Getting Started User s Guide

Transcription

1 Getting Started User s Guide Savision iq V2.3

2 Contents 1. Introduction About this Guide Understanding Savision iq First Run Experience Adding the License Key Adding your First Integration Continuing the First Run Experience Navigating the iq Panel Search Function iq Panel Tabs Computers Tab Alerts Incidents Groups and Services Components Saved Searches Boards Panel Creating Boards Configuring iq Boards Health Types Configuring the Display for iq Boards NOC View iq Board Views Heat Map View Alert Count View Incident Count View Uptime View iq Boards Share, Pin or Delete iq Boards Edit iq Boards, iq Board States and Notifications Configuring iq Board Maintenance Mode Page 2

3 4.7. Configuring Incident Automation Applying Filters to iq Boards Nesting iq Boards (Child Boards) Administration Pages Integrations Roles Agents Downtime Licensing Storage Page 3

4 1. Introduction 1.1 About this Guide This guide is intended to help you understand Savision iq. It will take you through the various parts of iq in order to help you understand it. We will also provide some examples from our lab. Savision iq is an ever-evolving product and this guide was written for version Understanding Savision iq Think of Savision iq as a starting place. It is a Monitor of Monitors. It is a Single Pane of Glass. In a nutshell we allow you to pull alerts and health state information from your various montoring systems and put them together in dashboards. We allow you to quickly search the data by pulling the various data and saving it in our own Elasticsearch back end. For example, you can take a computer object as seen by SCOM and place them into a dashboard. But what about how VMware sees them? Place the same objects from VMware into either the same dashboard or one of its own. Then take all the network objects as monitored by SolarWinds into another board. Then there are Linux computers that are currently being monitored by another team with Nagios. They can go into another dashboard. There are a couple backup scripts that run every night. You can create objects in Savision iq using our API and update the health of those objects. Now they can be in another dashboard. All of these objects define a single system or operations. Finally put all of those dashboards into an overall dashboard to see the health status of that system. That is just a quick example, but hopefully you are starting to see how combining your various monitoring tools with Savision iq allows you to see the bigger picture. Savision iq also integrates with your ITSM systems. When information is pulled from the various monitoring systems, the alerts are also pulled. Now you can take one or more alerts and create an incident based on those alerts. Savision iq goes the extra step in closing out those alerts once the incident has been closed. All of our integrations are bi-directional. We want data to flow between the various systems as you work within each one. 2. First Run Experience After you have successfully installed Savision iq and launched it for the first time, you will be presented with a quick guide as a first run experience. Page 4

5 2.1 Adding the License Key First item on the agenda is to add the license key. By now you should have received an from Savision with a text file attached. This is the license key and it is fairly simple to add it to Savision iq. The first run experience will automatically take you to the Settings > License tab where you can add the license. NOTE: One of the keys to Savision is the "Action button in the lower right-hand corner. During your experience with Savision iq, you will discover this button. What it does depends on where you are within Savision iq. It can also have different actions if you have objects, alerts or incidents highlighted. Page 5

6 Follow the steps of the first run experience and add the license key. 2.2 Adding your First Integration The next step will be to add your first integration. The first run experience will automatically take you to the Integrations tab. Click on the Action button to add your first integration. Next, click on the integration you wish to add. Page 6

7 At the time this guide was written, Savision iq supports the following integrations: Amazon Web Services - Monitoring Azure - Monitoring CA APM - Monitoring Derdack - Notifications Ivanti Incidents Nagios - Monitoring PRTG - Monitoring System Center Operations Manager - Monitoring ServiceNow - Incidents SolarWinds - Monitoring Savision iq API Monitoring and Incidents VMware vcenter Once you have clicked on the integration you want to begin with, you will be presented with a form to complete. Please fill out the form and then click on Save. NOTE: The username doesn t always need to be an administrator. If you use a credential with lower level permissions, then that will determine the access Savision iq has to that integration. That could be an issue later on if some objects don t populate, or you do not have permissions to close out an alert. Page 7

8 NOTE: In many cases you will need to use Domain\Username format for the User Name. 2.3 Continuing the First Run Experience After you have saved your integration, the first run experience will guide you through various parts of the application. This will help you learn to navigate around. Page 8

