Same as 7-mode as a whole the Unified Manager 5.x Core goes end of support by end of this year. For ONTAP 9, please remember that Unified Manager 9.4 is also end of support for some time already. I recommend to upgrade to a more recent release. All Active IQ Unified Manager versions up the most recent 9.11 support all ONTAP 9.x versions. The Unified Manager version should be higher/newer than your ONTAP version. Although UM supports ONTAP up to one release higher, you won't get the full feature set. Kind regards, Niels
... View more
Hi, I noticed the very same behavior with the AIQUM instance I have running in my lab after upgrading to 9.10. (I don't see that problem on my 9.11 instance though) The good news - the password is not incorrect. For whatever reason the admin account got locked. Quick-fix: log in to the web UI with a different admin user (I hope you have another one) and unlock the admin user account. Unfortunately it will get locked at some point again. From preliminary troubleshooting it looks as if some internal process is using the admin account with an incorrect or default password. After multiple unsuccessful logins the account gets locked. I suggest to open a support case. Kind regards, Niels
... View more
Hi cruxrealm, GA is not a fixed date but rather a status that is achieved based on numbers of installations. The metric includes things like -x number of customer using the RC version - y number of instances of the RC version being deployed - z number of clusters being monitored in RC version - new bugs found below a certain threshold On the first three you have direct influence. Download it, install it, run it - and be it in a test environment. The sooner the numbers are hit, the sooner the GA status is declared. And please also remember that an RC version is fully supported, including production use. It has no limitations other than limited run time at customers. Kind regards, Niels
... View more
Short answer: Yes it does. This is a screenshot from current AIQUM 9.9 (also existed in earlier versions). As you can see there is a tab called "Failover Planning" covering exactly this use case: To get there go to Inventory > Storage > Nodes Under "View" select "Performance - All Nodes" - click on the node of interest. Kind regards, Niels
... View more
At this time this is expected behavior. AIQUM does not monitor the MetroCluster backend of an MC IP configuration. AIQUM handles both the clusters of the MC IP as "regular" clusters. We expect to add this capability in a future release of AIQUM. Kind regards, Niels
... View more
Then it looks to be a bug as "." does not seem to be accepted as a valid character. AIQUM should either have prevented you from using it in the first place, or correctly deal with it afterwards. Please reach out to support. I am curious though - can you login with a username that contains a dot? Kind regards, Niels
... View more
Hi Arum, click the checkbox on the left next to the user name. Then scroll up to the top of the page and click the "Edit" link. If the "Edit" link is not enabled, then multiple user names may have been selected. It only works with a single selection. Multiple selection are meant for easier deletion. If the link still stays disabled with only a single entry being selected, please open a support case. Kind regards, Niels
... View more
Hi Michael, in the meantime this has been identified as a bug and classified as P1. https://mysupport.netapp.com/site/bugs-online/product/AIQUM/BURT/1365576 Please reach out to support for how to handle the situation and when to expect a patch release. Kind regards, Niels
... View more
I feel your pain. One would think sorting should not be that hard.
Sorting of tables is introduced with new and redesigned System Manager UI in ONTAP 9.7.
You might not find all the functions of System Manager Classic there though (yet).
Developing a UI is a journey. Additional features are added to 9.8.
regards, Niels
... View more
Unfortunately the answer from @Ontapforrum is incorrect.
Active IQ Unified Manager 9.7 inherits the Service Level Objective Management feature formerly available in NSLM - NetApp Service Level Manager.
With this a user can *actively* provision resources, including an AQoS (adaptive QoS) and/or an efficiency policy.
Also assigning AQoS policies to pre-existing workloads (=volumes and LUNs) is possible, but should be evaluated carefully. Please review the section "Provisioning and managing workloads" in the AIQUM9.7 online help (Link to Offline Help for your reference).
In short - if you assign either a Performance Service Level, or a Storage Efficiency Policy in the AIQUM UI, it will go and alter the volume configuration to the respective AQoS and/or efficiency policy.
Be *very* careful with the blue button that reads "Assign System-Recommended PSLs" - it has a warning sign for a reason. It will go out and configure *all* volumes and LUNs with the AQoS policy AIQUM analyzed to be the best fit and override any pre-existing QoS settings for the volumes.
I deem the PSL-based provisioning and management to be a very strong feature. But you need to get your head around it as it may fundamentally change the way how you may have provisioned resources in the past.
Kind regards, Niels
... View more
If you are seeking inflight-encryption, iSCSI with CHAP is not the answer. CHAP is for secure authentication between host and storage to make sure only hosts that can provide the right credentials can access the storage. It does not encrypt the data.
Kind regards, Niels
... View more
AIQUM 9.8 is currently in Early Validation Program (EVP - think of it as a closed beta).
It's planned to be released by end of the year.
Kind regards, Niels
... View more
Hi Lorenzo,
thanks for sharing this. Monitoring memory for such case would make sense, but only if the counters are granular enough to show what portion of RAM is used for which function. I don't know if the provided counters can deliver this information.
Kind regards, Niels
... View more
Hi Lorenzo,
I don't know if Harvest has access to counters specific to RAM.
But may I ask what the intention is by monitoring controller RAM?
Any memory not actively consumed by ONTAP itself is used as cache for client data. Hence the RAM usage will optimally be 100%, all the time.
regards, Niels
... View more
Sorry Paul. I should have been more diligent.
First, I did not create a new relationship, but I modified an existing one as I was too lazy to create a new one.
Also it was not a volume relationship, but an SVM DR relationship.
I tested again and verified your findings:
- create a new volume relationship --> interval schedules not supported
- modify a volume relationship --> interval schedule not supported
- create a new SVM DR relationship --> interval schedule was accepted (but is it indeed supported? Bug?)
- modify SVM DR relationship --> interval schedule was accepted (but is it indeed supported? Bug?)
Therefore it indeed looks as if interval schedules are not working for you.
Also I wuld be sure if OCUM would actually be able to correctly apply the thresholds as the lag between transfers would vary each time.
That leaves my first suggestion to create a more "sophisticated" schedule, which you rightfully said is just a "very long" schedule to define each start of a replication individually.
Sorry if I created confusion.
Kind regards, Niels
... View more
Then it looks to be related to the ONTAP version you are using.
I tried on 9.6 and the snapmirror modify command accepted the interval schedule.
regards, Niels
... View more
Hi Paul,
that is in fact what I meant. Unfortunately it's not as easy as "8-20@0,5,10,15,20,25,30,35,40,45,50,55 + 20-8@0,20,40". That would be nice though.
So either you create that long cron schedule and specify each time individually, or you might want to try out the "job schedule interval create" documented here:
https://docs.netapp.com/ontap-9/topic/com.netapp.doc.dot-cm-cmpr-960/job__schedule__interval__create.html
With that the next update will only start X minutes after the previous one finishes.
I have no idea though how the OCUM thresholds react to that as the actual lag will be quite dynamic.
regards, Niels
... View more
Hi Paul,
I agree that the threshold is pretty generic. Nonetheless it follows a rule.
150% means you missed one update, 200% means you missed two. That's irrespective of the time between updates (as you correctly noted). Unfortunately there is nothing you can do about it in OCUM.
Now - you say the lag is expected as updates just take longer during the night.
So you can't change the thresholds in OCUM on a per relationship bases, but how about accounting for the longer updates in your snapmirror schedule?
I assume you currently have a pretty simple schedule, meaning just every 5min.
How about you building a slightly more sophisticated schedule that accounts for the longer update times at night?
With that OCUM will apply the 150% and 200% Threshold to each intervall individually. So lets say you keep 5min from 8am to 8pm, but change to 20min from 8pm to 8am, then alerts would only be triggered by lagtimes of 30min or more at night, but 7.5min and 10min respectively during the day.
Kind regards, Niels
--------------------------------
If this post helped you, help others by marking it as solution or give kudos.
... View more
Just to be sure - you are plaiing to use the role OCUM and the user OCUMadmin for both
a) having Unified manager monitor the clusters, and
b) having WFA execute workflow-based tasks?
If so, you may want to split into two seperate roles. Have a very limited user for use by Unified Manager, and have another user for WFA for actual execution of tasks.
OCUM should not require the console application as it should use API calls only, meaning http and/or ontapi. The console is the physical console port or SP access. I doubt that you would need that for either WFA or OCUM.
Kind regards, Niels
... View more
True. WFA will need different capabilities than OCUM.
But the capabilities required by WFA will match what you want it to do. So as an example if you want WFA to create and alter volumes, but not destroy them, you need to create a role with the respective privildges. I doubt there will bre a one-size-fits-all-solution to this - that would be full admin privilidge as in #1.
But generally it should be easier to figure out what capabilities you need as the WFA user is not monitoring on some interval, but acting on a prticular task at a particular time. So whenever you initiate a workflow and it fails, check the ONTAP logs which capability is missing.
Yes - that is tedious. But as I tend to say "secure is never easy, and easy is never secure".
Kind regards, Niels
... View more
Hi Hariprasat,
I see two options here in case you are not allowed to use the adminm account directly.
1) create a new user, which can be AD integrated, and assign it admin privileges. That limits the use of the local admin account, but obviously still allows full admin access. This is fully supported though.
2) you create a role. Unfortunately there is no official documentation on what capabilities that role requires. Full admin access is the only officially supported setup - see 1) above. Nonetheless there are people with similar requirements as you who have tried to figure that out - look here:
https://community.netapp.com/t5/Data-Infrastructure-Management-Software-Discussions/how-to-create-separate-least-priveledged-role-for-OCUM-Service-Account-user/m-p/133828#M24276
Again - this is people trying things. Not officially supported. I don't know about latest OCUM. After you created the role with the capabilities listed there, you might need to check ONTAP logs in case that service user is denied certain tasks and you might need to add those capabilities to the OCUM role.
Kind regards, Niels
---------------------
If this post helped you, help others by accepting as solution or give kudos.
... View more
Hi satishkumar,
you delivered the strongest argument yourself. OCUM is cDOT only. If you want to collect performance data from 7mode, you'd need to setup Unified Manager for 7mode. Two seperate tools to collect and analyze performance data. No single source of information, different level of information, different UIs, different workflows.
Grafana will get all data in one place. Single tool, single source of truth.
regards, Niels
... View more
Hi Jamison,
the OCIE service is the data collection service of OCUM that connects to the individual ONTAP clusters. It issues ZAPI commands over https to ONTAP, and that's done to port 443. If you change the port for OCIE, then data collection fails.
Unfortunately I don't know how to change the OCUM web UI port though - sorry.
regards, Niels
... View more
Hi GuoSyuan,
as always - it depends...
Here my opinion:
1) vApp - the easy way
It's a hardened and closed, easy to deploy and run instance of OCUM. You don't need to maintain or add any packages to get the service running (in fact you even can't).
The vApp generally falls under 1-year full support, followed by limited support. Hence you would need to plan for yearly updates.
Security updates, also for the underlaying OS are delivered with new OCUM/vApp version only.
As the vApp has limited possibilities due to its hardening, using scripts in combination with alerts is limited to non-existent.
2) Linux & Windows - the flexible way
You install the OCUM package on the server and OS you prefer. You are responsible to maintain software and packages to keep them compatible with OCUM, but you also have the option to apply security patches to those packages as you need or your organisation forces you to do.
The OCUM packages for Lin/Win have the same support model as ONTAP, meaning 3yrs full support for odd releases and 1yr full support for even releases, both followed by limited support. Hence you may only need to plan for updates once every three years or just align with your ONTAP update strategy.
You can use any scripting language as you can install any package you like.
No preference over Linux or Windows other than your preferred scripting language (e.g. PowerShell is limited on Linux).
regards, Niels
-----------------------
If this post resolved your issue, please help others by selecting ACCEPT AS SOLUTION or adding a KUDO or both.
... View more
It may be related to your ONTAP version.
I have just tested on a 9.4 machine in our lab and the banner message is shown right before the System Manager login page is loaded.
Regards, Niels
... View more