s i # s316978session # s316978 oracle enterprise manager ...€¦ · oracle enterprise manager...
Post on 20-Apr-2018
251 Views
Preview:
TRANSCRIPT
S i # S316978Session # S316978Oracle Enterprise ManagerConfiguration Management Unleashed: Top 10 Expert TipsSudip Datta & Andy Oppenheim Gregg GrimesSudip Datta & Andy OppenheimEnterprise Manager, Product ManagementOracle Corporation
Gregg GrimesDatabase Management PracticesDell
Safe Harbor Statement
The following is intended to outline our general g gproduct direction. It is intended for information purposes only, and may not be incorporated into any
t t It i t it t t d licontract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making a purchasing decision. The e ed upo a g a pu c as g dec s o edevelopment, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.
© 2010 Oracle Corporation 22
Oracle Enterprise ManagerSession #S3116978Sess o #S3 69 8
Configuration Management Unleashed: Top 10 E pert TipsTop 10 Expert TipsConfiguration Management is probably one of Enterprise Manager’s best kept secrets. This immensely powerful functionality enables you to keep tabs on hardware softwarefunctionality enables you to keep tabs on hardware, software and application configurations across your entire datacenter, and helps resolve a number of really difficult problems, including tracking drift from gold standards, auditing
fi ti h d t ti d l i fconfiguration changes, detecting and resolving performance issues resulting from configuration changes. This must-attend session will outline the top 10 ways Oracle Enterprise Manager configuration management functionality willEnterprise Manager configuration management functionality will allow you to become a hero – and boost your career – by quickly resolving complex problems.
© 2010 Oracle Corporation 33
Program Agenda
<Insert Picture Here>• Configuration Management:– Asset Discovery– Drift Analysis– Auditing and Enforcement
• Top 10 Configuration Tips– 1-5: Knowing What You Have– Detailed WalkthroughDetailed Walkthrough– 6-7: Standardizing Configurations– Detailed Walkthrough– 8-10: Auditing and Enforcement– 8-10: Auditing and Enforcement– Detailed Walkthrough
• Customer Case Study – Dell
© 2010 Oracle Corporation 5
Top 10 Configuration Tips
1. Determine how many instances at what versions are installed?
How Can I... How Can I...
2. Eliminate potential issues due to an incorrect parameter?
3. Ensure that a specific department does not own a specific hardware?specific hardware?
4. Furnish configuration and diagnostic information for faster problem resolution?
5. Ensure my system meets pre-requisites for Patch d l t?Be a deployment?
6. Compare against golden standards or baselines?7. Enforce Test and Production systems are in sync?8 Detect unauthorized configuration changes?
…Be aHERO?
8. Detect unauthorized configuration changes?9. Make sure critical patches are installed in
Production systems?10. Enforce best practices for Security and Reporting?
© 2010 Oracle Corporation 66
Oracle Enterprise ManagerConfiguration ManagementCo gu at o a age e t
Knowing What You Have
Standardizing Configurations
Configuration Compliance
Asset DiscoveryAutomated inventoryHW/SW configurations
Drift AnalysisConfiguration comparison
• Across the stack
Auditing and EnforcementReal-time configuration auditingPolicy management for SOX,
• Operating systems• Hardware• Database• Packaged apps
• Across lifecycles• Baseline & Gold
Standard• 1-to-1, 1-to-many
COBIT, etc.Out-of-the-box policiesUser-defined policiesUser-defined groups
RelationshipsConfiguration search
Drift reconciliationConfiguration search
Compliance dashboard
© 2010 Oracle Corporation 77
Top 10 Configuration Tips: How Can I...?
