Skip to main content

IT Monitoring Paradox: Let's Step Outside the Bubble!

David Hayward

The world is full of paradoxes. To solve them, you have to look at the facts in a different, even nonconventional way. You have to step outside your bubble.

One of the earliest paradoxes is from the ancient Greek thinker Heraclitus. It goes like this: "You cannot step into the same river twice." As Roy Sorenson says in A Brief History of the Paradox, "[Heraclitus] means that you cannot step twice into the same water of a river. There is one river, but many distinct bodies of water flow through it. Heraclitus urges a balance between experience and reason."

Paradoxes are fun to solve, but real-life they can be serious. IT Operations faces paradoxes too, and one in particular day in and day out. Recently, an IT Manager in a FORTUNE 1000 company — let's call him "Joe" — told me that he was called into the distribution center VP's office. The center was at a standstill. Joe showed him that the IT systems supporting the center were meeting all their Service Level Agreements: servers, applications, databases, storage, routers, switches — the whole lot. And the VP's response? "So what. I can’t ship anything."

That's when the light bulb went off in Joe's head. All the IT technologies that underlie the distribution center were running fine, but not the center itself. IT Operations needed another way to look at things, so he could understand the IT environment's status in terms of its impact on the business, not just in terms of how this or that technology silo was behaving.

Like Heraclitus and the river, Joe needed to strike a balance between experience and reason. Joe had plenty of experience — reams of performance monitoring data and proof of SLA compliance for each technology domain — but no way to reason, or monitor, the distribution center business process itself.

Joe started thinking of ITIL — the framework for orienting IT with services, not technologies, in mind. The trouble is, IT operates in a bubble. In fact, lots of bubbles: silo’d teams, silo’d tools, each separately monitoring servers, applications, storage, databases, routers, switches, etc.. No one was monitoring the big picture outside the bubbles. IT Operations Level 1 (the “first line of defense”) was looking at a sea of monitoring screens, events and alerts about technology devices and circuits, and had little or no understanding about how those events and alerts impacted specific business processes.

So even when IT was meeting SLA objectives in each silo, little degradations (i.e., incidents) across silos were adding up and impacting different services (i.e., processes and user experience) in different ways. This was undetectable because there wasn't any way to way to associate all those incidents with specific business services: no operational view and real-time IT operational analytics of business processes across silos.

This is typical. As an analyst from a leading IT research firm recently told me: "The Industry has been trying to solve this problem for decades. It sounds old, but we keep coming back to the same paradox over and over again."

Joe and others like him have embarked on a mission to transform IT Operations from a purely technology monitoring team to a business service reliability monitoring team. They are transforming operations because either they’ll crack the paradox of managing services that they deliver to their business, or the business will outsource operations to someone who can.

Transformation doesn't happen overnight. As the ITIL mantra teaches us, it takes "people, processes and technology" to get IT properly focused on the business and its services. To start, you need to step outside your bubble.

David Hayward is Senior Principal Manager, Solutions Marketing at CA Technologies.

Hot Topics

The Latest

IT organizations have historically measured success by how quickly they can respond when something goes wrong. The entire discipline of Incident Management has been optimized around mean time to resolution, first-response SLAs and ticket closure rates. But new research suggests that even though this is a well-executed playbook, it's no longer enough to retain customers ...

Production incidents rarely announce themselves as database problems. They appear as slow transactions, timeouts, rising response times, or an application struggling under a workload it previously handled. APM provides an essential starting point. It can identify a slow transaction path, highlight an affected service, and show that a database dependency is consuming more time than expected. But identifying the database as part of the problem is not the same as explaining what is happening inside it ...

Cloud teams are under constant pressure to reduce spend without slowing development or increasing operational risk. They are deploying autoscalers, rightsizing workloads, enforcing resource requests, reviewing utilization dashboards, and building FinOps processes around cloud-native environments. Yet the results often disappoint ...

Ask most IT leaders about their biggest concern with AI and you'll hear the same answer: hallucinations ... Today, however, the conversation has shifted ... As organizations move beyond chatbots and experiments, they are increasingly deploying AI agents that perform multi-step tasks. These systems retrieve documents, query databases, call APIs, generate reports, write code, and make recommendations. The issue is not whether the model can reason. The issue is whether the organization can see, verify, and govern the decisions being made along the way ...

