Managing and Monitoring Data Collection > EMC Isilon Data Collector Policy
   
Version 9.1
EMC Isilon Data Collector Policy
Before adding the policy: A Data Collector must exist in the Portal, to which you will add Data Collector Policies. See Adding/Editing Data Collectors. For specific prerequisites and supported configurations, see Prerequisites for Data Collector Deployment and the APTARE StorageConsole 9.1 Certified Configurations Guide.
Additional Isilon-specific configuration prerequisites are provided in the following sections.
Prerequisite: Configure the Isilon SNMP Service
Prerequisite: Configure Isilon Sudo Access
1. Once the above prerequisite settings have been configured, go to the Portal and select Admin > Data Collection > Collectors.
The list of currently configured Portal Data Collectors is displayed.
2. Select a Data Collector from the list.
3. Click Add, and then select EMC Isilon.
4. Enter or select the parameters. Mandatory parameters are denoted by an asterisk (*):
:
Field
Description
Sample Value
Domain
The domain identifies the top level of your host group hierarchy. The name was supplied during the installation process. All newly discovered hosts are added to the root host group associated with this domain. Typically, only one Domain will be available in the drop-down list.
If you are a Managed Services Provider, each of your customers will have a unique domain with its own host group hierarchy.
To find your Domain name, in the menu list at the left of the Portal window, click Admin > Hosts and Domains > Domains to view the list.
yourdomain
Cluster Addresses*
Enter the external address of a single node within each EMC Isilon cluster.
 
User ID and Password*
SSH User ID and password for accessing the EMC Isilon cluster.
 
Cluster Details Schedule
Click the clock icon to create a schedule. Every Minute, Hourly, Daily, Weekly, and Monthly schedules may be created. Relative schedules are relative to when the Data Collector is restarted. Advanced use of native CRON strings is also available.
Examples of CRON expressions:
*/30 * * * * means every 30 minutes
*/20 9-18 * * * means every 20 minutes between the hours of 9am and 6pm
*/10 * * * 1-5 means every 10 minutes Mon - Fri.
Every day at 03:01
Cluster Performance Schedule
Check the checkbox to activate cluster performance collection to populate performance metrics for EMC Isilon clusters.
 
Click the clock icon to create a schedule. Every Minute, Hourly, Daily, Weekly, and Monthly schedules may be created. Relative schedules are relative to when the Data Collector is restarted. Advanced use of native CRON strings is also available.
Examples of CRON expressions:
*/30 * * * * means every 30 minutes
*/20 9-18 * * * means every 20 minutes between the hours of 9am and 6pm
*/10 * * * 1-5 means every 10 minutes Mon - Fri.
Every 15 minutes
5. Click OK to save the policy.
6. On the Data Collector server, install/update the Data Collector software.
Prerequisite: Configure the Isilon SNMP Service
***Required Configuration for Isilon Data Collection***
The Isilon Data Collector requires the Isilon SNMP service to be running. SNMP data is collected using the sudo snmpbulkwalk command in an SSH session. This does not require any additional ports to be opened for SNMP.
1. In the Isilon administrative web interface, Access Management/Users, select Cluster Management > SNMP Monitoring to enable/configure SNMP. Note that the SNMP configuration is specific to an SNMP version.
2. Configure SNMP using the following tables to determine the protocol access required for your environment. Be sure to click Submit on the SNMP Monitoring page to save your configuration.
SNMP v1 and v2c only
Enable access:
If SNMP v2c is allowed, then the read-only community string must be set.
 
SNMP v1, v2c, and v3
Enable access:
When SNMP v2c is allowed, the read-only community string must be set.
When SNMP v3 is allowed, the read-only user and SNMP v3 password must both be set. The SNMP password for Isilon must be at least 8 characters long.
 
SNMP v3 is allowed, but SNMP v2c is not allowed
Enable access.
When SNMP v3 is allowed, the read-only user and SNMP v3 password must both be set. The the SNMP password for Isilon must be at least 8 characters long.
The following additional configuration is required at the command line, on each cluster node that is configured in the Data Collector policy.
1. Log in to the node as root and change to the root user home directory.
# cd /root
2. Create the .snmp directory and make it accessible only to the root user.
# mkdir .snmp
# chmod 700 .snmp
# ls -ld .snmp
drwx------ 2 root 512 Sep 18 15:00 .snmp
3. Modify or create.snmp/snmp.conf, using nano or another editor, to add the following line, replacing <snmp v3 password> with the password entered in the SNMP v3 Settings.
defAuthPassphrase <snmp v3 password>
4. Save .snmp/snmp.conf and make it accessible only to the root user.
# chmod 600 .snmp/snmp.conf
# ls -l .snmp/
total 1
-rw------- 1 root 129 Sep 18 15:02 snmp.conf
 
 
Prerequisite: Configure Isilon Sudo Access
***Optional Configuration for Isilon Data Collection***
Collection of Isilon data requires root privileges. If your security requirements require sudo access to provide temporary, elevated privileges, use the instructions in this section.
The commands in this section are for Isilon OneFS v7.0. Verify command pathnames if using subsequent versions.
1. Using the Isilon administrative web interface, Access Management/Users, create a local user on the Isilon cluster, similar to the details shown in the following example.
2. Log in to any node of the cluster as root.
3. At the command line, grant this new user AuditAdmin privileges to enable SSH access to the cluster.
# isi auth roles modify AuditAdmin --add-user aptare
Create a Drop-In Sudoers File
Create a drop-in sudoers file in the correct directory to restrict the commands that this user can execute.
1. Configure visudo to modify the sudoers file. visudo will use the editor specified in the $EDITOR variable, or vi, by default.
Specify your desired editor. For example, to use nano as your editor, execute the following:
# export EDITOR=nano
2. Once your desired editor is configured, execute the following command to edit the sudoers file.
# visudo -f /usr/local/etc/sudoers.d/aptare
3. Add the following lines to the sudoers file, substituting the name of the user you created for <username>.
<username> ALL=(ALL) NOPASSWD: /usr/local/bin/snmpbulkwalk, \
/usr/bin/isi, /usr/bin/isi_for_array, /usr/bin/isi_hw_status
4. Save the sudoers file.