Foglight for Storage Management Shared 4.8.5

Table 10. List of calls
aggr-get-iter	lun-get-iter	qtree-list
aggr-list-info	lun-get-occupied-size	quota-report
aggr-space-get-iter	lun-get-serial-number	snapshot-delta-info
aggr-status-get-iter	lun-get-space-reservation-info	snapshot-get-reserve
cifs-share-get-iter	lun-list-info	snapshot-list-info
cifs-share-list-iter-end	lun-map-get-iter	snmp-get
cifs-share-list-iter-next	lun-map-list-info	snmp-get-next
cifs-share-list-iter-start	net-interface-get-iter	storage-disk-get-iter
cluster-identity-get	nfs-exportfs-list-rules	system-api-list
disk-list-info	nfs-exportfs-list-rules-2	system-get-info
fcp-adapter-get-iter	perf-object-counter-list-info	system-get-node-info-iter
fcp-adapter-list-info	perf-object-get-instances	system-get-ontapi-version
fcp-interface-get-iter	perf-object-get-instances-iter-end	system-get-version
fcp-node-get-name	perf-object-get-instances-iter-next	vfiler-list-info
fcp-port-name-get-iter	perf-object-get-instances-iter-start	volume-get-iter
igroup-get-iter	perf-object-instance-list-info	volume-get-root-name
iscsi-interface-get-iter	perf-object-instance-list-info-iter	volume-list-info
iscsi-node-get-name	portset-get-iter	volume-options-list-info
iscsi-service-get-iter	portset-list-info	vserver-get-iter

•

In 7-Mode, this command line can be used to create a role with only the limited permissions required for monitoring.

useradmin role add vfs_collector -a login-http-admin,api-system-get-version,api-system-get-info,api-system-get-ontapi-version,api-aggr-list-info,api-volume-list-info,api-volume-get-root-name,api-volume-options-list-info,api-qtree-list,api-quota-report,api-disk-list-info,api-cifs-share-list-iter-start,api-cifs-share-list-iter-next,api-cifs-share-list-iter-end,api-nfs-exportfs-list-rules,api-nfs-exportfs-list-rules-2,api-snapshot-delta-info,api-snapshot-get-reserve,api-snapshot-list-info,api-lun-map-list-info,api-lun-list-info,api-lun-get-occupied-size,api-lun-get-space-reservation-info,api-lun-get-serial-number,api-iscsi-node-get-name,api-fcp-node-get-name,api-fcp-adapter-list-info,api-portset-list-info,api-snmp-get,api-snmp-get-next,api-vfiler-list-info,api-perf-object-get-*,api-perf-object-counter-list-info,security-api-vfiler,api-perf-object-instance-list-info,api-system-api-list

Once the role is created, it must be associated with a group, and the group associated with a user. The NetApp documentation covers this in more detail: https://library.netapp.com/ecmdocs/ECMP1155684/html/GUID-20BAA16F-7411-45F1-84E8-4C6761D9B539.html

In cluster mode, the newer security login commands can be used to create a role with the appropriate permissions.

It is possible to create a read-only role and assign it to an account without specifically listing the commands required. This is done by first creating the role with the correct access permissions, and then creating a new user account associated with that role.

To create the rule, the following command is used:

security login role create -role vfs_collector -cmddirname DEFAULT -access readonly

This role will have read-only access to the default set of NetApp commands. Then a user can be created and associated with this role:

security login create -username vtest -application ontapi -authmethod password -role vfs_collector

If more fine-grained control over the permissions assigned is required, then the complete list of commands required will need to be granted individually. This is done by allowing read-only access to the command associated with each API call that the Foglight for Storage Management agent is required to make. The NetApp documentation should be consulted for more details.

The mapping of API permissions to NetApp commands is:

Table 11. Mapping of API permissions to NetApp commands
API Name	Command Line Permission
api-aggr-get-iter, api-aggr-status-get-iter	storage aggregate show
api-aggr-space-get-iter	storage aggregate show-space
api-cifs-share-get-iter	vserver cifs share show
api-cluster-identity-get	cluster show
api-disk-list-info	storage disk show
api-fcp-adapter-get-iter	network fcp adapter show
api-fcp-interface-get-iter	vserver fcp interface show
api-fcp-port-name-get-iter	vserver fcp wwpn-alias show
api-iscsi-service-get-iter	vserver iscsi show
api-lun-get-iter	lun show
api-lun-map-get-iter	lun mapped show
api-net-interface-get-iter	network interface show
api-nfs-service-get-iter	vserver nfs show, vserver nfs status
api-perf-object-counter-list-info	statistics catalog counter show
api-perf-object-get*	statistics show
api-perf-object-instance-list-info-iter	statistics catalog instance show
api-portset-get-iter	lun portset show
api-qtree-list-iter	volume qtree show
api-quota-report-iter	volume quota report
api-snapshot-*	volume snapshot show, volume snapshot policy show
api-storage-disk-get-iter	storage disk show
api-system-get-node-info-iter	system node image show
api-system-get-version	version
api-volume-get-iter	volume show
api-vserver-get-iter	vserver show
igroup-get-iter	lun igroup show

