I found a very good presentation by Oracle DBA explaining OEM 10g Architecture, Features and monitoring.
http://www.nyoug.org/Presentations/2005/oem10gr2.pdf
Tuesday, June 26, 2007
Monday, June 25, 2007
Some good articles on Asset Management
The Evolution of IT Asset Management (part 1 of 4)
http://www.swspartners.com/newsletters/tlg-jun06.pdf
The Business Requirements and Design (part 2 of 4)
http://www.swspartners.com/newsletters/tlg-aug06.pdf
ITAM Data Capture and Data Store (part 3 of 4)
http://www.swspartners.com/newsletters/tlg-feb07.pdf
subscribe to the SWS newsletter - http://www.swspartners.com/newsletters/archives.html
http://www.swspartners.com/newsletters/tlg-jun06.pdf
The Business Requirements and Design (part 2 of 4)
http://www.swspartners.com/newsletters/tlg-aug06.pdf
ITAM Data Capture and Data Store (part 3 of 4)
http://www.swspartners.com/newsletters/tlg-feb07.pdf
subscribe to the SWS newsletter - http://www.swspartners.com/newsletters/archives.html
Thursday, June 21, 2007
Open Source Monitoring Solution
Nagios -Nagios is an Open Source host, service and network monitoring program. http://www.nagios.org/
Groundwork - GroundWork Open Source solution delivers the right solution to ensure unprecedented network, system and application availability. http://www.groundworkopensource.com/
Orca - Orca is a tool useful for plotting arbitrary data from text files onto a directory on a Web server.
http://www.orcaware.com/
Splunk - Splunk is software that securely manages logs and IT data. It is search engine for IT data.
http://www.splunk.org/
Zabbix - ZABBIX offers advanced monitoring, alerting and visualisation. http://www.zabbix.com/
SNMP Informant - SNMP Informant is an innovative and enabling technology that extends and adds value to the SNMP Management of Windows operating systems. It collects low-level, mission critical performance and operational data.
http://www.snmp-informant.com/
Pandora FMS -Pandora watches systems, applications and allows you to know the status of any element of those systems.
http://pandora.sourceforge.net/en/index.php?sec=main
Zenoss- Zenoss CoreTM is an open source, enterprise-grade IT management product that delivers the functionality the IT operations teams need to effectively manage the configuration, health and performance of their networks, servers and applications through a single, integrated software package.Zenoss has First commercial open source CMDB in the market.
http://www.zenoss.com/
Snare - Snare Open Source agents provides a log collection, analysis, reporting and archival resource that is both easy to use and inexpensive.
http://www.intersectalliance.com/
Netdisco - Netdisco is an Open Source web-based network management tool. http://netdisco.org/
OpenSMART - Open (SourceSystem) Monitoring and Reporting Tool. http://opensmart.sourceforge.net/
Pentaho - The Pentaho BI Project provides enterprise-class reporting, analysis, dashboard, data mining and workflow capabilities that help organizations operate more efficiently and effectively.
http://www.pentaho.com/
For more Open Source monitoring tools goto sourceforge.net
http://sourceforge.net/search/?type_of_search=soft&words=monitoring
Groundwork - GroundWork Open Source solution delivers the right solution to ensure unprecedented network, system and application availability. http://www.groundworkopensource.com/
Orca - Orca is a tool useful for plotting arbitrary data from text files onto a directory on a Web server.
http://www.orcaware.com/
Splunk - Splunk is software that securely manages logs and IT data. It is search engine for IT data.
http://www.splunk.org/
Zabbix - ZABBIX offers advanced monitoring, alerting and visualisation. http://www.zabbix.com/
SNMP Informant - SNMP Informant is an innovative and enabling technology that extends and adds value to the SNMP Management of Windows operating systems. It collects low-level, mission critical performance and operational data.
http://www.snmp-informant.com/
Pandora FMS -Pandora watches systems, applications and allows you to know the status of any element of those systems.
http://pandora.sourceforge.net/en/index.php?sec=main
Zenoss- Zenoss CoreTM is an open source, enterprise-grade IT management product that delivers the functionality the IT operations teams need to effectively manage the configuration, health and performance of their networks, servers and applications through a single, integrated software package.Zenoss has First commercial open source CMDB in the market.
http://www.zenoss.com/
Snare - Snare Open Source agents provides a log collection, analysis, reporting and archival resource that is both easy to use and inexpensive.
