Moogsoft Docs


Moogsoft AIOps (Artificial Intelligence for IT Operations) is a next generation approach to event management, driven by real-time machine learning to detect anomalies across your production stack of applications, infrastructure and monitoring tools.

The system acts like a Manager of Managers (MoM), applying machine learning analytics to the growing volume of real-time events and alert streams generated by an entire production stack, turning it into early, actionable insight for support teams to collaborate and resolve problems faster.

Key Concepts

Before you read any further, it is important to understand the key concepts and commonly used terms used in Moogsoft AIOps:

Event Any log, status or change event generated by a third party monitoring or ticketing tool.
Alert A deduplicated event or an instance of new data coming into Moogsoft AIOps.
Situation A cluster of alerts that have been grouped together by a Sigaliser (clustering algorithm).
LAM Link Access Modules connect third party monitoring and ticketing tools to Moogsoft AIOps.
Moogfarmd The master service or service harness that controls all other services and which algorithms are running.
Sigaliser An algorithms that groups alerts based on factors such as time, language, topology and similarity.

For more information on any of these terms or similar topics please refer to the Glossary .


Moogsoft AIOps takes millions of events that have been generated by third party monitoring tools, compresses and deduplicates them into thousands of alerts which are clustered into manageable Situations using machine learning algorithms called Sigalisers.

This diagram shows a high-level overview of how multiple streaming events can be converted into more manageable clusters of data called Situations:

All of the relevant information about Situations is in Situation Rooms, virtual meeting places where members of the support team can collaborate in order to reach a resolution.


Moogsoft facilitates deployment as a hybrid cloud system with Moogsoft AIOps hosting the server components and the customer running an on-premise software appliance which sends data to the server. It is also possible for customers to host the server components and run the software locally.

The customer is able to access the system via a web user interface. For more information see the Operator Guide .