ADM393 Extending MOM with SDK2 and Building Connectors Martin Dey Sr. Product Manager Enterprise Management Division

Centrally manage thousands of servers located in multiple sites Regionally collect events and forward critical alerts to the console Managed Servers Regional Collection Global Event Forwarding

Overheard From Customers... Isn’t it hard to integrate MOM into my environment? I already have Openview or Tivoli deployed, why do I need MOM? Can MOM automatically open trouble tickets? Can I use MOM to monitor my network using SNMP? Can MOM manage my line of business application? Can MOM help me understand the health/usage of my servers and output reports for my management?

Agenda MOM Architecture and SDK2 Overview Customizing what MOM manages MOM Ecosystem Integrating MOM with your tools and processes

MOM Architecture MOM DB MOMServer Agent Agent Data/configuration Storage Reporting Alert state management MOM Agent Win32 service Runs rules locally including local responses Data Collection, Consolidation, and Filtering MOM User Interface MMC snap-in and Web Console MOM Server (DCAM) Database Access Service (DAS) Handles connections to the DB Consolidator Agent functionality on MOM Server Server side responses Agent Manager Discovery Agent install/Uninstall Attribute Collection

Wealth Of Data Sources Registry PerfMonCounters NT Event LogScripts SNMP SQLServer ActiveDirectoryExchange.NET WMI Providers BizTalk MOM Agent (OnePoint Service) WMI ext for WDM

Processing Rule MOM Rules Processing rule group ComputerGroup Processing rule Provider NT event log NT event log Perfmon data Perfmon data WMI WMI SNMP SNMP Log files Log files Syslog Syslog Criteria Where source=DCOM and Event ID=1006 Where source=DCOM and Event ID=1006 Response Alert Alert Script Script SNMP trap SNMP trap Pager Pager KB data Knowledge Knowledge Site specific knowledge Site specific knowledge

Customer Scenarios Need to manage my LOB application Need to manage other software RIM Blackberry, SAP, Siebel Need to manage my hardware devices and storage Brocade SANs, Compaq and Dell servers Need to manage my network components

Framework For MOM Rules Can a MOM rule tell me when _____ happens? Check to see if a management pack already exists From Microsoft From a third party (NetIQ, Citrix, Compaq, more coming…) Create your own custom rules NT event log NT performance counter Application log (IIS, generic log file, syslog) WMI events WMI numeric events Scheduled transaction Create custom instrumentation

Automate IT Processes With Management Packs Look for the simple things to automate first Update MOM rules with responses to automatically fix well known recurring problems Encode IT “playbook” in a management pack

Building A Management Pack

Accessing SNMP With MOM MOM can manage applications/devices that supports SNMP SNMP traps and data are integrated into MOM through the WMI SNMP provider Convert MIBs to MOFs using smi2smir Need to load MOF into WMI Configure the target device address and community string Examples Select * from SnmpLinkDownNotification Select * from __instancecreationevent WITHIN 60 WHERE TargetInstance ISA ‘SNMP_RFC1213_MIB_ipRouteTable’

Automating With MOM Can automate actions on agents or MOM servers Using VBScript, Jscript, or Custom Use State variables for complex inter rule logic Timed versus Response Scripts Rules versus Scripts New in SP1 Remote script debugging Better diagnostic and instrumentation events RunMOMScript.exe for script testing Support for larger scripts

MOM SDK2 And the MOM Resource Kit MOM SP1 SDK2 features MOM WMI provider SQL Server views Ability to extend the Monitor Console Documentation and samples SDK documentation – creating management packs, connectors Samples – Pocket MOM, WMI tool, scripts, sample MPs, sample SQL Server queries, sample custom UI view Reskit Server Status Monitor RunMOMScript – easily test your MOM scripts EventSim – quickly test your MOM event rules

