NetApp Harvest initial polling issue

[cconner]

Hi all,

Trying to add FAS controller to harvest and am getting errors. This is my first time here and first post. so excuse if location is in wrong place or issue is resolved elsewhere. Below is the output of my poll to the controller from Harvest Poller

root@NY02HARVEST:/opt/netapp-harvest# ./netapp-worker -poller .......RL01A -v

[2017-06-01 15:36:15] [NORMAL ] WORKER STARTED [Version: 1.3] [Conf: netapp-harvest.conf] [Poller: .......RL01A]

[2017-06-01 15:36:15] [WARNING] Started in foreground mode; messages to STDERR are redirected to the logfile and are not visible on the console.

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [29] is Section [global]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [30] in Section [global] has Key/Value pair [grafana_api_key]=[eyJrIjoiOHBhd085S3BrSGI2VVdvWW5DVno2T3dVY242MUR..................=]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [31] in Section [global] has Key/Value pair [grafana_url]=[https://10.10.....:443]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [36] is Section [default]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [37] in Section [default] has Key/Value pair [graphite_server]=[10.104.0.109]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [38] in Section [default] has Key/Value pair [username]=[netapp-harvest]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [39] in Section [default] has Key/Value pair [password]=[**********]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [52] is Section [...........]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [53] in Section [.......RL01A] has Key/Value pair [hostname]=[10.10....]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [54] in Section [.......RL01A] has Key/Value pair [group]=[netapp-harvest-group]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [56] is Section [.......RL01B]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [57] in Section [.......RL01B] has Key/Value pair [hostname]=[10.10.....0]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [58] in Section [.......RL01B] has Key/Value pair [group]=[netapp-harvest-group]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [60] is Section [.......NA8020A]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [61] in Section [.......NA8020A] has Key/Value pair [hostname]=[10.15....]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [62] in Section [.......NA8020A] has Key/Value pair [group]=[netapp-harvest-group]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [64] is Section [.......NA6020B]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [65] in Section [.......NA6020B] has Key/Value pair [hostname]=[10.15....]

[2017-06-01 15:36:15] [DEBUG ] [conf] Line [66] in Section [.......NA6020B] has Key/Value pair [group]=[netapp-harvest-group]

[2017-06-01 15:36:15] [NORMAL ] [main] Poller will monitor a [FILER] at [10.10....:443]

[2017-06-01 15:36:15] [NORMAL ] [main] Poller will use [password] authentication with username [netapp-harvest] and password [**********]

[2017-06-01 15:36:15] [DEBUG ] [sysinfo] Updating system-info cache

[2017-06-01 15:36:15] [DEBUG ] [connect] Reverse hostname lookup successful. Using HTTP/1.1 for communication.

[2017-06-01 15:36:15] [WARNING] [sysinfo] Update of system-info cache DOT Version failed with reason: Server returned HTTP Error: 503 Administrative

[2017-06-01 15:36:15] [WARNING] [main] system-info update failed; will try again in 10 seconds.

[madden]

Hi @cconner

I think you are running ONTAP in 7-mode so there could be a few reasons admin isn't possible.

Run:

sdt-7dot1a> options httpd.admin
httpd.admin.access legacy
httpd.admin.enable off
httpd.admin.hostsequiv.enable off
httpd.admin.max_connections 512
httpd.admin.ssl.enable on
httpd.admin.top-page.authentication on

sdt-7dot1a> options tls
tls.enable on 

Check the items in red.

httpd.admin.access: hosts that are allowed to manage the system via ssh/api.  Maybe the poller host is not in this list?

httpd.admin.ssl.enable: Harvest uses SSL so this must be set to on

tls.enable:  Harvest uses TLS so this must also be on

I think you have a limited host list (httpd.admin.access) and need to open that up.  Try * temporarily to see if that allows access.  Then if you want some more controlled list see here for valid options.

Chris Madden

Solution Architect - 3rd Platform - Systems Engineering NetApp EMEA (and author of Harvest)

Blog: It all begins with data

If this post resolved your issue, please help others by selecting ACCEPT AS SOLUTION or adding a KUDO or both!

[cconner · Accepted solution]

@madden, I will try these out and let you know. Yes, this is 8.2.1 7-mode BTW.

[cconner]

@madden Solution was spot on, thank you. Can I add or view an aggregate performance view (Each aggregate individually). I saw this on the old "Perf Viewer" and it assisted in identifying candidate aggregates to migrate volume\LUNs to.

[COMITSUPPORT]

Hello.

I am having the following issue with harvest 1.4 and netapp-manageability-sdk-5.3

root@netapp-mon:/opt/netapp-harvest/log# curl -k -v https://192.168.0.x
* Rebuilt URL to: https://192.168.0.x/
* Hostname was NOT found in DNS cache
* Trying 192.168.0.x...
* Connected to 192.168.0.x (192.168.0.x) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

root@netapp-mon:/opt/netapp-harvest# ./netapp-worker -poller xxxx
[2018-09-05 16:14:41] [NORMAL ] WORKER STARTED [Version: 1.4] [Conf: netapp-harvest.conf] [Poller: xxxx]
[2018-09-05 16:14:41] [WARNING] Started in foreground mode; messages to STDERR are redirected to the logfile and are not visible on the console.
[2018-09-05 16:14:41] [NORMAL ] [main] Poller will monitor a [FILER] at [192.168.0.x:443]
[2018-09-05 16:14:41] [NORMAL ] [main] Poller will use [ssl_cert] authentication with ssl_cert [netapp-harvest.pem] and ssl_key [netapp-harvest.key]
[2018-09-05 16:14:41] [WARNING] [sysinfo] Update of system-info cache DOT Version failed with reason: No response received from server; Recommend to verify TLS is enabled (7-mode: options tls.enable) and/or setup ssl again (7-mode: secureadmin setup ssl)
[2018-09-05 16:14:41] [WARNING] [main] system-info update failed; will try again in 10 seconds.
[2018-09-05 16:14:51] [WARNING] [sysinfo] Update of system-info cache DOT Version failed with reason: No response received from server; Recommend to verify TLS is enabled (7-mode: options tls.enable) and/or setup ssl again (7-mode: secureadmin setup ssl)
[2018-09-05 16:14:51] [WARNING] [main] system-info update failed; will try again in 10 seconds.
[2018-09-05 16:15:01] [WARNING] [sysinfo] Update of system-info cache DOT Version failed with reason: No response received from server; Recommend to verify TLS is enabled (7-mode: options tls.enable) and/or setup ssl again (7-mode: secureadmin setup ssl)
[2018-09-05 16:15:01] [WARNING] [main] system-info update failed; will try again in 10 seconds.
[2018-09-05 16:15:11] [WARNING] [sysinfo] Update of system-info cache DOT Version failed with reason: No response received from server; Recommend to verify TLS is enabled (7-mode: options tls.enable) and/or setup ssl again (7-mode: secureadmin setup ssl)
[2018-09-05 16:15:11] [WARNING] [main] system-info update failed; will try again in 10 seconds.

Ontap version 8.2.4P6 7-Mode

below are the options on filer (tls is enabled)

options httpd.admin.enable *

options httpd.access *

options ssl.enable on

options ssl.v2.enable off

options ssl.v3.enable on

options tls.enable on