Replace IBM Tivoli Netcool/OMNIbus

Summary

LogMatrix EventCenter  provides a highly functional alternative to the combination of Netcool/OMNIbus, Netcool/Impact, and the IBM Tivoli Security Operations Manager at a savings of up to 80% of the cost of your existing installation – with a reduction in your overall system support costs.

The replacement of Tivoli/OMNIbus Probes can also result in significant yearly cost savings.

Business Value Proposition

• Replace Netcool/OMNIbus , Netcool/Impact, and the IBM Tivoli Security Operations Manager with LogMatrix EventCenter for the cost of your annual renewal.  You'll get a solution with significantly more functionality and going forward your maintenance fees will be 20% of your current annual renewal fee.  And you can also combine EventCenter with  LogCenter – a high volume (up to 2 billion events per day with one instance of our software) log management solution.  
  
• Consolidate Netcool/OMNIbus Probes.  The LogMatrix Collector (equivalent to an OMNIbus probe) supports all types of event protocols.  In contrast, each instance of a Netcool OMNIbus probe is designed to only support one collection protocol.  That means that each event type requires you to license a separate instance of a Netcool OMNIbus Probe, whereas the LogMatrix Collector is one price for all event types.  Given changes to the IBM licensing model this can increase your costs significantly.

Technical Value Proposition   

Replace Netcool/OMNIbus and other select Netcool components

• Replacing Netcool/OMNIbus, Netcool/Impact, and the IBM Tivoli Security Operations Manager can be as simple as substituting them with the LogMatrix EventCenter  - the LogMatrix event management solution.
• Unlike the Tivoli Netcool/OMNIbus solution, the LogMatrix EventCenter is not an event browser.  That means that EventCenter reviews and correlates each event first.  Events are pre-enriched so enrichment/referential data can be used in the correlation process. Correlated events are analyzed/processed through risk-based algorithms and evaluated for their level of risk/business impact. The operator is then presented with those events that show the highest potential impact on the business. The fundamental difference here is event analysis and alerting vs. displaying individual events whereby the operator has to do the correlation manually and determine true impact. 
• EventCenter can accept any event type.  Applications, storage, security, or any transactional data is supported in the business risk/impact model. This facilitates the ability to consolidate operational views into one console and multiple point solutions into one correlation/analysis layer.
• EventCenter also has a “built-in” event and alert storage capability. Reports can be run either for SLA or problem trending purposes. Netcool requires an expensive “reporter” add on to provide this functionality.
• Lastly, a fully integrated, high volume (up to 2 billion events per day with one instance of our software) log management solution ( LogMatrix LogCenter ) is also available with EventCenter. 
   
  

                                                 Click on the image to see an enlarged version

Consolidate Netcool/OMNIbus Probes

• A single  LogMatrix Collector (equivalent to an OMNIbus probe) supports all types of event protocols such as SNMP, syslog, WMI, SDEE, etc. and higher volumes of events (up to 30,000 per second) resulting in a simpler architecture that requires less hardware to support.  It also integrates into your existing Netcool/OMNIbus environment via the LogMatrix NerveCenter component and the IBM supported Netcool Probe for NerveCenter .
• If all you need to capture is SNMP traps then you can just license the LogMatrix NerveCenter product and associated Tivoli NerveCenter Probe. 
• In either case you get to continue to use your existing Netcool/OMNIbus implementation and associated rules with the likelihood of significant cost savings.

                                                 Click on the image to see an enlarged version