Microsoft Operations Management Suite

Microsoft Operations

Management SuiteEngin ÖzkurtTechnology Solutions Specialis,Cloud Platform

SimplicityFlexibilitySpeed

• Connects to existing tools• Custom solutions and data• Traditional and modern

cloud

• Easy-to-use dashboards• Reduced management

infrastructure• Cohesive solutions

• Setup within minutes• Faster troubleshooting • Real-time innovation

Ideologies for shifting investments

Straddling two worlds: challenges for modern management

AND Cloud model is geared for speed• Developers have a critical business role• Micro-services and modern apps create new

complexity• The server is no longer the center point• Application data is business data

Traditional systems still require traditional management

SII

WINDOWS, LINUXAZURE, AWS,

PRIVATE CLOUDS

Modern IT investmentsPACKAGINGDEVOPS TOOLING

PATCHING

CONFIG MONITORING

ORCHESTRATION

ALERTSDISCOVERYANALYTICS

SUBSCRIPTIONCOST POLICY

BACKUP RECOVERY

DETECT PREVENT

Private or hosted third-party cloud, Rackspace, etc.

VMware WINDOWSLINUX

HYPER-V WINDOWSLINUX

VMware WINDOWSLINUX


Public cloud Azure or AWS

Microsoft hybrid IT managementSimplified guest and workload management, both on-premises and in the cloud

MicrosoftOperations Management Suite

On-premises with System Center

WINDOWS

LINUX


VMWare WINDOWSLINUX

Microsoft Hybrid Management Syste

m Center

On-premises

Operations Management

Suite

Any cloud

VisibilitySecurity

ControlProtection

Any platform

Key Scenarios• Insight and Analytics• Configuration and Automation• Application Management• Security & Audit• Backup & Disaster Recovery

Insight and analytics

Any cloud

Any platform

Simple and unified experience

Gain immediate insight

Fast troubleshoot and auto remediate

Simple and unified experienceChallenges

On-premises datacenter

Application dataPlatform data

Network data

Security data

Individualmonitoring




Hosters

Platform andapplication monitoring tool

Security analysis tool

Network monitoring tool

Simple and unified experienceSolution

Hosters

Application dataPlatform data

Network data

Security data





Platform andApplication monitoring tool

Security analysis tool

Network monitoring tool

Security analysis

Platform andapplication monitoring

Network monitoring

IT operationa

l excellence

Single platform for overall managementSingle pane of control for log analytics, automation, back up, site recovery, and security

Unified experience to manage your resources in public, private cloud, as well as traditional datacenters

COLLECT AND INDEX DATA

SEARCH AND INVESTIGATE

CORRELATE AND ANALYZE

VISUALIZE AND REPORT

MONITOR AND ALERT

UNIFIED EXPERIENCE





MONITOR AND ALERT

UNIFIED EXPERIENCE

Windows agentsSCOM

Linux / FluentD

Event Hub Log Stash

Sample list of log/metrics that OMS collects:• Custom Application/Infra

logs• Windows event logs• Window performance

counters• Security Event Logs• IIS Logs• ETW logs• Azure Diagnostics

Azure Storage / Azure Diagnostics

REST Collection API

SaaS servicesO365

Operations Management Suite

• Log Analytics• Automation• Site

Recovery• Backup





MONITOR AND ALERT

UNIFIED EXPERIENCE


Windows agents

https://azure.microsoft.com/en-us/documentation/articles/log-analytics-windows-agents/

Connect to Windows computers in your on-premises infrastructure directly to OMS workspaces by using a customized version of the Microsoft Monitoring Agent (MMA).

https://azure.microsoft.com/en-us/documentation/articles/log-analytics-windows-agents/





