Fortinet black logo

External Systems Configuration Guide

EMC Clarion Storage

EMC Clariion Storage

What is Discovered and Monitored

Protocol

Information Discovered

Metrics collected

Used for

NaviSecCLI

Host name, Operating system version, Hardware model, Serial number, Network interfaces* Installed Software, Storage Controller Ports

Hardware components: Enclosures, Fan, Power Supply, Link Control Card, CPU, Disk

RAID Groups and the assigned disk

LUNs and LUN -> RAID Group mappings

Storage Groups and memberships (Host, Port, LUN).

Processor utilization: SP Name, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

Port I/O: Port name, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

RAID Group I/O: RAID Group id, RAID type, Total disk, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

LUN I/O: LUN name, LUN id, Total disk, Used disk, Free disk, Disk util, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

Host HBA Connectivity: Source IP, Source Name, Source WWN, Dest IP, Destination Name, SP Port Name, Storage Group, LUN Names, Login Status, Registration Status

Host HBA Unregistered Host: Source IP, Source Name, Source WWN, Dest IP, Destination Name, SP Port Name

Hardware component health: Component name (Disk, Power supply, LCC, Fan, Link, Port), Component status, Host spare ready disk count

Overall Disk health: Total disk count, Total disk size (MB), Active disk count, Failed disk count, Spare disk count

Availability and Performance Monitoring

Event Types

In ADMIN > Device Support > Event Types, search for "clariion" to see the event types associated with this device.

Rules

There are no predefined rules for this device.

Reports

There are no predefined reports for this device.

Configuration

Installing the NaviSecCLI Library in FortiSIEM

Changing NaviSecCLI Credentials

If you change the NaviSecCLI credentials on your EMC Clariion device, the certificates may also be changed and naviseccli may prompt you to accept new certificates. This should only happen the first time after a certificate change, however, FortiSIEM discovery and performance monitoring will fail. You must run NaviSecCLI manually on each Supervisor and Worker in your deployment and accept the certificate, and then rediscover your EMC Clariion device for performance monitoring to resume.

Configuration of your EMC Clariion storage device involves installing EMC's NaviSecCLI library in your FortiSIEM virtual appliance, and then setting the access credentials that the appliance will use to communicate with your device.

