Automatic Event Handling no e-mails

[Andrew_Haak]

One tip,

Change the snmp community for the ams servers, use that community for the other tool and don't tell SIM this new community or better allow only the other tool access to the windows SNMP. Default community SIM uses is Public so if you don't use that SIM can't login. These settings can be replicated to the AMS servers using the replicate funtion in SIM. Also remove the server first from SIM and readd then again.

[Bob Zabaga]

Alright, thanks.

Hey, do you see any point in scheduling "Discovery" jobs to run on a regular basis?

I'd think once your servers have been discovered, there's no point it doing that repeatedly...well not in my case anyway.

I guess maybe if you're unaware of other people or departments putting up servers, this would find them if you discovered by an IP range.

Whoever initially configured our Discovery jobs just put all the host names in the list of servers to discover.

So I don't see why that would be ran on a regular weekly basis.

If I ever add a server or servers, I typically would make a new discovery task for it.

See my screenshot. I think I should take these off of a regular schedule.

...this has gotten a bunch off the original topic! If you think I should start a new post I can.

What are your thoughts on the discovery jobs?

-bob

[Andrew_Haak]

Hello again Bob,

i've also disabled the sheduled discovery. If you scan whole subnets you might irritate other colleges with the logging the scans cause. If you have blade servers, most servers will get added because the enclosure adds them. On DL servers you could run a scan every x times depending on the changes in the datacenter.

I did export the types of servers OS and put them in separate discovery job. Just as a disaster measurement.

An other advantage to having separate discovery jobs is that you can leave the general protocol settings to SNMP public & Public only. This setup prevents all credentials to be used on all objects.

The only disadvantage is that you need to add objects using the discovery jobs so per OS type.

[Bob Zabaga]

Hi Andrew.

On the G8 and G9 machines, where I've configured AMS on the iLO port, I still have standard monitors set up on those servers too. So the G8 and G9 also have standard SNMP & Ping in addition to the iLO AMS monitor. 

See screenshot. You were saying I should just use iLO/AMS and not use both.  

What's the best method to tell HP SIM not to do the plain SNMP and Ping anymore.  I don't want to make changes at the servers themselves, just in HP SIM.  Should I keep ping? I don't see PING as an option via iLO AMS. Maybe I should keep that.  I was looking for somewhere where I could select these G8/G9 servers one by one and tell SIM not to monitor with standard SNMP anymore, since I set up iLO/AMS. THANKS!

I can pick "Options -> Suspend Monitoring" on the server itself and just let the iLO alone. See 2nd screenshot. Is that a good way to just use iLO/AMS?

-Bob

[Andrew_Haak]

Hello Bob,

If you want SIM to stop using SN M P for it's gen8 or higher servers you can do two things:

Configure the SNMP on the Gen8 and higher server not to allow the SIM server access the SNMP. This can be done by setting one server to allow only localhost and not the SIM server exporting this registry and importing it on your gen8 and higher servers(if you have it run the registry patch from a deploytool or use powershell ). You can also create a gpo for a seperate OU where you put the gen8 or higher servers in and set the SNMP settings.

The other option would be to use seperate communities for gen8 and higher and other servers. The community for the gen8 and higher. If this is done don't set this community in the general settings so SIM won't pick it up and use the community for any other tool that you use SNMP for.

If possible i would recommend not to use public or Public for servers as they are used by devices like switches and you do need these. 

[Bob Zabaga]

Thanks again. With the G8/G9 where I'm using iLO/AMS monitoring, I'm going to go with the "suspend monitoring" option and see how that goes. -Bob

[Andrew_Haak]

Hello Bob,

i would not do that if i where you. At least check if you send a test SNMP allert from the ILO if the event is mapped to the disabled server. This should happen if you configured the ILO to send as the systemname instead of the iloname.

If things are not clear let me know because i would think disabled de ices are not monitored certainly if they are disabled.

Devices almost always use public or Public, if servers also use these communities you can expert problems if you want to monitor devices but don't want to monitor gen8 and above. Do you know how to configure SNMP in Windows? To ne specific the security setting ego mag read the SNMP remote? Normal is localhost and your SIM server, but not for grn8 and above.

When you have gen8 and above you need to create separate jobs for Windows and other servers. The general settings need to be as clean as can be. Perhaps you should only have the common public & Public SNMP community settings. If you don't servers will pick-up the general SNMP and/or WBEM settings.