IBM SevOne / Netcool: Infrastructure Monitoring Ledger 2026

Part of the Infrastructure Monitoring Ledger (edition 2026-10-04). How the scores work: methodology.

Snapshot

Tier: Legacy enterprise
Owner: IBM (public company); Netcool from Micromuse in 2006, SevOne via the Turbonomic acquisition in 2021
Licence model: SevOne per managed device; Netcool per Resource Value Unit or managed server; Concert Operate per virtual core and resource unit; quote only
Products scored: SevOne NPM with Data Insight; Netcool Operations Insight 1.6.x (OMNIbus, Impact, Network Manager, Agile Service Manager); Cloud Pak for AIOps, renamed Concert Operate, as the bundled event and AI layer
Latest release: SevOne Data Insight 9.0, 2026-09-15; Concert Operate 5.1.0, 2026-06-24; NOI 1.6.15, 2026-03-26
Next signal: Netcool event engine folded into Concert Operate; watsonx agentic remediation; no dated release named
Archetype: Carrier NOC suite, consolidating
Evidence grade: B. IBM docs and announcement letters cited for most cells, but the scored stack spans four products and several dates differ between the release record and AI evidence.

Scorecard

Dimension	Score	Direction
Capability today	85.4 / 100	higher is better
Momentum since end of 2022	+5.2 points	higher is better
Credibility	17.0 / 25	higher is better
Commercial risk	15.5 / 25	lower is better
Technical lock-in	18.0 / 25	lower is better
Integrator fit	14.5 / 20	higher is better
AI leverage	16.0 / 20	higher is better
Ledger Index	66.6 / 100	balanced weights

Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Server, virtualization and storage (12)	2	2.5	3	3.5
Network monitoring (12)	4.5	4.5	4.5	4.5
Application and service monitoring (10)	2	2.5	3	3.5
Data collection and scale (12)	4.5	4.5	4.5	5
Alerting and event management (12)	4.5	4.5	5	5
Visualisation and reporting (8)	3	3.5	4	4
Logs and traces (8)	3	3	3.5	4
Automation and remediation (8)	3.5	4	4.5	4.5
Security and compliance (8)	3.5	4	4.5	4.5
New-platform support (VMware exit) (10)	1	2.5	3.5	4
Total / 100	64.0	71.6	80.2	85.4

Year by year: 2016: 64.0 · 2017: 64.0 · 2018: 64.0 · 2019: 71.6 · 2020: 71.6 · 2021: 71.6 · 2022: 80.2 · 2023: 80.2 · 2024: 80.2 · 2025: 81.4 · 2026: 85.4