MONITOR AND ALERT

UNIFIED EXPERIENCE


SCOM

Integrate Operations Manager with your OMS workspace to:• Continue monitoring the health of your IT services with Operations Manager• Maintain integration with your ITSM solutions supporting incident and problem management• Manage the lifecycle of agents deployed to on-premises and public cloud IaaS virtual machines that

you monitor with Operations Manager





MONITOR AND ALERT

UNIFIED EXPERIENCE

Linux / FluentDOperations Management

Suite

OMI Server(CIM Server)

Providers

Operating SystemApacheMySQL

Containers

syslog

Nagios

Zabbix

OMS

Serv

ice

Linux Computer

omsconfig (DSC)PS DSC

Firew

all/p

roxy

Upload data (HTTPS)

Pull configuration

(https)

omsagent (FluentD)

Docker

Collect and act on data generated from Linux computers. Adding data collected from Linux to OMS allows you to manage Linux systems and container solutions like Docker regardless of where your computers are located—virtually anywhere.





MONITOR AND ALERT

UNIFIED EXPERIENCE

Linux / FluentDOperations Management

Suite

5.x 32/64-bit

6.x 32/64-bit

7.x 64-bit

5.x 32/64-bit

6.x 32/64-bit

7.x 64-bit

alphabetastable

5.x 32/64-bit

6.x 32/64-bit

7.x 64-bit

6.x 32/64-bit

7.x 32/64-bit

8.x 32/64-bit

2013.09 – 2015.09

12.x 32/64-bit

14.x 32/64-bit

15.x 32/64-bit

16.x 32/64-bit

10.x 32/64-bit

11.x 32/64-bit

12.x 64-bit

Supported Linux platform





MONITOR AND ALERT

UNIFIED EXPERIENCE

REST Collection APIOperations Management

Suite

Post json document to HTTPS endpointEnsure json is flattened and not nested

$json = @" [{ "slot_ID“ : 12345, "ID“ : "5cdad72f-c848-4df0-8aaa-ffe033e75d57", "availability_Value": 100, "measurement_Name“ : "last_one_hour", "duration“ : 3600, "ExecutionTime“ : "2016-05-12T20:00:00.625Z" }, { … }] "@

Authenticated using workspace key to hash content

APILog Search API• Create, manage and run

searches

Alert API• Create and manage alertsPowershellLog Analytics cmdlets

Nouns• ComputerGroup• IntelligencePacks

(solutions)• LinkTargets• SavedSearch• SavedSearchResults• StorageInsights• Workspace• WorkspaceManagementGro

ups• WorkspaceSharedKeys• WorkspaceUsage

Leverage REST collection API to ingest custom data to Operations Management Suite

https://azure.microsoft.com/en-us/documentation/articles/log-analytics-log-search-api/

https://azure.microsoft.com/en-us/documentation/articles/log-analytics-api-alerts/

https://msdn.microsoft.com/library/mt188224.aspx

Do not rip and replace by leveraging your management platform such as System Center, Zabbix or Nagios

Operations Management Suite Gateway to connect with isolated environment

Leverage existing management platform





MONITOR AND ALERT

UNIFIED EXPERIENCE

Control from anywhere with iOS, Android, and Windows Phone.

Consistent user interface across Operations Management Suite and Azure services

Access anywhere with a consistent user experience





MONITOR AND ALERT

UNIFIED EXPERIENCE




Security analysis

Platform and

application monitoring

Network monitoring

Gain immediate insightChallenges

Business owners?

Application owners?

Infrastructure

owners?

