Preferred Data Sources

Entities Things deployed in the customer environment that are needed to run the business, such as applications, devices, interfaces, and locations. and objects that are streamed to Riverbed IQ Ops can originate from more than one data source A product in your network that forwards data to the system. This data can be streaming data used to detect anomalies and generate incidents, or data that can be fetched on demand when runbooks are executed.. For example, the User Response Time metric A measurement or data point that is monitored and analyzed to detect anomalies and generate incidents. can be sent to IQ Ops from AppResponse and NetProfiler for the same entity. The computations of some of these metrics (generally, application An entity type representing software applications deployed in the customer environment that are monitored for performance and anomalies. location An entity type representing physical or logical locations in the customer environment where entities are deployed and monitored. metrics and, particularly, User Response Time) vary between data source types (AppResponse and NetProfiler), which can complicate incident A collection of one or more related triggers. Relationships that cause triggers to be combined into incidents include application, location, operating system, or a trigger by itself. behavior and management in IQ Ops.

Rather than merging conflicting data, Riverbed IQ Ops uses a Preferred Data Source setting to select which system defines the Application-Location space. This selection ensures consistent handling of key metrics by streaming data from only one source at a time.

Important Considerations

The Preferred Data Source setting applies only to Entity type Application-Location metrics that can be sourced either from AppResponse or NetProfiler (e.g., User Response Time and %Total Retrans metrics). This setting does not apply to metrics that are streamed for other Entity types from Netprofiler (e.g., Inbound/Outbound Network Utilization), these non-Application-Location metricswill be streamed regardless of the Data Source Preference.

Note these considerations pertaining to preferred data sources:

• If both AppResponse and NetProfiler are present, only one can stream Application-Location entity metrics to IQ Ops, never both at the same time. This is an entity-level switch, not a general exclusion of overlapping metrics.

• AppResponse is the default preferred data source. When AppResponse is the preferred data source, streaming of Entity type Application-Location metrics NetProfiler is disabled. In particular, the following metrics are only available in either NetProfiler or AppResponse:

  • You can only stream Application-Location MOS metrics through NetProfiler.

  • You can only stream Application-Location Throughput, % Retrans Packets, and % Failed Connections metrics through AppResponse.

  Note: In all instances, all metrics/properties can be queried at any time (i.e. the Preferred Data Source configuration does not affect Data Query A runbook node category that gets data about the trigger and forwards it to other nodes in the runbook for further processing. capabilities).

  • If you change the preferred data source to be NetProfiler, all streaming of Entity type Application-Location metrics from AppResponse will stop.

• The preferred data source controls the Entity type Application-Location data streamed for triggering A set of one or more indicators that have been correlated based on certain relationships, such as time, metric type, application affected, location, or network device. incidents, but still allows runbooks An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook. to query either data source for all other information.

• In general, changing the preferred data source will result in detections from different metrics, which affects runbook behavior. A warning message describing the effects of the change will be shown; see Changing the Preferred Data Source, below, for the text of that message.

• If the configured Preferred Data Source that is streaming becomes disabled, then streaming of Entity Application-Location metrics ceases. There is no fallback to the other data source.

Changing the Preferred Data Source

You can change the preferred data source on the Data Sources page.

When you open an Edge to see its data sources, the Data Ingestion column will indicate the Preferred Data Source. If you wish to change this, click the Change button to open the Change Preferred Data Source dialog, which enables you to specify whether to prefer AppResponse or NetProfiler. This is accompanied by a warning about the effects of changing the data source.

Consider talking with Riverbed Support prior to changing the preferred data source.