| Oracle® Enterprise Manager Cloud Control Administrator's Guide 12c Release 1 (12.1.0.1) Part Number E24473-15 |
|
|
PDF · Mobi · ePub |
| Oracle® Enterprise Manager Cloud Control Administrator's Guide 12c Release 1 (12.1.0.1) Part Number E24473-15 |
|
|
PDF · Mobi · ePub |
This chapter introduces the concept of group management and contains the following sections:
Today's IT operations can be responsible for managing a great number of components, such as databases, application servers, hosts, or other components, which can be time consuming and impossible to manage individually. The Enterprise Manager Cloud Control group management system lets you combine components (called targets in Enterprise Manager) into logical sets, called groups. This enables you to organize, manage, and effectively monitor the potentially large number of targets in your enterprise.
Enterprise Manager Groups can include:
Targets of the same type, such as:
All hosts in your data center
All of your production databases
Targets of different types, such as:
The database, application server, listener, and host that are used in your application environment
Targets operating within a particular data center region
Note:
An Enterprise Manager "System," used specifically to group the components on which a service runs, is a special kind of Enterprise Manager group. Many of the functions and capabilities for groups and systems are similar.Typically you can gather together targets that you want to manage as a group. If you use the target properties (for example, Line of Business or Deployment Type) to put operational information about your targets in Enterprise Manager, you can use these properties when creating groups to locate targets. For example, you could search for all databases of Deployment Type = Production and belonging to Line of Business 'HCM'. You can also create a group hierarchy and use nested groups.
By combining targets in a group, Enterprise Manager offers a wealth of management features that enable you to efficiently manage these targets as one group. Using the Group pages, you can:
View a summary status of the targets within the group.
Monitor outstanding alerts and incidents for the group collectively, rather than individually.
Monitor the overall performance of the group.
Perform administrative tasks, such as scheduling jobs for the entire group, or blacking out the group for maintenance periods.
You can also customize the console to provide direct access to group management pages.
When you choose Groups from the Targets menu on the Enterprise Manager menu bar, the Groups page appears. From the page you can view the currently available groups and perform the following tasks:
View a list of all the defined groups.
Search for existing groups and save search criteria for future searches.
View a roll-up of the outstanding alerts and incidents for members in a group.
Create administration groups, associate template collections, and disassociate template collections
Add groups or privilege propagating groups, remove groups, and change the configuration of currently defined groups.
Drill down from a specific group to collectively monitor and manage its member targets.
Redundancy systems and special high availability groups are not accessed from this Groups page. You can access them from the All Targets page.
The Group Home page enables you to quickly view key information about members of a group, eliminating the need to navigate to individual member targets to check on availability and performance. You can view the entire group on a single screen and drill down to obtain further details. The rolled up numbers include alerts and incidents for all members including those in nested groups. The Group Home page provides the following sections:
A General section that shows the Owner, Group Type, and Privilege Propagation status.
A Status section that shows how many member targets are in up, down, and unknown states. For nested groups, this segment shows how many targets are in up, down, and unknown states across all its sub-groups. The status roll up count is based on the unique member targets across all sub-groups. Consequently, even if a target appears more than once in sub-groups, it is counted only once in status roll ups. Click member names to go to the member Status page.
An Overview of Incidents and Problems section that displays the number of outstanding critical, warning, and error alerts associated with the current group. For nested groups, this segment shows how many targets are in an alert state across all its sub-groups.
The rolled up information is shown for all the member targets regardless of their status. The status roll up count is based on the unique member targets across all sub-groups. Consequently, even if a target appears more than once in sub-groups, its alerts are counted only once in alert roll ups.
Click the number in the Problems column to go to the Incident Manager page to search, view, and manage exceptions and issues in your environment. By using Incident Manager, you can track outstanding incidents and problems.
A Compliance Summary section that shows how many of your group members do not comply with Enterprise Manager policy rules. Non-compliant members are indicated with the number of critical, warning, and informational incidents along the Average Compliance Score (as a percentage) for each compliance rule. You can click the Members tab to see the Member Targets and their types along with any violations and an average score for each member target.
The numbers include the group-level incidents (if any group-level policy is defined), as well as group members violations. The rolled-up information for all policy categories, including security, is shown for all the member targets regardless of their status.
A Job Activity section that displays the status for jobs that have started within the previous 7 days. The embedded table shows you the number of executions submitted to the group or any group members listed by status type, such as Problem Executions, Suspended Executions, and so on.
A Blackouts section that allows you to create blackout periods and view the status of existing blackouts. The table displays the Scheduled and Active blackouts for each group or group member. Click Create to define primary blackout identification information and assign targets to be blacked out.
A Patch Recommendations section that shows the total number of Oracle critical patch advisories (including one or more critical patches) that are applicable to your enterprise, and the number of Oracle homes in your enterprise to which those patches should be applied. You can view the information by Classification or by Target Type.
