EMC Clariion Storage
What is Discovered and Monitored
Protocol |
Information Discovered |
Metrics collected |
Used for |
---|---|---|---|
NaviSecCLI |
Host name, Operating system version, Hardware model, Serial number, Network interfaces* Installed Software, Storage Controller Ports Hardware components: Enclosures, Fan, Power Supply, Link Control Card, CPU, Disk RAID Groups and the assigned disk
LUNs and LUN -> RAID Group mappings
Storage Groups and memberships (Host, Port, LUN). |
Processor utilization: SP Name, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps) Port I/O: Port name, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps) RAID Group I/O: RAID Group id, RAID type, Total disk, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps) LUN I/O: LUN name, LUN id, Total disk, Used disk, Free disk, Disk util, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps) Host HBA Connectivity: Source IP, Source Name, Source WWN, Dest IP, Destination Name, SP Port Name, Storage Group, LUN Names, Login Status, Registration Status Host HBA Unregistered Host: Source IP, Source Name, Source WWN, Dest IP, Destination Name, SP Port Name Hardware component health: Component name (Disk, Power supply, LCC, Fan, Link, Port), Component status, Host spare ready disk count Overall Disk health: Total disk count, Total disk size (MB), Active disk count, Failed disk count, Spare disk count |
Availability and Performance Monitoring |
Event Types
In ADMIN > Device Support > Event Types, search for "clariion" to see the event types associated with this device.
Rules
There are no predefined rules for this device.
Reports
There are no predefined reports for this device.
Configuration
Installing the NaviSecCLI Library in FortiSIEM
Changing NaviSecCLI Credentials
If you change the NaviSecCLI credentials on your EMC Clariion device, the certificates may also be changed and naviseccli may prompt you to accept new certificates. This should only happen the first time after a certificate change, however, FortiSIEM discovery and performance monitoring will fail. You must run NaviSecCLI manually on each Supervisor and Worker in your deployment and accept the certificate, and then rediscover your EMC Clariion device for performance monitoring to resume.
Configuration of your EMC Clariion storage device involves installing EMC's NaviSecCLI library in your FortiSIEM virtual appliance, and then setting the access credentials that the appliance will use to communicate with your device.
- Log in to your FortiSIEM virtual appliance as
root
. -
Copy the file
NaviCLI-Linux-64-x86-versionxyz.rpm
to the FortiSIEM directory. -
Run
rpm --Uvh NaviCLI-Linux-64-x86-versionxyz.rpm
to install the rpm package.[root@Rob-SP-94 tmp]# rpm -Uvh NaviCLI-Linux-64-x86-en_US-7.30.15.0.44-1.x86_64.rpm Preparing... ########################################### [100%] 1:NaviCLI-Linux-64-x86-en########################################### [100%] Please enter the verifying level(low|medium|l|m) to set? m Setting medium verifying level [root@Rob-SP-94 opt]# ls -la total 40 drwxr-xr-x 8 root root 4096 Aug 22 16:06 . drwxr-xr-x 29 root root 4096 Aug 16 16:46 .. drwxr-xr-x 11 admin admin 4096 Jul 23 18:56 glassfish lrwxrwxrwx 1 root root 16 Aug 16 16:46 Java -> /opt/jdk1.6.0_32 drwxr-xr-x 8 root root 4096 Jun 2 16:35 jdk1.6.0_32 drwxr-xr-x 5 root root 4096 Aug 22 16:06 Navisphere <----Note this directory was created*** drwxrwxr-x 14 admin admin 4096 Jul 24 11:22 phoenix drwxrwxr-x 3 root root 4096 Jun 2 16:36 rpm drwxr-xr-x 8 root root 4096 Jun 18 2010 vmware [root@Rob-SP-94 opt]#
-
Change the user role to the admin
su - admin
and make sure that the user can run the commandnaviseccli -h -User <user> -Password <pwd> -Scope global getall -sp
from the directory/opt/phoenix/bin
.[root@Rob-SP-94 Navisphere]# cd bin [root@Rob-SP-94 bin]# su - admin [admin@Rob-SP-94 ~]$ naviseccli Not enough arguments Usage: [-User <username>] [-Password <password>] [-Scope <0 - global; 1 - local; 2 - LDAP>] [-Address <IPAddress | NetworkName> | -h <IPAddress | NetworkName>] [-Port <portnumber>] [-Timeout <timeout> | -t <timeout>] [-AddUserSecurity | -RemoveUserSecurity | -DeleteSecurityEntry] [-Parse | -p] [-NoPoll | -np] [-cmdtime] [-Xml] [-f <filename>] [-Help] CMD <Optional Arguments>[security -certificate] [admin@Rob-SP-94 ~]$ pwd /opt/phoenix/bin
-
Make sure that the Navisphere Analyzer module is on.