While organizations want to take control of their telemetry, building telemetry pipelines from scratch can be a very daunting, complicated task, even when leveraging open-source standards like OpenTelemetry. It requires specialized knowledge across distributed systems, data engineering, and security. This fragmented approach across systems causes higher operational costs; it puts a strain on resources and reduces efficiency as teams have to work with different interfaces and processes ...

For decades, enterprise networks were designed around a simple assumption: work happened inside the office. Applications lived in centralized data centers, employees connected through internal infrastructure, and security focused on protecting the perimeter that surrounded everything ... But the way organizations operate today bears little resemblance to that environment. Cloud platforms host critical applications, employees connect from homes and airports as often as they do from offices, and partners collaborate through shared systems that exist far beyond corporate walls. In short, the corporate network no longer resembles the environment it was designed to protect ...

As an analyst who researches how IT organizations design, build, and operate their networks, I find that network data is a constant source of pain. Network teams struggle with data quality, fragmentation, authority, access, and trust. And these issues undermine everything they try to do. Here are the numbers: Only 45% of network teams are completely confident in the accuracy of their network source of truth, which documents the intent of their network ...

The 2026 Global Data Center Survey from Uptime Institute reveals an industry navigating workforce constraints, escalating outage expenses, even as rising costs remain the top concern for management teams ...

The next observability gap may not be in the code. It may be under the rack. That sounds strange until you think about how AI incidents actually feel in the middle of an investigation ... The application dashboard may be accurate. It may also be stopping at the wrong boundary. AI systems depend on software, but they also depend on a dense physical stack: racks, power paths, thermal margin, maintenance activity and, in many environments, liquid cooling. Those physical dependencies can change slowly before they look like a software incident ...

Certificate expiration is the rare outage you can see coming. Every TLS certificate carries the date it stops working, so the moment it will begin breaking connections is knowable in advance. That's what makes an expired certificate such a frustrating way to lose a service. What's changing now is how often that date comes around ...

IT Monitoring Paradox: Let's Step Outside the Bubble!

David Hayward

The world is full of paradoxes. To solve them, you have to look at the facts in a different, even nonconventional way. You have to step outside your bubble.

One of the earliest paradoxes is from the ancient Greek thinker Heraclitus. It goes like this: "You cannot step into the same river twice." As Roy Sorenson says in A Brief History of the Paradox, "[Heraclitus] means that you cannot step twice into the same water of a river. There is one river, but many distinct bodies of water flow through it. Heraclitus urges a balance between experience and reason."

Paradoxes are fun to solve, but real-life they can be serious. IT Operations faces paradoxes too, and one in particular day in and day out. Recently, an IT Manager in a FORTUNE 1000 company — let's call him "Joe" — told me that he was called into the distribution center VP's office. The center was at a standstill. Joe showed him that the IT systems supporting the center were meeting all their Service Level Agreements: servers, applications, databases, storage, routers, switches — the whole lot. And the VP's response? "So what. I can’t ship anything."

That's when the light bulb went off in Joe's head. All the IT technologies that underlie the distribution center were running fine, but not the center itself. IT Operations needed another way to look at things, so he could understand the IT environment's status in terms of its impact on the business, not just in terms of how this or that technology silo was behaving.

Like Heraclitus and the river, Joe needed to strike a balance between experience and reason. Joe had plenty of experience — reams of performance monitoring data and proof of SLA compliance for each technology domain — but no way to reason, or monitor, the distribution center business process itself.

Joe started thinking of ITIL — the framework for orienting IT with services, not technologies, in mind. The trouble is, IT operates in a bubble. In fact, lots of bubbles: silo’d teams, silo’d tools, each separately monitoring servers, applications, storage, databases, routers, switches, etc.. No one was monitoring the big picture outside the bubbles. IT Operations Level 1 (the “first line of defense”) was looking at a sea of monitoring screens, events and alerts about technology devices and circuits, and had little or no understanding about how those events and alerts impacted specific business processes.

