Integrating with Infrastructure Management and ProactiveNet
You can integrate with TrueSight Infrastructure Management and ProactiveNet to collect event data and perform the following functions:
- Get events from Infrastructure Management (or ProactiveNet) and view metrics such as CPU utilization and memory utilization for those events.
- Send events to Infrastructure Management (or ProactiveNet) while creating notifications.
- Cross-launch from Infrastructure Management (or ProactiveNet) into TrueSight IT Data Analytics.
The steps required for integrating with Infrastructure Management are the same as those required for integrating with ProactiveNet. To see the features (or capabilities) supported with this integration, see the compatibility matrix at Integrating.
Additional information for Log collection users
If you plan to monitor only log collection and not event collection, you can install the Collection Station on the node hosting the Integration Service and thereby better utilize the available physical resources. For more information, see Deploying Integration Service and Collection Station on the same node.
The following video (3:17) explains the process of setting up an external configuration to integrate with TrueSight Infrastructure Management.
Note
Although this video captures screens from version 2.5 of the product, the process demonstrated in the video is still relevant to the current version of the product.
This topic contains the following information:
Before you begin
To integrate with Infrastructure Management, you need to ensure that Infrastructure Management is already registered with TrueSight Presentation Server.
Key steps to an effective integration
The high-level steps involved in performing this integration and enabling the functions available with the integration are described in the following table:
Goal | High-level steps | Additional information | |
---|---|---|---|
Get events | 1 | Integrate with Infrastructure Management (or ProactiveNet). | Integrating with Infrastructure Management (or ProactiveNet) |
2 | Create a data collector. | Collecting data from external systems | |
3 | Perform a search to analyze the events retrieved and view metrics data for certain events. | Searching for events and viewing metrics data for certain events | |
Send events | 1 | Integrate with Infrastructure Management (or ProactiveNet). | Integrating with Infrastructure Management (or ProactiveNet) |
2 | Create a saved search. | Saving and sharing searches for analytics and monitoring | |
3 | Create a notification to log an event in Infrastructure Management (or ProactiveNet). | Setting up notifications to create alerts or reports |
You can also cross-launch TrueSight IT Data Analytics from TrueSight Infrastructure Management (or ProactiveNet). For more information, see Cross-launching from Infrastructure Management (or ProactiveNet).
Integrating with Infrastructure Management (or ProactiveNet)
- Navigate to Administration > External Configurations.
Select TSIM Configuration on the list at the top-left of your screen.
Provide the following details:
Field Instruction External Configuration Name Provide a name to identify this external configuration. Connection type Select http or https depending on the connection type of the Infrastructure Management (or ProactiveNet) server that you want to configure.
Note: If you select the https option, ensure that you import the self-signed certificate for Infrastructure Management (or ProactiveNet) into TrueSight IT Data Analytics by using the following command:
keytool -
import
-trustcacerts -alias <HostName-or-IP> -keystore $BMC_ITDA_HOME/jre/lib/security/cacerts -file <Certificate-Path>
where,
<HostName-or-IP>
refers to the host name or IP address of the computer on which Infrastructure Management (or ProactiveNet) is installed.<Certificate-Path>
refers to the absolute path to the self-signed certificate of Infrastructure Management (or ProactiveNet).
TSIM Host Name/IP Provide the host name or the IP address to connect with the Infrastructure Management (or ProactiveNet) server that you want to configure.
Note: If you provide a fully-qualified domain name or host name, ensure that it resolves to the same IP as that of the computer that hosts Infrastructure Management (or ProactiveNet).
TSIM Host Port Provide the port number to connect with the Infrastructure Management (or ProactiveNet) server that you want to configure User Name Provide the user name to connect with the Infrastructure Management (or ProactiveNet) server that you want to configure. Password Provide the password to connect with the Infrastructure Management (or ProactiveNet) server that you want to configure. Get Cells Click to retrieve all cells associated with the Infrastructure Management (or ProactiveNet) server that you want to configure. Cell Names This list appears when you click Get Cells. Select the cells from which you want to collect event data (or select all cells). By default, the cell name format can be pncell_hostName; for example, pncell_vw-ngp-qa02.
Notes:
- You can retrieve event data and create a data collector for the selected cells only.
- When you click Get Cells, the following cells that are displayed by default are not supported for this integration:
- admin
- iac
Register for cross launch (Optional) Select this check box to enable cross-launch from Infrastructure Management (or ProactiveNet) into TrueSight IT Data Analytics.
- Click Save.
Searching for events and viewing metrics data for certain events
After you create an external configuration and data collector to connect with the Infrastructure Management (or ProactiveNet) server, you can perform a search to retrieve the event data. You can analyze the event data in the search results.
Note
By default, the following fields are extracted from the Infrastructure Management (or ProactiveNet) event data:
- mc_host
- pn_object_id
- pn_object_class_id
- mc_parameter
- severity
- mc_incident_time
- mc_arrival_time
You can modify the fields extracted by modifying the bppm.reader.index.slotNames
property in the custom directory for the Collection Station. For more information, see Modifying the configuration files.
