Event Management Overview › Event Management Architecture › Event Management Components › Mid-tier Connector

Mid-tier Connector

The Mid-tier connector collects normalized connector alerts from all connectors, performs operations such as enrichment, filtering, correlation, and so on across domains, and publishes the resultant alerts to CA SOI. Therefore, it acts as a single point of contact and provides cross-domain information to CA SOI.

Using the Mid-tier connector offers the following benefits:

• Helps optimize the overall performance of the solution by handling large volume of cross-domain events.
• Provides cross-domain correlation, which policies on single connectors cannot perform. When you deploy a policy on a set of connectors, correlation occurs only within each connector source. The Mid-tier connector, due to its position in the event flow, can correlate across all data sources.
• Enriches events coming from different domains and adds additional information to the events, which helps administrators manage alerts more efficiently.
• Enables out of the box enrichments such as CA NSM, CA Spectrum, and CA CMDB.
• Lets you perform enrichments on CA Catalyst connector data that are not supported directly on CA Catalyst connectors, such as JDBC enrichments.
• Performs actions on matching events from all data sources by default when you deploy policy to it.
• Reduces the number of alerts that are forwarded to CA SOI, decreasing the time to interpret and resolve critical alerts. For example, if you have received five different CPU-related events with the same severity from five different domain managers, you can decide which domain alert to suppress and which one to move forward and manage, based on the domain critically impacting your business services. This way, you can triage various cross-domain alerts depending on their business impact. You can also consolidate closely related alerts that share common property values into a single alert and reduce the administrative overhead associated with resolving duplicate alerts.