So even when IT was meeting SLA objectives in each silo, little degradations (i.e., incidents) across silos were adding up and impacting different services (i.e., processes and user experience) in different ways. This was undetectable because there wasn't any way to way to associate all those incidents with specific business services: no operational view and real-time IT operational analytics of business processes across silos.

This is typical. As an analyst from a leading IT research firm recently told me: "The Industry has been trying to solve this problem for decades. It sounds old, but we keep coming back to the same paradox over and over again."

Joe and others like him have embarked on a mission to transform IT Operations from a purely technology monitoring team to a business service reliability monitoring team. They are transforming operations because either they’ll crack the paradox of managing services that they deliver to their business, or the business will outsource operations to someone who can.

Transformation doesn't happen overnight. As the ITIL mantra teaches us, it takes "people, processes and technology" to get IT properly focused on the business and its services. To start, you need to step outside your bubble.

David Hayward is Senior Principal Manager, Solutions Marketing at CA Technologies.

Hot Topics

The Latest

IT organizations have historically measured success by how quickly they can respond when something goes wrong. The entire discipline of Incident Management has been optimized around mean time to resolution, first-response SLAs and ticket closure rates. But new research suggests that even though this is a well-executed playbook, it's no longer enough to retain customers ...

Production incidents rarely announce themselves as database problems. They appear as slow transactions, timeouts, rising response times, or an application struggling under a workload it previously handled. APM provides an essential starting point. It can identify a slow transaction path, highlight an affected service, and show that a database dependency is consuming more time than expected. But identifying the database as part of the problem is not the same as explaining what is happening inside it ...

Cloud teams are under constant pressure to reduce spend without slowing development or increasing operational risk. They are deploying autoscalers, rightsizing workloads, enforcing resource requests, reviewing utilization dashboards, and building FinOps processes around cloud-native environments. Yet the results often disappoint ...

Ask most IT leaders about their biggest concern with AI and you'll hear the same answer: hallucinations ... Today, however, the conversation has shifted ... As organizations move beyond chatbots and experiments, they are increasingly deploying AI agents that perform multi-step tasks. These systems retrieve documents, query databases, call APIs, generate reports, write code, and make recommendations. The issue is not whether the model can reason. The issue is whether the organization can see, verify, and govern the decisions being made along the way ...

While organizations want to take control of their telemetry, building telemetry pipelines from scratch can be a very daunting, complicated task, even when leveraging open-source standards like OpenTelemetry. It requires specialized knowledge across distributed systems, data engineering, and security. This fragmented approach across systems causes higher operational costs; it puts a strain on resources and reduces efficiency as teams have to work with different interfaces and processes ...

For decades, enterprise networks were designed around a simple assumption: work happened inside the office. Applications lived in centralized data centers, employees connected through internal infrastructure, and security focused on protecting the perimeter that surrounded everything ... But the way organizations operate today bears little resemblance to that environment. Cloud platforms host critical applications, employees connect from homes and airports as often as they do from offices, and partners collaborate through shared systems that exist far beyond corporate walls. In short, the corporate network no longer resembles the environment it was designed to protect ...

As an analyst who researches how IT organizations design, build, and operate their networks, I find that network data is a constant source of pain. Network teams struggle with data quality, fragmentation, authority, access, and trust. And these issues undermine everything they try to do. Here are the numbers: Only 45% of network teams are completely confident in the accuracy of their network source of truth, which documents the intent of their network ...

The 2026 Global Data Center Survey from Uptime Institute reveals an industry navigating workforce constraints, escalating outage expenses, even as rising costs remain the top concern for management teams ...

The next observability gap may not be in the code. It may be under the rack. That sounds strange until you think about how AI incidents actually feel in the middle of an investigation ... The application dashboard may be accurate. It may also be stopping at the wrong boundary. AI systems depend on software, but they also depend on a dense physical stack: racks, power paths, thermal margin, maintenance activity and, in many environments, liquid cooling. Those physical dependencies can change slowly before they look like a software incident ...

Certificate expiration is the rare outage you can see coming. Every TLS certificate carries the date it stops working, so the moment it will begin breaking connections is knowable in advance. That's what makes an expired certificate such a frustrating way to lose a service. What's changing now is how often that date comes around ...