1. CMDBs: Above and Beyond…
Sarah Nadi
CS 446 – Nov. 26th, 2009

2. Overview This work is in collaboration with CA Labs Canada.
CMDBs: Above and Beyond
Overview
This work is in collaboration with CA Labs Canada.
This is part of the work done in the Software Architecture Group (SWAG).

3. Outline Importance of proper IT management.
CMDBs: Above and Beyond
Outline
Importance of proper IT management.
What is a Configuration Management Database (CMDB)?
Use cases of a CMDB.
What are root cause analysis and change impact analysis?
Example work done on root cause analysis and change impact analysis.

4. Enterprise IT Management
CMDBs: Above and Beyond
Enterprise IT Management
Information Technology (IT) systems are the basis of most business services today.
When something goes wrong with an IT system, companies face financial losses.
Therefore, Enterprise IT Management (EITM) has been lately gaining a lot of interest.
Reactively, IT analysts should be able to quickly locate the underlying cause of a problem (Root Cause Analysis).
Proactively, IT analysts should be able to identify the impacts of changes to the system to prevent unforeseen problems (Change Impact Analysis).

5. Configuration Management Database
CMDBs: Above and Beyond
Configuration Management Database
A Configuration Management Database (CMDB) stores the information about the different components of an IT system. It contains details about the attributes and history of each Configuration Item (CI), details of the relationships between CIs, their problem and change history.
A configuration item (CI) is any component of an IT infrastructure. It can be software, hardware, services etc.
Usually, business critical components are included as CIs in the CMDB.
The information in a CMDB provides a basis for root cause analysis and change impact analysis.

6. Configuration Management Databases (CMDB) (The big picture)
CMDBs: Above and Beyond
Configuration Management Databases (CMDB) (The big picture)
Calls
Uses
Service Z X
Service Y
Service X
Forwards
Provides
IT System
IT Analyst

7. CMDBs: Above and Beyond
Has
Provides More Details
Information

8. Configuration Items (CIs)
CMDBs: Above and Beyond
Configuration Items (CIs)
CMDB Relationships

9. Knowledge contained in a CMDB
CMDBs: Above and Beyond
Knowledge contained in a CMDB
Hardware, networks, locations, etc.
Software, SLA, versioning information.
Reporting structures, contacts, organization.
Dependencies between components.
Incident and Problem reports.
History of changes made, by who, when, why, etc.
Gateway to logs and diagnostics.

10. Seven use cases of a CMDB [1]
CMDBs: Above and Beyond
Seven use cases of a CMDB [1]
What can the data in a CMDB be used for?
Change Impact Analysis.
Change Governance.
Root Cause Analysis.
Auditing and Compliance.
Resource Optimization.
Services Mapping.
Services Performance Planning.
Impact Analysis :- When an incident occurs (unplanned interruption or reduction in the quality of an IT service), we need to know what other services it will impact to be able to determine its severity.
Root Cause Identification :- Identifying the root cause of the incident which occurred through tracing CI relationships in the CMDB. Root cause identification helps in quickly solving the problem without the need of replacing/fixing too many CI’s.
Change Governance:- Changing anything should be planned. Information in a CMDB helps standardize the change process to minimize unexpected effects of the change.
Auditing and Compliance :- Relating SLA to actual performance and changes in the IT system.
Resource Optimization :- The CMDB helps understand underlying relationships that exist between the physical technologies and the business services that they support which would show redundant relationships and help figure out the best resource allocation to use. Eg. Optimizing servers
Services Mapping :- The CMDB allows business services to be represented as CIs which helps understand the relationship between the IT components and the services provided by the system.
Services Performance Planning :- The service mapping described above provides the ability to understand what relationships will need to exist for the service to achieve its anticipated quality goals.

11. ? X ? ? ? X X ? ? X ? ? ? Root Cause Analysis Analyst
CMDBs: Above and Beyond ?
Root Cause Analysis ? X
Analyst ? ? ? X X ? ? X ? ?

