Hitachi Storage Content Pack for VMware vRealize Log Insight · 2019. 4. 23. · Preface 7 Hitachi Storage Content Pack for VMware vRealize Log Insight User’s Guide Intended Audience

vRLI Server User's Guidev01.1.0
©2016 Hitachi, Ltd. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including copying and recording, or stored in a database or retrieval
system for commercial purposes without the express written permission of Hitachi, Ltd., or Hitachi
Data Systems Corporation (collectively “Hitachi”). Licensee may make copies of the Materials
provided that any such copy is: (i) created as an essential step in utilization of the Software as
licensed and is used in no other manner; or (ii) used for archival purposes. Licensee may not
make any other copies of the Materials. “Materials” mean text, data, photographs, graphics, audio,
video and documents.
Hitachi reserves the right to make changes to this Material at any time without notice and
assumes no responsibility for its use. The Materials contain the most current information available
at the time of publication.
Some of the features described in the Materials might not be currently available. Refer to the most
recent product announcement for information about feature and product availability, or contact
Hitachi Data Systems Corporation at https://portal.hds.com.
Notice: Hitachi products and services can be ordered only under the terms and conditions of the
applicable Hitachi agreements. The use of Hitachi products is governed by the terms of your
agreements with Hitachi Data Systems Corporation.
By using this software, you agree that you are responsible for:
1) Acquiring the relevant consents as may be required under local privacy laws or otherwise from
authorized employees and other individuals to access relevant data; and
2) Verifying that data continues to be held, retrieved, deleted, or otherwise processed in
accordance with relevant laws.
Notice on Export Controls. The technical data and technology inherent in this Document may be
subject to U.S. export control laws, including the U.S. Export Administration Act and its associated
regulations, and may be subject to export or import regulations in other countries. Reader agrees
to comply strictly with all such regulations and acknowledges that Reader has the responsibility to
obtain licenses to export, re-export, or import the Document and any Compliant Products.
Hitachi is a registered trademark of Hitachi, Ltd., in the United States and other countries.
AIX, AS/400e, DB2, Domino, DS6000, DS8000, Enterprise Storage Server, eServer, FICON,
FlashCopy, IBM, Lotus, MVS, OS/390, PowerPC, RS/6000, S/390, System z9, System z10, Tivoli,
z/OS, z9, z10, z13, z/VM, and z/VSE are registered trademarks or trademarks of International
Business Machines Corporation.
Active Directory, ActiveX, Bing, Excel, Hyper-V, Internet Explorer, the Internet Explorer logo,
Microsoft, the Microsoft Corporate Logo, MS-DOS, Outlook, PowerPoint, SharePoint, Silverlight,
SmartScreen, SQL Server, Visual Basic, Visual C++, Visual Studio, Windows, the Windows logo,
Windows Azure, Windows PowerShell, Windows Server, the Windows start button, and Windows
Vista are registered trademarks or trademarks of Microsoft Corporation. Microsoft product screen
shots are reprinted with permission from Microsoft Corporation.
All other trademarks, service marks, and company names in this document or website are
properties of their respective owners.
Contents 3
…..
