Managing the Heterogeneous Environment Through X-plat and 3 rd Party Integration

2. Managing the Heterogeneous Environment Through X-plat and 3rd Party Integration Peirong Liu Senior Program Manager Microsoft Corporation

3. Agenda • System Center Operations Manager (SCOM) 2007 R2 UNIX/Linux Extension Overview • Operating System Monitoring • Audit Collection Service (ACS) • Partner Extensions • What’s New Since SCOM 2007 R2 • What’s New in SCOM v.Next • Demo

4. Supported Platforms • AIX • Version 5.3 (Power) • Version 6.1 (Power) • HP-UX • Version 11iv2 (PA-RISC/IA64) • Version 11iv3 (PA-RISC/IA64) • Solaris • Version 8 (SPARC) • Version 9 (SPARC) • Version 10 (SPARC/x86/x64) • Red Hat Enterprise Linux • Version 4 (x86/x64) • Version 5 (x86/x64) • SUSE Linux Enterprise Server • Version 9 (x86) • Version 10 SP1 (x86/x64) • Version 11 (x86/x64)

5. UNIX/Linux Monitoring Features • UNIX/Linux Computer Discovery & Agent Deployment • Monitoring, Diagnostics and Recoveries with Knowledge Articles • CPU • Memory • Disk • Network adaptor • Process • Log files • Management Pack Templates for Custom Monitoring • Process • Log files • Reports for UNIX/Linux Computers

6. SCOM UNIX/Linux Extension Architecture WS-ManModules SSH Modules SFTPModules WS-Man SSH openSSH OpenPegasus CIMOM WS-Man: Web Service Management SSH: Secure Shell CIM: Common Information Model CIMOM: Common Information Model Object Manager • UNIX/LinuxProviders

7. UNIX/Linux Component Overview CIMOMdaemonOpenPegasus CPUProvider OSProvider ScriptProvider DiskProvider LogfileProvider MemoryProvider ProcessProvider NetworkProvider

8. Microsoft.Unix.Library Management Packs • Microsoft.Linux.Library Library Management Pack • Unix Object Definitions • Generic Monitors • Generic Tasks • Microsoft.Linux.SUSE.Library • Microsoft.Solaris.Library • Microsoft.Linux.SLES.10 • Microsoft.Solaris.10 • Linux Object Definitions • SLES/Solaris Object Definitions • SLES 10/Solaris 10 Object Definitions • Monitors • Rules • Diagnostics/Recoveries • Reports

9. Audit Collection Service (ACS) Scenarios • SU: • Fail • Success • SUDO : • Fail • Success • Login - SSH, SFTP, SCP, Console (TTY): • Fail • Success • User/Group Actions: • User Add • User Remove • Group Add • Group Remove • User added to Group • User Removed from Group • Password Change

10. Windows ACS Architecture Monitored Clients Audit Collector Audit Database Data Archival Monitored Servers Events subject to tampering Events under control of auditors

11. UNIX/Linux ACS Architecture UNIX/Linux System ACS Mgmt Pack Workflow syslog Collect syslog audit events Parse syslog events & write to SEL SCX LogfileDatasourceModule SCX Parsing & SEL Write Action Module Logfile Provider Windows Security Event Log (SEL) SCX Schema Extensions Audit Collector

12. ACS Reports • Unsuccessful logon attempts • Privileged logons • Account management activities • Administrator activities • All events for a specified computer • All events for a specified user • All events for a specified event ID

13. Partner Extensions - BridgeWays • Currently Available: • VMWare • Oracle Database • MySQL • IBM DB2 • Apache HTTP • Apache Tomcat • JBOSS

14. BridgeWays Roadmap Virtualization Web Servers Communication Servers Database Servers Application Servers

15. Partner Extensions - Novell • Monitoring services in SLES 10, SELS 11, and RHEL 5: • DHCP • Samba • OpenLDAP •  SUSE firewall • CUPS •  NFS

16. Third Party Management Packs • MP Catalog: http://pinpoint.microsoft.com/en-US/systemcenter/managementpackcatalog

17. What’s New Since SCOM 2007 R2 • Open Sourced our Providers • Contribution to OpenPegasus accepted in OpenPegasus 2.10 • Released Novell SUSE Enterprise Linux (SLES) 11 support • Released Solaris Zones support • Released Audit Collection Service • Released 3 Cumulative Updates • Building Cross Platform Community

18. Cross Platform Community • Cross platform blog: http://blogs.msdn.com/b/scxplat/ • Cross platform forum: http://social.technet.microsoft.com/Forums/en-US/crossplatformgeneral/threads • Cross platform provider source code on CodePlex: http://scx.codeplex.com/ • Cross platform community extensions: http://scxcommunity.codeplex.com • Sudo • CentOS Management Pack • Script Monitor

19. What’s New in SCOM v.Next • Sudo support • Install/Uninstall agents • Secure log file monitoring • Privileged tasks: start/stop processes, remount a file system… • SSH Key support • Install/Uninstall agents • Scripting with PowershellCmdlets • Discover Computers • Install/Uninstall/Update agent • Set Management Server • Templates improvement • Service (add cmdline options, control severity, process count …) • Log file (scan secure log, control severity, …) • Script based discovery, monitor, and rule

20. 5 Demos! • Out-of-the-box Unix/Linux Monitoring • Audit Collection Service Reports • Monitoring DinnerNow using BridgeWaysApache and MySQL MPs • Generic Script Monitoring • SSH Key/Sudo Support in the Discovery Wizard of SCOM v.Next

21. Session Evaluations Tell us what you think, and you could win! All evaluations submitted are automatically entered into a daily prize draw*  Sign-in to the Schedule Builder at http://europe.msteched.com/topic/list/ * Details of prize draw rules can be obtained from the Information Desk.

22. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.