1. Oracle Enterprise Manager 10g: Making the Grid a Reality Jay Rossiter Vice President, System Management Products Oracle Corporation Session id: 40029

2. Agenda  Enterprise Manager 10 G Introduction  Grid Management  Proof Points

3. Agenda  Enterprise Manager 10 G Introduction  Grid Management  Proof Points

4. Complete Integrated Scaleable Low Cost Enterprise Manager 10 G 2x-10x lower cost to manage Increased availability, reliability & performance Automating the Data Center

5. Complete Management of the Oracle Grid End Users Integrated Management of Oracle Products Oracle Collab Suite 3 Oracle eBus Suite Oracle Oracle9iAS OC4J Exhaustive individual component management: Admin Monitoring Provisioning 1 Integrated Suite Management Web ServicesTop Link Integration Portal Web Cache SSOWireless Oracle9iAS J2EE 2 Management for Oracle Eco-System 4 Other Applications

6. Host and Hardware Integrated Database Oracle9iAS Storage Network and Load Balancer Applications Administration Monitoring Provisioning Security Enterprise Manager

7. Group Management Hardware/Software Inventory Configuration Performance Topology Central Repository SDK Policy ManagerTask Automation Scaleable Automated management of sets of systems

8. Managing Groups  Managed from a single-view – Monitoring and automated operations  Logical modeling of sets of systems – Applications, Clusters, other sets – Leveraged by all services – Jobs, Policies, …  Membership-based inheritance Applications Sets of Systems

9. Task Automation  Execute simple or complex tasks across 100’s of systems  Easy to use and scalable  Pre-packaged jobs – Backup, startup/shutdown, patch, clone…  Generic job types – SQL, OS command  Ad hoc job creation – Custom scripts  Cooperative job sharing  Job Library EM 4.x Job System

10. Easy to Deploy Firewall Mobile Device HTML Console Portals HTTP/S Open Repository Manage from Anywhere

11. Out-of-box Ready  Grid Control – Management of all the Oracle Grid components – Centrally manage entire enterprise – Out-of-box management for all Oracle products  Product Controls – Fully functional standalone management – Out-of-box with each product

12. Agenda  Enterprise Manager 10 G Introduction  Grid Management  Proof Points

13. Grid Management  Application Service Level Management – End-to-end performance, availability & diagnostics  Standardization – Policy-based best practices – Security Assurance  Automated Provisioning and Administration – Software, storage, application provisioning – Change management and configuration

14. Tokyo Sales Office Paris Sales Office New York Sales Office Any Application User Monitor key business transactions Availability Performance Click-to-SQL Drilldowns Click-to-EJB and J2EE Activity External networkInternal networkApplication ContentApp ServerDatabase End to End Tracing Web Application All Your Users All Your URLs All the Time Application Service Level Management End-to-End Performance, Availability & Diagnostics

15. System Component Management Rich monitoring and diagnostics Availability Real time monitoring and thresholds Event notifications Historical Data Analysis and Trending Performance diagnostics Cluster monitoring Oracle Database 10 G Oracle Collaboration Suite 10 G Oracle EBusiness Suite 11 i Oracle Application Server 10 G

16. Application Service Level Management  End-user performance – All interactions – Javascript attached to cookie – Response time is captured in web server log – Log data is loaded into the repository – Require Oracle AS Webcache in the middle-tier  Business Transaction performance and availability – Record transaction – Deploy to beacons across the network – Transaction replayed – Metrics recorded in repository – Works for any web application  End-2-End tracing – Component level time tracking – Click to EJB – Click to SQL

17. Monitoring  Application Service Level Management  End-user experience  Trace and pinpoint  Deep diagnostics  Sets of systems  Classic system monitoring  Availability  Critical performance rollups Applications Sets of Systems