Getting Help .......................................................................... 9
Hardware Requirements ........................................................ 12
Contents 4
Hitachi Storage Content Pack for VMware vRealize Log Insight User’s Guide
All Events over Time Group by Storage Serial Number ............ 18
All Error Events .................................................................. 18
All Error Events Group by Storage Serial Number and User ID . 19
All Warning Events ............................................................. 19
All CCI Events .................................................................... 19
All CCI Events Group by Storage Serial and User ID ............... 20
General - Configuration ......................................................... 20
All Account Management Events Group by Storage Serial ........ 21
All Configuration Events ...................................................... 21
All Maintenance Events ....................................................... 21
General - Security ................................................................ 22
All Failed Login Events ........................................................ 23
All Failed Login Events Group by User and Storage Serial ........ 23
All Storage Login Events Group by Login Type ....................... 23
General - Provisioning ........................................................... 24
All Failed Provisioning Events Group by Storage Serial Number 25
All Delete Provisioning Events Group by User ID ..................... 25
All Delete Tasks Events Group by Storage Serial Number ........ 25
General - Replication ............................................................ 26
All Local Replication Events Group by Storage Serial Number ... 26
Contents 5
All Remote Replication Events .............................................. 27
All Remote Replication Events Group by Storage Serial Number 27
General - Volume ................................................................. 28
All Universal Volume Manager Events .................................... 28
All Universal Volume Manager Events Group by Storage Serial Number ........................................................................ 28
All Volume Migration Events ................................................. 29
All Volume Migration Events Grouped by Storage Serial Number29
All Volume Shredding Events ............................................... 29
All Volume Shredding Events Grouped by Storage Serial Number29
HNAS Dashboard .................................................................. 30
All HNAS Events over Time Group by IP................................. 30
All HNAS Information Events over Time ................................. 31
All HNAS Information Events over Time Group by IP ............... 31
All HNAS Warning Events over Time ...................................... 31
All HNAS Warning Events over Time Group by IP .................... 31
All HNAS Severe Events over Time ....................................... 32
All HNAS Severe Events over Time Grouped by IP .................. 32
HCP Dashboard .................................................................... 33
All HCP Events over Time Grouped by IP ............................... 33
All HCP Authentication Events over Time ............................... 33
All HCP Authentication Events over Time Group by Originating IP33
All HCP Events over Time Grouped by Node ID ....................... 34
Alerts .................................................................................. 35
Preface 6
…..
Preface
This document describes how to use the Hitachi Storage Content Pack for
VMware vRealize Log Insight.
Intended Audience
Release Notes
Related Documents
Document Conventions
Getting Help
Comments
Note The use of Hitachi Storage Content Pack for VMware vRealize Log Insight and all other Hitachi Data Systems products is governed by the terms of your agreements with Hitachi Data
Systems.
Preface 7
Intended Audience
This document is for system and database administrators, as well as others
who manage storage.
Release Notes
You can find release notes on the documentation CD. Release notes describe requirements and possibly more recent product information than this guide. Be sure to review the release notes before installation.
Related Documents
The following Hitachi documents are available on the applicable Hitachi documentation CD:
VMWare Log Insight User's Guide
Hitachi Command Suite Audit Log Reference Guide (MK-92HC213-01)
Hitachi Virtual Storage Platform G1000 Audit Log User Guide (MK- 92RD8008-02f)
Hitachi Virtual Storage Platform Audit Log User Guide (MK-90RD7007- 14a)
Hitachi Virtual Storage Platform Gx00 Audit Log User Guide (MK- 92HM8008-00g)
Document Conventions
Convention Meaning
Bold Indicates text on a window, other than the window title,
including menus, menu options, buttons, fields, and labels Example: Click OK.
Italic Indicates a variable, which is a placeholder for actual text provided by the user or system
Example: copy source-file target-file
Note: Angled brackets (< >) also indicate variables.
screen/code Indicates text that is on the screen or that you enter. Also may be used for filenames
Example: # pairdisplay -g oradb
< > angled brackets
Indicates a variable, which is a placeholder for actual text provided by the user or system.
Example: # pairdisplay -g <group>
Preface 8
Convention Meaning
Indicates optional values
Example: [ a | b ] indicates that you can choose a, b, or
nothing.
Example: { a | b } indicates that you must choose either a
or b.
| vertical bar Indicates that you have a choice between two or more options or arguments
Examples:
[ a | b ] indicates that you can choose a, b, or nothing.
{ a | b } indicates that you must choose either a or b.
In this document, the following icons draw attention to information:
Icon Label Description
Tip Provides helpful information, guidelines, or suggestions for performing tasks more effectively
Caution Warns the user of adverse conditions and/or consequences (for example, disruptive operations)
WARNING Warns the user of severe conditions and/or consequences (for example, destructive operations)
Preface 9
Convention for Storage Capacity Values
We calculate physical storage capacity (for example, disk drive capacity) based
on the values below.
Physical Capacity Unit Value
1 KB 1,000 bytes
1 MB 1,0002 bytes
1 GB 1,0003 bytes
1 TB 1,0004 bytes
1 PB 1,0005 bytes
1 EB 1,0006 bytes
We calculate logical storage capacity (for example, logical device capacity)
based on the values below.