  1. Log in to your FortiSIEM virtual appliance as root.
  2. Copy the file NaviCLI-Linux-64-x86-versionxyz.rpm to the FortiSIEM directory.
  3. Run rpm --Uvh NaviCLI-Linux-64-x86-versionxyz.rpm to install the rpm package.
    [root@Rob-SP-94 tmp]# rpm -Uvh NaviCLI-Linux-64-x86-en_US-7.30.15.0.44-1.x86_64.rpm
    Preparing... ########################################### [100%]
    1:NaviCLI-Linux-64-x86-en########################################### [100%]
    Please enter the verifying level(low|medium|l|m) to set?
    m
    Setting medium verifying level
    [root@Rob-SP-94 opt]# ls -la
    total 40
    drwxr-xr-x 8 root root 4096 Aug 22 16:06 .
    drwxr-xr-x 29 root root 4096 Aug 16 16:46 ..
    drwxr-xr-x 11 admin admin 4096 Jul 23 18:56 glassfish
    lrwxrwxrwx 1 root root 16 Aug 16 16:46 Java -> /opt/jdk1.6.0_32
    drwxr-xr-x 8 root root 4096 Jun 2 16:35 jdk1.6.0_32
    drwxr-xr-x 5 root root 4096 Aug 22 16:06 Navisphere <----Note this directory was created***
    drwxrwxr-x 14 admin admin 4096 Jul 24 11:22 phoenix
    drwxrwxr-x 3 root root 4096 Jun 2 16:36 rpm
    drwxr-xr-x 8 root root 4096 Jun 18 2010 vmware
    [root@Rob-SP-94 opt]#
  4. Change the user role to the admin su - admin and make sure that the user can run the command naviseccli -h -User <user> -Password <pwd> -Scope global getall -sp from the directory /opt/phoenix/bin .
    [root@Rob-SP-94 Navisphere]# cd bin
    [root@Rob-SP-94 bin]# su - admin
    [admin@Rob-SP-94 ~]$ naviseccli
    Not enough arguments
    Usage:
    [-User <username>] [-Password <password>]
    [-Scope <0 - global; 1 - local; 2 - LDAP>]
    [-Address <IPAddress | NetworkName> | -h <IPAddress | NetworkName>]
    [-Port <portnumber>] [-Timeout <timeout> | -t <timeout>]
    [-AddUserSecurity | -RemoveUserSecurity | -DeleteSecurityEntry]
    [-Parse | -p] [-NoPoll | -np] [-cmdtime]
    [-Xml] [-f <filename>] [-Help] CMD <Optional Arguments>[security -certificate]
    [admin@Rob-SP-94 ~]$ pwd
    /opt/phoenix/bin
  5. Make sure that the Navisphere Analyzer module is on.
    If the module is off, performance metrics will not be available and discovery will fail. This log shows an example of the module being turned off.
    [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 getall -sp
    Server IP Address:       192.168.1.100
    Agent Rev:           7.32.26 (0.95)
    SP Information
    --------------
    Storage Processor:                  SP A
    Storage Processor Network Name:     A-IMAGE
    Storage Processor IP Address:       192.168.1.100
    Storage Processor Subnet Mask:      255.255.255.0
    Storage Processor Gateway Address:  192.168.1.254
    Storage Processor IPv6 Mode:               Not Supported
    Management Port Settings:
    Link Status:                        Link-Up
    Current Speed:                      1000Mbps/full duplex
    Requested Speed:                    Auto
    Auto-Negotiate:                     YES
    Capable Speeds:                     1000Mbps half/full duplex
                                        10Mbps half/full duplex
                                        100Mbps half/full duplex
                                        Auto
    System Fault LED:              OFF
    Statistics Logging:            OFF    <----- Note: performance statistics are not being collected
                                          <------ so AccelOp can not pull stats and discovery will fail.
                                          <------ See how to turn ON Statistics Logging below.
    SP Read Cache State            Enabled
    SP Write Cache State           Enabled
    ....
  6. If the Navisphere Analyzer module is off, turn it on with the setstats -on command.
    [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 setstats -on
    [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 getall -sp
    
    Server IP Address:       192.168.1.100
    Agent Rev:           7.32.26 (0.95)
     
    SP Information
    --------------
    Storage Processor:                  SP A
    Storage Processor Network Name:     A-IMAGE
    Storage Processor IP Address:       192.168.1.100
    Storage Processor Subnet Mask:      255.255.255.0
    Storage Processor Gateway Address:  192.168.1.254
    Storage Processor IPv6 Mode:               Not Supported
    Management Port Settings:
    Link Status:                        Link-Up
    Current Speed:                      1000Mbps/full duplex
    Requested Speed:                    Auto
    Auto-Negotiate:                     YES
    Capable Speeds:                     1000Mbps half/full duplex
                                        10Mbps half/full duplex
                                        100Mbps half/full duplex
                                        Auto
    System Fault LED:              OFF
    Statistics Logging:            ON   <---NOTE that statistics Logging is now ON.
    SP Read Cache State            Enabled
    SP Write Cache State           Enabled
    Max Requests:                  N/A
    Average Requests:              N/A
    Hard errors:                   N/A
    Total Reads:                   1012
    Total Writes:                  8871
    Prct Busy:                     6.98
    Prct Idle:                     93.0
    System Date:                   10/04/2013
    Day of the week:               Friday
    System Time:                   11:23:48
    Read_requests:                 1012
    Write_requests:                8871
    Blocks_read:                   26259
    Blocks_written:                235896
    Sum_queue_lengths_by_arrivals: 27398
    Arrivals_to_non_zero_queue:    3649
    ....
  7. Once this command runs successfully, you are ready to set the access credentials for your device in FortiSIEM and initiate the discovery process.

Settings for Access Credentials

Set these Access Method Definition values to allow FortiSIEM to communicate with your EMC Clariion storage device over NaviSecCLI.