12. CMDBs: Above and Beyond
Root Cause Analysis
A fault is a design flaw or malfunction that causes a failure of one or more CIs or IT services.
A failure is the loss of ability to operate to specification, or to deliver the required output.
An incident is an observed event that is not part of the standard operation of a service and that causes, or may cause, an interruption to, or a reduction in, the quality of that service.
Root cause analysis tries to map an incident to its underlying fault.

13. Change Impact Analysis
CMDBs: Above and Beyond
Change Impact Analysis ? ?
“What if” analysis.
Find impact of a
proposed change. ?
Upgrade Oracle 10g to Oracle 11g ?

14. Change Impact Analysis
CMDBs: Above and Beyond
Change Impact Analysis
A change set is the set of CIs that need to be changed for a change to be correctly implemented with no side effects.
Unplanned changes can cause unexpected problems in related CIs  Identifying the correct change set is very important.
Accurate change impact analysis proactively prevents future incidents.

15. Importance of root cause analysis & change impact analysis
CMDBs: Above and Beyond
Importance of root cause analysis & change impact analysis
Reactively, IT analysts should be able to quickly locate the underlying cause of a problem (root cause analysis).
Proactively, IT analysts should be able to identify the impacts of changes to the system to prevent unforeseen problems (change impact analysis).
Root cause analysis and change impact analysis are, therefore, important IT management activities that prevent costly IT outages.

16. CMDBs: Above and Beyond
Challenges
Identifying the information needed to perform root cause analysis and change impact analysis.
Finding the best way to model this information.
Providing practical and useful solutions.

17. Our Proposed Solution: DRACA
CMDBs: Above and Beyond
Our Proposed Solution: DRACA
A Decision Support framework for Root Cause Analysis and Change Impact Analysis.
Given the CI involved in an incident, DRACA provides a list of ranked CIs who are suspect root causes (root cause analysis).
Given an initial CI to change, DRACA provides a list of ranked CIs who should be changed as well (change impact analysis).

18. CMDBs: Above and Beyond
Root Cause Analysis

19. Info. needed for root cause analysis
CMDBs: Above and Beyond
Info. needed for root cause analysis
Existing dependencies in the CMDB.
Previous incident reports, problem reports, and change reports.
Calendar information.
CI Change Times.

20. DRACA’s Root Causes Analysis Process
CMDBs: Above and Beyond
DRACA’s Root Causes Analysis Process

21. CMDBs: Above and Beyond

22. CMDBs: Above and Beyond
Root cause matrix
Rij is the probability that i is the root cause of the incident in j

23. Change Impact Analysis
CMDBs: Above and Beyond
Change Impact Analysis

24. Info. needed for change impact analysis
CMDBs: Above and Beyond
Info. needed for change impact analysis
Historical change sets
CIs that have changed simultaneously in the past are likely to change again together in the future.
Understanding previous change sets can help identify future ones.

25. DRACA’S Change Impact Analysis Process
CMDBs: Above and Beyond
DRACA’S Change Impact Analysis Process

26. The DRACA Prototype Tool
CMDBs: Above and Beyond
The DRACA Prototype Tool

27. CMDBs: Above and Beyond
Empirical Work
Tested our technique on industrial data from CA’s Global Information Systems (GIS) team that manage CA’s internal network and services.
We used 3 years worth of data to test our prediction model.
Our results were promising and we were able to correctly predict a large percentage of the change sets.

28. CMDBs: Above and Beyond
Summary
Proper IT management is very important to minimize IT systems’ disruptions.
A CMDB supports IT management by tracking business critical CIs.
Root cause analysis and change impact analysis are two important process in IT management.
Root cause analysis involves finding the original cause of a problem.
Change impact analysis involves finding the set of CIs that might be affected by a proposed change.

29. CMDBs: Above and Beyond
Questions/Comments ?

30. CMDBs: Above and Beyond
References
[1] Messineo, David A & Ryder, Macolm. Why Implement a Configuration Management Database (CMDB)? Seven Fundamental Use Cases. CA White Paper, 2008.]