Logical Capacity Unit Value
1 MB 1,024 KB or 1,0242 bytes
1 GB 1,024 MB or 1,0243 bytes
1 TB 1,024 GB or 1,0244 bytes
1 PB 1,024 TB or 1,0245 bytes
1 EB 1,024 PB or 1,0246 bytes
1 block 512 bytes
Getting Help
The Hitachi Data Systems Support Center staff is available 24 hours a day,
seven days a week. To reach us, visit the support website for current telephone numbers and other contact information:
http://www.hds.com/services/support/. If you purchased this product from an authorized HDS reseller, contact that reseller for support.
Before calling the Hitachi Data Systems Support Center, provide as much
information about the problem as possible, including:
The circumstances surrounding the error or failure.
The exact content of any error messages displayed on the host systems.
Preface 10
Comments
Please send us your comments on this document: [email protected].
Include the document title, number, and revision, and refer to specific sections and paragraphs whenever possible.
Thank you!
All comments become the property of Hitachi Data Systems Corporation.
Hardware and Software Requirements 11
Hardware and Software Requirements
Hardware Requirements
Software Requirements
Required Pre-operation
Distribution Package
Note The use of Hitachi Storage Content Pack for VMware vRealize Log Insight and all other Hitachi Data Systems products is governed by the terms of your agreements with Hitachi Data Systems.
12 Hardware and Software Requirements
Hardware Requirements
Item Requirement
Graphics 800 x 600, 16-bit color or more
HDD Capacity 1 gigabyte or more
Note For requirements that apply to your Hitachi Compute blade, see the blade user’s guide.
Supported Storage Models
Virtual Storage Platform 70-06-35-00/00 or newer
Hitachi Unified Storage VM 73-03-44-00/00 or newer
Virtual Storage Platform G1000 80-04-01-00/00 or newer
Virtual Storage Platform Gx00
(G200/G400/G600/G800) 83-03-01-40/00 or newer
83-03-01-40/00 or newer
Hitachi NAS Platform 12.3, 12.6
Hitachi Content Platform 6.1.1, 7.0.0, 7.1.1 and 7.2.0
Hardware and Software Requirements 13
Software Requirements
Hitachi Device Manager
Perform the following operation on Hitachi Device Manager (formerly Hitachi
Storage Manager) before using the Hitachi Storage Content Pack for VMware vRealize Log Insight.
1. To access the Hitachi Device Manager, enter the IP address of the
management module (SVP, Service Program) into your browser.
2. Select the Settings menu, and then select the Edit Alert Settings sub-
menu.
3. Select the Syslog tab in the dialog box. If the Primary Server is not configured, click Enable above its box.
If the Primary Server is already configured, update the Secondary Server settings.
4. Enter the IP address of the vRealize Log Insight server.
5. Enter 514 in the Port Number field.
6. Enter a name for the Location Identification Name field. This string is part of the syslog message that vRealize Log Insight uses.
14 Hardware and Software Requirements
Distribution Package
Dashboards 15
Dashboards
16 Dashboards
The Hitachi Storage Content Pack for VMware Log Insight includes dashboards specifically tailored for the Hitachi subsystem to show important, relevant, and useful events.
Using Dashboard Queries
For each dashboard, there is a list of predefined queries. You can filter them to
suit your needs. The screenshot below shows results for Security dashboard queries.
Note By default, all dashboards show information in bars. Place your cursor on a bar in the widget to display the time range
configured for the dashboard and the number of audit events that occurred during that period.
You have the option of viewing charts and/or lists of results.
1. Click on the magnifier next to a query to see a screen like the figure below (two areas shown).
Dashboards 17
2. Select one to four fields in the Filters section, or enter keywords. From the dropdown menus to the right of filter name, you can select a query
constraint for each word or field that is available.
3. Click on a filter, such as an event code, to eliminate it from the results.
4. In the partial screenshot above, note the variety of ways to change and refine the information display:
o Save a favorite search to run later.
o Change the chart type. The default is a bar chart, but line and area charts are also available.
o Select a date or enter a custom range.
o View or edit the log fields that appear in the report.
18 Dashboards
Hitachi Storage Content Pack
The Hitachi Storage Content Pack for VMware Log Insight includes a variety of dashboards specifically tailored for the Hitachi storage subsystem to show important, relevant, and useful events. The Content Pack includes six dashboard
groups:
All Events over Time
Default chart type: Bar
View all storage events received from Hitachi storage subsystems over a specified period.
