Reducing MTTR on z/OS Using Syncsort Ironstream and Compuware Abend-AID with Splunk
Despite the complexity of most applications and the rate of technological change, software quality has improved over the past few decades, and so have our processes for dealing with application failures. In the late ‘70s and early ‘80s, whenever an abend occurred operations teams threw a dump of data at application developers to wade through, correlate with their code and come up with a fix. Throughout this process, an organization had to hope it didn’t happen again before the fix was developed and deployed—and most times that luck didn’t hold. In many ways, this was the first iteration of DevOps, the exact point where development and operations began to interact.
Today, companies don’t have the time or luxury to tolerate failures, especially when they impact critical business services. Most companies have embraced Agile development to:
- Increase their cadence of features
- Get quicker customer feedback on those features
- Build competitive advantages more rapidly
However, problems are inevitable at this increased pace. That’s why today DevOps teams emphasize minimizing the time to resolution once problems occur rather than creating bulletproof code. And the key to minimizing any negative impact to the business is to maximize the information available to analyze problems.
Syncsort Ironstream, Compuware Abend-AID and Splunk
The above point was a major driver for the development and launch of Syncsort Ironstream®. Ironstream is the industry’s leading automatic forwarder of z/OS mainframe log data (i.e., SMF records, SYSLOG) to Splunk® Enterprise or Splunk Cloud™ analytics platforms. In Splunk, z/OS information that Ironstream forwards is merged with machine data from other platforms across an organization’s infrastructure where it can be analyzed for operational intelligence and security insights.
Through a new technology partnership, Ironstream can also forward information gathered by Compuware Abend-AID® to provide a unique view into your mainframe issues via a Splunk application. Leveraging this data from Abend-AID allows an organization to proactively address issues before they escalate. Whether identifying trends, spotting a spike in an abend or isolating environmental issues, this new information available in Splunk via Ironstream provides Development with a more complete picture of their mainframe environment, enabling them to pinpoint and address critical problems more quickly. In addition, as a single DevOps source of the truth it gives Operations a glimpse into the overall health of IT.
The new Splunk app will allow you to determine the state of your mainframe IT systems from the unique perspective of jobs and online transactions that are failing and very likely leaving unsatisfied end users in their wake. The app provides at a glance understanding of both the recent past and the real-time state of these failures, and includes unique views into the data so you can identify trends in them. This is all designed to speed problem resolution and minimize impact to the business.
The partnership between Ironstream and Abend-AID provides a comprehensive view of all operational aspects of a z/OS environment within Splunk, as well as a window into managing and resolving application faults in a more efficient manner. Organizations that have an IBM z/OS mainframe can use the analytic capabilities within Splunk, powered by Ironstream and Abend-AID, to gather critical operational and security information in real-time to support enhanced detection, resolution and prevention of impacts to critical business services.
Abends and application failures will continue to be regular challenges mainframe organizations face, but you can now take a stronger stance combating those hindrances with a deeper analytical perspective of the trends occurring.
- To get Ironstream with support for Abend-AID for free, visit: http://www.syncsort.com/en/TestDrive/Ironstream-Starter-Edition
- To get the Abend-AID Splunk app, visit: https://splunkbase.splunk.com/app/3415/
Latest posts by John Crossno (see all)
- Three Mainframe Cybersecurity Insights Gleaned from DerbyCon 7.0 Legacy - September 26, 2017
- Will Insider Threats Prey on Data Despite IBM z14 Encryption? - July 27, 2017
- Stay Ahead of Insider Threats to Mainframe Systems - April 4, 2017