| Deployment model | Customer-controlled Linux Core, one Universal Sensor software with Network, Infrastructure, Flow and Log roles, and Windows/Linux host Agents. Automatic Sensor selection, distributed pools and two-Core Active/Standby HA support the deployment. | Self-hosted on premises or customer-managed cloud; separate SaaS offering. Documented · Source 1 ↗ |
| Network / SNMP | Discovery, SNMP device/interface health, routing neighbors, overlays, network services, active paths and topology. Connect control-plane state, interface quality, service reachability and recent changes. | Network Performance Monitor capability across Self-Hosted tiers. Documented · Source 1 ↗ |
| Flow analytics | NetFlow, IPFIX and sFlow ingestion with exporter, interface, application and site context. Traffic trends, conversations, top talkers and sampling quality feed investigation and capacity planning. | NTA flow monitoring in Advanced / Premier; verify standalone modules when quoting. Edition specific · Source 1 ↗ |
| Log monitoring / analytics | Syslog, structured logs and operational events with search, parsing, source identity and incident context. Connect logs to metrics, topology, flow and configuration changes under access and retention policies. | Log Analyzer log monitoring and analysis is included in Self-Hosted Essentials, Advanced and Premier. Documented · Source 1 ↗ |
| OpenTelemetry / OTLP | Governed OTLP metrics, logs and bounded span evidence with resource identity, search and dependency context. Apply telemetry budgets, privacy rules and retention. The focus is operational observability across the estate. | SaaS documents native OpenTelemetry/OTLP collection and ingestion. Confirm SaaS entitlements; do not assume identical ingress in Self-Hosted. Scope dependent · Source 1 ↗ Source 2 ↗ |
| Packet visibility / DPI | Bounded, incident-triggered packet evidence supports focused network diagnosis. Capture is governed by scope, duration, resource and privacy controls; it is not an always-on full-DPI platform. | QoE packet analysis sensors measure network and application response time; sensor scope and deployment matter. Edition specific · Source 1 ↗ |
| Network configuration | Separate AmrudAi NCM product: backup, version history, semantic diff, drift, golden-state and policy checks, controlled CLI, staged/canary execution and firmware workflows. Approval, pre/post-checks, audit and adapter-supported rollback keep privileged changes under control. | Network Configuration Manager included in Advanced / Premier. Edition specific · Source 1 ↗ |
| IP address management | Prefix/subnet hierarchy, discovery reconciliation, address history, conflicts, DNS/DHCP context and utilization planning. Keep address identity and changes connected to the monitored inventory. | IP address monitoring/management in all listed Self-Hosted tiers. Documented · Source 1 ↗ |
| Infrastructure / cloud / Kubernetes | Host, endpoint, virtualization, storage/SAN, cloud-resource/network and Kubernetes monitoring. Connect Windows/Linux Agents and agentless collection with account, region, workload and dependency context. | Server/application monitoring; virtualization, storage and cloud depth depend on tier and SaaS entitlements. Edition specific · Source 1 ↗ Source 2 ↗ |
| Applications / databases | Database availability, sessions, waits/blocking, replication, query-change evidence and synthetic service checks. Connect database, host, storage and network prerequisites to service behavior; developer profiling and RUM are separate categories. | Server/application monitoring; dedicated database and SaaS APM capabilities require scope/entitlement review. Edition specific · Source 1 ↗ |
| AI investigation / root cause | Evidence-led RCA, learned correlation, adaptive baselines, graph-based context and AI Copilot assistance. Show competing hypotheses, supporting and contradictory evidence, next checks and human control over privileged actions. | Anomaly alerting, correlations and AI capabilities exist; Platform Connect/cloud dependency applies to listed AI features. Edition specific · Source 1 ↗ Source 2 ↗ |
| Alerting / response | Telemetry trust, semantic health states, persistence/flapping controls, maintenance context, event grouping and contextual notifications. Cross-region and multi-vantage Sensor qualification distinguish local paths, collector faults and service impact. | Monitoring alerts; ML anomaly-based alerting in Advanced / Premier. Edition specific · Source 1 ↗ |
| Topology / dependencies | Temporal topology and service dependencies connect entities, paths, workloads, change history and business services. Reconstruct incident-time relationships and distinguish lost redundancy from actual service outage. | Intelligent mapping and NetPath capabilities; confirm edition and supported infrastructure. Edition specific · Source 1 ↗ |
| MSP / tenant model | Shared multitenant and dedicated customer deployment models with tenant boundaries and provider workflows. Customer-specific access, branding, Sensors, service commitments, reports and HA support managed operations. | Enterprise Operations Console/federation options; validate customer isolation and MSP requirements separately. Scope dependent · Source 1 ↗ |
| Disconnected operation | Customer-managed deployment, offline packaging and deterministic monitoring/investigation without a mandatory hosted LLM. Optional external connectors and hosted AI services use connectivity according to your policy. | Self-hosted available; fully disconnected AI is not equivalent to Platform Connect cloud features. Scope dependent · Source 1 ↗ |
| Extensibility | Capability Packs, MIB/API Studio, open telemetry, ITSM/CMDB, webhooks and service workflow integrations. Versioned connectors, identity reconciliation, approval boundaries and audit keep integrations accountable. | Official Orion SDK and platform API, plus integrations. Documented · Source 1 ↗ |
| Commercial model | Scope-based enterprise and MSP proposals covering the monitored estate, deployment, telemetry and support. Request a written proposal for entitlements, retention, services and commercial terms; no unverified price or savings is assumed. | Node-based term subscription; annual billing and edition/Enterprise entitlements; no price-equivalence claim. Documented · Source 1 ↗ |