Context

A server running a critical customer facing Web-based application runs out of system resources resulting in the application being unavailable. This problem has been occurring intermittently over the past few weeks and the underlying cause has yet to be determined. As an interim solution, it has been determined that the quickest way to restore service is to reboot the server when this happens. Operations has been asked to automate detection and recovery, and to minimize down time.

Description

Note: Only a few roles are shown in this scenario because the event is being handled autonomically. However, more roles would have been used if it were handled by people.

Steps	Process and Activity	Roles	Work products	Tools
A server is providing a service.	Service Execution Deliver Service	IT Operations Analyst	Operational Monitoring Data	TEC – Deliver Service TBSM – Deliver Service ITM – Deliver Service NetView® – Deliver Service OMEGAMON – Deliver Service CAM RTT – Deliver Service TWS – Deliver Service SA – Deliver Service
The server begins to run out of system resources. Monitoring software determines that the server is no longer responding and generates an event.	Event Management Monitor, Detect, and Log Event		Event	TEC – Monitor, Detect, and Log Event TBSM – Monitor, Detect, and Log Event
Other events are considered to be of low priority at this time.	Event Management Filter Event		Event	TEC – Examine and Filter Events
An automated response is identified for the server's condition.	Event Management Correlate Events and Select Response		Event	TEC – Correlate, Escalate, and Process Event TBSM – Correlate, Escalate, and Process Event
An incident record is opened.	Incident Management Identify and Log Incident		Incident	TEC – Detect and Record Incident
The automated response is carried out and the server is rebooted. The event management system determines that the server is working again.	Event Management Resolve Event		Event	TEC – Resolve Event
The event is closed.	Event Management Close Event		Event	TEC – Close Event
The incident record is closed.	Incident Management Close Incident		Incident
The service continues unimpeded.	Service Execution Deliver Service	IT Operations Analyst	Operational Monitoring Data	Same as step 1

Obtaining more information

To get more information, talk to a representative, purchase IBM® Service Management tools, or visit the IBM Service Management page.