http://www.intersectalliance.com/
Netdisco - Netdisco is an Open Source web-based network management tool. http://netdisco.org/
OpenSMART - Open (SourceSystem) Monitoring and Reporting Tool. http://opensmart.sourceforge.net/
Pentaho - The Pentaho BI Project provides enterprise-class reporting, analysis, dashboard, data mining and workflow capabilities that help organizations operate more efficiently and effectively.
http://www.pentaho.com/
For more Open Source monitoring tools goto sourceforge.net
http://sourceforge.net/search/?type_of_search=soft&words=monitoring
Wednesday, June 20, 2007
Forrester’s Definition Of A CMDB
Forrester defines a CMDB as a fundamental component of the information technology infrastructurelibrary (ITIL) framework that provides a unified repository of data about configuration items (CI) — any system component with configurable attributes — and describes the relationships between those CIs. From this, we can derive the main characteristics of a CMDB:
A CMDB is a repository of information about all configurable IT components. This repository should include all the physical, logical, and human elements used in the production of IT services.
A CMDB component has configuration attributes. Configuration attributes are all the parameters that determine the behavior of a component during production. They could be characterized as physical, logical, organizational, or financial.
A CMDB contains component relationships. The components are linked together to provide a service, and it is the service that links these components to the business process.The service may be as simple as an application, but it may also include several applicationsthat are logically grouped to provide a complete service to support the business process.
A CMDB is a fundamental component of the ITIL framework. All information recorded inthe CMDB exists solely to support the information technology service management (ITSM) processes described by ITIL. Therefore, a complete CMDB contains information dictated byITIL. Because its content is guided by ITIL, building a CMDB must start with the management process to the CI, the CI attributes, and its relationships to other CIs.
For more information on Forrester’s Definition Of A CMDB please refer to the following document -
http://www.bmc.com/USA/Corporate/attachments/TEI_CMDB_FINAL_Case_Study_to_BMC-USA_Version_12-27-06.pdf
A CMDB is a repository of information about all configurable IT components. This repository should include all the physical, logical, and human elements used in the production of IT services.
A CMDB component has configuration attributes. Configuration attributes are all the parameters that determine the behavior of a component during production. They could be characterized as physical, logical, organizational, or financial.
A CMDB contains component relationships. The components are linked together to provide a service, and it is the service that links these components to the business process.The service may be as simple as an application, but it may also include several applicationsthat are logically grouped to provide a complete service to support the business process.
A CMDB is a fundamental component of the ITIL framework. All information recorded inthe CMDB exists solely to support the information technology service management (ITSM) processes described by ITIL. Therefore, a complete CMDB contains information dictated byITIL. Because its content is guided by ITIL, building a CMDB must start with the management process to the CI, the CI attributes, and its relationships to other CIs.
For more information on Forrester’s Definition Of A CMDB please refer to the following document -
http://www.bmc.com/USA/Corporate/attachments/TEI_CMDB_FINAL_Case_Study_to_BMC-USA_Version_12-27-06.pdf
Tuesday, June 19, 2007
Event IDs to be monitored on DC
Event ID: 513
Source Security
Type Success Audit
Description Windows NT is shutting down. All logon sessions will be terminated by this shutdown.
Comments Event generated when Windows NT is shutting down.
Event ID: 517
Source Security
Type Success Audit
Description The audit log was cleared
Primary User Name:
Primary Domain:
Primary Logon ID:
Client User Name:
Client Domain:
Client Logon ID:
Comments This event is generated when an administrator clears the event log.
Event ID: 610
Source Security
Type Success Audit
Description New Trusted Domain:
Domain Name: %1 Domain ID: %2
Established By:
User Name: %3 Domain: %4
Logon ID: %5
Comments New Trusted Domain
Event ID: 611
Source Security
Type Success Audit
Description Removing Trusted Domain:
Domain Name: %1 Domain ID: %2
Removed By:
User Name: %3 Domain: %4
Logon ID: %5
Comments Audit message for the removal of a trusted domain.
Event ID: 612
Source Security
Type Success Audit
Description Audit Policy Change:
New Policy:
Success Failure
+ + Logon/Logoff
- - Object Access
- - Privilege Use
+ + Account Management
+ + Policy Change
- -System
- -Detailed Tracking
- - Directory Service Access
++ Account Logon
Changed By:
User Name:
Domain Name:
Logon ID:
Comments Indicates that a change was made to the audit policy. The description shows the current policy. A "+" sign indicates that the policy is enable, a "-" that is disabled. For example, the following:
- + Directory Service Access
Indicates that the the successful attempts to use the directory services will not be audited (the "-") but the failures will be (the "+").