Place your cursor on a bar in the widget to display the time range configured for the dashboard and the number of audit events that occurred during that
period.
Default chart type: Pie
View all events received from Hitachi storage subsystems grouped by the Storage subsystem serial over a specified period.
Place your cursor on a bar in the widget to display the time range configured
for the dashboard and the number of audit events that occurred during that period.
All Error Events
View all errors events received from Hitachi storage subsystems over a
specified period.
Dashboards 19
period.
All Error Events Group by Storage Serial Number and User ID
View all error events received from Hitachi storage subsystems grouped by the storage serial number and user ID over a specified period.
period.
View all warning events received from Hitachi storage subsystems over a specified period.
All Warning Events by Subsystem
View all warning events received from Hitachi storage subsystems grouped by
the storage serial number over a specified period.
All CCI Events
View all CCI events received from Hitachi storage subsystems over a specified
period.
period.
20 Dashboards
All CCI Events Group by Storage Serial and User ID
View all CCI events received from Hitachi storage subsystems grouped by the storage serial number and user ID over a specified period.
period.
View all account manager events received from Hitachi storage subsystems
over a specified period.
Dashboards 21
All Account Management Events Group by Storage Serial
View all account management events received from Hitachi storage subsystems
grouped by the storage serial number over a specified period.
All Configuration Events
View all storage configuration events received from Hitachi storage subsystems
period.
View all storage configuration events received from Hitachi storage subsystems grouped by the storage serial number over a specified period.
period.
View all storage maintenance events received from Hitachi storage subsystems over a specified period.
22 Dashboards
All Maintenance Events Group by Storage Serial
View all maintenance events received from Hitachi storage subsystems grouped by the storage serial number over a specified period.
period.
View all authentication events received from Hitachi storage subsystems over a
specified period.
Dashboards 23
All Authentication Events Group by Username
grouped by the username over a specified period.
All Failed Login Events
View all failed login events received from Hitachi storage subsystems over a
specified period.
period.
All Failed Login Events Group by User and Storage Serial
View all failed login events received from Hitachi storage subsystems grouped by user and the storage serial number over a specified period.
period.
View all storage login events grouped by login type received from Hitachi storage subsystems over a specified period.
24 Dashboards
General - Provisioning
View all provisioning events received from Hitachi storage subsystems over a specified period.
Place your cursor on a bar in the widget to display the time range configured for the dashboard and the number of audit events that occurred during that period.
All Provisioning Events Group by Storage Serial Number
View all provisioning events received from Hitachi storage subsystems grouped by the storage serial number over a specified period.
Dashboards 25
period.
View all provisioning events grouped by provisioning tasks received from Hitachi storage subsystems over a specified period.
period.
View all storage failed provisioning events received from Hitachi storage subsystems grouped by the storage serial number over a specified period.
All Delete Provisioning Events Group by User ID
View all storage delete provisioning events grouped by user ID received from
Hitachi storage subsystems over a specified period.
All Delete Tasks Events Group by Storage Serial Number
View all delete task events grouped by storage serial number received from
Hitachi storage subsystems over a specified period.
period.
26 Dashboards
General - Replication
All Local Replication Events
View all replication events received from Hitachi storage subsystems over a specified period.
period.
View all replication events grouped by storage serial number received from Hitachi storage subsystems grouped by the storage serial number over a
specified period.
Dashboards 27
period.
All Remote Replication Events
View all remote replication events received from Hitachi storage subsystems over a specified period.
period.
View all remote replication grouped events received from Hitachi storage subsystems and grouped by storage serial number over a specified period.
28 Dashboards
General - Volume
View all universal volume manager events received from Hitachi storage
subsystems over a specified period.
period.
All Universal Volume Manager Events Group by Storage Serial Number
View all universal volume manager events received from Hitachi storage subsystems grouped by the storage serial number over a specified period.
period.
Dashboards 29
All Volume Migration Events
View all volume migration events received from Hitachi storage subsystems
All Volume Migration Events Grouped by Storage Serial Number
View all volume migration events received from Hitachi storage subsystems
grouped by the storage serial number over a specified period.
period.