9 3.0 Navigating the iq Panel Now that the first run experience is finished, you will begin to see information. This may take a few minutes. All of the alerts, incidents, and stateful objects will be pulled for the integrations that have been configured. If you would like to add additional integrations, please visit Section 5.1. In the iq panel, you can look at the Computers, Alerts, Incidents, Groups & Services, or Components tabs, which can be filtered using a search. Searches can also be saved for future reference. 3.1 Search Function All parts of the iq panel are interconnected. Typing into the search bar allows the user to look at all of the details or raw properties of each object, alert, and incident in Savision iq. Example: If you type *SQL* in the search and hit enter, you should notice that all of the data shown in the various tabs below will have SQL in some part. Savision iq will highlight areas that match the search in yellow. In some cases, you may not see the name highlighted, but that generally means the search criteria matched a detailed or raw property. Users can save and customize their searches at the right-hand side of the search bar, which we will cover in section At any time if you want to clear a search, click on the X. This will take you back to a blank search with all items shown that the user has access to on the different data tabs. Page 9

10 Operators must be capitalized. Example: *SQL* OR *SCOM* Unless a wild card is used, the search will look for the exact words entered. Typing in SQL will not return SQLSVR iq Panel Tabs While the search applies across all data tabs, filtering options are only applied to the tab that is currently selected. In Savision iq we normalize objects into certain data types. This is important as different monitoring platforms use different formats and naming conventions Computers Tab Under the Computer tab, Savision iq will show everything that has been normalized into either a Computer or a Virtual Machine. Filtering options here include: Types Selection of component types Computers and/or Virtual machines. Page 10

11 Integration Types Selection of the different types of integrations, such as SCOM or PRTG. This will list the different types of integrations even if you do not have them set up. Integrations Selection of the named integrations you have set up. State Selection of the different health states. When you click on an object, the properties panel will slide out from the right-hand side. Clicking again will close the window or you can click on the x on the right-hand side of the panel. Selecting a single object from the list will open a panel showing data of the selected object. The following action buttons are visible on the bottom of the panel. The More Details button will navigate the user to a page with all the details Savision iq has on the object (including relationships with other objects). Page 11

12 The Source button will open a new browser tab and navigate to the selected object in the console of the source system (e.g. SCOM, SolarWinds, ServiceNow, etc.). The Pin button will pin the object to a new or existing board. Please see section 4.1 for additional information. NOTE: Not every monitoring system has the concept of computers. Some monitoring systems only monitor devices. If an object cannot be normalized by Savision iq, it can still be found in the Components tab. The Components tab also displays normalized objects, so every object that Savision iq knows about can be found under this tab Alerts Alerts will show all of the alerts gathered from the different monitoring systems, sorted by the alerts that have been most recently updated. With alerts, there are a few different filtering options: Integration Types Selection of the different types of integrations, like Operations Manager or PRTG. This will list the different types of integrations that we capture alerts from even if they have not been set up yet. Page 12

13 Integrations Selection of the named integrations that have been set up. Severity Selection of the severity of the alert (i.e. Error, Warning, Info). Active Checkmark to show only active alerts. Time Time filter for Raised in The Last (hrs), Updated in The Last (hrs), Raised More Than (Days). Clicking on an alert will cause the side panel to slide out. You can click on the alert again to close it or click on the x on the panel. You ll find three action buttons at the bottom of the panel. The Related Component button will navigate the user to a page with all of the details Savision iq has on the alert. The Source button will open a new browser tab and navigate to the selected object in the console of the integrated source system. Page 13

14 3.2.4 Incidents This action button will have the number of alerts selected. Clicking on it will display three other buttons that will allow you to resolve the alert, link the alert to an existing incident, or link the alert to a new incident. In this data tab, Savision iq will display incidents captured from your various ITSMs. Filtering of the incidents is similar to those in alerts. Integration Types Selection of the different types of integrations, like ServiceNow or Ivanti. This will list the different types of integrations that we capture incidents from even if they have not been set up yet. Integrations Selection of the named integrations that have been set up. Active Checkmark to show only active alerts Time Time filter for; Raised in the Last (hrs), Updated in the Last (hrs), Raised More than X (Days). Clicking on an Incident will cause the side panel to slide out. You can click on the incident again to close it or click on the x on the panel. Page 14

15 The More Details button will navigate the user to a page with all of the details Savision iq has on the incident. The Related Component button will navigate the user to a page with all of the details Savision iq has on the object referenced in the incident. The Source button will open a new browser tab and navigate to the selected incident in the console of the integrated source system. Page 15

