2. ADM393 Extending MOM with SDK2 and Building Connectors Martin Dey Sr. Product Manager Enterprise Management Division

3. Centrally manage thousands of servers located in multiple sites Regionally collect events and forward critical alerts to the console Managed Servers Regional Collection Global Event Forwarding

4. Overheard From Customers... Isn’t it hard to integrate MOM into my environment? I already have Openview or Tivoli deployed, why do I need MOM? Can MOM automatically open trouble tickets? Can I use MOM to monitor my network using SNMP? Can MOM manage my line of business application? Can MOM help me understand the health/usage of my servers and output reports for my management?

5. Agenda MOM Architecture and SDK2 Overview Customizing what MOM manages MOM Ecosystem Integrating MOM with your tools and processes

6. MOM Architecture MOM DB MOMServer Agent Agent Data/configuration Storage Reporting Alert state management MOM Agent Win32 service Runs rules locally including local responses Data Collection, Consolidation, and Filtering MOM User Interface MMC snap-in and Web Console MOM Server (DCAM) Database Access Service (DAS) Handles connections to the DB Consolidator Agent functionality on MOM Server Server side responses Agent Manager Discovery Agent install/Uninstall Attribute Collection

7. Wealth Of Data Sources Registry PerfMonCounters NT Event LogScripts SNMP SQLServer ActiveDirectoryExchange.NET WMI Providers BizTalk MOM Agent (OnePoint Service) WMI ext for WDM

8. Processing Rule MOM Rules Processing rule group ComputerGroup Processing rule Provider NT event log NT event log Perfmon data Perfmon data WMI WMI SNMP SNMP Log files Log files Syslog Syslog Criteria Where source=DCOM and Event ID=1006 Where source=DCOM and Event ID=1006 Response Alert Alert Script Script SNMP trap SNMP trap Pager Pager E-mail E-mail KB data Knowledge Knowledge Site specific knowledge Site specific knowledge

9. Customer Scenarios Need to manage my LOB application Need to manage other software RIM Blackberry, SAP, Siebel Need to manage my hardware devices and storage Brocade SANs, Compaq and Dell servers Need to manage my network components

10. Framework For MOM Rules Can a MOM rule tell me when _____ happens? Check to see if a management pack already exists From Microsoft From a third party (NetIQ, Citrix, Compaq, more coming…) Create your own custom rules NT event log NT performance counter Application log (IIS, generic log file, syslog) WMI events WMI numeric events Scheduled transaction Create custom instrumentation

11. Automate IT Processes With Management Packs Look for the simple things to automate first Update MOM rules with responses to automatically fix well known recurring problems Encode IT “playbook” in a management pack

12. Building A Management Pack

13. Accessing SNMP With MOM MOM can manage applications/devices that supports SNMP SNMP traps and data are integrated into MOM through the WMI SNMP provider Convert MIBs to MOFs using smi2smir Need to load MOF into WMI Configure the target device address and community string Examples Select * from SnmpLinkDownNotification Select * from __instancecreationevent WITHIN 60 WHERE TargetInstance ISA ‘SNMP_RFC1213_MIB_ipRouteTable’

14. Automating With MOM Can automate actions on agents or MOM servers Using VBScript, Jscript, or Custom Use State variables for complex inter rule logic Timed versus Response Scripts Rules versus Scripts New in SP1 Remote script debugging Better diagnostic and instrumentation events RunMOMScript.exe for script testing Support for larger scripts

15. MOM SDK2 And the MOM Resource Kit MOM SP1 SDK2 features MOM WMI provider SQL Server views Ability to extend the Monitor Console Documentation and samples SDK documentation – creating management packs, connectors Samples – Pocket MOM, WMI tool, scripts, sample MPs, sample SQL Server queries, sample custom UI view Reskit Server Status Monitor RunMOMScript – easily test your MOM scripts EventSim – quickly test your MOM event rules