What moved the score

Year	Domain	Change	Points	Trigger
2019	Application and service monitoring	2 → 2.5	+1.0	SevOne 5.7.2 synthetic transaction timing; NOI 1.6 Agile Service Manager maps application dependencies
2019	Automation and remediation	3.5 → 4	+0.8	NOI 1.6: runbooks with SSH, Ansible and REST in the event console; ServiceNow gateway
2019	New-platform support (VMware exit)	1 → 2.5	+3.0	SevOne 5.7.2: basic Nutanix AHV SNMP metrics; NOI 1.6 OpenStack and Docker observers
2019	Security and compliance	3.5 → 4	+0.8	SevOne 5.7 MFA; Data Insight SAML SSO; FIPS 140-2 mode on OMNIbus
2019	Server, virtualization and storage	2 → 2.5	+1.2	SevOne 5.7.2: vCenter API polling of hosts, VMs, datastores; NOI 1.6 vCenter and OpenStack observers
2019	Visualisation and reporting	3 → 3.5	+0.8	SevOne Data Insight dashboards and executive reports; NOI 1.6 live topology maps
2022	Alerting and event management	4.5 → 5	+1.2	NOI 1.6.7: topology-based event suppression; ServiceNow gateway and ChatOps routing
2022	Application and service monitoring	2.5 → 3	+1.0	Cloud Pak for Watson AIOps 3.5 joins Instana traces with SevOne data; Instana is a separate product
2022	Automation and remediation	4 → 4.5	+0.8	Cloud Pak for Watson AIOps 3.5: Ansible playbooks for closed-loop remediation; no official Terraform provider
2022	Logs and traces	3 → 3.5	+0.8	Cloud Pak for Watson AIOps 3.5: log ingestion via Logstash or Fluent Bit beside events
2022	New-platform support (VMware exit)	2.5 → 3.5	+2.0	SevOne NPM 6.3 Kubernetes collector; OpenShift and Kubernetes in Cloud Pak for Watson AIOps 3.5
2022	Security and compliance	4 → 4.5	+0.8	NOI 1.6.7: FIPS 140-2 validation; air-gapped OpenShift installs; tenant partitions
2022	Server, virtualization and storage	2.5 → 3	+1.2	SevOne NPM 6.3: Kubernetes node and pod metrics; Hyper-V and Nutanix AHV supported
2022	Visualisation and reporting	3.5 → 4	+0.8	SevOne Data Insight 3.6: scheduled email and PDF reports; incident blast-radius views
2025	Data collection and scale	4.5 → 5	+1.2	SevOne NPM 8.0.3 (2025): 50 million metrics across clusters, Kafka streaming, containerised collectors
2026	Application and service monitoring	3 → 3.5	+1.0	Concert Operate 5.1 (2026): OpenTelemetry trace intake and application topology
2026	Logs and traces	3.5 → 4	+0.8	Concert Operate 5.1 (2026): OpenTelemetry logs and traces correlated with SevOne metrics
2026	New-platform support (VMware exit)	3.5 → 4	+1.0	Concert Operate 5.1 (2026): OpenShift Virtualization, AHV, EKS, AKS, GKE; Proxmox and XCP-ng unsupported
2026	Server, virtualization and storage	3 → 3.5	+1.2	SevOne 8.2 and Concert Operate 5.1 (2026): OpenShift Virtualization, IPMI and Redfish health; still no own agent

Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-01	IBM Partner Plus replaces PartnerWorld	D11 Ecosystem openness	P
2023-06	Cloud Pak for AIOps 4.1: Watson name dropped, watsonx models integrated	D7 AI-assisted operations	V
2024-04	Cloud Pak for AIOps 4.3: ServiceNow integration without probe gateway	D10 Automation and remediation	C
2024-04	SevOne NPM 6.5: AWS Direct Connect and Azure ExpressRoute monitoring	D2 Network	C
2024-06	IBM Concert GA: watsonx operations platform	D7 AI-assisted operations	V
2024-06	SevOne NPM 7.0: containerised on Kubernetes and OpenShift	D4 Collection and scale	V
2024-11	SevOne NPM 6.6/6.7: 5G core and O-RAN slicing metrics	D2 Network	M
2024-11	SevOne NPM 7.1: NVIDIA DCGM GPU and InfiniBand templates	D1 Server and virtualization	M
2024-12	NOI 1.6.13: migration utility to Cloud Pak for AIOps	D12 Packaging and licensing	P
2025-06	Netcool probe rules migration utility	D5 Alerting and events	P
2025-10	SevOne NPM 8.0.3: 50 million metrics; OpenTelemetry collector	D4 Collection and scale	C
2026-03	NOI 1.6.15: OpenShift 4.16/4.17, OpenSSL 3.0	D9 Security	U
2026-06	Cloud Pak for AIOps renamed Concert Operate 5.1; agentic workflows	D12 Packaging and licensing	P
2026-09	SevOne Data Insight 9.0: natural-language dashboards on Granite	D7 AI-assisted operations	V

Centre of gravity: AI-assisted operations (3), Network (2), Collection and scale (2)
Driver mix: Vision 29%, Customer need 21%, Market window 14%, Upstream 7%, Portfolio 29%

Credibility: 17.0 / 25

Criterion	Score	Basis
Cadence	3.5	SevOne and NOI ship several releases and fix packs a year; no published rhythm
Roadmap transparency	3	Public IBM docs and announcement letters; direction only at Think and TechXchange
Say-do	4.5	13 of 13 promises 2023-2026 shipped; 11 within three months, 2 about four months late
Velocity	3.5	SevOne adds containers, 5G and scale each year; NOI 1.6.x now maintenance releases
Lifecycle stability	2.5	Watson AIOps renamed twice; NOI users pushed to Concert Operate; SevOne appliances to containers; OpenShift minimums raised without notice

Say-do record, 2023 to 2026: 13 items 2023-2026, all shipped: 11 within 3 months, 2 with about 4 months lag (Golden Signals log pipeline, SevOne 8.0 scale). The OpenShift 4.16/4.17 minimum for NOI 1.6.15 arrived without advance notice.

