Quick St Copyright (c) Silve

Transcription

1 Quick St Copyright (c) Silve Index Introduction Which Spore do you have? Default settings Summary of required and optional steps Getting started; connecting your Spore to the network Changing user names and passwords Configure Discovery Additional recommended steps The Quickest Quickstart Useful links Introduction Thank you for purchasing a Spore. Our goal is to enable you to monitor your IT infrastructure within minutes, rather than weeks or months. The following quickstart will require you to make choices as you progress. There is no need to be concerned if you change your mind later. You can modify the configuration at any time and at the click of a button your Spore will rediscover and reconfigure monitoring. For the truly impatient, click here (that's what we would do). Which Spore do I have? Spores are VMWare Virtual Appliances or small hardware appliances. This document applies to all versions. The VMWare Virtual Appliance is limited only by the resources assigned to the virtual machine. The Button Spore is a small embedded silver appliance capable of monitoring about 200 endpoints (hosts and devices) and about 1200 services. The Black Cap Spore is a black 1U appliance with a dual-core processor capable of monitoring about 1000 endpoints and 6000 services. The user interface on all Spores is identical, but keep in mind that more powerful hardware will perform discovery % faster than the least powerful Button Spore. Default settings Spore Configuration user name/password: admin/silverspore Icinga Monitoring user name/password: icingaadmin/silverspore Virtual Appliances have a single ethernet adapter assigned and will use DHCP to obtain an IP address.

2 Ethernet port 0 (eth0) default IP address: Ethernet port 1 (eth1) default: DHCP Summary of required and optional steps The following steps are required to get your Spore up and running properly: Change your Spore's network settings. On hardware based Spores you can use ethernet port 1 to initially configure your Spore's network settings, but you must assign a static IP address and connect eth0 to your network when you are ready to run discovery and start monitoring. Ethernet port 0 is the only port used for discovery and monitoring! Enter an server to be used to send notifications Change the user name and password for root and icingaadmin (they use the same credentials) Change the user name and password for Spore Configuration Enter an Icinga user to receive notifications Enter subnets for discovery Run discovery The following steps are optional, but will greatly enhance the usefulness of your Spore: Enter SNMP community strings to be used to gather information about SNMP enabled devices on your network. You should at least enter the community string "public". You may be surprised at the information that the Spore gathers. Enter Windows administrator (or domain administrator) credentials. If Windows credentials are entered, the Spore will be able to conclusively determine if a Windows host is a server or a desktop, and will be able to remotely monitor CPU, Disk, and Memory usage. Review the "Monitoring Options" tab page to see if the default options match your needs. After Discovery has been run, click on the "Host/Services" tab and disable any endpoints or services that do not need to be monitored. Getting Started Connecting a hardware Spore to the network Both hardware Spores have 2 ethernet ports. We will call these "eth0" and "eth1". "eth0", on the right when facing the BACK of the Spore, is assigned IP address: "eth1", on the left facing the back of the Spore, will attempt to get a dynamic address via DHCP. "eth0" is circled in red in these images. The Button Spore is on the left, the Black Cap Spore on the right. Once your Spore has been configured, eth0 is the port that is used for monitoring and must be connected to the network for the Spore to function properly! 1. Connect your Spore to the network and plug in the power. Use port eth1 if you know that you will be able to determine the address assigned to the Spore by DHCP (the rest of this

3 2. guide assumes that you will connect a cable to port eth0). Temporarily change the IP address of your workstation to be in the /24 subnet (select an address such as Do not use the Spore's default address of ). Change the IP address and network configuration of your Spore Use your browser to navigate to the Spore's landing page. For Virtual Appliances you must find the IP address assigned by your DHCP server. For hardware Spores using eth0 enter " in the address bar (or the address assigned by DHCP if you are using eth1). You will be prompted to accept the Spore's self-signed certificate. The Spore defaults to secure HTTP (HTTPS) to protect data that you enter. Agree to allow an exception for the Spore's certificate. You will be greeted by the Spore's "landing page". 6. Click on the link "Spore Configuration". 7. Click on the tab "System and Users" 8. Enter information about your network, time zone, and mail server. Be sure to use an IP address that is accessible from your workstation's subnet.