MOM SDK2 Components MOM DB MOMServer Agent Agent MMC MP Rules + WMI Provider SQL Views Custom UI Custom View UI extensions in MMCCustom View UI extensions in MMC Read-only SQL views onto core dataRead-only SQL views onto core data Read-write access to Computers & AlertsRead-write access to Computers & Alerts Custom rules, scripts and groupsCustom rules, scripts and groups SDK1 (MOM RTM) SDK2 (MOM SP1)

WMI Schema Diagram *denotes special class for non windows agents

SQL Views Associations Alert AlertsToEvents ComputerGroup Computer PerformanceEvent ComputerTo ComputerGroup Computer Attributes Event Parameters

MOM Ecosystem Microsoft Operations Manager Ticketing System Remedy, Netcool Other platforms Hardware and NetworkComponents Third-party apps, Oracle, Virus software Microsoft platform and apps ManagementProducts CA, Tivoli, HP HomeGrownSystems Management Packs

Integrating MOM With Another Management Product MOM agents can co-exist Leverage MOM for best of breed Windows management “Connect” data between the management products Alert rules and responses Custom UI tasks Custom written Connectors Third-party connectors

Connector Architecture MOM DB MOMServer Agent Agent AnotherManagementSystem Management System Instrumentation MOM Alerts Changed MOM Alerts Management Packs

Connecting MOM Data Option 1 Alert rule and response Build a custom Alert Rule that runs a response to forward data out Advantages Relatively easy to configure (example MP in SDK) MOM can be customized to filter alerts for forwarding SNMP trap for alert forwarding built into MOM as a first class response Custom scripts can be written to run as a response Disadvantages Only useful for forwarding new alerts once (not for updated alerts) Knowledge of the API for the other management system is needed

Connecting MOM Data Option 2 Operator initiated console task Using Custom Tasks in the MOM UI Advantages Easy to setup Filtering is done by console operator (right click on an alert and run action) Can be run multiple times to send data for one alert Disadvantages Needs to be invoked by the console operator Knowledge of the API for the other management system is needed

Connecting MOM Data Option 3 Third-party packaged product Use a third-party product to connect MOM alerts to other management systems Advantages Built in business logic to use API of other management system Quick solution and good for customers without expertise/time to build their own Possible features like guaranteed delivery, more flexible mapping, ability to batch alerts Disadvantages Increased cost May not support features required like updating alerts back in MOM when they change in the other system

Connecting MOM Data Option 4 Custom connector Create an Alert rule to forward alerts out Use MOM SDK2 APIs (MOM WMI provider) to update alerts back in MOM when they change Advantages Meets the business requirements Could be a quick solution depending on requirements Disadvantages Custom connector must be supported Knowledge of the API for the other management system is needed

Enterprise Products ProductIntegrating with MOM Tivoli Enterprise Forward MOM Alerts using MOM SNMP traps Partners: NetIQ and iWave Connectors CA Unicenter Forward MOM Alerts using MOM SNMP traps CA engaged in MMA and working on a connector Partners: iWave connector available BMC Patrol Forward MOM Alerts using MOM SNMP traps Partners: BMC engaged with MMA – consuming SNMP traps NetIQ AppManager Keep alerts in sync between both products using alert and event rules NetIQ connector available Remedy Forward MOM Alerts using a custom script that writes alert to Remedy Neon connector available HP OpenView Forward MOM Alerts using SNMP traps iWave Systems integration

Connecting MOM To Your Enterprise

Summary And Call To Action MOM provides immediate continuous ROI MOM 2000 is customizable, extensible and ready for the datacenter Build management packs to encode operational knowledge! Demand management packs from partners and other software vendors Forward and connect MOM with other management systems

More Resources Complex configuration white paper Capacity Performance white paper Troubleshooting MOM Agent Install Issues white paper Deployment guide Product documents microsoft.public.mom newsgroups MOM books Coming Soon - Microsoft Operations Manager: managing, tuning and securing - by Chris Amaris Microsoft Management Microsoft Management Alliance (for SDK info)

evaluations… evaluations… Don’t forget to complete your online Evaluation Form!

© 2003 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.