Click the Current number link to go to the Group Critical Patch Advisories page. If your Oracle MetaLink Credentials are not configured, click Not Configured to go to the Patching Setup page. After you configure this page, Enterprise Manager collects information about Oracle critical patch advisories that are relevant to your enterprise.
An Inventory and Usage section where you can view inventory summaries for deployments such as hosts, database installations, and fusion middleware installations on an enterprise basis or for specific targets. You can select an option such as Platform or Version to roll up inventory. Optionally, you can click See Details to navigate to the Inventory and Usage Details page where you can perform more detailed tasks such as viewing trends in inventory counts charted across a time line, revising selections to refresh chart and details based on new selections, or export deployment and details tables to CSV files.
A Configuration Changes for Last 7 Days section that displays the number for configuration changes and Relationship changes incurred over the previous 7 days. Configuration history is a log of changes to a target, such as a group or beacon, recorded over a period of time. The recorded history includes changes both to configurations and to relationships. Relationships are the associations that exist among managed entities. You can click the number of changes in either column to view more detailed information about the change.
The Group Charts page enables you to monitor the collective performance of the group. Out-of-box performance charts are provided based on the type of members in the group. For example, when databases are part of the group, a Wait Time (%) chart is provided that shows the top databases with the highest wait time percentage values. You can view this performance information over the last 24 hours, last 7 days, or last 31 days. You can also add your own custom charts to the page.
You can access the Charts page by choosing Charts from the Monitoring sub-menu of the Group menu.
The Group Members page summarizes information about the member targets in the group. It includes information on their current availability status, roll-up of open alerts and incidents, and key performance metrics based on the type of targets in the group.
You can visually assess availability and relative performance across all member targets. You can sort on any of the columns to rank members by a certain criterion (for example, database targets in order of decreasing wait time percentage). Default key performance metrics are displayed based on the targets you select, but you can customize these to include additional metrics that are important for managing your group.
You can use the Group Status History page to view the historical availability of a member during a specified time period, view the current status of all group members, or access the home pages for members.
Bar graphs provide a historical presentation of the availability of group members during a time period you select from the View Data drop-down list. The color-coded graphs can show statuses of Up, Down, Under Blackout, Agent Down, Metric Collection Error, and Status Pending. You can select time periods of 24 hours, 7 days, or 31 days.
To view the current status or a member, you can click a Status icon to go to the Availability page, which shows the member's current and past availability status within the last 24 hours, 7 days, or 31 days. Click a member Name to go to the member's Home page. You can use this page as a starting point when evaluating the performance of the selected member.
You can access the Group Status History page by choosing Status History from the Monitoring section of the Group menu.
The System Dashboard enables you to pro-actively monitor the status and alerts in the group as they occur. The color-coded interface is designed to highlight problem areas using the universal colors of alarm—targets that are down are highlighted in red, metrics in critical severity are shown as red dots, metrics in warning severity are shown as yellow dots, and metrics operating within normal boundary conditions are shown as green dots.
Using these colors, you can easily spot the problem areas for any target and drill down for details as needed. An alert table is also included to provide a summary for all open alerts in the group. The alerts in the table are presented in reverse chronological order to show the most recent alerts first, but you can also click any column in the table to change the sort order.
The Dashboard allows you to drill down for more detailed information. You can click the following items in the Dashboard for more information:
A target name to access the target home page
A group or system name to access the System Dashboard
Status icon corresponding to specific metric columns to access the metric detail page
Alerts icon for a group to access the Alerts page for that aggregate object
Status icon for a metric with key values to access the metric page with a list of all key values
Status icon for a metric with a specific key value to access the metric detail page with the specified key
Dashboard header to access the group home page
Status icon for down, critical or warning alerts to access the Alerts page
Alerts messages to access the metric detail page containing the alert history for the target
Click Customize to access the Edit Group pages. By default, Enterprise Manager takes you to the Edit Group Dashboard page where you can change the target display and data refresh frequency. However, you can also modify any other group properties that affect the content of the System Dashboard. Columns that appear in the Dashboard target area mirror the columns that appear in the Edit Group Columns page. To display additional columns, click Modify on the Edit Group Columns page and add the desired metric columns.
In the "Group by Target Type" mode, the Dashboard displays information of the targets based on the specific target types present in the group or system. The statuses and alerts displayed are rolled up for the targets in that specific target type.
Columns that appear in the Dashboard target area mirror the columns that appear in the Edit Group Columns page. To display additional columns, click Modify on the Edit Group Columns page and add the desired metric columns.
If you minimize the dashboard window, pertinent alert information associated with the group or system is still displayed in the Microsoft Windows toolbar. For example, (#1 X3 !5) denotes there is 1 Target Down Alert, 3 Critical Alerts and 5 Warning Alerts associated with this group or system.
