Cross-Platform Management with MS Operations Management Suite Pete Zerger @pzerger pete.zerger@gmail.com Lee Berg @LeeAlanBerg LeeAlanBerg@gmail.com
Lee Berg Madison, WI Madison, Wi @LeeAlanBerg Consultant System Center Cloud 2 Years Internal 2 Years Consulting Speaking! User Groups Video / Blogging #MMSMOA
Pete Zerger Spring, TX (near Houston) @pzerger Principal Program Mgr 18 years of RBA 6 years of cloud 10-Time Microsoft MVP #MMSMOA
Agenda Very Quick Tour of OMS Tools for Cross-Platform Management Walkthrough Cross-Platform Scenarios Log Analytics (Syslog) NRT Performance Data Hybrid Automation Accessing Cross-Platform Data Programmatically
Goals Bring you up-to-speed on cross-platform features of OMS (as of today) Tools and tips for ease of management Deep dive on the features Demos to give you some first-hand exposure Downloads and resources for use back home
QUICK SURVEY UNIX / Linux Experience? PowerShell Experience? Orchestrator Experience? Azure Automation Experience? Managing Cross-Platform with System Center in production today? Using Docker / Nagios / Zabbix?
Tools For Cross-Platform Management
Tools for Cross-Platform Management If you don t administer Linux often, which tools to use can be a challenge The following can make administering UNIX and Linux systems easier Putty SSH client for Windows Saves session settings WinSCP Secure copy client for Windows Copy files to and from *NIX systems in Windows GUI RoyalTS SSH client for Windows ios and Android versions also available Vi text editor will likely be necessary. Vi Pocket Reference at http://www.kostis.net/hints/vi-editor.htm
Demo Management Tools for Cross-Platform
Quick Tour on Operations Management Suite
Why OMS? It s simple Operations Management Suite Time to value Easy to integrate Protect and Extend Enhance System Center
Cross-Platform Management Leverages the MS Monitoring Agent for Linux Supported Scenarios: Syslog Event Data Docker Container Logs Performance Data Collection Nagios Core Alert Collection Zabbix Alert Collection Supports the following Linux distributions: Amazon, CentOS, Debian, Oracle, Redhat, SUSE, Ubuntu
Cross-Platform Agent Basics Some basics on the Microsoft Monitoring Agent for UNIX / Linux: Uses an updated version of the Microsoft Monitoring Agent for UNIX / Linux Can be multi-homed to SCOM instance Extensions facilitate push of performance data in near real-time
Cross-Platform Agent Binaries Running the shell bundle with the --extract flag reveals the following:
Demo OMS Cross-Platform Agent Installation
System Changes in Agent Install A non-privileged user named: omsagent is created. This is the account the omsagent daemon runs as A sudoers include file is created at /etc/sudoers.d/omsagent This authorizes omsagent to restart the syslog and omsagent daemons. The above is called an include directive. If sudo include directives are not supported in the installed version of sudo, these entries will be written to /etc/sudoers. The syslog configuration is modified to forward a subset of events to the agent.
Cross-Platform Capabilities of Operations Management Suite
Syslog OMS collects Syslog messages from managed Linux systems Which messages are collected is determined by Facility and Security level Facility is one information field that indicates from which part of the system the message originated Facility Description Facility Description kern Kernel messages auth Security/authorization messages user User-level messages syslog Internally generated syslog messages cron Scheduling daemon lpr Line printer subsystem daemon System daemons ftp FTP daemon Complete list of Syslog facilities and security levels at https://en.wikipedia.org/wiki/syslog
Syslog Syslog collection is configurable from the UI From the Overview dashboard, select Settings From the Settings page, click on the Data link Select Syslog from the left-hand settings list
Supported Syslog Daemons Either rsyslog or syslog-ng are required to collect syslog messages. The default syslog daemon on version 5 of Red Hat Enterprise Linux, CentOS, and Oracle Linux version (sysklog) is not supported for syslog event collection. You must install one of the supported Syslog daemons in order to use OMS to collect syslog events.