Intelligenceengine

Gain immediate insightSolution

Business owners

Application owners

Infrastructure owners





MONITOR AND ALERT

UNIFIED EXPERIENCE

Data collection details for OMS features and solutions

SolutionsData type Platform Direct Agent SCOM agent Azure Storage SCOM required? SCOM agent data sent

via management group Collection frequency

Key Vaults Windows 10 minutes

Network Application Gateways Windows 10 minutes

Network Security Groups Windows 10 minutes

Office 365 Windows on notification

Performance Counters Windows as scheduled, minimum of 10 seconds

Performance Counters Linux as scheduled, minimum of 10 seconds

Service Fabric Windows 5 minutes

SQL Assessment Windows 7 days

SurfaceHub Windows on arrival

Syslog Linux from Azure storage: 10 minutes; from agent: on arrival

System Updates Windows at least 2 times per day and 15 minutes after installing an update

Windows security event logs Windows for Azure storage: 10 min; for the

agent: on arrival

Windows firewall logs Windows on arrival

Windows event logs Windows for Azure storage: 1 min; for the agent: on arrival





MONITOR AND ALERT

UNIFIED EXPERIENCE

Solutions: VMware Monitoring

VMwareESXi Servers

Aggregate all the ESXi Host logs in any location to a centralized repository for insightful analysis and monitoring. The solution consolidates and parses logs into a comprehensive dashboard which help monitor, alert, and quickly analyze the ESXi Host and VM activities.

• Provide Visualization Dashboard• Monitor Event, Warning, Failure• Provides deep Log Analysis with

search and trending • Assist Alerting

VM Activitie

sESXi

FailureSCSI/Disk

Status and Error

ESXi Events

…





MONITOR AND ALERT

UNIFIED EXPERIENCE

Solutions ecosystem example: AWS monitoring

Correlate and analyze through knowledge obtained by the trusted source such as product team, support team, MSIT, Digital Crimes Unit

Single source of truth, gathering data from public cloud, private cloud, traditional datacenters

Experienced sources of insight





MONITOR AND ALERT

UNIFIED EXPERIENCE

Infrastructure free, management as a service

PowerBI integration

On-the-fly metrics aggregation

Analyze petabytes of data from the cloud





MONITOR AND ALERT

UNIFIED EXPERIENCE




Security analysis

Platform and

Application monitoring

Network monitoring

Fast troubleshoot and auto remediateChallenges

Manual process

Unclear with

remediation

Too many alerts

Security analysis

Platform and

Application monitoring

Network monitoring

Fast troubleshoot and auto remediateSolution

Problem solved

Automated process

Filter alerts

Specific search alert

Professional knowledge

Community based

Powerful search Alert notification

Identify root cause with powerful search





MONITOR AND ALERT

UNIFIED EXPERIENCE

Alert managementCOLLECT AND INDEX

DATASEARCH AND INVESTIGATE



MONITOR AND ALERT

UNIFIED EXPERIENCE

Alert managementCOLLECT AND INDEX

DATASEARCH AND INVESTIGATE



MONITOR AND ALERT

UNIFIED EXPERIENCE

Leverage PowerShell community for automating via PowerShell-based runbooks

Community-based automation





MONITOR AND ALERT

UNIFIED EXPERIENCE

Automate your task based on community gallery

Community based runbooks





MONITOR AND ALERT

UNIFIED EXPERIENCE

Leverage automation from the cloud

Connect existing alerts to auto remediate

Auto remediate





MONITOR AND ALERT

UNIFIED EXPERIENCE





MONITOR AND ALERT

UNIFIED EXPERIENCE

Setup alert rule to trigger automated task

Auto remediate based on alerts

Security & Compliance Deep Dive

Any cloud

Any platform

Holistic Security

IntelligentDetection

Rapid Investigation

Detect Security Risks and Threats Across Your

Environment

Antimalware and Update Assessments• Missing updates

• Antimalware Assessments• Malware reports

Identity and Access• Failed Logons• Password changes• Current activity

Baseline Assessment

• Over 180 recommended security configurations

• Correlation with Microsoft best- practices

Notable Issues• Included common issues• Customizable• Severity and priority

Security Audit• Easily accessible security event

logs• Searchable, actionable• Exportable via API

Collect security data from virtually any source

View network communication to known malicious IPs and changes in traffic patterns