Enterprise Manager provides several out-of-box reports for groups as part of the reporting framework, called Information Publisher. These reports display important administrative information, such as hardware and operating system summaries across all hosts within a group, and monitoring information, such as outstanding alerts and incidents for a group.
You can access these reports from the Information Publisher Reports menu item on the Groups menu.
A redundancy system is a group that contains members of the same type that function collectively as a unit. A type of redundancy system functions like a single logical target that supports a status (availability) metric. A redundancy system is considered up (available) if at least one of the member targets is up.
You can create and administer a redundancy system from the All Targets page. Redundancy systems support all group management features previously discussed.
When you define the Redundancy System, you must choose the member type for the members in the Redundancy System.
You can define the options for how availability of the redundancy system is calculated by selecting either Number or Percentage:
Number - When you choose Number, you can specify either the number of member targets that should be up in order for the group to be considered up, or the number of member targets that should be down in order for the system to be considered down.
Percentage - When you choose Percentage, you can specify either the minimum percentage of member targets that must be up in order for the system to be considered up, or the minimum percentage of member targets that are down in order to consider the system to be down. If you choose Percentage, the required number of member targets will be rounded off to the next integer. For example if you define the Percentage as 50% and the total number of member targets is 5, then the value used for calculating the availability will be 3.
Do not use redundancy systems if the group you want to model is an Oracle Real Application Clusters database, host cluster, HTTP server high availability group, or OC4J high availability group. Instead, you can use the following specialized target types for this purpose:
Cluster
Cluster Database
HTTP HA Group
OC4J HA Group
Privilege propagating groups enable administrators to grant privileges to other administrators in a manner in which new administrators get the same privileges as its member targets. For example, granting operator privilege on a group to an Administrator grants him the operator privilege on its member targets and also to any members that will be added in the future. Privilege propagating groups can contain individual targets or other privilege propagating groups.
Privileges on the group can be granted to an Enterprise Manager user or a role. Use a role if the privileges you want to grant are to be granted to a group of Enterprise Manager users.
For example, suppose you create a large privilege propagating group and grant a privilege to a role which is then granted to administrators. If new targets are later added to the privilege propagating group, then the administrators receive the privileges on the target automatically. Additionally, when a new administrator is hired, you only need to grant the role to the administrator for the administrator to receive all the privileges on the targets automatically.
The privilege propagating group creation function is a privileged activity. The privilege propagating group feature contains two privileges:
Create Privilege Propagating Group
This privileged activity allows the administrators to create the privilege propagating groups. Administrators with this privilege can create propagating groups and delegate the group administration activity to other users.
Group Administration
This privilege can be granted to administrators on specific group targets and is used to delegate the group administration activities to other administrators. It is granted to both conventional and privilege propagating groups.
The Group Administration Privilege is available for both Privilege Propagating Groups and conventional groups. If you are granted this privilege, you can grant access to the group to other Enterprise Manager users without having to be the SuperAdministrator to grant the privilege.
The target privileges granted on a propagating group are propagated to member targets. The administrator grants target objects scoped to another administrator, and the grantee maintains the same privileges on member targets. The propagating groups maintain the following features:
The administrator with a Create Privilege Propagating Group privilege will be able to create a propagating group
To add a target as a member of a propagating group, the administrator must have Full target privileges on the target
You can add any non-aggregated target as the member of a privilege propagating group. For aggregated targets in Cloud Control version 12c, cluster and RAC databases and other propagating groups can be added as members (cluster and RAC databases must be added via the EM CLI verb). There is no support for this through the Enterprise Manager interface in version 10.2.0.5. Cloud Control version 12c, however, supports more aggregated target types, such as redundancy systems, systems and services. These, along with cluster and RAC databases, can be added in version 12c via the Cloud Control console.
If you are not the group creator, you must have at least the Full target privilege on the group to add a target to the group.
In Enterprise Manager release 12c you can convert conventional groups to privilege propagating groups (and vice-versa) through the use of the specified EM CLI verb. Two new parameters have been added in the modify_group EM CLI verb:
privilege_propagation
This parameter is used to modify the privilege propagation behavior of the group. The possible value of this parameter is either true or false.
drop_existing_grants
This parameter indicates whether existing privilege grants on that group are to be revoked at the time of converting a group from privilege propagation to normal (or vice versa). The possible values of this parameter are yes or no. The default value of this parameter is yes.
These same enhancements have been implemented on the following EM CLI verbs: modify_system, modify_redundancy_group, and modify_aggregrate_service.
The EM CLI verb is listed below:
emcli modify_group -name="name" [-type=<group>] [-add_targets="name1:type1;name2:type2;..."]... [-delete_targets="name1:type1;name2:type2;..."]... [-privilege_propagation = true/false] [-drop_existing_grants = Yes/No]
For more information about this verb and other EM CLI verbs, see the EM CLI Reference Manual.
|
 Copyright © 2012, Oracle and/or its affiliates. All rights reserved. Legal Notices |
|