18. Standardization  Policy Management – Rule definitions – Violation detection – Corrective action  Security policies – Software installation hardening – Excess services/ports – Excess user privileges  Configuration policies – Best practices – Base images  Performance polices – Thresholds Policy Based Best Practices Policy

19. Automated Security Checks All Oracle Software 1.Security alerts 2.Critical patches Host 1.Detect open ports 2.Detect insecure services Application Server 1.HTTPD has minimal privileges 2.Use HTTP/S 3.Apache logging should be on 4.Demo applications disabled 5.Disable default banner page 6.Disable access to unused directories 7.Disable directory indexing 8.Forbid access to certain packages 9.Disable packages not used by DAD owner 10.Remove unused DAD configurations 11.Redirect _pages directory 12.Password complexity enabled 13.Use HTTP/S Database Services 1.Enable listener logging 2.Password-protect listeners 3.Disable direct listener administration 4.Disallow remote OS roles and authentication 5.Disallow use of remote password file 6.Restrict access to external procedure service Database User Privileges 1.Disable install and demo accounts 2.Disallow default user/password 3.PUBLIC has execute System privilege 4.PUBLIC has execute Object privilege 5.PUBLIC has execute UTL_FILE privilege 6.PUBLIC has execute UTL_SMTP privilege 7.PUBLIC has execute UTL_HTTP privilege 8.PUBLIC has execute UTL_TCP privilege 9.PUBLIC has execute DBMS_RANDOM 10.Password complexity 11.Restrict number of failed login attempts 12.Authentication protocol fallback 13.Connect and Resource grants

20. Automated Best Practices for Database 1.Insufficient Number of Control Files 2.Insufficient Redo Log Size 3.Insufficient Number of Redo Logs 4.Use of Unlimited Autoextension 5.Use of Non-Standard Init. Parameters 6.Recovery Area Location Not Set 7.Autobackup of Control File is not Enabled 8.SYSTEM TS Used as User Default TS 9.Segment with Extent Growth Policy Violation 10.Tablespace Containing Mixed Segment Types 11.Not Using Locally Managed Tablespaces 12.SYSTEM TS Contains Non-System Data Seg 13.Users with Permanent TS as Temporary TS 14.Insufficient Recovery Area Size 15.Force Logging Disabled 16.Not Using Spfile 17.Rollback in SYSTEM Tablespace 18.Not Using Undo Space Management 19.Non-uniform Default Extent Size

21. Certified Software Images Base Image Library “ Certified ” Systems Test/Dev system Production system Agent

22. View/Search Compare/Diff Change Tracking Reference Configurations Analyze Install/Clone Configure Patch Secure LiveLink Oracle.com Product Updates Patches Product Configuration Oracle Inventory Software Configurations Hardware Configurations Discover Automated Provisioning Enterprise Manager Provision Over 20% of downtime attributable to human configuration errors

23. Configuration Analysis  Complete inventory of all Oracle software – Versions – Patch levels  Configuration details for all Oracle products  Related software and hardware configuration details “How many DB instances need to have a given patch applied? – Is my O/S at the right patch level?”

24. Configuration Analysis  Tracking changes  Comparing and validating configurations  Searching across enterprise  Understanding product and feature usage “When things stop working, the first thing we do is try to figure out what has changed” CalISO DBA

25. Automated Patch Management  Real-time discovery of new patches Security patch rapid deployment dramatically reduces vulnerabilities  Automatic staging and application – From hours to minutes  Rolling RAC upgrade Update Inventory Determine Applicability 2 Apply Patch 3 4 Patch Published 1 Slammer virus exploited known security flaw to which patch was available 6 months prior to attack

26. Automated Software Cloning Operations  Reduce manual labor in software life-cycle – From hours to minutes  Automate mass provisioning of reference systems Update Inventory Clone to Selected Targets 2 3 Select Software (and Instances) to Clone 1 “Our DBAs spend about 25% of their time on database installs and cloning” -Verizon Information Services DBA