16 3.2.5 Groups and Services The Groups & Services tab will show all groups and services from your monitoring systems. This is useful if you look at not only the group health itself, but also those objects underneath. Filtering options are the same as for the Computers tab. The only exception is the Component type where you can filter by Groups and/or Services. Clicking on a Group or Service will cause a side panel to slide out. Click on the incident again to close it or click on the x on the panel. Page 16

17 The three actions available in this panel are: The More Details button will navigate the user to a page with all of the details Savision iq has on the Group or Service. The Source button will open a new browser tab and navigate to the selected incident in the console of the integrated source system. This button allows for two other actions. The first is to create a synced board(s) and the second action is to pin this to an existing or newly created board. You will notice a difference when using the Groups & Services tab as compared to other tabs. When you open up the details of the group, you can navigate through all of the information for that group/service. Page 17

18 3.2.6 Components In the Components tab, you will be able to see all monitored objects. Savision iq tries to normalize the type of object like website or database, but if it cannot place it into any predefined type, it will still display it as an object. Filtering here is just like Computers with the exception of having several more types to choose from. Selection of the object and action buttons are also the same Saved Searches The last tab covered in this guide is the Saved Searches. It is important to understand what is contained in all of the data tabs so that you can verify that your search is providing the correct data. If you find yourself performing the same searches repeatedly, there is a way to save that search so you don t need to type it in each time. Please note that on a new installation there are already some common saved searches. Once you have typed in a search criteria and have the correct information, you can save it by clicking on Save on the right hand side. After you click on Save a dialog box will pop up allowing you to give your new search a name. You can also decide if it is going to target all or just some of the data tabs. Page 18

19 Your saved search will give you the number of objects, alerts, etc. that match your saved search. Savision iq will go directly to that data tab and show you the information if you click on the number. 4.0 Boards Panel Savision iq boards are a way to create boards (groups) of objects from one or more monitoring systems. You can also create boards inside boards. This allows you to define something like a service, but then divide up the various parts into sub-boards. Page 19

20 4.1. Creating Boards To create a board start from the iq panel. It is helpful to search and find the objects that you wish to add to a board. See Chapter 3 for assistance in searching the various objects. After selecting your components, click the Pin It action button in the lower right corner. You can either pin the selected components to an existing iq board or create a new board. Page 20

21 NOTE: iq boards can also be created by clicking the Create a Board action on the lower right of the boards view Configuring iq Boards Health Types When creating an iq board, you name the board and configure the Health Rollup Type for it. Health Type can be set to the following: Worst-Case If any included component goes into an unhealthy state, the iq board will indicate an Unhealthy State. Best-Case If there is one healthy component in the iq board, the board will indicate a Healthy State. This will require all the objects in the board to be unhealthy before the board will change state. Percentage-Based Allows you to add a percentage of the objects you wish to be healthy so that the board remains healthy. For example: 40% of the objects are Healthy (Green), 20% are in a Warning (Yellow) state, and the final 40% are Critical (Red). Setting the value to 40% would roll up the board as Green. Setting the value to 60% would roll up the board as Yellow (40% Healthy + 20% Warning). Setting the value to 70% would roll the up the board as Red (40% Green + 20% Yellow + 10% of Red) Configuring the Display for iq Boards There are various ways the iq boards can be displayed. By default, each board will show the health of the board, as well as the health of the underlying objects. However, there are cases where you may want to show other information or have more of a NOC type view NOC View iq can be configured to have its iq boards displayed in NOC Mode where the iq board state fills the entire iq board. This is achieved by toggling the switch on the right-hand side of the title bar of the boards panel. NOC Mode Page 21

22 Non-NOC Mode Page 22

23 4.2.2 iq Board Views iq boards can be configured to display different health status of iq boards. Components can be viewed in iq boards to show: Heat Map # of alerts related to the components # of incidents related to the components Component uptimes Heat Map View Page 23

24 Alert Count View This will show the total number of alerts for all the objects, plus the Mean Time to Resolution (MTTR) Incident Count View This will show the total number of incidents for the given objects in the board, as well as the Mean Time to Resolution (MTTR). Page 24

