Tab navigation
- Overview
- Objectives- selected tab,
- Test preparation
Section 1: Planning
- Given a list of initial business applications to be discovered, the list of servers the application runs on, and the approved project plan, determine the order, plan and methodology for discovery so that discovery scopes have been defined for discovering the servers and its components that the initial business applications run on.
With emphasis on performing the following tasks:
- Gather and document the customer requirements.
- Obtain the current environment details.
- Review the customer input and requirements.
- Determine how the environment will be discovered.
- Compare list of initial business applications and their servers to be discovered as defined in the approved project plan. If the requirements and listing of servers match proceed; otherwise, work with customer to redefine the scope.
- Develop phased approach for discovering the application servers listed.
- Develop scopes to implement the phased approach for discovering the servers.
- Given a customer's environment, design the architecture so that the initial architecture plan for the solution has been created.
With emphasis on performing the following tasks:
- Determine which authentication and security protocols are in use.
- Determine if machines exist behind firewalls to determine need for anchor servers and windows gateways.
- Determine the number of assets to be managed.
- Estimate the number of configuration items to be created.
- Estimate the number of computer systems to be discovered.
- Determine the architecture for IBM Tivoli Application Dependency Discovery Manager (TADDM) (streaming or synchronized).
- Determine the number of TADDM components to be implemented.
- Analyze the authentication methods for LDAP integration.
- Given a customer's environment, determine the best estimate of the number of TADDM components required so that the initial architecture plan for the deployment has been created.
With emphasis on performing the following tasks:
- Determine if this is an Enterprise or Domain deployment.
- Establish the customers preference in TADDMs architectural components.
- AIX, Linux, or Windows
- DB2 vs Oracle
- Reuse or Greenfield for Gateways/Anchors systems (if required)
- Determine logical and/or physical architectural boundaries.
- Determine the number of physical locations for the deployment.
- Determine if systems exist behind firewalls.
- LDAP Domains & Security policies.
- Estimate the connectivity bandwidth between boundaries (if applicable).
- Estimate the number of systems to be discovered (L1) per boundary.
- Allocate managed system types to each boundary.
- Unix/Linux
- Windows
- Determine the CI's that will be utilized (L2 and/or L3) per boundary.
- Determine the number of Sever Equivalent's to be managed per boundary. Estimate the number of configuration items to be created per boundary.
- Determine expected collection samples per system per day/mo per boundary.
- Given the customer's network configuration / diagrams and TADDM solution architecture, define firewall requirements so that list of ports to be opened on firewalls is delivered.
With emphasis on performing the following tasks:- Determine if there are firewalls in customer's environment.
- Determine which level of discovery will be performed on systems behind firewalls.
- Determine if systems and applications to be discovered are behind the firewalls.
- Determine if Anchors will be deployed.
- Determine whether chained anchors will be used.
- Determine if other discovery techniques in firewalled environments will be used (script-based / Asynchronous discovery).
- Determine if script-based discovery will be used.
- Present which technologies can be discovered with script-based discovery.
- Determine if Asynchronous discovery will be used.
- Present which technologies can be discovered with script-based discovery.
- Determine whether there will be a firewall between TADDM servers and TADDM consoles.
- Create the list of ports to be opened in customer's firewalls.
- Given the list of technologies to be discovered and list of sensors that require credentials to run correctly, gather proper information from TADDM documentation, communicate to customer, implement and refine so that requirements for credentials are communicated and implemented in the environment
With emphasis on performing the following tasks:
- After creating the list of sensors (that require elevated credentials on target systems) necessary to successfully run discovery, go to product documentation and prepare a list of credentials needed.
- Go to Sensors and supported systems matrix document to see list of all sensors and technologies supported.
- Go to Sensors reference and to see the details for credentials requirements per technology.
- Communicate created list of requirements to the customer and ask to implement them on test environment.
- Make necessary changes to collation.properties file on TADDM server(s).
- Run the discovery to see if every technology from initial list is discovered properly.
- If there are still problems with discovery due to missing credentials. requirements, go to sensor logs for each particular problem and analyze the root cause.
- Refine requirements.
- Ask the customer to implement changes
- If necessary - change collation.properties file.
- Run discovery on failing technologies.
- Continue refining requirements until discovery runs successfully on all technologies in test environment.
- After completing refining the requirements, move to production environment.
- After creating the list of sensors (that require elevated credentials on target systems) necessary to successfully run discovery, go to product documentation and prepare a list of credentials needed.
- Given SME(s) and/or documentation, determine and document the customer's existing environments that will be discovered and managed with TADDM so that an implementation plan is developed.
With emphasis on performing the following tasks:
- Discuss with System Administrator:
- Determine and document the different operating system types (OS) that are in the customer's environment.
- Determine and document the number of servers for each OS type that will be discovered in each environment (e.g., test, production) where discoveries will be run.
- Discuss how TADDM works, what the credential requirements for computer systems are, and begin the process to manage and obtain credentials.
- Discuss requirement for lsof.
- Discuss WMI requirements for Windows discovery.
- Discuss with Network SME(s):
- Determine and document the types of network equipment that are in the customer's environment.
- Determine and document the number of each type of network equipment that will be discovered in each environment (e.g., test, production) where discoveries will be run.
- Determine and document firewalls in the customer's environment.
- Discuss how TADDM works, what the credential requirements for network equipment are, and begin the process to manage and obtain credentials.
- Discuss with Business Application SME(s):
- For each business application to be managed via TADDM, determine the various servers/components/applications that compose the business application.
- Discuss how TADDM works, what the credential requirements for components/applications are, and begin the process to manage and obtain credentials.
- If system diagrams, network diagrams, and/or application architectural documents/diagrams are available.
- Review the available documents and determine and document: OS types and number of each OS type in the environments to be discovered, types of network equipment and number of each type in the environments to be discovered, business applications and servers/components/applications that compose each business application.
- Note: The creation of credentials should be started as soon as possible, so they are available prior to discoveries being run.
- Discuss with System Administrator:
- Given server with operating System installed for TADDM Installation, verify OS configuration and required S/W or Libraries are installed on that server so that the server is available for TADDM installation.
With emphasis on performing the following tasks:- Log in to the server and Validate Operating System version which is supported for TADDM
- Validate TADDM user for the read/Write/execute permission which is used for the TADDM installation.
- Review the server hosts file for the IP address and host name of the local system.
- Windows systems: c:\Windows\system32\drivers\etc\hosts
- Linux® and UNIX® systems: /etc/hosts
- Validate the Java Runtime Environment (JRE) installation on the server.
- On UNIX systems, the user ID under which the TADDM server runs must have an open file limit of at least 8192 files.
- On Linux and UNIX systems, the TADDM server user ID must also have root execution permission for the nmap command.
- Validate all required Shared library files are installed on UNIX and Linux servers.
- The Security-Enhanced Linux (SELinux) security system must be disabled (SELINUX=disabled in the /etc/sysconfig/selinux configuration file).
- Given a list of computer systems/components/applications that will be discovered, create a list of TADDM sensors that will be run so that a list of sensors and any required credentials has been created.
With emphasis on performing the following tasks:
- Review the list of computer systems/components/applications to be discovered and document which ones TADDM uses sensors to discover.
- Of the sensors in the list, document which ones require credentials to run.
- Work with the customer to get the process to manage and obtain credentials started.
- Given that TADDM defines the different levels of discovery, analyze data needs and explain to customers the different levels and the options that are available so that the customer understands the 3 levels of discovery available within TADDM.
With emphasis on performing the following tasks:
- Analyze the customer needs for discovery and explain the discovery levels available and how it can be matched by creating different discovery profiles.
- Describe Level 1 Profile/Discovery:
- Level 1 profile is designed to perform credential-free discoveries.
- The default purpose is to discover and create Computer Systems inventory from a defined set of host, range, and/or subnet of IP addresses scope.
- The main senor that is run is the StackScanSensor. This will gather very basic information from the discovered Computer Systems. -Unix: For StackScanSensor to execute, must include the user id into the sudoers file, example for the TADDM Domain/Anchor Server owner id of taddm: taddm ALL= (ALL) NOPASSWD: ALL.
- When used with Nmap (must be installed separately on the TADDM and Anchor Servers), much more detailed information will be retrieved with a higher discovered OS confidence level.
- Describe Level 2 Discovery:
- This Level 2 profile is only used to discover host with credentials.
- This Level 2 profile includes the Level 1 profile with the OS credentials which are entered in the Access List for all the targeted machines (Solaris, Linux, Windows, etc) along with a number of additional Computer System Sensors that will run. This is still a more of an inventory discovery with minimum discovered dependencies (TCP only connections).
- Describe Level 2 Discovery with shallow application discovery :
- This is an enhanced Level 2 discovery scan that will also capture shallow application objects without application credentials. With this variable set to true, a CustomAppServer object representing the application running on the target machine will be received. This will also build limited application dependencies as they are discovered.
- Set this variable: com.collation.internalITemplatesEnabled to true in the collation.propreties file.
- Describe Level 3 Discovery:
- This Level 3 profile is used for deep-dive discovery (includes all of Level 2).
- This profile can be used to discover the entire application infrastructure, deployed software components, physical servers, network devices, virtual LAN, and host data used in a runtime environment. This discovery requires credentials for all deep dive discoveries sensors that are delivered with TADDM product. This level will also discover applications that do not require credentials for custom templates that are also delivered with TADDM product. This will build dependencies of all applications as they are discovered and have sensors for.
- Other Discovery Profiles:
- Any of these profiles (Level 1-3) can be cloned and modified according to your needs. New profiles can be created
- These new profiles can clone sensors with the ability of modifying parameters and/or remove sensors for discoveries via the Discovery Management Console.
- Given the customer's data source requirements, analyze the requirements to determine if Discovery Library Adapters (DLA) are necessary and a means to import and export data to/from TADDM so that the customer's environment has been evaluated for DLA requirements.
With emphasis on performing the following tasks:
- Review TADDM functionality with Environment Owner.
- Identify data gaps.
- Determine which data sources have data to be exchanged with TADDM.
- Determine which database types are being used.
- Determine which data sources already have DLA written.
- Determine requirements for frequency of data loads via the DLA.
- Determine means for developing a new DLA if one does not exist.
Section 2: Installation
- Given a system ready for database creation, prepare the database for IBM Tivoli Application Dependency Discovery Manager (TADDM) using different operating system so that database preparation is completed.
With emphasis on performing the following tasks:
- Identify the database server and instance.
- Create TADDM database.
- Adjust the database configuration parameters.
- Adjust the default bufferpool size to accommodate data volume.
- Update the database configuration for TADDM.
- Verify database has appropriate changes.
- Verify data base connection with TADDM server.
- Given the TADDM architecture document and installation binaries, install TADDM and set up the environment so that TADDM is installed, initially configured, and up and running.
With emphasis on performing the following tasks:- Verify OS prerequisites and database creation.
- Prepare (download) installation binaries from proper place (PA / XL / etc).
- Unzip the binaries to a directory on TADDM server.
- Run the installer from unzipped binaries by executing a proper script.
- Determine the method of installation (silent, GUI).
- Perform step by step procedure during the installation providing information from Architecture document.
- After installation is finished, start TADDM from the command line (if not started automatically after installation).
- Run a TADDM script to validate the installation.
- Verify that TADDM is up and running (JVM's status).
- Open DMP and DMC consoles and verify ability to log in.
- Given a running TADDM environment, database backed up and binaries backed up, Install TADDM fix pack so that TADDM fix pack installation is completed successfully.
With emphasis on performing the following tasks:- Download the latest fix pack from FixCentral portal.
- Unzip fix pack on the TADDM server.
- Verify backups of TADDM DB and TADDM binaries are done.
- Run fix pack installer from command line (console / silent or GUI).
- Perform steps required by the installer.
- Observe installation logs content to see if any errors occurred.
- After fix pack installation verify that TADDM JVMs are up and running.
- Rollback database backup and binaries backup to the previous state if the fix pack installation fails.
- Given an installed TADDM host, validate and complete the post installation configuration so that TADDM server will be ready for configuring the discovery.
With emphasis on performing the following tasks:- Log in to the TADDM server by using the TADDM user.
- Validate the collation.properties file for the database connection related parameters.
- Primary database connections
- Archive database connection
- Check the status of the TADDM server. Go to the installation directory of the TADDM server:
- For Linux®, and UNIX® systems: $COLLATION_HOME/bin
- For Windows® systems: %COLLATION_HOME%\binEnter one of the following commands:For Linux and UNIX systems: ./control statusFor Windows systems: control status-If TADDM is running on a domain server, the Discover, GigaSpaces,DbInit, Tomcat, Topology, DiscoverAdmin, Proxy and EventsCore services should be started.-If TADDM is running on a synchronization server, the GigaSpaces, DbInit, Tomcat, EcmdbCore services should be started and displayed.-If TADDM is running on a storage server, the GigaSpaces, DbInit, Tomcat, StorageService services should be started and displayed.-If TADDM is running on a discovery server, the GigaSpaces, DbInit, Tomcat, DiscoveryService services should be started and displayed.
- Complete the configuration for the secure access to the Discovery Management Console.
- In a Web browser on the client system, open the TADDM launch page by entering the hostname and port of the TADDM server. The default URL is as follows:http://hostname:9430 (where hostname is the TCP/IP hostname or numeric IP address of the system where the TADDM server is installed)
- On the TADDM launch page, click Show SSL options.
- Click Download Trust Store.
- Click Save. Make sure to record the location where file is saved.
- In the text field next to Download Trust Store, type the path to the directory where the truststore file is saved. Do not include the file name.
- After installation, clear the Java™ Web Start cache on each client system where the Discovery Management Console is logged in to.
- Given the proper access administrator authority for a designated anchor server, configure anchor servers so that a service account has been created that will be used by the anchor server for discovery behind the firewall.
With emphasis on performing the following tasks:- For UNIX/Linux - log in to the designated anchor server with root user authority.
- Create the service account.
- Open the port for anchor server.
- For Windows - log in to the designated anchor server with administrator user authority.
- Create the local service account with a local administrator's group.
- Verify supported version of SSH Service is installed on the anchor server.
- For UNIX/Linux - log in to the designated anchor server with root user authority.
Section 3: Configuration
- Given target systems prepared for Anchor installation, list of anchors to be deployed with SSH servers installed, configure Anchors so that Anchor objects are created in IBM Tivoli Application Dependency Discovery Manager (TADDM) GUI and tested to be running.
With emphasis on performing the following tasks:
- Verify supported version of SSH server installation on anchor systems.
- Log in to TADDM Discovery Management Console.
- In Scopes section create scopes for Anchors restrictions.
- In Anchors section create new anchors.
- Create discovery profile with Anchor Sensor enabled.
- Test anchor deployment by running a discovery on created Anchor Servers using discovery profile with Anchor Sensor enabled.
- Given a running TADDM environment and a list of Windows Gateways to be configured, perform SSH server installation and configuration on target systems, create Windows Gateway objects in TADDM GUI so that Windows Gateways are configured properly and ready to be used during discovery.
With emphasis on performing the following tasks:
- On each target selected to act as a Windows Gateway, install a supported version of SSH server.
- On each target selected to act as a Windows gateway, configure freshly installed SSH server so it is possible to log in from TADDM server to this host.
- In TADDM, create scopes that will be used to limit Windows gateways.
- In TADDM Discovery Management Console, go to Anchors/gateways section and create Windows gateways as per given list, providing IP address of each gateway.
- Limit (if necessary) created gateway to a previously created scope.
- If necessary, create Access List entry for Windows computer system to instruct TADDM which account/password to use when logging in via SSH to Windows gateway.
- Run a test discovery of a Windows computer system to verify the created Windows gates operates as expected.
- Given customer's need for the 3 levels of discover and a running TADDM system, create different levels of discovery profiles and enable the options that are available so that Configuration Items can be discovered.
With emphasis on performing the following tasks:
- Navigate to the Discovery Management Console user interface.
- Open the Discovery Profile tab.
- Select the Existing Profile and clone it.
- Select the new profile and select the sensors as per the customer requirement.
- Select the OK button at the bottom to complete.
- Given the list of extended attributes to be discovered by TADDM for chosen operating system, create and configure extended attributes by creating them, configuring templates and running a discovery so that extended attribute successfully populated with desired value.
With emphasis on performing the following tasks:- Create extended attributes (EA) from TADDM UI.
- Choose a proper class of operating system to create EA for.
- Choose type of EA to be created.
- Save changes.
- Create views for extended attributes bu running a extattr_views.sh script from dist/bin.
- Follow the guidance for giving parameters to this script in order to create views properly.
- Edit Computer System template from Discovery Management Portal.
- Enable the template.
- Ensure that identyfying criteria are correct for your OS.
- Make necessary modifications in OS template under /dist/etc/templates/commands.
- Edit file adding proper directive (CMD, NOP, SCRIPT, etc).
- If necessary develop jython script for SCRIPT directive.
- Run discovery Level 2 to the OS that has been configured for extended attributes.
- Wait for the @0.5 topology agents group to complete.
- Verify from the UI the content of created extended attribute(s).
- Create extended attributes (EA) from TADDM UI.
- Given Target server(s), a working TADDM server and access to the Discovery Management Console, using either the UI or command line add a Scope Set with the machine(s) configured so that the machine(s) can be discovered.
With emphasis on performing the following tasks:
- Identify the list of server names available for discovery.
- Add a scope set and a server by using the TADDM console or the CLI method.
- Repeat the steps to add a scope set and individual host IP addresses for each scope set.
- Given a list of servers / images and components/applications to be discovered, define the user privileges required for TADDM scans so that users with proper credentials are deployed to targets to be discovered and TADDM Access Lists are configured properly.
With emphasis on performing the following tasks:- From the list of servers/images/components/applications that need to be discovered, determine which sensors need credentials to run successfully.
- For each sensor that requires credentials, document the credential requirements.
- Work with customer's process for requesting credentials; document each credential request and delivery owner as the request is submitted. Include in the document when the request is scheduled to be completed.
- As credential requests are completed, update credential requirements document and enter the credentials in the product.
- If the documented completion date for any credential request expires, use the customer's process to escalate the request.
- In TADDM console create appropriate Access List entries that will correspond to prepared list of users.
- Ask the customer to create users with appropriate rights on target systems to be used.
- Given the user name and password for access to machines, a working TADDM server, and access to the Discovery Management Console, navigate to the Discovery Management Console and add an access credential so that Configuration Items can be discovered.
With emphasis on performing the following tasks:
- Navigate to the Discovery Management Console.
- Open the Discovery tab.
- Select the Access List icon.
- Select the Add button at the bottom.
- Select the Computer System option in the Component Type pull down.
- Other options include: Windows Servers, Application Servers, Database Servers, LDAP, SNMP, SAP, etc.
- Input the name of your Access List, user name, password and confirm password in Access Details dialog box.
- Select the Scope Limitation folder and select your scope options if necessary.
- Select the OK button at the bottom to complete.
- Given the need to debug Sensors more efficiently and effectively, set the SplitSensor option so that a clear view of each sensor is available.
With emphasis on performing the following tasks:
- Log in to the TADDM server.
- In the $COLLATION_HOME/etc/collation.properties file the parameter com.collation.discover.engine.SplitSensorLog=true must be set to true.
- Restart TADDM if the file is changed.
- Given a custom design file, configure the customBusiness Intelligence and Reporting Tool ( BIRT) report so that custom BIRT report is generated for the collected data.
With emphasis on performing the following tasks:
- Go to Discovery Management Console and click Start Data Management Portal.
- Click Analytics->BIRT Reports from the Data Management Portal
- Click New and fill details when it prompts and locate the design file in the GUI client m/c through the browse option. Then click Add Report.
- Finally click OK to load the file into TADDM 7.2.1 server and check report in the BIRT report list on the console and TADDM server.
- Given a running TADDM environment and a database connection, generate a report so that a report is generated.
With emphasis on performing the following tasks:
- Generate a pre-defined BIRT report:
- In the Functions pane of the Data Management Portal window, click Analytics.
- In the Analytics section, click BIRT Reports. The TADDM BIRT Reports list opens, displaying all of the available BIRT reports.
- In the TADDM BIRT Reports list, click to highlight the report you want to run. #Click Run Report. If the report has any parameters, you are then prompted to specify the parameter values. When you have finished specifying parameter values, click OK.
- Run a Tivoli Common Reporting or Cognos report:
- Copy the appropriate zip file to Tivoli Common Reporting or Cognos.
- Import the file.
- Verify the report works.
- Generate a pre-defined BIRT report:
- Given the list of Windows systems that will be discovered with a non-admin account and the account name to be created, configure the windows target for non-admin discovery so that Windows system is discovered Level2 using non-admin account.
With emphasis on performing the following tasks:- Create a discovery user account.
- Create user on the target system.
- Unset changing password requirement.
- Select password never expires.
- Set up the WMI configuration.
- Configure for created user proper rights in WMI Control for Root Namespace.-Execute Methods.-Enable Account.
- Remote Enable
- Copy the TaddmWmi files to target systems.
- Copy the following TaddmWmi files to %SystemRoot%\system32\wbem (on 32bit systems).
- Copy the following TaddmWmi files to %SystemRoot%\syswow64\wbem (on 64bit systems).
- Register TaddmWMI.dll using mofcomp and regsvr32 commands.
- Set up the DCOM Access for ibmcol.
- Using dcomcnfg configure-Access Permissions for created user (Local Access and Remote Access).
- Launch and Activation Permissions for created user (Local Launch and Remote Launch).
- Restart Windows server.
- Configure Access List in TADDM GUI.
- Run Level2 discovery to configured target.
- Observe results to see if the Level 2 discovery runs with no errors.
- Create a discovery user account.
- Given the discovery schedule, configure TADDM scheduling so that discovery starts at a given time.
With emphasis on performing the following tasks:- Decide whether to use TADDM built-in scheduler in the GUI or use CRONTAB on Unix systems with API invocation.
- If using GUI method- in the GUI go to Schedule.r
- Fill in the information about the time of discovery, scopes to be discovered, discovery profile to be used.
- If using API method - make modifications in system crontab.
- Create api.sh command that will start a discovery against a given scope, using given discovery profile at a certain time.
- Verify correctness of configuration in TADDM GUI - observe if the discovery happened.
- Given an installed TADDM server, create the snapshots to take a point-in-time copy of basic information about computer systems, discovery events and server applications running on computer systems so that the snapshots are available to take a point-in-time copy of basic information
With emphasis on performing the following tasks:
- Log on to TADDM server by using TADDM user.
- Run the snapshot tool with "take" Switch or the API.
- Validate the BIRT reports in the Data Management Console.
- Given a list of locations to be configured in TADDM, make necessary decisions and modifications in collation.properties and anchor properties files so that discovered components have location tag attribute set properly.
With emphasis on performing the following tasks:- Enable location tagging in TADDM by modifying collation.properties entry com.collation.locationTaggingEnabled
- Decide whether to enable static location tagging per TADDM Server or per anchor.
- Configure static location tagging in collation.properties (location tagging per TADDM Server).
- Configure static location tagging in anchor properties file (location tagging per anchor).
- Decide whether dynamic location tagging will be used.
- include -l parameter when starting discovery from CLI (api.sh, invokejob.sh).
- include -l parameter when loadin IdML book.
- Create scopes adding location tag information to enable filtering and usage per location.
- When running BIRT reports use filtering by location.
- Given the information required to create a custom server template, a running TADDM, server and access to the Discovery Management Console, define custom server templates and build custom server templates from the UI so that the custom applications have been discovered properly.
With emphasis on performing the following tasks:
- Identify need for custom server template.
- View the unknown servers list from TADDM GUI.
- Define the custom server templates basing on the information from unknown servers list or manually if information is not available.
- Configure the defined custom server templates from the UI.
- Configure the identification criteria.
- Configure configFiles to be discovered by TADDM.
- Run a discovery to validate if created Custom Server Template works properly.
- Given that TADDM and IBM Tivoli Monitoring (ITM) are installed, prepare ITM and TADDM environment so that discovery can be performed by using ITM agent.
With emphasis on performing the following tasks:
- Set up TADDM discovery agent installation package on Tivoli Enterprise Monitoring Server.
- Deploy TADDM discovery agent package to IBM Tivoli Monitoring operating system agents.
- Copy ITM libraries to TADDM discovery manager.
- Verify that TADDM and ITM are connected and the data collection is working.
- Given a business application and the list of servers/components/applications that compose the business application, create the appropriate application descriptor files and deploy them to the appropriate directories on the servers where discovery will be done so that discoveries have been run and it has been verified that the business application has been built correctly.
With emphasis on performing the following tasks:
- Create the base XML application descriptor for the business application if you need to define general information about the business application: For each component/application that is part of the business application, create the descriptor file.
- Put created XML files in proper directories on target systems (follow sensor documentation guidelines for placing application descriptor files properly).
- Run discovery and view the results to verify that the application descriptors are setup correctly and business applications are filled correctly (according to XML files content).
- Given a list of users to be created and Admin access to Data Management Portal, create users so that TADDM user IDs have been configured for use.
With emphasis on performing the following tasks:
- Log in to the Data Management Portal with an admin ID.
- Under the Administration tab on left, select Users.
- In the Users Dialog box, select Create User..
- Provide the appropriate information.
- Select the proper role assignment under the Role Assignment dialog box.
- Select the proper Access Collection under the Role Assignment dialog box.
- Select the OK button at the bottom to complete.
Section 4: Administration
- Given the need to categorize application components into business applications and services, create business application and services using the Data Management Portal that combines large collections of individual components into logical groups.
With emphasis on performing the following tasks:
- Log into the Data Management Portal to build a business application and business services.
- Creating a business application and business services can be executed from the menu bar under Grouping Composer function tab.
- General Information Screen; Name, Description, URL
- Create business application and business services Components Screen: Include the available components.
- BA Component is available for business application. -Business application has an optional to create a new Functional Group.
- Application Admin Information Screen.
- Business application topologies can be viewed under the Topology functional tag.
- Business application and business services: Edit, Delete, show Details, and display physical and logical topology.
- Under the Discovered Components function, select either business application or business services and right click on the mouse to view the selections.
- For business applications under the Topology functional tab, select a displayed application and, then right click on the mouse to view the selections.
- Given a properly installed and operating IBM Tivoli Application Dependency Discovery Manager (TADDM) system and access credentials, execute API query so that XML data is extracted and available via STDOUT (Standard Output).
With emphasis on performing the following tasks:
- Log in to the TADDM server.
- Execute the API with a valid user name and password and valid switches.
- Given the timespan for keeping the historical changes of attributes values, perform a cleanup of the database by running proper SQLs so that TADDM database is cleaned up from old change history data
With emphasis on performing the following tasks:- Perform a database backup.
- Determine the date up to which data is to be removed.
- Convert the date to java timestamp.
- Determine the type of TADDM installation.
- For single domain installation perform cleanup tasks.
- Run SQL query that will remove unwanted data from change_history_table.
- Run SQL query that will remove unwanted data from change_cause_table.
- For synchronization installation perform cleanup tasks in a proper order.
- Wait for synchronization.
- Remove unwanted data from domain DB first.
- Keep the timespan the same on all TADDM domain servers.
- Verify the correctness of data after cleanup
- Given TADDM is up and running, max size of the file system to be used for logs, configure collation.properties settings for logs maintenance and optionally implement removing sensor logs mechanism so that log files are maintained automatically.
With emphasis on performing the following tasks:
- Edit collation.properties file to set the proper logging level to save filesystem space.
- Set to DEBUG / TRACE when resolving problems.
- Set to INFO for everyday maintenance.
- Edit collation.properties file to configure log files maintenance settings taking into consideration the size of filesystem for logs.
- Set the max size of each log file.
- Set the max number of log files to be kept befor rolling.
- For sensor logs maintenance, create a script or a crontab entry (on unix systems) that will remove old logs because sensor logs are not mainteined automatically by TADDM and have to be removed manually.
- Edit collation.properties file to set the proper logging level to save filesystem space.
- Given a customer's need for TADDM, prepare, install, and execute TADDM so that the customer's environment is fully discovered and validated.
With emphasis on performing the following tasks:
- Execute the plan for data collection approach, server & network requirements.
- Execute Change Control.
- Deploy TADDM Enterprise (if planned), Domains, Anchors and/or Gateways.
- Modify network routing and firewall rules.
- Prepare servers, gateways routers for scans.
- Set up TADDM.
- Define a test and/or pilot TADDM scope.
- Test and/or pilot TADDM scope.
- Load TADDM scope.
- Execute TADDM scope.
- Validate results.
- Given a list of servers/images and components/applications to be discovered, manage and obtain credentials so that credentials are created on the requested servers/images/components/applications.
With emphasis on performing the following tasks:
- From the list of servers/images/components/applications that need to be discovered, determine which sensors need credentials to run successfully.
- For each sensor that requires credentials, document the credential requirements.
- Work with customer's process for requesting credentials; document each credential request and delivery owner as the request is submitted. Include in the document when the request is scheduled to be completed.
- As credential requests are completed, update credential requirements document and enter the credentials in the product.
- If the documented completion date for any credential request expires, use the customer's process to escalate the request.
- Given an existing scope and discovery profile to use, run a TADDM discovery using the Discovery Management Console and the API so that a discovery has been run by using the API and Discovery Management Console.
With emphasis on performing the following tasks:
- Determine the scope of each discovery to be executed.
- Execute a discovery by using the UI:
- Run the parallel scan.
- Execute a discovery is using the API or invokejob.
- Check discovery progress logs.
- Validate success.
- Given a valid IDML file for loading, a running TADDM server and access to the server running TADDM, use the loadidml script to populate the TADDM database so that the information contained in the IDML file is loaded into the TADDM database.
With emphasis on performing the following tasks:
- Transfer the file to the TADDM server or make it available through a network share or other means.
- Log in as the user that starts and stops the TADDM server.
- Perform the necessary steps to load the IDML file.
- Confirm the load through the Data Management Portal.
- Given a TADDM Server, Discovery Management Console and User ID and password, review the types of status messages that occur during discovery and viewing history so that the status messages are understood.
With emphasis on performing the following tasks:
- Log in to the Discovery Management Console.
- Run a discovery.
- View the Discovery Overview, or after discovery completion, view History.
- View the current status of the sensor. Values that can be displayed are:
- Done is a successful sensor completion.
- In progress is the sensor is still analyzing the target application, computer system or network devices.
- Error is an unsuccessful sensor completion, it can also indicate that previous sensors did not run for one reason or another and caused this sensor to run and fail.
- Warning is all critical functions in the sensor completed successfully. Warnings would include things like certain configuration files were not located or did not have permission to open files or run commands.
- Description and Information is a light status description of what the sensor is doing and final description result.
- Given an installed TADDM server, access to the server running TADDM and the new database user password, update the collation.properties file and encrypt the database access passwords so that the collation.properties file is updated with the new encrypted passwords.
With emphasis on performing the following tasks:
- Identify that the credentials for the tool need to be changed.
- Log in as user that starts and stops the TADDM server.
- Update the credentials in collation.properties.
- Save the file.
- Issue the command to encrypt the passwords:
- Check the collation.properties file the passwords are no longer plain text.
- Restart the TADDM server.
- Given an installed TADDM server and terminal access to the server running TADDM, start and stop the TADDM server processes so that the TADDM server has been stopped or started.
With emphasis on performing the following tasks:
- Log in as the non-administrator that was defined during installation for starting, viewing and stopping TADDM.
- View the status of TADDM.
- Start TADDM.
- Stop TADDM.
- Restart TADDM
- View the status of TADDM
- UNIX: $COLLATION_HOME/bin/control status
- Windows: %COLLATION_HOME%\bin\control.bat status
- Given the TADDM server is running, run the analytics from the Data Management Portal so that the necessary information is available to be analyzed.
With emphasis on performing the following tasks:
- Access the analytic function in the Data Management Portal.
- Select the appropriate report in the analytic function.
- Define the type of query required.
- Run the query.
- Examine the results.
- Save the results in the appropriate format.
- Given a working TADDM server, and access to the Data Management Portal, navigate to the Data Management Portal and create Configuration Items, and dependencies so that a new Configuration Item (CI) or dependency is created.
With emphasis on performing the following tasks:
- Navigate the Data Management Portal.
- Create a component (CI) with the appropriate type, name and other relevant attributes
- Define component dependencies from the Discovered Components section. Dependency can be created for either Dependent or Provider. Multiple CIs can be added by repeating the process.
- Given that the present roles do not suffice for an access requirement to TADDM, create a new role with unique permissions to fulfill the request so that a new TADDM role is configured for use.
With emphasis on performing the following tasks:
- Note the requirements for the request and their uniqueness from what exists already.
- Log in to the Data Management Portal with an Admin ID.
- Define the role name, value in the Create Role dialog box.
- Select the proper permission for the new role.
- Create role to complete.
- Validate that the permissions are adequate to fulfill the need.
- Given supported hardware, operating system and running database, command-line access to the TADDM server, the password for the root, create backups and perform restores so that a backup and restore are available when needed.
With emphasis on performing the following tasks:- Perform back up:
- Stop TADDM.
- Verify all processes related to TADDM are killed.
- Zip TADDM into a file.
- Take the backup of installshield.
- Perform a database backup.
- Save the zip file and the database backup.
- Perform restore:
- Stop TADDM.
- Verify all processes related to TADDM are killed.
- Use the backup copy of TADDM and the database to restore the files.
- Unzip into the appropriate directories.
- Restore the database backup using the appropriate tools.
- Perform back up:
Section 5: Problem Determination
- Given a running IBM Tivoli Application Dependency Discovery Manager (TADDM) environment and database connectivity, tune the Discovery parameter so that the discovery parameters are tuned appropriately.
With emphasis on performing the following tasks:
Analyze the customer environment to understand which parameters required to be tuned.- TADDM parameters that can be modified are contained in the collation.properties file.
- The two major areas for tuning are attribute discovery rate and storage.
- Attribute discovery rate: In this file, the property with the most impact on performance is the number of discover worker threads. A discover worker thread is a thread that runs sensors.
- Max number of discover worker threads
- com.collation.discover.dwcount=16
- The server must be restarted for the change to take effect.
- Storage of the discovery results is the discovery performance bottleneck, if the number of sensors in the storing state is approximately the value of the property:
- com.collation.discover.observer.topopumpcount
- Increase the maximum heap size setting for the following Java Virtual Machines (JVMs):
- Discovery
- Topology
- StorageServer
- Given list of Java Virtual Machines to set extended logging for, edit collation.properties file and set proper values for logging level so that logging level is set to desired value and logs contain desired information for problem diagnosis
With emphasis on performing the following tasks:- Get the list of JVMs to change logging level or decide to change logging level for all JVMs (global setting).
- Choose logging level that has to be set in order to allow problem determination (FATAL, ERROR, WARN, INFO, DEBUG, TRACE).
- Edit collation.properties file in order to change logging level.
- If changing all JVMs setting - edit value com.collation.log.level and set it to one of the available logging levels.
- If changing particular JVM, change one of the following settings:com.collation.log.level.vm.Topology=
com.collation.log.level.vm.Discover=
com.collation.log.level.vm.EventsCore=
com.collation.log.level.vm.Proxy=
com.collation.log.level.vm.EcmdbCore=
com.collation.log.level.vm.DiscoverAdmin=
com.collation.log.level.vm.StorageService=
com.collation.log.level.vm.DiscoveryService=
com.collation.log.level.vm.Anchor= - Analyze logs for problem determination.
- Given that a problem has occurred within the TADDM environment and error levels need to be modified to ensure the correct messaging is captured for remediation enable/disable advanced logging for TADDM so that the environment is set for debug mode so that when problem occurring the correct messaging is captured and resolved.
With emphasis on performing the following tasks:
- Identify that an error has occurred.
- Set up logging in TADDM to gather diagnostic information.
- Take steps to determine the root cause by setting the operate level of verbosity by changing the overall log level.
- Adjust the setting to suitable level.
- Recreate the error.
- Review the logs.
- Enable more logging for proper components (if required).
- Search the knowledge base.
- Get and apply fixes (if applicable).
- Contact support (if applicable) with the problem detected with full logging enabled.
- Once the issue is resolved reset log levels to appropriate settings for environment.
- Given the need to diagnose a problem within the TADDM environment, utilize the support bin tools so that problem can be debugged.
With emphasis on performing the following tasks:
- Identify the problem that exists.
- Identify the appropriate support tool.
- Execute the support tool with the appropriate switches.
- Quantify the results.
- Verify the problem has been resolved.
- Given TADDM is installed and user IDs are created and problems occur with Discover, Topology, Discovery Admin, Proxy or Gigaspace processes, review the jvmarg settings in the collation.properites file and determine if more memory is required so that performance is enhanced and/or service is not interrupted.
With emphasis on performing the following tasks:
- Identity performances that are not as expected.
- Check the present configuration settings for the JVM.
- Modify the settings.
- Restart TADDM.
- Conduct a test to verify if performance has improved.
- Repeat as necessary until optimal performance is achieved.
- Given the need to define common parameters in the collation.properties files, review the most common parameters that are located in the collation.properties file so that the common parameters have been defined.
With emphasis on performing the following tasks:
- Set overall logging level.
- View cache optimization.
- Review primary database connection related parameters.
- Review archive database connection related parameters.
- Review individual tool directory paths.
- Review connection and pool parameters.
- Review port assignments.
- Review SSL parameter.
- Review agent command assignment.
- Review RMI client proxy.
- Review all timeout parameters.
- Modify any discrepancies in the configuration.
- Restart TADDM.
- Given a TADDM server, Identify points of failure regarding NMAP on L1 discoveries so that points of failure regarding NMAP on L1 discoveries are identified and corrected.
With emphasis on performing the following tasks:
- Run the L1 discovery.
- Verify the appropriate version of NMAP is installed on the TADDM server.
- Verify the settings of StackScanSensor in Discovery Profile using TADDM UI.
- Verify sudo permission and settings in the sudoers file on the TADDM server.
- Check the TADDM log for NMAP failures.
- Issue appropriate command to troubleshoot NMAP failure.
- Check permission and availability of NMAP on TADDM server.
- Modify TADDM or NMAP configuration.
- Run discovery again.
- Given an application sensor failure, conduct an L3 Scan and troubleshoot application sensor failures so that the problems are resolved for a successful L3 collection.
With emphasis on performing the following tasks:
- Identify the scope and/or source system to conduct L3 scans against.
- Identify the products that require credentials for L3 from that scope.
- Enter those application credentials into the Access List.
- Conduct the scan.
- Validate successful collection or failure.
- Analyze logs if failure occurred.
- Ensure that application product is supported with an out of the box sensor
- Ensure that the application product is running on a supported platform for the out of the box sensor.
- Ensure appropriate level of credentials were used.
- Ensure security settings are correct.
- Ensure path settings are correct.
- Modify sensor settings if required.
- Modify collation.properties configuration if applicable for the failing sensor.
- Execute L3 scan again.