27. Capacity-on-Demand Load increase identified -- additional resources required 1 Systems chosen for deployment from available hardware 2 New Hardware RAC DB Production Application Application Servers New servers added to application 3 Image/Clone AS Image/Clone DB Associate AS with Infrastructure Add AS to cluster Add DB server to RAC cluster Configure DB server to get AS requests Configure SLB to include new AS

28. Automated Administration  Simplify complex tasks  Automate tasks across systems  Single-button cluster operations

29. Automated Operations All Target Types System and application availability Set up of target-specific metrics/thresholds Configuration data collection Performance data collection Comprehensive monitoring Alerts Email and Paging notifications Blackouts User-defined jobs System and application response time measurements Policy violation reporting Clone Oracle Home Patch search/download ASM Disk group admin (rebalance) Startup/Shutdown Disk group usage/status I/O performance Add/Remove disks DB General health assessment Bad SQL identification Top SQL identification SQL recommendations Tuning advisories Performance trending Backup Restore Security vulnerability ID Create/remove Physical/Logical Standby Standby health assessment Standby switchover/failover RAC Cluster cache coherency monitoring Failover events Discovery of RAC topology Startup/shutdown Relocate services Failover jobs iAS Config changes across cluster (OC4J, Apache) Create/Manage cluster Deploy app to cluster Reconfigure a farm Add/Remove node from cluster Clone (mid-tiers) Patch OCS IMAP, SMTP End-2-end service monitoring Files End-2-end service monitoring Files document analysis: count, size, format Files user analysis: number, quota consumed Host/Host Clusters Top processes identification

30. Automated Group Operations All Target Types Config. change tracking Configuration inventory Diff configurations Search configurations Behavior inheritance (Jobs) Create/manage groups OS command jobs SQL Script jobs Aggregate Metrics Alert Rollups Set blackouts Set monitoring levels Set target properties Set thresholds Installation hardening Security alerts and patches Discovery Host/Host Clusters Add/Remove node from OS cluster ASM Disk group admin (rebalance) Startup/Shutdown Disk group usage/status I/O performance Add/Remove disks DB Analyze Backup Export Startup/Shutdown Configuration Advise Clone, Patch RAC Spfile changes across instances Start/Stop/Relocate services Startup/Shutdown Cluster cache coherency Monitoring rollups Add/Remove Instance iAS Config changes across cluster (OC4J, Apache) Create/Manage cluster Deploy app to cluster Reconfigure a farm Add/Remove node from cluster Clone (mid-tiers) Patch OCS Custom grouping Home pages for EMAIL and IM WebApp End-2-End availability End-2-End monitoring End-2-End tracing EM Agent deployment

31. What’s New in EM 10 G AreaEM 9iEM 10 G Oracle Database Oracle9iAS Oracle Collab Suite Oracle eBus Suite Operating System Storage Network SLB (Nortel, F5) Hardware (Dell, Compaq) Admin and Monitoring  Application Performance Management – Real performance for All Your Users, All Your Pages, All the Time – Application Availability – Synthetic transactions – End-to-end tracing  Enterprise Configuration Management – Rapid installation – Deployment – Provisioning – Upgrade – Automated patching Key new EM10 G functionality

32. Agenda  Enterprise Manager 10 G Introduction  Grid Management  Proof Points

33. EM 10 G Early Adopter Customers

34. EM 10 G Early Adopter: Merck  Uses EM to manage 1200+ systems worldwide  Key v4 features driving rapid rollout: - Enterprise-wide - performance and availability reports - Automation - event thresholds via baselines - Configuration management - compare/diff host hardware and software

35. Enterprise Manager 10 G 2x to 10x lower cost to manage Oracle  Complete – Managing all the components of the Oracle grid  Integrated – Administration, Monitoring, Provisioning and Security  Scaleable – Minimal incremental cost for managing sets of systems  Low cost to implement and maintain – Pre-tested, certified works out of box