Cross-Platform Management

Transcription

1 Cross-Platform Management with MS Operations Management Suite Pete Lee

2 Lee Berg Madison, WI Madison, Consultant System Center Cloud 2 Years Internal 2 Years Consulting Speaking! User Groups Video / Blogging #MMSMOA

3 Pete Zerger Spring, TX (near Principal Program Mgr 18 years of RBA 6 years of cloud 10-Time Microsoft MVP #MMSMOA

4 Agenda Very Quick Tour of OMS Tools for Cross-Platform Management Walkthrough Cross-Platform Scenarios Log Analytics (Syslog) NRT Performance Data Hybrid Automation Accessing Cross-Platform Data Programmatically

5 Goals Bring you up-to-speed on cross-platform features of OMS (as of today) Tools and tips for ease of management Deep dive on the features Demos to give you some first-hand exposure Downloads and resources for use back home

6 QUICK SURVEY UNIX / Linux Experience? PowerShell Experience? Orchestrator Experience? Azure Automation Experience? Managing Cross-Platform with System Center in production today? Using Docker / Nagios / Zabbix?

7 Tools For Cross-Platform Management

8 Tools for Cross-Platform Management If you don t administer Linux often, which tools to use can be a challenge The following can make administering UNIX and Linux systems easier Putty SSH client for Windows Saves session settings WinSCP Secure copy client for Windows Copy files to and from *NIX systems in Windows GUI RoyalTS SSH client for Windows ios and Android versions also available Vi text editor will likely be necessary. Vi Pocket Reference at

9 Demo Management Tools for Cross-Platform

10 Quick Tour on Operations Management Suite

11 Why OMS? It s simple Operations Management Suite Time to value Easy to integrate Protect and Extend Enhance System Center

12 Cross-Platform Management Leverages the MS Monitoring Agent for Linux Supported Scenarios: Syslog Event Data Docker Container Logs Performance Data Collection Nagios Core Alert Collection Zabbix Alert Collection Supports the following Linux distributions: Amazon, CentOS, Debian, Oracle, Redhat, SUSE, Ubuntu

13 Cross-Platform Agent Basics Some basics on the Microsoft Monitoring Agent for UNIX / Linux: Uses an updated version of the Microsoft Monitoring Agent for UNIX / Linux Can be multi-homed to SCOM instance Extensions facilitate push of performance data in near real-time

14 Cross-Platform Agent Binaries Running the shell bundle with the --extract flag reveals the following:

15 Demo OMS Cross-Platform Agent Installation

16 System Changes in Agent Install A non-privileged user named: omsagent is created. This is the account the omsagent daemon runs as A sudoers include file is created at /etc/sudoers.d/omsagent This authorizes omsagent to restart the syslog and omsagent daemons. The above is called an include directive. If sudo include directives are not supported in the installed version of sudo, these entries will be written to /etc/sudoers. The syslog configuration is modified to forward a subset of events to the agent.

17 Cross-Platform Capabilities of Operations Management Suite

18 Syslog OMS collects Syslog messages from managed Linux systems Which messages are collected is determined by Facility and Security level Facility is one information field that indicates from which part of the system the message originated Facility Description Facility Description kern Kernel messages auth Security/authorization messages user User-level messages syslog Internally generated syslog messages cron Scheduling daemon lpr Line printer subsystem daemon System daemons ftp FTP daemon Complete list of Syslog facilities and security levels at

19 Syslog Syslog collection is configurable from the UI From the Overview dashboard, select Settings From the Settings page, click on the Data link Select Syslog from the left-hand settings list

20 Supported Syslog Daemons Either rsyslog or syslog-ng are required to collect syslog messages. The default syslog daemon on version 5 of Red Hat Enterprise Linux, CentOS, and Oracle Linux version (sysklog) is not supported for syslog event collection. You must install one of the supported Syslog daemons in order to use OMS to collect syslog events.

21 Demo Syslog Configuration & Data Analysis

22 Nagios and Zabbix Alert Forwarding Nagios Requires the following configuration changes: Grant user omsagent read access to Nagios log file (/var/log/nagios/nagios.log) Zabbix Similar to Nagios, but password has to be in clear text To mitigate risk, grant user permissions to monitor onlu sudo usermod a -G nagios omsagent Modify the omsagent.conf configuration file Restart the omsagent daemon

23 Performance Data No counters collected by default, but some default recommendations offered Click the blue button to add recommended counters Once added, set desired collection interval Behind the scenes, changes are written to /etc/opt/microsoft/omsagent/conf/omsagent.conf.

24 Demo Performance Data Configuration & Analysis

25 Cross-Platform Automation with Azure Automation

26 New Automation Capabilities Built-in integration with onpremises systems and PowerShell DSC nodes. Run Azure Automation runbooks on-premises Automation accessible via new REST API (including GitHub, VSO and ARM) Graphical workflow-authoring tool Runbook management from the new Microsoft Azure portal

27 Hybrid Worker in Azure Automation An on-prem server running MS Mgmt Agent Executes runbooks downloaded from AA Reports results back to AA and OMS Can be deployed in groups for high availability Requires no ports (outside-in) On-premises Runbook Environment Microsoft Mgmt Agent Hybrid Runbook Worker Azure Automation Operations Management Suite

28 Demo Hybrid Runbook Worker Configuration for Cross-Platform

29 Cross-Platform Automation in PowerShell Secure Shell (SSH) and Secure Copy (SCP) for PowerShell are available through multiple open source libraries & modules SSH.Net Library Posh-SSH PowerShell SSH Module SSHShell PowerShell SSH Module Renci SSH.NET Library Microsoft-authored version coming soon:

30 Host Security for Automation How to handle privileged access is an important element of planning your automation strategy Most orgs are not going to allow root access Runbook automation will require privilege in some scenarios A good compromise is sudo with no password Grant Wheel group all access with no password %wheel ALL= NOPASSWD Grant specific user and operator group all access with no password user1, %operator ALL= NOPASSWD Grant operator group all access with no password to commands in /sbin/ directory %operator ALL= NOPASSWD /sbin/

31 Demo Azure Automation Cross-Platform Runbook Example

32 OMS Search API Enables direct programmatic access to OMS Log Search capabilities of OMS Exposes the RESTful Azure Resource Manager API Supported uses include: Issue direct query Invoke a saved search Export and import saved search in bulk

33 OMSSearch PowerShell Modules Custom PowerShell modules for OMS Search API ease the process of programmatic access Hide complexity of arm client / RESTful API behind friendly PowerShell cmdlets Microsoft Available on GitHub A bit more basic than the communitydeveloped module (today) Community Available on GitHub Developed by multiple MVPs and a Microsoft PFE

34 Demo Accessing OMS Cross-Platform Data Programmatically

35 Recap & Resources Cross-platform management in OMS is evolving quickly! You can automate on Linux with PowerShell, Azure Automation and Hybrid Worker Cross-platform data is accessible in OMS Portal and Search API Give hybrid automation a try! Download the code Runbooks all available at

36 Other Sessions This Week Lee Wednesday 9:00 am Extending and Automating OMS Pete Tuesday 9:00 am OMS Deep Dive Tuesday 11:00 am RBA for ConfigMgr Admins Wednesday 9:00 am Extending and Automating OMS

37 SPONSORS Discuss Ask your questions-real world answers! Plenty of time to engage, share knowledge. Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS! Session Title:

38