25 Uptime View This will show the uptime percentage of the board, calculated over the last 7 days. Page 25

26 4.3. iq Boards Clicking on a board will bring you to information that Savision iq has on that board. You will see an expanded view of the board and its health. The Overview tab will show the health of the different objects. You may click to drill into any object to see further information about it. In the lower right-hand corner, you will see the Actions button. Available actions for the board are as follows: Actions within boards include: Change Board State Schedule Maintenance Mode Start Maintenance Now Configure Incident Automation Pin Board Share Board Delete Board Notification Settings Edit Board Page 26

27 Board Explorer will allow you to view the diffent objects and how they roll up to the board. This is helpful when you have boards within boards. Savision iq will also display all the alerts for any of the given objects, as well as any incidents Share, Pin or Delete iq Boards iq Administrators can create and share iq boards with users based on iq roles. iq roles allow you to add users and groups from Active Directory. Once in an iq role, the iq Administrator clicks the ellipse of the iq board and Share. Additionally, iq boards can be pinned to other iq boards. Use the Actions item to delete any unwanted iq boards. Page 27

28 4.5. Edit iq Boards, iq Board States and Notifications From within an iq Board, click the ellipse and Edit to edit: Board Details Board State Notifications 4.6. Configuring an iq Board Maintenance Mode Within an iq board, you can set maintenance mode for the board to suppress state changes, notifications and incident automation steps. Within an iq board, click the Actions icon and select Maintenance Mode to Schedule maintenance time or Start Maintenance Now. Page 28

29 4.7. Configuring Incident Automation Incident automation allows for incidents (tickets) to be created in the configured ITSM integration. Page 29

30 Page 30

31 4.8 Applying Filters to iq Boards Filters can also be applied to your boards. This allows you to see only those boards that are in a certain state. There is also an option to exclude all child boards. This will only show your top level boards. No board that rolls up its health state to another board, will be shown if this is checked. 4.8 Nesting iq Boards (Child Boards) Savision iq allows you to nest iq boards within other iq boards. To nest an iq board, click into the iq board and click the Action button and select Pin It. Page 31

32 5.0 Administration Pages The administration pages are only accessible by Savision iq administrators. The user who installed Savision iq is added to the administrator s role by default. That user can grant administrator privileges to other active directory users. See section 5.2 for how add other admin users. Page 32

33 5.1 Integrations Savision iq can connect to several different Monitoring and ITSM systems. Connecting to one (or more) of these systems is all accomplished in the Integrations Tab. By clicking the Add button on the bottom right of the screen the user can add a new integration. The Add button will open a dialog and the user can choose a source system to setup an integration for. Every system needs a specific set of properties filled. After the integration is saved, data will be collected and will be ready to use. Page 33

34 5.2 Roles Roles are used for access control to the application, boards and data. Users added to the Administrators role are considered Savision iq admins and have automatic access to all boards, data and application settings. User accounts and security groups are retrieved from Active Directory. Under the Boards and Integrations buttons, you can add the items by clicking on the Add button in the lower right-hand corner. Furthermore, you can edit the access they each have. Page 34

35 Example: Allow for read only access. This will allow them to view the items but not control anything. That means they can t close out alerts, or add new items to a board. If you no longer want them to have access to a particular board or integration then click on the delete icon. 5.3 Agents By default, there is always one active agent which is called the local agent. The local agent is running in the web application. For complex implementations of Savision iq, multiple remote agents might be required. Some reasons could be to overcome network boundaries, load balancing or redundancy. Page 35

36 The action button on the Agents page is for downloading the remote agent package. This package contains a command and exe file for extracting this package on a remote machine. Executing the command file will start the installation of the remote agent using the correct Savision iq web server settings. After installing the remote agent, it will register itself automatically to Savision iq. The administrator can now use the remote agent to run on certain integrations. This can be useful if you are trying to pull in data from a remote site. All communication between agents and Savision iq is encrypted. An agent can be removed from the list by clicking the delete button after the remote agent is stopped or uninstalled. 5.4 Downtime In the Downtime tab, the administrator can define what states are considered as down for the board SLA calculations. Page 36

37 5.5 Licensing The first time Savision iq is started during the installation process it will ask for a license key. The licenses can be viewed and updated on the Licensing tab. Page 37

38 5.6 Storage In the Storage tab the administrator can keep control on the amount of data Savision iq is collecting from its integrated source systems. Page 38