Discovery & Registration M01

Find every device, host, VM and facility asset — agent & agentless. SNMP sweep, credentialed SSH probe, and cloud API pull. Credentials and ranges come from your org settings.

Discovered assets

—

SNMP responders

—

Cloud resources

—

Last job

—

Run a discovery job

Kind CIDR range

Connector credentials are configured in the Admin area — not entered here. Targets outside your allowed ranges are refused.

Discovery records

IP	Hostname	sysDescr / OS	Role	Source	Last seen
No records yet — run a discovery job.

Unified Asset Inventory M02

One canonical record per asset — stable ID, site / rack / U-position, tenant-scoped. Assets are addressed by opaque tokens; no raw identifier ever appears in a link.

Inventory assets

—

Unpromoted discovery

—

Promote discovery → inventory

Each discovery record becomes one canonical asset with a stable NMS-###### ID. Idempotent — re-promoting never duplicates.

Assign rack position

Asset Site Rack U start U height

Assets

Asset ID	IP	Hostname	OS / role	Source	Rack
No assets yet — promote discovery records.

Collector & Polling M03

Interval SNMP polling with strict per-target isolation and host-agent heartbeats. Poll parameters come from your org settings; a failing target never stalls the others.

Poll jobs

—

Online

—

Unreachable

—

Agents online

—

Register a poll job

Name Host Port Interval (ms)

SNMP community + timeout are taken from org settings. Host must be inside your allowed ranges.

Poll jobs

Name	Host	Interval	Status	Cycles	Fails
No poll jobs yet.

Platform self-test

Every engine proves itself against real inputs. Green-or-it-doesn't-ship — the same verdict gates every deploy.

Verdict

—

Units passed

—

Conformance

—

Engine results

Module	Unit	Test	Result	ms
Loading…

Network Device Monitoring M04

Interface utilization from live SNMP counters, NetFlow top-talkers, and wireless client counts. SNMP community comes from your org settings.

Poll an interface

Device host ifIndex

Samples

Asset	Metric	Value	Unit	When
No samples yet.

Server & OS Monitoring M05

Agentless CPU/memory/disk over SSH (Linux) or WinRM (Windows), plus service-state changes. Credentials come from your org settings.

Poll a host

Host OS

Check a service

Host Service

Host metrics

Host	Metric	Value	When
No metrics yet.

Virtualization & Cloud M06

Per-VM and per-instance metrics with tag propagation into inventory. Hypervisor and cloud endpoints come from your org settings.

Poll

Tag search (key:value)

Instances / samples

Asset	Metric	Value	When
No data yet.

Environmental & Power M07

PDU power draw, UPS battery state, and rack temperature/humidity on the same cadence as IT telemetry — the facility layer pure IT tools leave out.

Power samples

—

Open facility events

—

Poll a facility device

Host Kind Outlet / sensor Rack

Readings & events

Asset	Metric	Value	Unit	Flags	When
No readings yet.

Topology & Dependency M08

L2 neighbour edges, VM→hypervisor→physical dependency chains, and downstream impact preview over the network and power graph.

Add an edge

From To Type

Impact preview

Node ref

Edges

From	To	Type
No edges yet.

NOC & Rack Views M09

Per-user dashboards and a live rack elevation where each U-position is coloured by the asset's current alert state.

My dashboards

Name

Set alert state (NOC)

Asset ID Severity

Rack elevation

Site Rack

Threshold & Anomaly Rules M10

Static threshold rules (fire on N consecutive breaches), rolling-baseline anomaly detection, and maintenance-window suppression. A real breach raises a correlated alert, colours the NOC, and notifies.

Create a threshold rule

Name Metric Op Threshold Consecutive Severity

Evaluate a sample

Asset Metric Value

Rules

Name	Metric	Condition	Severity
No rules yet.

Alert Inbox M11

Correlated alerts — flapping conditions collapse into one open alert with an occurrence count; unacknowledged alerts escalate to the next tier on a timeout.

Open

—

Acknowledged

—

Alerts

Asset	Metric	Severity	Status	Count	Tier
No alerts.

Application & Synthetic Monitoring M12

Real HTTP(S) checks and multi-step transactions run on an interval, recording status, response time and pass/fail. Rolling uptime is computed from stored results. Checks are addressed by opaque token — no internal id is exposed.

Create a check

Name Kind Target URL

Checks

Name	Kind	Target	Uptime
No checks yet.

Log Management M13

Syslog is ingested over UDP/TCP and indexed for full-text search with source, severity and time filters. The same store feeds incident timelines and the security signal.

Search

Query Source Severity

Post a log line

Asset Source Severity Text

Results

Time	Source	Severity	Message
Run a search.

Root-Cause Workspace M14

Open an incident, then assemble a unified timeline of metric breaches, correlated events and log lines, surface upstream config changes as candidate causes, and scan for an auth-failure security signal.

Open an incident

Title Asset

Incidents

Title	Asset	Started	Status
No incidents yet.

Time	Kind	Severity	Detail
Load a timeline.

Remediation, Runbooks & Config M15

Runbooks execute real remediation actions and record the result; device configs are versioned on change with an exact line diff; every config push writes an immutable audit entry.

Create a runbook

Name Kind Command / URL

Actions run in the platform's execution context. Automatic-on-fire is off unless enabled in settings.

Runbooks

Name	Kind
No runbooks yet.