SettingValue
Name<set name>
Device Type EMC Clariion
Access ProtocolNavisec CLI
Use LDAPSelect to use LDAP to access directory services
User NameThe user you configured to access NaviSecCLI
PasswordThe password associated with the user

EMC Clariion Storage

What is Discovered and Monitored

Protocol

Information Discovered

Metrics collected

Used for

NaviSecCLI

Host name, Operating system version, Hardware model, Serial number, Network interfaces* Installed Software, Storage Controller Ports

Hardware components: Enclosures, Fan, Power Supply, Link Control Card, CPU, Disk

RAID Groups and the assigned disk

LUNs and LUN -> RAID Group mappings

Storage Groups and memberships (Host, Port, LUN).

Processor utilization: SP Name, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

Port I/O: Port name, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

RAID Group I/O: RAID Group id, RAID type, Total disk, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

LUN I/O: LUN name, LUN id, Total disk, Used disk, Free disk, Disk util, Read request rate (IOPS), Write request rate (IOPS), Read volume (KBps), Write volume (KBps), Read/Write request rate (IOPS), Read/Write volume (KBps)

Host HBA Connectivity: Source IP, Source Name, Source WWN, Dest IP, Destination Name, SP Port Name, Storage Group, LUN Names, Login Status, Registration Status

Host HBA Unregistered Host: Source IP, Source Name, Source WWN, Dest IP, Destination Name, SP Port Name

Hardware component health: Component name (Disk, Power supply, LCC, Fan, Link, Port), Component status, Host spare ready disk count

Overall Disk health: Total disk count, Total disk size (MB), Active disk count, Failed disk count, Spare disk count

Availability and Performance Monitoring

Event Types

In ADMIN > Device Support > Event Types, search for "clariion" to see the event types associated with this device.

Rules

There are no predefined rules for this device.

Reports

There are no predefined reports for this device.

Configuration

Installing the NaviSecCLI Library in FortiSIEM

Changing NaviSecCLI Credentials

If you change the NaviSecCLI credentials on your EMC Clariion device, the certificates may also be changed and naviseccli may prompt you to accept new certificates. This should only happen the first time after a certificate change, however, FortiSIEM discovery and performance monitoring will fail. You must run NaviSecCLI manually on each Supervisor and Worker in your deployment and accept the certificate, and then rediscover your EMC Clariion device for performance monitoring to resume.

Configuration of your EMC Clariion storage device involves installing EMC's NaviSecCLI library in your FortiSIEM virtual appliance, and then setting the access credentials that the appliance will use to communicate with your device.