Commercial risk: 15.5 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	2.5	Cloud Pak renamed 2023 and 2026; Netcool trade-up incentives 2025; three licence metrics across products
Purchase constraints	4	Quote only; typical entry $50,000-100,000 a year; separate metrics per product
Channel and access	3	Docs public; sold through IBM and Partner Plus partners; no public trial or prices
Owner stability	2.5	IBM stable; SevOne changed owners in 2019 and 2021; portfolio consolidating into Concert
Cost of staying supported	3.5	NOI 1.6.x in maintenance; new features only in Concert Operate on OpenShift

Security record of the product itself: No SevOne or Netcool flaw on the CISA KEV list (the security record, grade C name filter). IBM has 10 KEV entries in other products (Data Risk Manager, Aspera Faspex, InfoSphere); context only, no deduction.

Technical lock-in: 18.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	4.5	SevOne proprietary flat-file metric store; OMNIbus ObjectServer tables and .rules probes; proprietary dashboard JSON
Export path	3	REST, GraphQL, Kafka exporter and JDBC/Kafka gateways; no tool converts history or rules
Stack coupling	4	Modern Netcool and Concert need OpenShift; SevOne appliances; collection is agentless SNMP, WMI, gNMI
Hardware / cloud coupling	2	Runs self-hosted and air-gapped; legacy appliance images; OpenShift cluster required for new parts
Skills and tooling coupling	4.5	Netcool rules, ObjectServer SQL and Impact policies are scarce vendor-only skills

Integrator fit: 14.5 / 20

Criterion	Score	Basis
Partner programme openness	4	IBM Partner Plus tiers; most ITOM revenue via integrators such as Kyndryl, Accenture, TCS
Multi-tenancy and self-service	3.5	SevOne tenant partitions; Netcool row filters; OpenShift namespaces; no MSP billing
API and infrastructure-as-code	3	SevOne REST v2 with OpenAPI, GraphQL, Netcool OSLC REST; no official Terraform or Ansible collection
Skills and certification	4	IBM certifications for OMNIbus, NOI and Cloud Pak for AIOps; SevOne specialist badge

AI leverage: 16 / 20

Strand	Today	Latest step
AIOps on monitoring data	5	2026: SevOne 8.2 (2026): metric forecasting completes anomaly, correlation and root-cause set
AI platform stack	4	2026: SevOne Data Insight 9.0 (2026): natural-language dashboards on Granite models
AI-assisted operations	5	2026: Concert Operate 5.1 (2026): agentic remediation workflows GA with human approval
Agent openness	2	2021: Cloud Pak for AIOps REST APIs; SevOne Data Insight GraphQL; no MCP server

AI say-do: 2 tracked, 2 GA (watsonx in Cloud Pak, SevOne GPU telemetry), about 2 months lag each, 0 dropped. The AI is ML event grouping and anomaly detection in Netcool and Cloud Pak for AIOps plus a watsonx assistant that runs Ansible playbooks on approval; only a proprietary agent framework in preview (2026-05), no official MCP server.

Reading

IBM is folding Netcool event management and its AIOps layer into Concert Operate on OpenShift, with SevOne kept as the carrier-scale network performance tier. The record is strong on network scale, event correlation and dates: 13 of 13 tracked promises shipped since 2023, 11 within three months. The trade-off is a heavy, quote-only, OpenShift-bound stack with proprietary rules and data formats, no Proxmox support and repeated renames to follow.

Open questions and evidence caveats

Apps, logs, automation, security and AI today rest partly on Cloud Pak for AIOps / Concert Operate, a separately licensed OpenShift product; product scope needs a ruling.
Several claims read like vendor statements (95% noise reduction, 50 million metrics, Common Criteria) and were not tested.
Dates differ: watsonx GA 2023-06 in the release record vs 2024-05 in the AI evidence; SevOne 7.1 GPU templates appear only in the AI evidence; SevOne 6.6/6.7 is dated after 7.0.
KEV check for SevOne and Netcool is a grade C name filter.