1. Determine how many instances at what versions are installed
2. Eliminate potential issues due to an incorrect parameter
3. Ensure that a specific department does not own a specific hardware
4. Furnish configuration and diagnostic information g gfor faster problem resolution
5. Ensure my system meets pre-requisites for Patch deployment
6 Compare against golden standards or baselines
Knowing What You HaveAsset Discovery
6. Compare against golden standards or baselines7. Enforce Test and Production systems are in sync8. Detect unauthorized configuration changes9. Make sure critical patches are installed in
• Automated Inventory• HW/SW Configurations
– Operating Systems– Hardware– Database p
Production systems10. Enforce Security and Best Practices and Reporting
– Database– Packaged Apps
• Relationships and impact analysis
• Configuration Search
© 2010 Oracle Corporation 88
Configuration Management#1, Determine How Many Instances at What Versions Are Installed
EM Home page provides an summary of all installed productssummary of all installed products and Versions
© 2010 Oracle Corporation 99
Configuration Management#1, Determine How Many Instances at What Versions Are Installed
Select any product from the drop down menu to view a summarydown menu to view a summary
© 2010 Oracle Corporation 1010
Configuration Management#1, Determine How Many Instances at What Versions Are Installed
For detailed reporting, go to the Reports TABReports TAB
© 2010 Oracle Corporation 1111
Configuration Management#1, Determine How Many Instances at What Versions Are Installed
Summary reports are also available for all portions of your Enterprise
© 2010 Oracle Corporation 1212
Configuration Management#1, Determine How Many Instances at What Versions Are Installed
For detailed reporting, go to the Reports TABReports TAB
© 2010 Oracle Corporation 1313
Configuration Management#1, Determine How Many Instances at What Versions Are Installed
For detailed reporting, go to the Reports TABReports TAB
© 2010 Oracle Corporation 1414
Configuration Management#2, Eliminate Potential Issues Due to an Incorrect Parameter
Lets go back to the EM home page and the Deployment TABand the Deployment TAB
© 2010 Oracle Corporation 1515
Configuration Management#2, Eliminate Potential Issues Due to an Incorrect Parameter
Here we have a access to a rich set of Configuration Managementof Configuration Management Features including Search
© 2010 Oracle Corporation 1616
Configuration Management#2, Eliminate Potential Issues Due to an Incorrect Parameter
In this case, lets search the init parameters for an incorrect parementer
© 2010 Oracle Corporation 1717
Configuration Management#2, Eliminate Potential Issues Due to an Incorrect Parameter
You have the ability to define your search criteria
© 2010 Oracle Corporation 1818
Configuration Management#2, Eliminate Potential Issues Due to an Incorrect Parameter
In this case, there have been issues where Production Databases had the debug set, lets make sure no Production Database has this set
© 2010 Oracle Corporation 1919
Configuration Management#2, Eliminate Potential Issues Due to an Incorrect Parameter
Note: No Databases have degug setNote: No Databases have degug set
© 2010 Oracle Corporation 2020
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
To set target properties start at the EMTo set target properties, start at the EM Home Page
© 2010 Oracle Corporation 2121
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Go to the Targets TAB and select Hosts and select the Host o ant to set theselect the Host you want to set the Properties on.
© 2010 Oracle Corporation 2222
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Once at the Host, select Target Properties
© 2010 Oracle Corporation 2323
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
To enter Target Properties, select Edit
© 2010 Oracle Corporation 2424
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Enter your information
© 2010 Oracle Corporation 2525
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Select OK when your finished
© 2010 Oracle Corporation 2626
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Your Target Properties are no associatedYour Target Properties are no associated with the Host target
© 2010 Oracle Corporation 2727
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
To search the Host Properties, start at the Deployments TABp y
© 2010 Oracle Corporation 2828
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Select the Search Feature
© 2010 Oracle Corporation 2929
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
S l t S h O ti S t P tiSelect, Search Operating System Properties Settings on Host
© 2010 Oracle Corporation 3030
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Select Line Of Business From the Drop Down to define your search criteria
© 2010 Oracle Corporation 3131
Configuration Management#3, Ensure That a Specific Department Does Not Own a Specific Hardware
Enter the Department or Line Of Business pyou want to search for, note the systems identified with the department in question
© 2010 Oracle Corporation 3232
Configuration Management#4, Furnish Configuration & Diagnostic Information for Faster Problem Resolution
