Systar Proprietary and Confidential Information – All Rights Reserved.

Event Processingin

Business Activity Monitoring(“BAM”)

Event Processing Symposium March 15, 2006

Anthony Lopresti – Sales Engineer

2Systar Proprietary and Confidential Information – All Rights Reserved.

The Business Problem

Major International Shipping & Logistics CompanyPost-9/11 Security Procedures for shipments into Canada

Each package airbill must be processed by Canadian Customs prior to aircraft departing from the USStiff fines per non-compliant package: $2,000

13 Flights to Canada per day1000s of packages per flight

3Systar Proprietary and Confidential Information – All Rights Reserved.

High-level Process

Airbill Management

System

Clearance Information

Manager

Canadian Customs

Broker

4Systar Proprietary and Confidential Information – All Rights Reserved.

Solution

Business Process is monitored from 3 different anglesBusiness process executionData flow and applicationInfrastructure

~300 different entities monitored (Flights, Applications, Data Flows, Queues/Topics, Databases, etc.)750+ indicators being correlated, baselined, trended, forecasted and rolled-up into KPIsAutomatic correlation analysis is performed through sophisticated event-processing algorithm when positive/negative deviating KPIs from the norm are detected to find cause-effect and service-impact scenarios

5Systar Proprietary and Confidential Information – All Rights Reserved.

Unique Business Value

Ensuring Business Processes unfold as expected, according to business commitments and customer expectations

All flights leave on timeAll packages are delivered on time  

Reducing the latency between when information is measured and decisions are made to seize business opportunities faster

Real-time analysis allows for “acceptable” fines (i.e. don’t hold up entire flight because of a couple of fines)

Pro-active monitoring of the end-to-end business process through early warningsBig operational efficiency improvements:

Automated surveillance vs. manual beforeAlert the right person at the right time vs. mass alerts in a hurry where only a couple of people out of 20 are concern by the eventReduced Mean-Time-To-RepairIdentification of recurring “fracture-points” leading to process improvementBetter inter-departmental communication

6Systar Proprietary and Confidential Information – All Rights Reserved.

Event Processing Techniques

Impact AnalysisEvaluating the impact of a problem on the progress of the business activity or key performance indicator

Business context AnalysisEvaluate abnormal activity in contextEvaluate business performance by product and regions

Root-Cause AnalysisDetermining the cause of the problem: business for Operations; technical for the Application Support Group

Risk Analysis and PredictabilityWhen problems arise, evaluating the remaining maneuvering room to reach operational objectives

BaselineDetermining “normal” behavior and comparing real behavior with the baselined norm.

7Systar Proprietary and Confidential Information – All Rights Reserved.

Event-driven architecture

8Systar Proprietary and Confidential Information – All Rights Reserved.

A powerful event-driven inference engine

9Systar Proprietary and Confidential Information – All Rights Reserved.

Commercial Software Components

Systar BusinessBridgeTM receiving data from:HP OpenViewOracleSybaseWMITibco/JMSWebsphereMQOmegaMon

10Systar Proprietary and Confidential Information – All Rights Reserved.

Challenges

Business Process being monitored was newBusiness Process was constantly changing during implementationDeadline imposed by regulation