Glossary

One-line definitions of the terms used across the Ozone documentation.

AIOps Applying statistics and machine learning to operations telemetry so that noisy events become a small number of actionable problems.

Anomaly detection Flagging metric behavior that deviates from an established baseline instead of relying on fixed thresholds.

BACnet A building automation protocol the collector can read to pull facility and HVAC telemetry.

Capacity forecasting Projecting future resource usage from historical trends so you can plan ahead of exhaustion.

CDP/LLDP Link-layer discovery protocols the collector uses to learn how network devices are physically connected.

Collector (appliance) The Ozone Data Collector, an on-prem OVA appliance that ingests telemetry, correlates it locally, and forwards only aggregated results.

Correlation Grouping many related raw events into a single deduplicated problem so operators see the cause, not the symptom storm.

Edge token The credential a collector uses to authenticate itself to the Orchestrator after enrollment.

EWMA Exponentially weighted moving average, a smoothing method used to track a metric baseline that weights recent samples more heavily.

Enrollment / registration token The one-time token, issued by the Orchestrator console, that binds a new collector appliance to your tenant.

Fingerprint deduplication Collapsing repeat occurrences of the same underlying issue into one problem by hashing its distinguishing attributes.

gNMI A streaming network management interface used to subscribe to telemetry from modern network devices.

Ingest token The credential a collector presents when forwarding aggregated problems to the Orchestrator ingestion endpoint.

IPMI A baseboard management interface the collector uses to read hardware health from servers out of band.

IQR Interquartile range, a robust statistic used to detect outliers based on the spread of the middle half of the data.

Isolation Forest An unsupervised machine learning method that isolates anomalies by how easily a point can be separated from the rest.

JetStream (NATS) The persistence layer that buffers events on the collector so nothing is lost during a WAN outage.

Modbus An industrial protocol the collector can read to pull telemetry from operational technology equipment.

NetFlow / IPFIX / sFlow Flow export protocols that summarize network traffic, received passively on the collector's LAN listener ports.

NETCONF / RESTCONF Configuration and telemetry interfaces used to manage network devices programmatically.

Orchestrator The multi-tenant Ozone SaaS at ozone.techforcz.com that handles identity, fleet management, licensing, billing, and the SaaS AI.

OTLP The OpenTelemetry protocol, accepted by the collector for metrics, traces, and logs from instrumented applications.

OVA The Open Virtual Appliance image format the Ozone Data Collector ships as for import into your hypervisor.

Problem A single deduplicated, enriched incident produced by correlating many raw events, and the unit the collector forwards upstream.

RAG (retrieval-augmented generation) Grounding a language model's answer in retrieved reference material so its output reflects real context.

RCA (root cause analysis) Determining the underlying cause behind a problem rather than just its surface symptoms.

Redfish A modern REST interface the collector uses to read hardware health and inventory from servers and enclosures.

SLO / error budget A service level objective and the allowable amount of failure within it before action is required.

SNMP / SNMPv3 A widely used device monitoring protocol; version 3 adds authentication and encryption over v1 and v2c.

Store and forward Buffering upstream-bound events locally during an outage and replaying them once connectivity returns.

Syslog A standard logging protocol received passively on the collector's LAN listener port.

Telemetry envelope The normalized internal format the collector wraps every incoming metric, event, or log in before processing.

Tenant / environment An isolated customer space in the Orchestrator, optionally subdivided into separate environments.

Tier gating Restricting a feature to a specific license tier, such as LLM root cause analysis being Enterprise only.

Topology edge A discovered connection between two devices, used to build the network map that correlation reasons over.

Universal collector The single plugin-based agent on the appliance that speaks every supported protocol, rather than a separate container per protocol.

VictoriaMetrics The time-series store the collector uses to retain metrics locally.

Z-score A measure of how many standard deviations a value sits from its mean, used to flag statistical outliers.