  1. Log in to your FortiSIEM virtual appliance as root.
  2. Copy the file NaviCLI-Linux-64-x86-versionxyz.rpm to the FortiSIEM directory.
  3. Run rpm --Uvh NaviCLI-Linux-64-x86-versionxyz.rpm to install the rpm package.
    [root@Rob-SP-94 tmp]# rpm -Uvh NaviCLI-Linux-64-x86-en_US-7.30.15.0.44-1.x86_64.rpm
    Preparing... ########################################### [100%]
    1:NaviCLI-Linux-64-x86-en########################################### [100%]
    Please enter the verifying level(low|medium|l|m) to set?
    m
    Setting medium verifying level
    [root@Rob-SP-94 opt]# ls -la
    total 40
    drwxr-xr-x 8 root root 4096 Aug 22 16:06 .
    drwxr-xr-x 29 root root 4096 Aug 16 16:46 ..
    drwxr-xr-x 11 admin admin 4096 Jul 23 18:56 glassfish
    lrwxrwxrwx 1 root root 16 Aug 16 16:46 Java -> /opt/jdk1.6.0_32
    drwxr-xr-x 8 root root 4096 Jun 2 16:35 jdk1.6.0_32
    drwxr-xr-x 5 root root 4096 Aug 22 16:06 Navisphere <----Note this directory was created***
    drwxrwxr-x 14 admin admin 4096 Jul 24 11:22 phoenix
    drwxrwxr-x 3 root root 4096 Jun 2 16:36 rpm
    drwxr-xr-x 8 root root 4096 Jun 18 2010 vmware
    [root@Rob-SP-94 opt]#
  4. Change the user role to the admin su - admin and make sure that the user can run the command naviseccli -h -User <user> -Password <pwd> -Scope global getall -sp from the directory /opt/phoenix/bin .
    [root@Rob-SP-94 Navisphere]# cd bin
    [root@Rob-SP-94 bin]# su - admin
    [admin@Rob-SP-94 ~]$ naviseccli
    Not enough arguments
    Usage:
    [-User <username>] [-Password <password>]
    [-Scope <0 - global; 1 - local; 2 - LDAP>]
    [-Address <IPAddress | NetworkName> | -h <IPAddress | NetworkName>]
    [-Port <portnumber>] [-Timeout <timeout> | -t <timeout>]
    [-AddUserSecurity | -RemoveUserSecurity | -DeleteSecurityEntry]
    [-Parse | -p] [-NoPoll | -np] [-cmdtime]
    [-Xml] [-f <filename>] [-Help] CMD <Optional Arguments>[security -certificate]
    [admin@Rob-SP-94 ~]$ pwd
    /opt/phoenix/bin
  5. Make sure that the Navisphere Analyzer module is on.
    If the module is off, performance metrics will not be available and discovery will fail. This log shows an example of the module being turned off.
    [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 getall -sp
    Server IP Address:       192.168.1.100
    Agent Rev:           7.32.26 (0.95)
    SP Information
    --------------
    Storage Processor:                  SP A
    Storage Processor Network Name:     A-IMAGE
    Storage Processor IP Address:       192.168.1.100
    Storage Processor Subnet Mask:      255.255.255.0
    Storage Processor Gateway Address:  192.168.1.254
    Storage Processor IPv6 Mode:               Not Supported
    Management Port Settings:
    Link Status:                        Link-Up
    Current Speed:                      1000Mbps/full duplex
    Requested Speed:                    Auto
    Auto-Negotiate:                     YES
    Capable Speeds:                     1000Mbps half/full duplex
                                        10Mbps half/full duplex
                                        100Mbps half/full duplex
                                        Auto
    System Fault LED:              OFF
    Statistics Logging:            OFF    <----- Note: performance statistics are not being collected
                                          <------ so AccelOp can not pull stats and discovery will fail.
                                          <------ See how to turn ON Statistics Logging below.
    SP Read Cache State            Enabled
    SP Write Cache State           Enabled
    ....
  6. If the Navisphere Analyzer module is off, turn it on with the setstats -on command.
    [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 setstats -on
    [admin@accelops ~]$ naviseccli -user admin -password admin*1 -scope 0 -h 192.168.1.100 getall -sp
    
    Server IP Address:       192.168.1.100
    Agent Rev:           7.32.26 (0.95)
     
    SP Information
    --------------
    Storage Processor:                  SP A
    Storage Processor Network Name:     A-IMAGE
    Storage Processor IP Address:       192.168.1.100
    Storage Processor Subnet Mask:      255.255.255.0
    Storage Processor Gateway Address:  192.168.1.254
    Storage Processor IPv6 Mode:               Not Supported
    Management Port Settings:
    Link Status:                        Link-Up
    Current Speed:                      1000Mbps/full duplex
    Requested Speed:                    Auto
    Auto-Negotiate:                     YES
    Capable Speeds:                     1000Mbps half/full duplex
                                        10Mbps half/full duplex
                                        100Mbps half/full duplex
                                        Auto
    System Fault LED:              OFF
    Statistics Logging:            ON   <---NOTE that statistics Logging is now ON.
    SP Read Cache State            Enabled
    SP Write Cache State           Enabled
    Max Requests:                  N/A
    Average Requests:              N/A
    Hard errors:                   N/A
    Total Reads:                   1012
    Total Writes:                  8871
    Prct Busy:                     6.98
    Prct Idle:                     93.0
    System Date:                   10/04/2013
    Day of the week:               Friday
    System Time:                   11:23:48
    Read_requests:                 1012
    Write_requests:                8871
    Blocks_read:                   26259
    Blocks_written:                235896
    Sum_queue_lengths_by_arrivals: 27398
    Arrivals_to_non_zero_queue:    3649
    ....
  7. Once this command runs successfully, you are ready to set the access credentials for your device in FortiSIEM and initiate the discovery process.

Settings for Access Credentials

Set these Access Method Definition values to allow FortiSIEM to communicate with your EMC Clariion storage device over NaviSecCLI.

SettingValue
Name<set name>
Device Type EMC Clariion
Access ProtocolNavisec CLI
Use LDAPSelect to use LDAP to access directory services
User NameThe user you configured to access NaviSecCLI
PasswordThe password associated with the user