If the module is off, performance metrics will not be available and discovery will fail. This log shows an example of the module being turned off.[admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 getall -sp Server IP Address: 192.168.1.100 Agent Rev: 7.32.26 (0.95) SP Information -------------- Storage Processor: SP A Storage Processor Network Name: A-IMAGE Storage Processor IP Address: 192.168.1.100 Storage Processor Subnet Mask: 255.255.255.0 Storage Processor Gateway Address: 192.168.1.254 Storage Processor IPv6 Mode: Not Supported Management Port Settings: Link Status: Link-Up Current Speed: 1000Mbps/full duplex Requested Speed: Auto Auto-Negotiate: YES Capable Speeds: 1000Mbps half/full duplex 10Mbps half/full duplex 100Mbps half/full duplex Auto System Fault LED: OFF Statistics Logging: OFF <----- Note: performance statistics are not being collected <------ so AccelOp can not pull stats and discovery will fail. <------ See how to turn ON Statistics Logging below. SP Read Cache State Enabled SP Write Cache State Enabled ....
-
If the Navisphere Analyzer module is off, turn it on with the
setstats -on
command.[admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 setstats -on [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 getall -sp Server IP Address: 192.168.1.100 Agent Rev: 7.32.26 (0.95) SP Information -------------- Storage Processor: SP A Storage Processor Network Name: A-IMAGE Storage Processor IP Address: 192.168.1.100 Storage Processor Subnet Mask: 255.255.255.0 Storage Processor Gateway Address: 192.168.1.254 Storage Processor IPv6 Mode: Not Supported Management Port Settings: Link Status: Link-Up Current Speed: 1000Mbps/full duplex Requested Speed: Auto Auto-Negotiate: YES Capable Speeds: 1000Mbps half/full duplex 10Mbps half/full duplex 100Mbps half/full duplex Auto System Fault LED: OFF Statistics Logging: ON <---NOTE that statistics Logging is now ON. SP Read Cache State Enabled SP Write Cache State Enabled Max Requests: N/A Average Requests: N/A Hard errors: N/A Total Reads: 1012 Total Writes: 8871 Prct Busy: 6.98 Prct Idle: 93.0 System Date: 10/04/2013 Day of the week: Friday System Time: 11:23:48 Read_requests: 1012 Write_requests: 8871 Blocks_read: 26259 Blocks_written: 235896 Sum_queue_lengths_by_arrivals: 27398 Arrivals_to_non_zero_queue: 3649 ....
- Once this command runs successfully, you are ready to set the access credentials for your device in FortiSIEM and initiate the discovery process.
Settings for Access Credentials
Set these Access Method Definition values to allow FortiSIEM to communicate with your EMC Clarion storage device over NaviSecCLI.
Setting | Value |
---|---|
Name | <set name> |
Device Type | EMC Clariion |
Access Protocol | Navisec CLI |
Use LDAP | Select to use LDAP to access directory services |
User Name | The user you configured to access NaviSecCLI |
Password | The password associated with the user |