Easily find and export the data you need for audits

bHolistic Security


Rapid Investigation

Threat Intelligence• Microsoft security intelligence and

leading intelligence vendors• Detects communication to known

malicious IP addresses

Security Analytics• Behavioral analytics• Event correlation• Continuously updated

Detect communication to known malicious IPs with threat intel

Detect more threats using advanced analytics

Public Preview

Integrate security data from partners, like Cisco ASA firewall logs

Public Preview

Integrate threats detected by Microsoft Advanced Threat Analytics

bHolistic Security


Rapid Investigation

Search• Rapid search across all

operations and security data

Threat Intelligence• Interactive map• Built-in reports with insight into

attacker’s know techniques and objectives

Create alerts that trigger notifications and automation

Microsoft Azure Log Integration enables integration of Azure logs into Security Information and Event Management (SIEM) systems.

OMS Security Architecture

Logs

Logs

Logs

System Center Operations Manager (SCOM)

Direct Windows or Linux agents

Web

Alerts viaMail,

WebHooksAutomation

Queries

Data export

API

On-prem / private cloud Any public cloud

Azure

Normalization & Enrichment

Mobile

Detection engine

SCOM agents

Syslog/

CEF

Security MPs

Threat Intelligence feeds

Security products

IP to Geo mapping

Detections

MICROSOFT CONF IDENT IAL – INTERNAL ONLYHybrid managementReliable, highly available,

scalable

Manage any cloud & on prem

Process automation & DSC PowerShell & Graphical

authoring Integrate systems Windows & Linux

Hybrid Worker

SCO

Orchestrator

SMA

Hyper-VVMWareOpenStack

AzureAWSService Providers

Azure Automation

Azure Automation

OMS

Continuous services

Hybrid automation

Consistent enterpriseSpeed

Continuous services

Issue: Resolving infrastructure and application issues can be time-consuming and can impact SLA.

With OMS: You can take immediate action to rectify errors by triggering scripts on demand in the cloud or in your local datacenter.

You can enable responsive IT services and deliver continuous application availability across your IT environment, with improved SLA.

Speed Choice Control

Continuous services

Hybrid automation

Consistent enterpriseChoice

Hybrid IT automation

Issue: Managing the IT lifecycle activities in today’s IT environment across platforms and clouds can be challenging and chaotic.

With OMS: You can simplify provisioning, deployment, monitoring, and protection and also manage change— no matter what type of IT resources you have or where they are located—by adopting proactive automation.

You can enable efficient IT operations and deliver flexible automation across your heterogeneous IT environment.


• Repeatable plans• Order sequencing• Customizable checkpoints

• Multi-platform support• Community gallery• Partner ecosystem

• Ready-made runbooks • Anywhere triggers• Native webhooks

Integratedsolutions

Orchestrated recovery

Capabilities for responsive IT services

Automated remediation


Continuous services

Hybrid automation

Consistent enterprise Control

Consistent enterprise

Issue: Deploying infrastructure and application resources with the required configurations and maintaining their state can be tedious and error prone.

With OMS: You can manage the state of your IT resources by automatically applying, monitoring, and updating configurations.

You can enable compliant IT resources and manage change across your IT environment with ease.


Güvenlik

Dijital Sertifika

HTTP

S

Microsoft Azure

Şifreleme Anahtarıc4807883-b728-4c57-b18b-368f91286799-7883-b76

Yedeklenen veri.

Yedeklenen veri sizin ortamınızda şifrelenir.

• Veri, ortamınızdan çıkmadan önce şifrelenir.• Şifreleme anahtarı sadece sizde bulunur.• Şifrelenmiş veri ayrıca HTTPS ile taşınır.