New in 11.1 My Oracle Support Integration
© 2010 Oracle Corporation 3333
Configuration Management#4, Furnish Configuration & Diagnostic Information for Faster Problem Resolution
EM l I id tEM logs Incidents
© 2010 Oracle Corporation 3434
Configuration Management#4, Furnish Configuration & Diagnostic Information for Faster Problem Resolution
EM packages all relevant diagnostic information without the Admin having to know the underlying files and objects
© 2010 Oracle Corporation 3535
Configuration Management#4, Furnish Configuration & Diagnostic Information for Faster Problem Resolution
EM can file a new SR with Support and can also create a new incident in Remedy/HP/Siebelin Remedy/HP/Siebel
© 2010 Oracle Corporation 3636
Configuration Management#4, Furnish Configuration & Diagnostic Information for Faster Problem Resolution
EM can include all correlated events in the package
© 2010 Oracle Corporation 3737
Configuration Management#4, Furnish Configuration & Diagnostic Information for Faster Problem Resolution
Service Request, Error logs and Configuration Information set to OracleInformation set to Oracle
© 2010 Oracle Corporation 3838
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
EM can monitor SRsEM can monitor SRs for updates
© 2010 Oracle Corporation 3939
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
Review the SR and click on the patch recommended thereinp
© 2010 Oracle Corporation 4040
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
Review) Th B fi d i th t ha) The Bugs fixed in the patch
b) Related knowledge articlesc) The community feedbackd) Download trends
© 2010 Oracle Corporation 41
)
41
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
Add the patch to a plan. Several patches can be recursively added topatches can be recursively added to a plan to be deployed under a single downtime
© 2010 Oracle Corporation 4242
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 4343
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 4444
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 4545
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 4646
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 4747
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 4848
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
EM d l th t hEM can now deploy the patch using Deployment Procedures
© 2010 Oracle Corporation 4949
Configuration Management#5, Ensure My System Meets Pre-requisites for Patch Deployment
© 2010 Oracle Corporation 5050
Top 10 Configuration Tips: How Can I...?
1. Determine how many instances at what versions are installed
2. Eliminate potential issues due to an incorrect parameter
3. Ensure that a specific department does not own a specific hardware
4. Furnish configuration and diagnostic information g gfor faster problem resolution
5. Ensure my system meets pre-requisites for Patch deployment
6 Compare against golden standards or baselines
Standardizing ConfigurationsDrift Analysis
66. Compare against golden standards or baselines7. Enforce Test and Production systems are in sync8. Detect unauthorized configuration changes9. Make sure critical patches are installed in
• Configuration Comparison– Across the stack– Across lifecycles
B li & G ld
6.7.
pProduction systems
10. Enforce Security and Best Practices and Reporting
– Baseline & Gold Standard
– 1-to-1, 1-to-many• Drift Reconciliation
© 2010 Oracle Corporation 5151
Configuration Management#6, Compare Against a Gold Standard or Baseline
We will start at the EM Home page and compare our Gold Standardand compare our Gold Standard with a DB about to go into production
© 2010 Oracle Corporation 5252
Configuration Management#6, Compare Against a Gold Standard or Baseline
Go to the Targets TAB and select Databases. Select the Database you want to compare against a Gold Standard
© 2010 Oracle Corporation 5353
Configuration Management#6, Compare Against a Gold Standard or Baseline
At the Database target, select Software and Support and Compare Configuration
© 2010 Oracle Corporation 5454
Configuration Management#6, Compare Against a Gold Standard or Baseline
Search for your Gold Standard, select it and the Compare
© 2010 Oracle Corporation 5555
Configuration Management#6, Compare Against a Gold Standard or Baseline
You are now comparing the selected Database against the Goldselected Database against the Gold Standard
© 2010 Oracle Corporation 5656
Configuration Management#6, Compare Against a Gold Standard or Baseline
Now you can drill down into any differences
© 2010 Oracle Corporation 5757
Configuration Management#7, Enforce Test and Production systems Are in Sync
Now let’s look at the Application Configuration Console (ACC) and how it can help you eliminate configuration differences between your environmentsyour environments
© 2010 Oracle Corporation 5858
Configuration Management#7, Enforce Test and Production systems Are in Sync
ACC allows you to organize your configuration assets into views that make sense
© 2010 Oracle Corporation 5959
Configuration Management#7, Enforce Test and Production systems Are in Sync
Within your environments are layers containing the configuration assets that deliver the Services Dashboard to the enterprise.
