For example, if an application or computer can t access a printer, it might make the attempt repeatedly, generating scores of separate events that clog the event log. With MOM, those 40 or 60 events are captured at the source and compressed into a single event which notes that the problem has been repeated for 40 or 60 times. In addition to consolidating events from a single source, MOM can analyze a series of events from varied sources, understand their relationships, then consolidate or suppress the multiple events. In their place, MOM presents the network manager with a single event that both explains the scope of the problem and offers suggestions for its correction. With MOM, those hundreds of events are suppressed and the network manager sees a single event that identifies the hundreds of users affected by the problem and proposes solutions.
Correlation provides a higher level of intelligence to events.
When various types of events happen at the same time, MOM doesn t just pass them on to the network manager. MOM s simulated transaction capability allows the tools to do more than just respond to negative events after they occur. It allows MOM to flag the network operator about potential problems as well. MOM can monitor Active Directory replication by conducting a simulated transaction, such as putting a specific marker in the Active Directory domain controller, then watching for that marker to appear elsewhere in the network. If the replication doesn t happen or doesn t happen on time, MOM can inform the network operator so the irregularity can be corrected before it causes problems on the network.