GigaOM Radar AIOps - raport overview
By Marzena Burakowska | December 4, 2024
As organizations strive to modernize IT operations, AIOps (Artificial Intelligence for IT Operations) has emerged as a crucial tool for automating workflows, improving efficiency, and integrating IT and business data. The latest GigaOm Radar report evaluates AIOps vendors, revealing their strengths, challenges, and market positioning.
In this article, I will give an overview of the report's key points and discuss my opinion on them.
Key Trends in AIOps
- From Monitoring to Intelligence: Many vendors are transitioning from traditional observability tools to true AIOps solutions by incorporating AI capabilities. However, the depth of AI integration varies widely.
- GenAI and Large Language Models (LLMs): Most vendors have introduced GenAI-based features like chatbots and enhanced anomaly detection. These innovations support incident response, causality analysis, and predictive insights.
- Ghost Change Detection: Detecting unauthorized or undocumented changes ("ghost changes") is a growing focus. Evolven leads the field in this capability, which is a critical need for complex environments.
- Data-Agnostic vs. Data-Centric Approaches: Vendors are divided between integrating with existing tools (data-agnostic) and offering end-to-end solutions (data-centric). Each approach has implications for deployment complexity and operational impact.
- Business and IT Integration: Vendors that effectively correlate IT performance with business metrics stand out. This integration drives strategic insights and actionable improvements.
Top Performers and Market Positioning
The report categorizes vendors into three categories (leaders, challengers, entrants) based on innovation, maturity, "platform play", and "feature play". Here are the top 3 vendors from each category (the report discusses 29 vendors in total):
Leaders:
- IBM: Positioned as a Leader for its innovation and comprehensive platform capabilities.
- ServiceNow ITOM: Offers robust data aggregation, anomaly detection, and workflow automation, making it a top choice for enterprise-scale IT operations.
- Splunk (Cisco): Excels in predictive analytics, anomaly detection, and a broad range of integrations. Its acquisition by Cisco enhances its observability stack.
Outperforming Leaders (not at the top of the leader ranking, but marked as outperforming, and therefore worth mentioning):
- BMC: Rated 5/5 in advanced analytics and automated remediation, BMC excels in predictive and causal analytics, multidimensional analysis, and policy-based automation. Its data-agnostic framework supports diverse data types, including metrics, logs, and traces, with robust preconfigured integrations. The suite offers broad deployment options (SaaS and on-premises), low-code customization, and AI-driven capabilities like HelixGPT for event clustering and resolution recommendations.
- PagerDuty: PagerDuty AIOps delivers domain-agnostic capabilities with 700+ integrations and powerful data ingestion. Its noise reduction, root cause analysis, and event-driven automation optimize incident management. Features like Intelligent Alert Grouping, customizable workflows, and seamless collaboration tools, supported by an intuitive interface, rapid deployment, and strong vendor ecosystem make it a strong opon among other vendors.
- Splunk (Cisco)
Challengers:
- Evolven: Excels in configuration and parameter change management, ghost change detection, and data normalization, making it ideal for complex IT environments. However, SIEM and SOAR integration challenges limit its real-time threat response.
- OpenText Operations Bridge: Offers strong analytics, automated remediation, and seamless third-party integration but lacks advanced GenAI-driven features and SIEM integration in its current roadmap.
- Sumo Logic: A SaaS-based solution with robust observability and security features like Cloud SIEM and SOAR, though gaps in causal inference and predictive security remain.
Entrants:
- ZIF (Zero Incident Framework): Excells in anomaly detection and automated remediation with 250+ prebuilt bots and flexible deployment. It lacks advancements in edge AI, predictive security posture, and ghost change detection.
- ITRS Geneos: Specializes in real-time monitoring for financial services but lacks advanced AI features.
Strengths Across Vendors outlined in the report
- Anomaly Detection: Most vendors excel in identifying deviations using machine learning. This feature helps prevent incidents before they escalate.
- Automated Remediation: Automation of common tasks and workflows is becoming a standard offering, with low-code/no-code interfaces increasing accessibility.
- Integration: Vendors prioritize compatibility with ITSM tools like ServiceNow and collaboration platforms like Slack and Teams.
Challenges for Across Vendors outlined in the report
- Emerging Technologies: Many vendors lack edge AI, predictive security posture management, and advanced causality analysis, which are critical for future-proofing.
- Tool Displacement: Fully utilizing AIOps platforms often requires replacing existing tools, which can be disruptive for larger organizations.
- Scalability: While some vendors provide broad functionality, others are limited to specific use cases or industries, impacting their scalability.
My thoughts
The GigaOm Radar report offers valuable insights into the rapidly evolving AIOps landscape, and I found several aspects particularly interesting. One significant development is the inclusion of security requirements, which were less prominently emphasized in the past. This shift signals an increased maturity level in AIOps, transforming it from a technological novelty into a critical, functional solution for enterprise IT. The growing importance of security highlights how seriously AIOps platforms are now regarded in the business world. However, it is clear that many vendors, even leading ones, are still falling short of meeting these heigh security standards. That said, they will likely catch up quickly. What is evident, however, is that security is becoming a top priority for the future of AIOps solutions.
Another area that warrants further attention is the challenge of implementation and data availability. While the report touches on the ease of implementation, it assumes that organizations already possess the necessary data for AIOps to function effectively. This is often not the case. Many companies lack centralized databases containing vital information, such as the current topology of their infrastructure, which is essential for accurate event correlation. Only a few AIOps solutions include comprehensive tools to address these gaps, making full implementation challenging. As the field evolves, I hope future reports will explore this aspect in greater depth, examining how vendors can better address these data challenges and provide the tools necessary for seamless and effective AIOps deployment.
Unless stated otherwise, EVERGO Partners grants a non-exclusive, royalty-free license to use, share and reference selected content published on this website for non-commercial purposes, with attribution.
Written by:
Partner