Azure Backup Agent

Veri

Windows Server Backup

W

Vault 1 Vault 2 Vault 3

Microsoft Azure Depolama

Yüksek oranda dayanıklı ve ölçeklenebilirVeriler birden fazla kopya şeklinde depolanır

Dev bir Hard Disk gibi, ama daha iyi…

Coğrafi seviyede çoğaltma (Geo-replication)

West DC

East DC

> 400 miles

Microsoft Azure StorageBölgesel felaketlere karşı

dayanıklı

Site Recovery

Any cloud

Any platform

Causes of IT “disasters”

43%

31%

16% 15%12% 10% 9%

4% 1%

13%

3% 1% 1% 1%5%

IT ha

rdware

failu

re

Network

failur

e

IT sof

tware

failur

e

Hurrica

neFlo

od

Winter

storm Fire

Earth

quake

Human

error

Maliciou

s outs

ider

Maliciou

s insid

er

Chemica

l spill

Terror

ism Other

Source: Forrester “The State of Business Technology Resiliency Q2 2014”, May 12, 2014

Operational failures

Natural disasters Human-caused events Other

Power

failur

e

Common challenges• Difficult to protect complex

environments and applications

• Extensive recovery times result in loss of revenue

• Testing DR policies can become disruptive to production workloads

• Protecting an entire environment can be costly

Overcome challenges• Protection of any platform,

regardless of location• Certified support for

Microsoft and third-party applications

• Class-leading RPO and RTO • Test DR plans without

impacting your business• Protect critical and lower tier

applications at lower costs

Site Recovery

Beyond DR

Why Microsoft

OMS Site Recovery technology

• Remote health monitoring

• Multi-tier, application-consistent recoveries

• No-impact DR testing

• Automated replication and policy-based protection

• One-click orchestrated recovery

• Seamless integration with Azure services

SaaS-based disaster recovery

Simplified deployment• Quick and easy• Recovery on your terms • SaaS-based offering

Communication and

replication

Replication

channel

Enterprise-grade protection• Customizable policies • Application aware • Multi-VM consistency

Test without impact• Non-disruptive testing• Verify recovery plans• Gain peace of mind

Extend your solution• Utilize integrated Azure

services• Add automated scripting

using Automation• Connect via ExpressRoute

Site Recovery

Beyond DR

Why Microsoft

Seamless migrationno matter the source• Migrate individual

applications or entire datacenters

• Leverage Azure’s hyper-scale model

• Auto convert AWS, VMware, and other workloads

Site Recovery

Why Microsoft

Beyond DR

Why DR using OMS + Azure?

Leverage a native, first-party disaster recovery solution from Azure, a trusted cloud service provider

Support heterogeneous environments—Hyper-V, VMware, Windows, Linux, and physical servers—with Azure’s cross-platform functionality

Quickly achieve a hybrid strategy by replicating on-premises workloads to Azure

Single provide

r

Simplicity

Hybrid

design

OMS’s availability solutions provide a direct path to the cloud, unlocking the innovation it delivers

Unlocks Azure

Services

Supported and certified by workload teamSupported – tested by Microsoft

*SAP site-to-Azure for un-clustered setups

**Exchange 2013 non-DAG setups

***Oracle Stand-alone – Oracle Data Guard based solution coming soon

WorkloadHyper-V VMwareSite-to-site Site-to-Azure Site-to-site Site-to-Azure

AD, DNS Infrastructure

Web AppsIIS

SQL

SCOM

SharePoint

SAP*

Exchange**

Remote Desktop/VDI

Linux (OS and apps)

DynamicsAX

CRM COMING SOON COMING SOON

Oracle***

Windows File Server

(Excluding Horizon)

Supported applications

VMware site-to-Azure

Data channel

Microsoft Azure Site Recovery

Process serverUsed for caching, compression, and encryption

Config serverUsed for centralized management

Mobility serviceIn-guest lightweight mobility service. Captures all data writes from memory