All Volume Shredding Events
View all volume shredding events received from Hitachi storage subsystems over a specified period.
period.
View all volume shredding events received from Hitachi storage subsystems grouped by the storage serial number over a specified period.
30 Dashboards
HNAS Dashboard
View all HNAS events received from Hitachi HNAS storage subsystems over a specified period.
All HNAS Events over Time Group by IP
View all HNAS events received from Hitachi HNAS storage subsystems over a specified period group by HNAS IP address.
Dashboards 31
All HNAS Information Events over Time
View all HNAS information events received from Hitachi HNAS storage
subsystems over a specified period.
All HNAS Information Events over Time Group by IP
View all HNAS information events received from Hitachi HNAS storage
subsystems over a specified period group by HNAS IP address.
period.
View all HNAS warning events received from Hitachi HNAS storage subsystems over a specified period.
period.
View all HNAS warning events received from Hitachi HNAS storage subsystems over a specified period group by HNAS IP address.
32 Dashboards
All HNAS Severe Events over Time
View all HNAS severe events received from Hitachi HNAS storage subsystems over a specified period.
period.
View all HNAS severe events received from Hitachi HNAS storage subsystems over a specified period group by HNAS IP.
Dashboards 33
HCP Dashboard
View all HCP events received from Hitachi HCP storage subsystems over a specified period.
period.
View all HCP events received from Hitachi HCP over a specified period group by HCP IP address.
All HCP Authentication Events over Time
View all HCP authentication events received from Hitachi HCP over a specified period group by originating IP address.
All HCP Authentication Events over Time Group by Originating IP
View all HCP authentication events received from Hitachi HCP over a specified
period group by originating IP address.
34 Dashboards
All HCP Events over Time Grouped by Node ID
View all HCP events received from Hitachi HCP over a specified period group by HCP node ID.
period.
Dashboards 35
Alerts
Alerts provide a way to trigger a reaction when a certain type of event occurs.
vRealize Log Insight supports two types of alerts:
Email
vRealize Operations Manager
You can only save alerts in a user space. By default, all content pack alerts are
disabled. Therefore, if you create an enabled alert and export it as a part of a content pack, the alert is disabled in the content pack. Content packs do not contain email and vRealize Operations Manager settings, and you cannot add
these settings to a content pack.
The Hitachi storage content pack has pre-defined custom alerts. By default all
alerts in this content pack are disabled. If you enable email configuration in Log Insight, then you can use pre-defined alerts and trigger them from scheduled queries of any type.
The following alerts are predefined in the content pack, though initially disabled:
36 Dashboards
Abbreviations, Terms, and Acronyms 37
Abbreviations, Terms, and Acronyms
This glossary defines the special terms, acronyms, and abbreviations used in this document.
A
Using the configuration GUI with administrative access to the array
B
BCSM
38 Abbreviations, Terms, and Acronyms
CPU
Controller
The component in a storage system that manages all storage functions. It is analogous to a computer and contains processors, I/O devices, RAM, power supplies, cooling fans, and other sub-components as needed to
support the operation of the storage system.
Controller IP Address (HUS series only)
An Internet Protocol (IP) address is a numerical label that is uniquely assigned to a controller of Hitachi subsystem.
Controller Port
copy-on-write
Point-in-time snapshot copy of any data volume within a storage system. Copy-on-write snapshots only store changed data blocks. Therefore, the amount of storage capacity required for each copy is substantially smaller
than the source volume.
Data Services
Data services consist of data moving, data replication, data archiving, and any other functions where data is involved.
Datastore
DNS
DP Pool Capacity
The total amount of capacity assigned to a DP pool
DPVOL
A virtual LU that consumes and maps storage space for areas of the LU in
which data is written
H
HCP
Hitachi Content Platform (HCP)
An open, highly scalable, intelligent archive that reserves and protects data
Hitachi Dynamic Provisioning (HDP)
HDP
HDP Pool
Consists of one or more dedicated RAID groups. Up to 50 DP pools in the AMS 2100 and 64 DP pools in the AMS2300/2500 are allowed. Each pool
requires a unique pool ID.
HDP Optimization
An HDP pool can be optimized by rebalancing each HDPVOL’s allocated pool capacity evenly across each of the RAID groups. This is particularly effective after adding a RAID group to the HDP pool.
