The IBM monitoring software products (Tivoli) are not easy to instrument and require many separate pieces of the total framework to be operationally functional and useable. That said, adding LA on top of a well deployed & working Tivoli Framework opens up a flood of native logged data points for unstructured search & query. My team had a special need to implement custom alerting on 10s of thousands of MQ channels in a short amount of time, and the traditional approach (also w a Tivoli product) would have been very costly (labor) and time consuming (requiring individual app review). As an alternative, we had a new event stream create to track all MQ channels to generate logs and then used LA to visualize the behavior trends for review, reporting and eventually alerting. The effort took longer than I hoped ~6 months, but the traditional approach would have taken 2+ yrs to review and implement app by app.