4 Click the "Save" button. The Spore will reboot. If your cable was plugged into eth1, remove it and plug it into eth0. Change the IP address of your workstation back to it's normal setting. If you do so before the Spore completes rebooting (about 2 minutes), you will be asked to accept the Spore's certificate once again. (Once you accept the certificate permanently, you will only get prompted if you change the Spore's IP address). You will once again be at the Spore landing page. Changing user names and passwords 1. Click on "Spore Configuration" 2. Click on the "System and Users" tab (you will see the changes that you made to network settings). 3. Click on the "Users" bar at the bottom of the browser window. There is an extensive explanation of the different credential types on the right hand side of the screen.

5 In the top section ("superusers"), change the password from "silverspore" to one of your choice. In the middle section ("Spore Administrators"), change the password for "admin" and add accounts for users who you would like to have access to the Spore Configuration browser interface. In the bottom section, add users who you would like to have access to the Icinga Monitoring browser interface. Configure Discovery Click on the "Discovery Configuration" tab. Click on the "Subnets" bar if not already selected.

6 3. 4. Enter the subnet ranges for the devices and servers that you wish to monitor. For example, for all devices/servers in the /24 subnet, enter "From to 254" and click "Add". Be sure to click "Save Changes" to save the subnets. WARNING: Do not run discovery on public Internet addresses. The discovery process uses network probes that can be misinterpreted as a malicious hacker probing for vulnerabilities. Your ISP may not appreciate that you are only experimenting and may block your service. Of course running discovery over secure VPN tunnels (IPSec, PPTP, or SSLVPN) is fine. 5. At the bottom of the Discovery page, click on the "Discover now" button. The "Commands" page will be displayed so that you can follow discovery progress. Discovery times will vary quite a bit depending on the number of hosts and services, traffic on your network, latency, how quickly a host can be identified, and many other factors. Typical times range from seconds per host for a Button Spore to 6-15 seconds per host for a Black Cap Spore.

7 6. When Discovery has completed, click on the Launch Icinga Monitoring link at the top of the page and then on the Service Details menu item on the left of the Icinga page. You will be able to see each host and service change status as they are checked (the Spore itself is listed and monitored as "spore_localhost").

8 Additional recommend steps Enter SNMP community strings and Windows credentials prior to running Discovery. Host OS identification is much more accurate on SNMP enabled or Windows WMI enabled servers. Also, additional OS specific monitoring such as CPU, Disk, and Memory monitors are added to these hosts. The Spore will discover all devices and most network services on your network. Click on the "Host/Services" tab and disable monitoring of any hosts or services that you do not want to monitor. This will prevent unnecessary notifications and also unneeded use of resources on the Spore.

9 The Quickest QuickStart! Plug a network cable into eth0 (see diagrams above). Change your workstation's IP address to be in the /24 subnet (do not use ; it is used by the Spore). Type " into your browser's address bar. You will get a warning from your browser. Accept the self-signed SSL certificate. Click on the "Systems and Users" tab and change the Spore's host name, network settings, time zone, and mail server. Save and let the Spore reboot. Change your workstation's IP address back to its proper setting. If you finish before the Spore completes rebooting, you will be redirected to the Spore's Launch page. Otherwise, enter the IP address that you assigned in your browser's address bar. Click on the "Systems and Users" tab and change the default passwords.

10 Add an Icinga Administrator with an address for notifications. Click on the "Discovery Configuration" tab. Add subnets to the list and save. OPTIONAL: enter SNMP community strings and Windows credentials. Click the "Discover now" button on the bottom of the page. When discovery has completed, click the "Launch Icinga Monitoring" link at the top of the page. Useful links The SilverSpore Web SilverSpore Support The SilverSpore forum The SilverSpore Wiki