See the link to the "Auditing policies - their meaning and recommended settings" article for a description of the auditing policies.
Event ID: 643
Source Security
Type Success Audit
Description Domain Policy Changed:
Password Policy modified
Domain: CORPDOM Domain ID: %{S-1-5-21-1390850448-2335789268-393128203}
Caller User Name: APPSERVER$
Caller Domain: ALTDOMAIN
Caller Logon ID: (0x0,0x3E7)
Privileges:
Comments This event normally indicates a successful change to the Windows AD security policies. However, this also is recorded when the Group Policies are applied (event id 1704 would indicate a successful application of Group Policies). As per a newsgroup posting of a Microsoft intrusion detection engineer, this is "normal behavior" for Windows .
From a newsgroup post: "Group policy is applied every 16 hours by default. If you have set any of the "security options" in a policy from the domain, then expect to see this event when those options are set".
Source Security
Type Success Audit
Description Windows NT is shutting down. All logon sessions will be terminated by this shutdown.
Comments Event generated when Windows NT is shutting down.
Event ID: 517
Source Security
Type Success Audit
Description The audit log was cleared
Primary User Name:
Primary Domain:
Primary Logon ID:
Client User Name:
Client Domain:
Client Logon ID:
Comments This event is generated when an administrator clears the event log.
Event ID: 610
Source Security
Type Success Audit
Description New Trusted Domain:
Domain Name: %1 Domain ID: %2
Established By:
User Name: %3 Domain: %4
Logon ID: %5
Comments New Trusted Domain
Event ID: 611
Source Security
Type Success Audit
Description Removing Trusted Domain:
Domain Name: %1 Domain ID: %2
Removed By:
User Name: %3 Domain: %4
Logon ID: %5
Comments Audit message for the removal of a trusted domain.
Event ID: 612
Source Security
Type Success Audit
Description Audit Policy Change:
New Policy:
Success Failure
+ + Logon/Logoff
- - Object Access
- - Privilege Use
+ + Account Management
+ + Policy Change
- -System
- -Detailed Tracking
- - Directory Service Access
++ Account Logon
Changed By:
User Name:
Domain Name:
Logon ID:
Comments Indicates that a change was made to the audit policy. The description shows the current policy. A "+" sign indicates that the policy is enable, a "-" that is disabled. For example, the following:
- + Directory Service Access
Indicates that the the successful attempts to use the directory services will not be audited (the "-") but the failures will be (the "+").
See the link to the "Auditing policies - their meaning and recommended settings" article for a description of the auditing policies.
Event ID: 643
Source Security
Type Success Audit
Description Domain Policy Changed:
Password Policy modified
Domain: CORPDOM Domain ID: %{S-1-5-21-1390850448-2335789268-393128203}
Caller User Name: APPSERVER$
Caller Domain: ALTDOMAIN
Caller Logon ID: (0x0,0x3E7)
Privileges:
Comments This event normally indicates a successful change to the Windows AD security policies. However, this also is recorded when the Group Policies are applied (event id 1704 would indicate a successful application of Group Policies). As per a newsgroup posting of a Microsoft intrusion detection engineer, this is "normal behavior" for Windows .
From a newsgroup post: "Group policy is applied every 16 hours by default. If you have set any of the "security options" in a policy from the domain, then expect to see this event when those options are set".
For more information on windows event ID's please refer to http://eventid.net/
Sybase MDA Tables
Monitoring tables (also known as MDA tables) are available in Adaptive Server version 12.5.x and later. So what does the MDA stand for "Monitoring Data Access” / “Monitoring and Diagnostics for ASE” / “Monitoring and Diagnostic Access" / “Monitoring and Diagnostic API. MDA tables are nothing but proxy tables in master database. There are approximately 35 mda tables. All starting with mon prefix. These tables can be accessed with regular SQL select statements. MDA tables provides low-level monitoring information which were not previously available like #logical I/Os for each process,SQL 'stacktrace' (stored proc/trigger call stack), cache usage details per table etc.
for more information on mda tables goto http://www.sybase.com or refer to Rob Verschoor web page - http://www.sypron.nl/main.html
for more information on mda tables goto http://www.sybase.com or refer to Rob Verschoor web page - http://www.sypron.nl/main.html
Subscribe to:
Posts (Atom)