© 2010 Oracle Corporation 6060
Configuration Management#7, Enforce Test and Production systems Are in Sync
As we drill down into the layer, we see that the WebServer layer is d li d b A h bdelivered by an Apache webserver whose configurations are stored in 2 configuration files. HTTPD.conf and admin.confand admin.conf
© 2010 Oracle Corporation 6161
Configuration Management#7, Enforce Test and Production systems Are in Sync
Expanding the Primary View for Httpd.conf, allows us to view the individual Configuration Items
© 2010 Oracle Corporation 6262
Configuration Management#7, Enforce Test and Production systems Are in Sync
ACC can compare the properties p p pwithin multiples files across multiples locations. All with a few clicks. In this case we will select the WebServer we can alsothe WebServer, we can also perform this compare at the Application Stack level
© 2010 Oracle Corporation 6363
Configuration Management#7, Enforce Test and Production systems Are in Sync
Right Click, then select Compare to g , pperform a comparison on the highlighted items
© 2010 Oracle Corporation 6464
Configuration Management#7, Enforce Test and Production systems Are in Sync
ACC provides you only the items th t diff li i ti ththat are differences, eliminating the “noise” from the results.
© 2010 Oracle Corporation 6565
Configuration Management#7, Enforce Test and Production systems Are in Sync
With just a few clicks we can tell ACC to ignore these false positives
© 2010 Oracle Corporation 6666
Configuration Management#7, Enforce Test and Production systems Are in Sync
Note that the previously highlighted port differences are no longer listed. Using this feature,are no longer listed. Using this feature, administrators can create views that quickly narrow the focus to “out of band” differences in configurations.
© 2010 Oracle Corporation 6767
Configuration Management#7, Enforce Test and Production systems are in Sync
You can also view the properties your are ignoring if needed
© 2010 Oracle Corporation 6868
Top 10 Configuration Tips: How Can I...?
1. Determine how many instances at what versions are installed
2. Eliminate potential issues due to an incorrect parameter
3. Ensure that a specific department does not own a specific hardware
4. Furnish configuration and diagnostic information g gfor faster problem resolution
5. Ensure my system meets pre-requisites for Patch deployment
6 Compare against golden standards or baselines
Configuration ComplianceAuditing andEnforcement 6. Compare against golden standards or baselines
7. Enforce Test and Production systems are in sync8. Detect unauthorized configuration changes9. Make sure critical patches are installed in
Enforcement
• Real-time configuration auditing
• Policy Management for pProduction systems
10. Enforce Security and Best Practices and Reporting
Policy Management for SOX, COBIT, etc.
• Out-of-the-box Policies• User-Defined Policies• User-Defined Groups
Compliance Dashboard
© 2010 Oracle Corporation 69
• Compliance Dashboard
69
Configuration Management#8, Detect Unauthorized Configuration Changes
Configuration Change Console (CCC) is specifically designed to meet your compliance needs
© 2010 Oracle Corporation 7070
Configuration Management#8, Detect Unauthorized Configuration Changes
Note the RED condition with one of the PCI Policies.
© 2010 Oracle Corporation 71
Lets look at the details
71
Configuration Management#8, Detect Unauthorized Configuration Changes
There is authorized and unauthorized, you can quickly drill into the details.
© 2010 Oracle Corporation 72
quickly drill into the details.
72
Configuration Management#8, Detect Unauthorized Configuration Changes
Note the Components and the activity
© 2010 Oracle Corporation 7373
Configuration Management#8, Detect Unauthorized Configuration Changes
CCC provides the detail of the detected change
© 2010 Oracle Corporation 7474
Top 10 Configuration TIps: How Can I...?
Determine how many instances at what versions are installedEliminate potential issues due to an incorrect parameterEnsure that a specific department does not own a specific hardwareFurnish configuration and diagnostic information g gfor faster problem resolutionEnsure my system meets pre-requisites for Patch deploymentCompare against golden standards or baselinesCompare against golden standards or baselinesEnforce Test and Production systems are in syncDetect unauthorized configuration changesMake sure critical patches are installed in pProduction systemsEnforce Security and Best Practices and Reporting
© 2010 Oracle Corporation 7575
Reduce Operations Costs with Automation
• Reduction in costs of
Forrester Total Economic Impact of Configuration Management
and Provisioning Packscosts of managing IT
• Increase staff productivity
• Increased agility to businessto business needs
• Reduction on capital spending 130% ROI
over 3 years
14 months payback period
© 2010 Oracle Corporation 7676
Thank You
Thank You
Be sure to attend the following session:Be sure to attend the following session:…
For more information:…
© 2010 Oracle Corporation 7878
top related