HDP Pool Capacity
Amount of total capacity assigned to a given HDP pool
HDP Pool Capacity Threshold
Initial warning levels of high pool utilizations upon early (default 40%) and depletion (50%) conditions
HDP Pool Consumed Capacity
HDP RAID Group
One or more physical RAID groups that belong to the same HDP pool
HDPVOL
A virtual LU that consumes and maps storage space for areas of the LU that have had data written to them. In HDP, it is required to associate the HDPVOL with a HDP pool. The HDPVOL must specify a HDP pool ID,
HDPVOL logical capacity, and HDPVOL number. Many HDPVOLs can be defined for on HDP pool. A given HDPVOL cannot be defined to multiple DP
pools.
HDvM
HNAS
A group of hosts of the same operating system platform
Host Group Number
IP Address
An Internet Protocol (IP) address is a numerical label that is uniquely assigned to a device.
IETF
LU
Logical unit (LU): A logical volume that is configured for use by open- systems hosts (for example, OPEN-V).
LUN
LU Path
Logical unit (LU) path: The path between and open-systems host and a logical unit.
LU Size
Logical unit (LU) size: The size of the logical unit.
LVI
MP
Over Provisioning Threshold
Threshold value for DP pool over-provision warning (default 100%) and limit (default 130%)
P
Parity Group
A parity group, also called an array group, is a group of hard disk drives
(HDDs) that form the basic unit of storage for RAID subsystems. All HDDs in a parity group must have the same physical capacity.
PG
RAID Group
Redundant arrays of inexpensive drives (RAID) that have the same capacity and are treated as one group for data storage and recovery. A
RAID group contains both user data and parity information, which allows access to user data in case a disk is not available. The RAID level of a RAID group determines the number of data drives and parity drives and
how the data is “striped” across the drives.
A RAID group can also be called an array group or a parity group.
RAM
SMS
SOAP
Storage array or device
Storage includes both block and file storage and a form factor that scales from a single node appliance to large scalable multi-node configurations.
Storage Serial No.
T
TCP/IP
Total Capacity
The aggregate amount of storage space in a data storage system.
TransID
U
UDP
User Account
Uniquely identifies a user for authentication and authorization to the subsystem. A user uses his or her user account to authenticate to the subsystem. The subsystem uses the user account to determine the access
rights for the login user.
V
VFP
V-VOL
VOL
Volume
W
WWN
A World Wide Name (WWN) is a unique identifier that identifies a particular Fibre Channel, Advanced Technology Attachment (ATA), or Serial Attached SCSI (SAS) target. Each WWN is an 8-byte number derived from an IEEE
OUI and vendor-supplied information.
Phone: 1 408 970 1000 www.hds.com [email protected]
Asia Pacific and Americas 2845 Lafayette Street Santa Clara, California 95050-2627 U.S.A.
Phone: 1 408 970 1000 [email protected]
European Headquarters Sefton Park
United Kingdom Phone: + 44 (0)1753 618000 [email protected]
Getting Help
All Error Events
All Error Events Group by Storage Serial Number and User ID
All Warning Events
All CCI Events
All CCI Events Group by Storage Serial and User ID
General - Configuration
All Configuration Events
All Maintenance Events
General - Security
All Failed Login Events
All Failed Login Events Group by User and Storage Serial
All Storage Login Events Group by Login Type
General - Provisioning
All Failed Provisioning Events Group by Storage Serial Number
All Delete Provisioning Events Group by User ID
All Delete Tasks Events Group by Storage Serial Number
General - Replication
All Remote Replication Events
General - Volume
All Universal Volume Manager Events Group by Storage Serial Number
All Volume Migration Events
All Volume Shredding Events
HNAS Dashboard
All HNAS Events over Time Group by IP
All HNAS Information Events over Time
All HNAS Information Events over Time Group by IP
All HNAS Warning Events over Time
All HNAS Warning Events over Time Group by IP
All HNAS Severe Events over Time
All HNAS Severe Events over Time Grouped by IP
HCP Dashboard
All HCP Events over Time Grouped by IP
All HCP Authentication Events over Time
All HCP Authentication Events over Time Group by Originating IP
All HCP Events over Time Grouped by Node ID
Alerts