A new role should be created:

security login role create -role vfs_collector -cmddirname "security login role show-ontapi" -access readonly

Each of the command line permissions will need to be assigned to the selected role in the following manner:

security login role create -role vfs_collector -cmddirname "storage aggregate show" -access readonly

Then a user created and associated with that role:

security login create -role vfs_collector -username vtest -application ontapi -authmethod password

NOTE:

•

In FIPS-compliant mode, you need to import the CA certificate or the self-signed certificate to the KeyStore of FglAM to use this option. For more information, see Managing certificates .

•

Storage agent only supports monitoring through IP address. Ensure that “Subject” or “Subject Alternative Name” field of the certificate includes the IP address of your device.

Configuring Agents to Monitor NetApp Filers

Configure an agent for each NetApp filer you want to monitor. For details, see Configuring Agents to Monitor Storage Devices.

Configuration Procedures

The preceding sections link to the folowing configuration procedures:

•

Configuring Agents to Monitor Storage Devices

•

Assigning Credentials

•

Resolving Connection Attempt Errors

•

Configuring the Hitachi Tuning Manager

•

Configuring Generic SMI-S Array Agent to Monitor Storage Devices

•

Managing certificates

Configuring Agents to Monitor Storage Devices

To configure an agent to monitor the storage device:

On the navigation panel, under Homes, click Storage Environment.

Click the Administration tab.

Click Configure Agent for Storage Device Monitoring.

The Storage Device Setup dialog opens.

In the Add/Edit Agent section, select an agent manager host from the Agent Manager drop-down list.

In the Add/Edit Agent section, configure the agent settings:

Select the type of storage device from the Resource Type and Model drop-down lists, as indicated in Table 12.

In the IP Address field, type the IP address of the server hosting the agent manager.

If the Agent uses a non-default port, type the port number in the Port field. Ensure that this port is open and that traffic is permitted between the device and the Agent Manager host.

Specify a name for the agent in the Name field (optional).

Click Add.

The system checks the IP address. If the validation fails, check the IP address and ensure the device at the IP address is functioning.

The Credential Assignment Wizard opens.

Create or select a credential that contains the account information needed to access the storage device. For detailed information, see Assigning Credentials.

For Hitachi Data Systems AMS, USP, and VSP devices only: If you want to use the Hitachi Tuning Manager for collecting additional metrics, follow the instructions in Configuring the Hitachi Tuning Manager.

The new StorageAgentMaster Monitor Agent is added to the table at the bottom of the dialog.

If the agent is correctly configured, continue with Step 9.

If the agent is incorrectly configured, the Validated column provides details to help you troubleshoot the issue. For additional information, see Resolving Connection Attempt Errors.

Click OK to exist the Storage Device Setup dialog.

Table 12. Storage Device requirements
Type of Storage Device	Vendor	Resource Type field	Model field
FC Switches	Brocade SAN Switches	FC Switch	Brocade
	Cisco SAN Switches	FC Switch	Cisco
Storage Arrays	Dell Compellent Arrays	Storage Array	Dell Compellent
	Dell EqualLogic PS Series Array Groups	Storage Array	Dell EqualLogic
	EMC CLARiiON CX Series Arrays (CLI)	Storage Array	EMC CLARiiON using CLI
	EMC CLARiiON, VNX, or VMAX Storage Arrays (SMI-S)	Storage Array	EMC VNX/CLARiiON/VMAX - SMIS
	EMC Isilon	Storage Array	EMC Isilon
	Hitachi Data Systems AMS, USP, and VSP	Storage Array	HDS AMS/UPS/VSP
	HP EVA Storage Arrays	Storage Array	HP EVA
	HP 3PAR Arrays	Storage Array	HP 3PAR
Filers	NetApp Filers	Filer	NetApp

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation

Veuillez sélectionner votre produit

Afin de mieux répondre à vos besoins, précisez l'objet du tchat:

Solutions recommandées pour votre problème

Foglight for Storage Management Shared 4.8.5 - User and Reference Guide

Requirements for NetApp Filers

Configuring Agents to Monitor NetApp Filers

Configuration Procedures

Configuring Agents to Monitor Storage Devices