Log Analytics and Search can help you:

Identify common patterns associated with problems

Search of solutions to the problems

Opportunity to upsell existing APM customers

Why APM and Log Analytics?


Client Value of APM Search: Expedite Problem Resolution

Value: 10 hours less downtime can save up to $50M. Better application performance saves your $ and customers.

Trying to resolve an issue with a poor performing or down application can leave you drowning in data but lacking answers that lead to quick resolution

Lack access to key data sources, especially end user experience and code-level diagnostic data with application context

Can organize data and make it readily available, but insights from that data must come from the user

Shortcomings of log analytics-only solutions Shortcomings of traditional APM solutions

• Metrics may help you determine where the problem is, but rarely provide enough information to determine root cause

• No matter how well-designed the UI is, it can’t provide a dashboard that answers every question

• It’s almost impossible to know about, much less sift through, all of the possible data sources in order to find relevant data to resolve the issue

IBM APM with Search provides…

Context (e.g metrics, application) that helps focus the search, improving the relevance and value of the results

Additional data sources to enhance and broad the search scope to all domains supporting the application, such as method-level response times

Knowledge of the application helps define right data sources and immediate availability of the data to expedite/pin-point the search results

Interactive nature of searches allows user to make inferences and generate reports on the fly

IBM’s APM offerings include search on APM data only (e.g. monitoring metrics). Full search capability is available as 90-day trial or with purchase of IBM SmartCloud Analytics.


Integrated Log Analysis identifies hits in support doc

Fly-over the log message to see the error code or message

Enter the error code or message in the search field


Integrated Log Analysis identifies hits in support doc


31st

Mar – 4th

April

Madrid

Demo

value of combining apm and log analytics

Technology