If all of the following fields exist in a particular data entry in the search results, you can view metrics data by clicking Show metrics
to the left of the data entry.- pn_object_id
- pn_object_class_id
- mc_parameter
You can view the metrics chart in the section in which the timeline chart appears. You can toggle between the metrics chart and the timeline chart by clicking Show Timeline Chart
and Show Metrics Chart , at the top-right corner of the chart that appears.Tip
You can view metrics for events associated with the following core event slots on the ProactiveNet Operations Console (or the Infrastructure Management Console):
mc_host
mc_object
mc_object_class
When you click the Show metrics icon, you can view a chart containing values (metrics) over a certain time range for the parameter for which the event was raised. For example, you can view metrics data for CPU utilization, memory utilization, and so on. By default, the graph plots a time range of 24 hours before the event occurred and 30 minutes after the event occurred (if this data is available). The metrics chart remains available until you access metrics for the next Infrastructure Management (or ProactiveNet) event or you execute a new search.
Note
The metrics chart displays the graph for one metric at a time, because one event is associated with only one metric.
Cross-launching from Infrastructure Management (or ProactiveNet)
To enable cross-launch from ProactiveNet into TrueSight IT Data Analytics, you must select the Register for cross launch check box when you are configuring a Infrastructure Management (or ProactiveNet) server.
To cross-launch from ProactiveNet (or Infrastructure Management)
- On the ProactiveNet Operations Console (or the Infrastructure Management Console), click Event Collectors on the left navigation pane.
On the right side of the window, click Tools Menuconfiguring the ProactiveNet (or Infrastructure Management) server.
, select Launch into TrueSight IT Data Analytics, and then select the host name of the TrueSight IT Data Analytics server that is registered with ProactiveNet (or Infrastructure Management). You see only those host names that were registered for cross-launch at the time of- Provide the user credentials for logging on to TrueSight IT Data Analytics.
You can see search results for the search query,HOST="hostName
" for 30 minutes before and 30 minutes after the event time.
where,hostName
refers to the host name associated with the event.
Tip
You can also cross-launch into TrueSight IT Data Analytics from an event logged by using TrueSight IT Data Analytics. To do this, under Event Collectors, navigate to the Details panel of an event, and then click the Show in BMC TrueSight ITDA URL for Object URI.
Analyzing TrueSight Infrastructure Management data in IT Data Analytics
You can analyze TrueSight Infrastructure Management applications and events available on the TrueSight console in TrueSight IT Data Analytics to investigate a problem or perform root cause analysis. Before you access TrueSight IT Data Analytics from the TrueSight console, it is important that you access the TrueSight IT Data Analytics console and create a data collector for the following items:
- Each device (host) included in the application from which you want to cross-launch.
- Each host associated with the event from which you want to cross-launch.
Data collectors are objects that help you collect data records (or events) from the target hosts and make it available for search and analysis. For more information, see
Setting up data collection.
Creating data collectors beforehand ensures that you can search events after you access TrueSight IT Data Analytics from the TrueSight console.
To access IT Data Analytics from the TrueSight Console
Access the TrueSight console.
For more information, see Accessing and navigating the TrueSight console.From the navigation menu, navigate to one of the following pages:
Navigate to Click... Monitoring > Applications One of the application names, then click the action menu (vertical three dots) next to the application name and then select Launch BMC TrueSight IT Data Analytics. Monitoring > Events The action menu next to one of the events that you want to investigate in TrueSight IT Data Analytics, and then select Launch BMC TrueSight IT Data Analytics.
Monitoring > Applications One of the application names, then click the Events tab. Click the action menu next to one of the events that you want to investigate in TrueSight IT Data Analytics, and then select Launch BMC TrueSight IT Data Analytics.
The system cross-launches into TrueSight IT Data Analytics, and the Search page is displayed. You can see search results for one of the following search queries depending on whether you tried to access TrueSight IT Data Analytics from an application or event.
Search query with time range | Notes |
---|---|
If you access TrueSight IT Data Analytics from an application | |
((HOST=HostName1.*) || HOST=HostName1) || (HOST=HostName2.*) || (HOST=HostName2) | In the search query syntax, the following definitions apply:
By default, the search query displays a list of host names (corresponding to the devices) associated with the application. If you have a large number of devices included in the application, then the default search query can be very long because it will have a large number of host names. Instead of searching for a list of host names to find event data associated with those hosts, you can search for the application context. To be able to search by the application context, you need to perform the following steps in TrueSight IT Data Analytics:
Performing the preceding steps in TrueSight IT Data Analytics is optional, however, this can be useful to simplify the search query. |
| |
Time range: 30 minutes before and 30 minutes after the last time when the application state changed. | |
If you access TrueSight IT Data Analytics from an event | |
(HOST=hostName1 .*) || (HOST=HostName1) | In the search query syntax, hostName1 refers to the host name associated with the event. |
Time range: 30 minutes before and 30 minutes after the event time. | |
If you access TrueSight IT Data Analytics from an event that is directly associated with the application | |
Accessing TrueSight IT Data Analytics from an event directly associated with the application is similar to accessing TrueSight IT Data Analytics from an application because an application level event is associated with a group of hosts or devices and not with a specific device or host. Therefore, use the same search query parameters that are used for cross-launching from an application. For search query parameters, see the search query and notes on accessing Log Analytics from an application. |
Where to go from here
Create data collectors to start collection of event data from ProactiveNet (or Infrastructure Management). For more information, see Monitor using external configuration data collector.
Add notifications on the event data collected and subsequently log events in ProactiveNet (or Infrastructure Management). For more information, see Setting up notifications to create alerts or reports.
Create a host profile to inherit host-level tags and group access permissions of the host on which ProactiveNet (or Infrastructure Management) is installed, for use when creating data collectors. For more information, see Setting up host profiles for target computers.
Comments
Log in or register to comment.