2-page handout · A4 / Letter
Executive handout · Infrastructure program

Observability & Resilience Program

2,000+ customers · 3 regions
EU West · Brazil South · China 21Vianet
Rev. 2026-07 · [validate w/ finance]

Replace poll-only SolarWinds with a self-hosted Prometheus + Grafana stack, make an availability-zone failure a shrug instead of an outage, and fix the ServiceNow change automation that keeps missing “Implementing.” Built as code, documented by itself.

2,000+
Customers
3
Regions
15 min
Old poll blind-spot
$0
Monitoring licences
~$130k
Net saved / yr*
Why now — three failures, one root cause
Single-zone outage

Tier-1 workloads in West Europe lived entirely in AZ1 — one fault domain. AZ1 had a platform event; everything went hard-down until manual rebuild.

Fix → Mandatory zone-redundancy (ADR-0001), enforced in Terraform.
SolarWinds blind spot

100% SolarWinds: 15-min polling, no webhooks, per-element licence that rises yearly, shallow on K8s / Azure / network. Never surfaced the zone risk.

Fix → Self-hosted Prometheus + Grafana (ADR-0002).
Change automation broke

ServiceNow branched on typed status text (“Implementing”, typos) and record names. Changes mis-routed or missed; renames made duplicates.

Fix → Branch on state + approval, keyed on sys_id.
The money — monitoring, like-for-like
SolarWinds today$185k
Prometheus + Grafana$55k
$0compute + storage · $0 licence$250k

Bars = midpoint of documented ranges. SolarWinds $120–250k → $0 licence. New run cost: compute $30–60k + storage $5–15k.

Net recurring saving
~$130k /yr

Range $45k–$215k. Net-positive from year one once the parallel-run window closes.

Line itemTodayProposed
Monitoring licence + support$120–250k$0
Monitoring compute (3 regions + dev)incl.$30–60k
Metrics storage / long-termincl.$5–15k
Zone-redundancy uplift (tier-1 only)$0$20–50k
Ops effortvendor + admin0.5–1.0 FTE
Net recurring · monitoring only≈ −$130k

Zone-redundancy is a deliberate resilience investment shown as a separate line — not folded into the saving. One avoided AZ1-class outage across a 2,000-customer estate dwarfs the uplift. *All figures are documented order-of-magnitude ranges; midpoints are illustrative and carry a [validate with finance] flag.

Observability & Resilience ProgramPage 1 of 2 — The case & the money
Executive handout · How it works

Architecture, resilience & delivery

One design, deployed
identically per region
IaC-defined · self-documenting
Monitoring stack — replaces SolarWinds
node_exporter · hosts snmp · blackbox · network azure-metrics-exporter kube-state-metrics Prometheus HA pair · rules · SLO burn Alertmanager → on-call/Teams Grafana · Entra-ID SSO Thanos · long-term storage

Alert names kept as <service>-<severity>-<symptom> so runbook links survive migration. Parallel-run: stack goes up beside SolarWinds, cut over per service, decommission SolarWinds last. China (21Vianet) runs a fully isolated stack — no cross-border telemetry, ever; Brazil metrics stay in-region under LGPD.

The AZ1 fix — zone failure becomes a shrug
Before100% down
Zone 1
tier-1 api
postgres
Zone 2
— empty —
Zone 3
— empty —
AZ1 event → no capacity anywhere else. Recovery = manual rebuild.
After · ADR-0001degraded, not down
Zone 1
tier-1 api
pg standby
Zone 2
tier-1 api
pg primary
Zone 3
tier-1 api
LB
topologySpread + PDB keep quorum; ZRS + zone-redundant HA carry data.

Enforced in code: modules/aks fails the Terraform plan if a tier-1 resource has < 2 zones. A Prometheus alert flags any single-zone tier-1 workload. Applies to tier-1 only — dev & ephemeral are exempt.

ServiceNow — read the state, not the label
−5
New
−4
Assess
−3
Auth
−2
Sched
−1
Implement
3
Closed
if approval == "approved" and state == −1:
  → draft runbook, keyed on immutable sys_id
Delivery — 20 weeks, dev-first
  • Wk 1–2 · Terraform stands up zone-redundant AKS + monitoring in dev
  • Wk 3–6 · EMEA parallel-run beside SolarWinds; exporters via Ansible/AWX
  • Wk 7–10 · Network + Azure depth; ServiceNow fix live
  • Wk 11–16 · Brazil rollout; China isolated in-region stack
  • Wk 17–20 · Per-service cutover; auto-docs live; SolarWinds retired
Prometheus · Grafana · AKS · Terraform · ServiceNow · n8nPage 2 of 2 — How it works