16. MOM SDK2 Components MOM DB MOMServer Agent Agent MMC MP Rules + WMI Provider SQL Views Custom UI Custom View UI extensions in MMCCustom View UI extensions in MMC Read-only SQL views onto core dataRead-only SQL views onto core data Read-write access to Computers & AlertsRead-write access to Computers & Alerts Custom rules, scripts and groupsCustom rules, scripts and groups SDK1 (MOM RTM) SDK2 (MOM SP1)

17. WMI Schema Diagram *denotes special class for non windows agents

18. SQL Views Associations Alert AlertsToEvents ComputerGroup Computer PerformanceEvent ComputerTo ComputerGroup Computer Attributes Event Parameters

19. MOM Ecosystem Microsoft Operations Manager Ticketing System Remedy, Netcool Other platforms Hardware and NetworkComponents Third-party apps, Oracle, Virus software Microsoft platform and apps ManagementProducts CA, Tivoli, HP HomeGrownSystems Management Packs

20. Integrating MOM With Another Management Product MOM agents can co-exist Leverage MOM for best of breed Windows management “Connect” data between the management products Alert rules and responses Custom UI tasks Custom written Connectors Third-party connectors

21. Connector Architecture MOM DB MOMServer Agent Agent AnotherManagementSystem Management System Instrumentation MOM Alerts Changed MOM Alerts Management Packs

22. Connecting MOM Data Option 1 Alert rule and response Build a custom Alert Rule that runs a response to forward data out Advantages Relatively easy to configure (example MP in SDK) MOM can be customized to filter alerts for forwarding SNMP trap for alert forwarding built into MOM as a first class response Custom scripts can be written to run as a response Disadvantages Only useful for forwarding new alerts once (not for updated alerts) Knowledge of the API for the other management system is needed

23. Connecting MOM Data Option 2 Operator initiated console task Using Custom Tasks in the MOM UI Advantages Easy to setup Filtering is done by console operator (right click on an alert and run action) Can be run multiple times to send data for one alert Disadvantages Needs to be invoked by the console operator Knowledge of the API for the other management system is needed

24. Connecting MOM Data Option 3 Third-party packaged product Use a third-party product to connect MOM alerts to other management systems Advantages Built in business logic to use API of other management system Quick solution and good for customers without expertise/time to build their own Possible features like guaranteed delivery, more flexible mapping, ability to batch alerts Disadvantages Increased cost May not support features required like updating alerts back in MOM when they change in the other system

25. Connecting MOM Data Option 4 Custom connector Create an Alert rule to forward alerts out Use MOM SDK2 APIs (MOM WMI provider) to update alerts back in MOM when they change Advantages Meets the business requirements Could be a quick solution depending on requirements Disadvantages Custom connector must be supported Knowledge of the API for the other management system is needed

26. Enterprise Products ProductIntegrating with MOM Tivoli Enterprise Forward MOM Alerts using MOM SNMP traps Partners: NetIQ and iWave Connectors CA Unicenter Forward MOM Alerts using MOM SNMP traps CA engaged in MMA and working on a connector Partners: iWave connector available BMC Patrol Forward MOM Alerts using MOM SNMP traps Partners: BMC engaged with MMA – consuming SNMP traps NetIQ AppManager Keep alerts in sync between both products using alert and event rules NetIQ connector available Remedy Forward MOM Alerts using a custom script that writes alert to Remedy Neon connector available HP OpenView Forward MOM Alerts using SNMP traps iWave Systems integration

27. Connecting MOM To Your Enterprise

28. Summary And Call To Action MOM provides immediate continuous ROI MOM 2000 is customizable, extensible and ready for the datacenter Build management packs to encode operational knowledge! Demand management packs from partners and other software vendors Forward and connect MOM with other management systems

29. More Resources www.microsoft.com/mom Complex configuration white paper Capacity Performance white paper Troubleshooting MOM Agent Install Issues white paper Deployment guide Product documents microsoft.public.mom newsgroups MOM books Coming Soon - Microsoft Operations Manager: managing, tuning and securing - by Chris Amaris Microsoft Management http://www.microsoft.com/management Microsoft Management Alliance (for SDK info) http://www.microsoft.com/management/mma

30. evaluations… evaluations… Don’t forget to complete your online Evaluation Form!

31. © 2003 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.