Dell EMC PowerMax Add-on for Splunk
Overview
Details
Information
-Title: Dell EMC VMAX Add-on for Splunk Enterprise
-Add-on Version: 2.0.7
-Document Version: 2.0.0
-Date: 18th June 2019
-Vendor Products: Dell EMC VMAX3, All-Flash, and PowerMax
-Visible in Splunk Web: Yes. This add-on contains set-up configuration options.
-For full documentation please see the README packaged with the add-on.
Contact
For any and all issues or queries, please contact vmax.splunk.support@emc.com.
Include as much information as possible about the issue, the Operating System
and Splunk versions, and associated log files listed in the troubleshooting
section.
• Response Time: Within 48hrs
• How we track issues: Internal Bug tracking system
Hours of Operation & Holidays Observed 2018
All times are specific to Ireland (GMT+00:00)
Working Hours:
Monday : 09:00 - 17:00
Tuesday : 09:00 - 17:00
Wednesday : 09:00 - 17:00
Thursday : 09:00 - 17:00
Friday : 09:00 - 16:00
Saturday : Closed
Sunday : Closed
Holidays Observed 2019/20:
Date Weekday Holiday Name Holiday Type
Jan 1 Monday New Year's Day National holiday
Mar 18 Monday St. Patrick's Day Observance
Apr 22 Monday Easter Monday National holiday
May 6 Monday May Day National holiday
Jun 3 Monday June Bank Holiday National holiday
Aug 5 Monday August Bank Holiday National holiday
Oct 28 Monday October Bank Holiday National holiday
Dec 24 Monday Christmas Eve Observance
Dec 25 Tuesday Christmas Day National holiday
Dec 26 Wednesday St. Stephen's Day National holiday
Dec 31 Monday New Year's Eve Observance
Jan 1 Monday New Year's Day National holiday
About the VMAX Add-on for Splunk Enterprise
The Splunk Technology Add-on (TA) for Dell EMC VMAX allows a Splunk® Enterprise
administrator to collect inventory, performance information, and summary
information from VMAX storage arrays. You can then directly analyse the data or
use it as a contextual data feed to correlate with other operational or security
data in Splunk Enterprise.
The Splunk VMAX TA is configured to report events in 5 minute intervals which is
the lowest possible granularity for performance metrics reporting. Event metric
values are representative of the value recorded at that point in time on the
VMAX. Values shown for an event in Splunk at 10:00am represent their respective
values at 10:00am on the VMAX.
Download the Splunk Add-on for Dell EMC VMAX from Splunkbase.
Release Notes
Version 2.0.7 of the VMAX TA is compatible with:
-Splunk Platform: 6.4 and above
-CIM: 4.6 and above
-OS Platforms: Splunk compatible platforms
-Vendor Hardware: Dell EMC VMAX3 and VMAX All-Flash
-Vendor Software: Solutions Enabler 8.4.0.7 and newer
Unisphere for VMAX 8.4.0.10 and newer
SSL Configuration
SSL is enabled by default in the VMAX TA when adding inputs. In order to
retrieve the required certificate from Unisphere follow the following steps:
- Get the CA certificate of the Unisphere server. This pulls the CA cert file
and saves it as .pem file:
openssl s_client -showcerts -connect {unisphere_host}:8443 </dev/null 2> \
/dev/null|openssl x509 -outform PEM >{unisphere_host}.pem
Where {unisphere_host} is the IP address or hostname of the Unisphere instance.
- OPTIONAL: If you want to add the cert to the system certificate bundle so no
certificate path is specified in the VMAX data input, copy the .pem file to the
system certificate directory as a .crt file:
{unisphere_host}.pem /usr/share/ca-certificates/{unisphere_host}.crt
- OPTIONAL: Update CA certificate database with the following commands:
dpkg-reconfigure ca-certificates
update-ca-certificates
Check that the new {unisphere_host}.crt will activate by selecting ask on the
dialog. If it is not enabled for activation, use the down and up keys to select,
and the space key to enable or disable.
- If steps 2 & 3 are skipped and instead the cert from step 1 will just remain
in a local directory, you can specify the location of the .pem cert in the VMAX
data input setting 'SSL Cert Location'. Otherwise, leave ‘SSL Cert Location’
blank and ‘Enable SSL’ enabled to use the cert from the system certificate
bundle.
Troubleshooting the VMAX Add-on for Splunk
The Splunk VMAX TA has been developed to give the end-user as much detail as
possible about the activity of the add-on in their environment. All add-on
logged events will either be marked as info, error, or critical depending on the
nature of the event. If you are having any issues with the add-on, the logs will
be able to give you precise information as to the cause of the problem. These
issues could be related, but not limited to:
• Incorrect Unisphere configuration or username/password combination
• Incorrect SSL setup
• Incorrect Array ID
• VMAX is not performance registered
• Performance metrics timestamp is not up-to-date
The two log files that you can use to diagnose problems with this add-on are:
• /{splunk_install_dir}/splunk/var/log/splunk/ta_dellemc_vmax_inputs.log
• /{splunk_install_dir}/splunk/var/log/splunk/splunkd.log
Before the add-on successfully runs for the first time, error logs go to
splunkd.log. After the add-on successfully runs, error logs go to
ta_dellemc_vmax_inputs.log.
Contact
For any and all issues or queries, please contact vmax.splunk.support@emc.com.
Include as much information as possible about the issue, the Operating System
and Splunk versions, and associated log files listed in the troubleshooting
section.
Release Notes
Version 2.0.9
Version 2.0.9 of the VMAX/PowerMax TA is compatible with:
-Splunk Platform: 8.0 and above
-Python 3.x
-CIM: 4.6 and above
-OS Platforms: Splunk compatible platforms
-Vendor Hardware: Dell EMC VMAX3, VMAX All-Flash, and PowerMax
-Vendor Software: Solutions Enabler 9.0 and newer
Unisphere for PowerMax 9.0 and newer
Note: Workload Planner headroom information is not supported in Splunk with
Unisphere 9.1, to retain this functionality please use Unisphere 9.0.