Demo Syslog Configuration & Data Analysis
Nagios and Zabbix Alert Forwarding Nagios Requires the following configuration changes: Grant user omsagent read access to Nagios log file (/var/log/nagios/nagios.log) Zabbix Similar to Nagios, but password has to be in clear text To mitigate risk, grant user permissions to monitor onlu sudo usermod a -G nagios omsagent Modify the omsagent.conf configuration file Restart the omsagent daemon
Performance Data No counters collected by default, but some default recommendations offered Click the blue button to add recommended counters Once added, set desired collection interval Behind the scenes, changes are written to /etc/opt/microsoft/omsagent/conf/omsagent.conf.
Demo Performance Data Configuration & Analysis
Cross-Platform Automation with Azure Automation
New Automation Capabilities Built-in integration with onpremises systems and PowerShell DSC nodes. Run Azure Automation runbooks on-premises Automation accessible via new REST API (including GitHub, VSO and ARM) Graphical workflow-authoring tool Runbook management from the new Microsoft Azure portal
Hybrid Worker in Azure Automation An on-prem server running MS Mgmt Agent Executes runbooks downloaded from AA Reports results back to AA and OMS Can be deployed in groups for high availability Requires no ports (outside-in) On-premises Runbook Environment Microsoft Mgmt Agent Hybrid Runbook Worker Azure Automation Operations Management Suite
Demo Hybrid Runbook Worker Configuration for Cross-Platform
Cross-Platform Automation in PowerShell Secure Shell (SSH) and Secure Copy (SCP) for PowerShell are available through multiple open source libraries & modules SSH.Net Library http://sshnet.codeplex.com/ Posh-SSH PowerShell SSH Module https://github.com/darkoperator/posh-ssh SSHShell PowerShell SSH Module http://www.carbon60.com/powershell-ssh-module-nonstandard-devices-like-cisco-asa/ Renci SSH.NET Library http://vwiki.co.uk/ssh_client_(powershell)#renci_ssh.net Microsoft-authored version coming soon: https://github.com/powershell/win32-openssh
Host Security for Automation How to handle privileged access is an important element of planning your automation strategy Most orgs are not going to allow root access Runbook automation will require privilege in some scenarios A good compromise is sudo with no password Grant Wheel group all access with no password %wheel ALL= NOPASSWD Grant specific user and operator group all access with no password user1, %operator ALL= NOPASSWD Grant operator group all access with no password to commands in /sbin/ directory %operator ALL= NOPASSWD /sbin/
Demo Azure Automation Cross-Platform Runbook Example
OMS Search API Enables direct programmatic access to OMS Log Search capabilities of OMS Exposes the RESTful Azure Resource Manager API Supported uses include: Issue direct query Invoke a saved search Export and import saved search in bulk
OMSSearch PowerShell Modules Custom PowerShell modules for OMS Search API ease the process of programmatic access Hide complexity of arm client / RESTful API behind friendly PowerShell cmdlets Microsoft Available on GitHub A bit more basic than the communitydeveloped module (today) Community Available on GitHub Developed by multiple MVPs and a Microsoft PFE
Demo Accessing OMS Cross-Platform Data Programmatically
Recap & Resources Cross-platform management in OMS is evolving quickly! You can automate on Linux with PowerShell, Azure Automation and Hybrid Worker Cross-platform data is accessible in OMS Portal and Search API Give hybrid automation a try! Download the code Runbooks all available at http://github.com/pzerger/mms2015
Other Sessions This Week Lee Wednesday 9:00 am Extending and Automating OMS Pete Tuesday 9:00 am OMS Deep Dive Tuesday 11:00 am RBA for ConfigMgr Admins Wednesday 9:00 am Extending and Automating OMS
SPONSORS Discuss Ask your questions-real world answers! Plenty of time to engage, share knowledge. Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS! Session Title: