ADM393

Extending MOM with SDK2 and Building Connectors

Martin DeySr. Product ManagerEnterprise Management Division

Canyon ParkBuilding 11

Los Colinas Charlotte

Chicago

Dublin

TVPUK-IDC

Madrid

Les Ulis

Milan

Stockholm

Munich

TokyoKK-IDC

Sydney

Singapore

Benelux

Silicon Valley

Canyon ParkBuilding 11

Los Colinas Charlotte

Chicago

Dublin

TVPUK-IDC

Madrid

Les Ulis

Milan

Stockholm

Munich

TokyoKK-IDC

Sydney

Singapore

Benelux

Silicon Valley

Centrally manage thousands of servers located in multiple sites

Regionally collect events and forward critical alerts to the console

Managed Servers

Regional CollectionRegional Collection

Global Event Global Event ForwardingForwarding

Overheard From Customers...

Isn’t it hard to integrate MOM into my environment?

I already have Openview or Tivoli deployed, why do I need MOM?

Can MOM automatically open trouble tickets?

Can I use MOM to monitor my network using SNMP?

Can MOM manage my line of business application?

Can MOM help me understand the health/usage of my servers and output reports for my management?

Agenda

MOM Architecture and SDK2 Overview

Customizing what MOM manages

MOM Ecosystem

Integrating MOM with your tools and processes

MOM Architecture

MOM DBMOM DB

MOMMOM

ServerServer

AgentAgent AgentAgent

MOM DBData/configuration Storage

Reporting

Alert state management

MOM Agent• Win32 service• Runs rules locally

including local responses

• Data Collection, Consolidation, and Filtering

MOM User Interface• MMC snap-in and

Web Console

MOM Server (DCAM)

Database Access Service (DAS)

Handles connections to the DB

Consolidator• Agent functionality

on MOM Server• Server side responses

Agent Manager

Discovery

Agent install/Uninstall

Attribute Collection

Wealth Of Data Sources

RegistryRegistryPerfMonPerfMonCountersCounters

NT EventNT EventLogLog ScriptsScripts

SNMPSNMP SQL SQL ServerServer

ActiveActiveDirectoryDirectory

ExchangeExchange.NET.NET

WMIWMIProvidersProviders

WMIWMIProvidersProviders

BizTalkBizTalk

MOM Agent(OnePoint Service)

WMIWMIext forext forWDMWDM

Processing RuleProcessing RuleProcessing RuleProcessing Rule

MOM Rules

Processing rule groupProcessing rule groupComputerComputer

GroupGroup

Processing ruleProcessing rule

ProviderProvider

NT event logNT event log Perfmon dataPerfmon data WMIWMI SNMPSNMP Log filesLog files SyslogSyslog

CriteriaCriteria

Where Where source=DCOM source=DCOM and Event and Event ID=1006ID=1006

ResponseResponse

AlertAlert ScriptScript SNMP trapSNMP trap PagerPager E-mailE-mail

KB dataKB data

KnowledgeKnowledge

Site specific Site specific knowledgeknowledge

Customer Scenarios

Need to manage my LOB application

Need to manage other softwareRIM Blackberry, SAP, Siebel

Need to manage my hardware devices and storage

Brocade SANs, Compaq and Dell servers

Need to manage my network components

Framework For MOM Rules

Can a MOM rule tell me when _____ happens?

Check to see if a management pack already existsFrom Microsoft

From a third party (NetIQ, Citrix, Compaq, more coming…)

Create your own custom rulesNT event log

NT performance counter

Application log (IIS, generic log file, syslog)

WMI events

WMI numeric events

Scheduled transaction

Create custom instrumentation

Automate IT Processes With Management Packs

Look for the simple things to automate first

Update MOM rules with responses to automatically fix well known recurring problems

Encode IT “playbook” in a management pack

Building A Building A Management PackManagement Pack

Accessing SNMP With MOM

MOM can manage applications/devices that supports SNMP

SNMP traps and data are integrated into MOM through the WMI SNMP provider

Convert MIBs to MOFs using smi2smirNeed to load MOF into WMI

Configure the target device address and community string

ExamplesSelect * from SnmpLinkDownNotification

Select * from __instancecreationevent WITHIN 60 WHERE TargetInstance ISA ‘SNMP_RFC1213_MIB_ipRouteTable’

Automating With MOM

Can automate actions on agents or MOM serversUsing VBScript, Jscript, or Custom

Use State variables for complex inter rule logic

Timed versus Response Scripts

Rules versus Scripts

New in SP1Remote script debugging

Better diagnostic and instrumentation events

RunMOMScript.exe for script testing

Support for larger scripts

MOM SDK2 And the MOMResource Kit

MOM SP1 SDK2 featuresMOM WMI provider

SQL Server views

Ability to extend the Monitor Console

Documentation and samplesSDK documentation – creating management packs, connectors

Samples – Pocket MOM, WMI tool, scripts, sample MPs, sample SQL Server queries, sample custom UI view

ReskitServer Status Monitor

RunMOMScript – easily test your MOM scripts

EventSim – quickly test your MOM event rules

MOM SDK2 Components

MOM DBMOM DB

MOMMOM

ServerServer

AgentAgent AgentAgent

MMCMMC

MP RulesMP Rules++

WMI WMI ProviderProvider

SQLSQLViewsViews

CustomCustomUIUI

• Custom View UI Custom View UI extensions in MMCextensions in MMC

• Read-only SQL Read-only SQL views onto core dataviews onto core data

• Read-write access to Read-write access to Computers & AlertsComputers & Alerts

• Custom rules, Custom rules, scripts and groupsscripts and groups

SDK1 (MOM RTM)SDK1 (MOM RTM)

SDK2 (MOM SP1)SDK2 (MOM SP1)

WMI Schema Diagram

Alert AlertHistory

TodayStatistics@

MicrosoftOperationsManager

@

AlertResolutionState

ComputerGroup

Computer

Script*

*denotes special class for non windows agents*denotes special class for non windows agents

SQL Views Associations

Alert AlertsToEvents

ComputerGroup

Computer

Performance Event

ComputerToComputerGroup

ComputerAttributes Event

Parameters

MOM Ecosystem

Microsoft Operations

Manager

Ticketing SystemTicketing SystemRemedy, NetcoolRemedy, Netcool

Other platformsOther platformsHardware andHardware and

NetworkNetworkComponentsComponents

Third-party apps,Third-party apps,Oracle, Oracle,

Virus softwareVirus software

MicrosoftMicrosoftplatform and appsplatform and apps

Management Management ProductsProducts

CA, Tivoli, HPCA, Tivoli, HP

Home Home Grown Grown

SystemsSystems

Management PacksManagement Packs

Integrating MOM With Another Management Product

MOM agents can co-exist

Leverage MOM for best of breed Windows management

“Connect” data between the management productsAlert rules and responses

Custom UI tasks

Custom written Connectors

Third-party connectors

Connector Architecture

MOM DBMOM DB

MOMMOM

ServerServer

AgentAgent AgentAgent

AnotherAnotherManagementManagement

SystemSystem

Management System Management System InstrumentationInstrumentation

MOM AlertsMOM Alerts

Changed MOM AlertsChanged MOM Alerts

Changed MOM AlertsChanged MOM Alerts

Management PacksManagement Packs

Connecting MOM Data Option 1Alert rule and response

Build a custom Alert Rule that runs a response to forward data outAdvantages

Relatively easy to configure (example MP in SDK)MOM can be customized to filter alerts for forwardingSNMP trap for alert forwarding built into MOM as a first class responseCustom scripts can be written to run as a response

DisadvantagesOnly useful for forwarding new alerts once (not for updated alerts)Knowledge of the API for the other management system is needed

Connecting MOM Data Option 2Operator initiated console task

Using Custom Tasks in the MOM UI

AdvantagesEasy to setup

Filtering is done by console operator (right click on an alert and run action)

Can be run multiple times to send data for one alert

DisadvantagesNeeds to be invoked by the console operator

Knowledge of the API for the other management system is needed

Connecting MOM Data Option 3Third-party packaged product

Use a third-party product to connect MOM alerts to other management systems

AdvantagesBuilt in business logic to use API of other management system

Quick solution and good for customers without expertise/time to build their own

Possible features like guaranteed delivery, more flexible mapping, ability to batch alerts

DisadvantagesIncreased cost

May not support features required like updating alerts back in MOM when they change in the other system

Connecting MOM Data Option 4Custom connector

Create an Alert rule to forward alerts out

Use MOM SDK2 APIs (MOM WMI provider) to update alerts back in MOM when they change

AdvantagesMeets the business requirements

Could be a quick solution depending on requirements

DisadvantagesCustom connector must be supported

Knowledge of the API for the other management system is needed

Enterprise Products

Product Integrating with MOM

Tivoli EnterpriseForward MOM Alerts using MOM SNMP traps

Partners: NetIQ and iWave Connectors

CA Unicenter

Forward MOM Alerts using MOM SNMP traps

CA engaged in MMA and working on a connector

Partners: iWave connector available

BMC PatrolForward MOM Alerts using MOM SNMP traps

Partners: BMC engaged with MMA – consuming SNMP traps

NetIQ AppManagerKeep alerts in sync between both products using alert and event rules

NetIQ connector available

RemedyForward MOM Alerts using a custom script that writes alert to Remedy

Neon connector available

HP OpenViewForward MOM Alerts using SNMP traps

iWave Systems integration

Connecting MOM ToConnecting MOM ToYour EnterpriseYour Enterprise

Summary And Call To Action

MOM provides immediate continuous ROI

MOM 2000 is customizable, extensible and ready for the datacenter

Build management packs to encode operational knowledge!

Demand management packs from partners and other software vendors

Forward and connect MOM with other management systems

More Resources

www.microsoft.com/momComplex configuration white paper

Capacity Performance white paper

Troubleshooting MOM Agent Install Issues white paper

Deployment guide

Product documents

microsoft.public.mom newsgroupsMOM books

Coming Soon - Microsoft Operations Manager: managing, tuning and securing - by Chris Amaris

Microsoft Management http://www.microsoft.com/management

Microsoft Management Alliance (for SDK info)http://www.microsoft.com/management/mma

evaluations…evaluations…

Don’t forget to complete your online

Evaluation Form!

© 2003 Microsoft Corporation. All rights reserved.© 2003 Microsoft Corporation. All rights reserved.This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.