Azure

Customer 1 Customer 2

Customer 1Source: VMware VMs and physical

servers


servers

Hyper-V site-to-Azure


servers


servers

Data channel

Microsoft Azure Site Recovery

Azure

Customer 1 Customer 2

SCVMMCoordinates management with ASR

Config serverUsed for centralized management

Master targetUsed as a repository and for retention

Hyper-V replicaHost-level replication software

OMS Lisanslaması

Insight & Analytics

Automation & Control

Security & Compliance

Backup

Site Recovery

OMS E1 OMS E2

$15/node

$10/node

$15/node

$10/node

$25/node

Pay-as-you-go(Can use monetary commit)

Suites – annual pre-commitment(Cannot use monetary commit)

System Center’ın tüm bileşenlerini içerir

$20/node

$35/node

System Center’ın tüm bileşenlerini içerir

(All prices are monthly prices without any customer discounts)

Yıllık ön ödeme taahhütü ile

System Center bileşeni

beraberinde gelmekte

SCOM

SCCMOrchestrator Service Manager

DPMVMM

-

91

Kullandığın kadar öde(Azure Monetary Commitment)

Paketler (Yıllık ön ödeme gerektirir)

(Tüm fiyatlar aylıktır ve herhangi bir indirim uygulanmadan önceki fiyatlardır.)

Servis Fiyat (aylık)

Öngörüler ve Analitik (Log Analytics servisi dahildir)

$15/ node

Otomasyon ve Kontrol $10/ nodeGüvenlik ve Uyumluluk veyaAzure Security Center

$15/ node

Yedekleme $10/ nodeFelaket Kurtarma – E2E $16/ nodeFelaket Kurtarma – E2A

$25/ node

Log Analizi $2.3 per GBOtomasyon $0.002 per min

Paket Fiyat (aylık)Öngörüler ve Analitik Paketi• Öngörüler ve Analitik • SCOM

$15/ node

Otomasyon ve Kontrol Paketi• Otomasyon ve Kontrol• SCCM, SCSM,

Orchestrator

$10/ node

Güvenlik ve Uyumluluk Paketi• Azure Security Center veya

• OMS Güvenlik ve Uyumluluk

$15/ node

Protection & Recovery suite• Yedekleme• Felaket Kurtarma – E2E

& E2A• VMM & DPM

$30/ node

Paket Fiyat (aylık)

OMS E1• Öngörüler ve Analitik

Otomasyon ve Kontrol

• System Center çözümlerinin tümü

$20/ node

OMS E2• Öngörüler ve Analitik

Otomasyon ve Kontrol

• Güvenlik ve Uyumluluk

• Yedekleme• Felaket Kurtarma –

E2E & E2A• System Center

çözümlerinin tümü

$35/ nodeYedekleme ve Felaket Kurtarma servisleri ile ilgili herhangi bir veri ücreti, normal Azure depolama fiyatlarına göre ayrıca ücretlendirilecektir.

OMS’in diğer servisleri için kullanılan veri, 1 ay boyunca ücretsiz olarak saklanır. Veriyi 1 aydan uzun süre tutmak için GB başına aylık 0.10$ ödenmesi gerekir.

OMS Satın Alma Seçenekleri

OMS Hesaplayıcı• OMS lisanslama için doğru tercih yapmanıza yardımcı olur • Yeni lisanslama modeli

http://oms-calculator-webapp.azurewebsites.net/home

http://oms-calculator-webapp.azurewebsites.net/home

Özetle

Insight & Analytics

Automation & Control

Security & Compliance

Backup

Site Recovery

$15/node

$10/node

$15/node

$10/node

$25/node

Pay-as-you-go

OMS E1includes all of System Center

OMS E2includes all of System Center

Annual prepaid suites

1. Kullandığın Kadar Öde ile İndirimli Yıllık Suit’ler arasında bir tercih yapabilirsiniz.

2. OMS Suitleri System Center bileşenlerini içerir.

3. Hesaplayıcıyı kullanarak tahmini lisanslama ücretlerini görebilirsiniz.

$20/node

$35/node

94

TEŞEKKÜRLER