Config backup & diff

Asset Running config

Cooling, Thermal & Capacity M16

CRAC/CRAH units are polled over SNMP and flagged out_of_spec above their supply-temp max; power and rack-U headroom per site is provisioned minus drawn; the what-if simulator projects headroom before you add load.

Provision a site

Site Provisioned power (kW) Rack U provisioned

Record asset draw

Asset Watts Rack U

What-if: add load

New assets (count) kW each

Reporting, SLA & Compliance M17

Per-site uptime + incident reports, SLA compliance against your target, and an immutable, checksummed export of the full audit trail.

Generate a report

Site (blank = all) From To

SLA compliance

Stored uptime (%)

Audit export

Recent reports

Generated	Site	Uptime	Incidents	Checksum
No reports yet.

API, Integration & Keys M18

The documented versioned API surface, a live conformance check, API-key management (keys carry a tenant + role and are shown once), and the external-ITSM ticket integration. Every endpoint is tenant-scoped.

Documented endpoints

—

Conformance

—

Issue an API key

Name Role

Keys

Name	Role	Status	Last used
No keys yet.

MSP Portfolio MSSP

Your managed customer tenants — status, licensed modules, asset usage vs cap, and open alerts. Provision customers, issue per-tenant licences, and operate inside a customer with assume-tenant. Isolation is strict: you only ever see your own portfolio.

Provision a customer

Tenant (slug) Name

Issue a licence

Customer tenant Modules (comma) Mode Asset cap (0=∞)

Portfolio

Customer	Status	Modules	Mode	Assets	Open alerts
No managed customers yet.

PSA & delivery M-4

Per-customer managed-services contract, usage-metered invoicing, SLA attainment with service credits, and the QBR pack — all measured from the platform's own data. Pick a customer and operate.

Customer tenant MRR Plan JSON SLA % Cost to serve

Admin Area

Organization settings for —. Live-connector credentials you enter here are stored encrypted and drive discovery and polling. Secrets are never shown back.

Access & custom roles

Custom roles inherit a base role (admin, operator, viewer) and can only narrow it — read-only, and/or an allow-list of modules. They never grant platform power. Assign one to a user by their sign-in subject.

Name Base role Read-only Module scope (blank = all)

Key	Name	Base	Read-only	Modules	Active
Loading…

Assign to subject Role

Subject	Role	Assigned
—

Super User Area

Platform-wide controls: global defaults, organization provisioning, and platform-level connector defaults that every org inherits unless they override.

Organizations

New tenant (slug) Name

Tenant	Name	Status	Created
Loading…

Signed-licence integrity

Anti-piracy: when enforced, only vendor-signed (Ed25519) licences grant entitlement — editing a DB row grants nothing. The private signing key never ships; the deployment holds only the public key. Mint licences offline with tools/sign-license.js.

Loading…

Per-tenant feature flags

Force a module on (beyond licence), off, or leave it to follow the licence. A flag changes what the tenant's console and server allow — the overlay is applied inside the entitlement resolver.

Tenant

Module	Licensed	Flag	Effective	Set
Enter a tenant and Load.

Scoped platform-operator grants

Grant a normal user elevation to a subset of platform areas (orgs, licensing, tenants, observability). They are elevated to super only for requests inside a granted area; grant management itself is never delegated.

Subject Areas Read-only

Subject	Areas	Read-only	Active
Loading…

Nexus NMS

Discovery & Registration M01

Run a discovery job

Discovery records Refresh

Unified Asset Inventory M02

Promote discovery → inventory Promote all discovered

Assign rack position

Assets Refresh

Collector & Polling M03

Register a poll job

Poll jobs Refresh

Platform self-test

Engine results Re-run

Network Device Monitoring M04

Poll an interface

Samples Refresh

Server & OS Monitoring M05

Poll a host

Check a service

Host metrics Refresh

Virtualization & Cloud M06

Poll

Instances / samples Refresh

Environmental & Power M07

Poll a facility device

Readings & events Refresh

Topology & Dependency M08

Add an edge

Impact preview

Edges Refresh

NOC & Rack Views M09

My dashboards

Set alert state (NOC)

Rack elevation

Threshold & Anomaly Rules M10

Create a threshold rule

Evaluate a sample

Rules Refresh

Alert Inbox M11

Alerts Refresh

Application & Synthetic Monitoring M12

Create a check

Checks Refresh

Log Management M13

Search

Post a log line

Results

Root-Cause Workspace M14

Open an incident

Incidents Refresh

Incident

Remediation, Runbooks & Config M15

Create a runbook

Runbooks Refresh

Config backup & diff

Cooling, Thermal & Capacity M16

Provision a site

Record asset draw

What-if: add load

Reporting, SLA & Compliance M17

Generate a report

SLA compliance

Audit export

Recent reports Refresh

API, Integration & Keys M18

Issue an API key

Keys Refresh

MSP Portfolio MSSP

Provision a customer

Issue a licence

Portfolio Refresh

PSA & delivery M-4

Admin Area

Access & custom roles

Super User Area

Organizations

Signed-licence integrity

Per-tenant feature flags

Scoped platform-operator grants

Discovery records

Promote discovery → inventory

Assets

Poll jobs

Engine results

Samples

Host metrics

Instances / samples

Readings & events

Edges

Rules

Alerts

Checks

Incidents

Runbooks

Recent reports

Keys

Portfolio