What would YOU like to see in the Data ONTAP PowerShell Toolkit?

[KENBUNCE0]

Clinton,

I would like to see a secure PowerShell script that could be used to gracefully shutdown a any filer or HA pair it would need to be written so that it could be executed either by a user with minimal privileges or from a UPS monitoring system (ie. APC).

[cknight]

Hi, Ken.  You want a user with minimal privileges to be able to shut down your storage controllers?!  Hmmm, OK.

Using clustered Data ONTAP, you could cache the credentials using Add-NcCredential -SystemScope.  Then any user on that Windows host could connect to a cluster and use Stop-NcNode.

[KENBUNCE0]

Classification: Not VA Sensitive// Not VA Record

Clinton,

My preference is to create a minimally privileged user account that could

then be called from a PowerShell script. This user account could then be

utilized by operational staff to shutdown a filer or HA pair in the event of

emergency. My environment contains a mix of 2040's, 3020's, 3160 HA pairs

and 6080 HA pairs all of which are operating in 7-mode with a planned

transition to Clustermode within the next year. I have been getting

conflicting stories on the role requirements to halt a filer.

Kenneth R. Bunce, CISSP

Systems Engineer, Service Design and Implementation (Contractor)

VA Network Security Operations Center (VA NSOC)

Office of Information Security

Voice: (708) 938-1234 Extension 304.003.5918

Email: <mailto:Ken.Bunce@va.gov> Ken.Bunce@va.gov

Confidentiality Note: This e-mail is intended only for the person or entity

to which it is addressed, and may contain information that is privileged,

confidential, or otherwise protected from disclosure. Dissemination,

distribution, or copying of this e-mail or the information herein by anyone

other than the intended recipient is prohibited. If you have received this

e-mail in error, please notify the sender by reply e-mail, and destroy the

original message and all copies.

Classification: Not VA Sensitive
Not VA Record

This message has been categorized by Bunce, Ken (Triple-i/VA-NSOC) on

Friday, May 24, 2013 at 12:53:32 in accordance with VA Handbook 6500

[JGPSHNTAP]

Clinton -

First, let me say that I love Powershell for Netapp.  I've written some cool stuff with it with all your help.

Now for the wish list. 

Native powershell cmdlets for vscan stats and cifs stat.  I'm particularly interested because of pBlk exhaustion.

Also, for vscan, we have a vfiler report that runs which gives us a dashboard view of vfilers/aliases, but a column for vscan status would be cool.  I don't feel like using invoke-nassh and massaging that data.

All in all, it's pretty suite.

[BISHTECHIT]

Hello Dr. Knight -

I had a chance to read the Scripting Guy blog that you guest Blogged on -

Can you help me understand the *Clone* cmds?

::

::

I have a requirement to scan LUNs, check if a clone is active, if it is not - remove it.

Could you provide some understanding on best practice when work with NetApp clones.

thanks in advance,

Peter

[rmatsumoto]

2 things/questions:

1. It doesn't look like there's a Start-NaReallocate(or any cmdlets involving reallocate) equivalent for cDot PS kit.  Is there an alternative?(I can think of invoke-ncssh but I'd think doing this the "PS way", which I think of as Start-NcReallocate/Stop-NcReallocate type of approach would be preferable).  If this could be implemented in that way, that'd be great.

2. Is there a plan to implement the stats and its subcommands into PS cmdlet?  We're looking to supplement performance monitoring of our cDOT cluster beyond what DFM already does due to there being a gap in how DFM monitors 7-mode and cDOT filers, and it doesn't look like get-ncperf* cmdlets is going to generate the data I'm looking for since there's no start/stop in those commands and the output from running those commands seemed to confirm what I assumed, which is that there's nothing running for Powershell that's generating perf data on interval on these filers. 

[JASONPADMANING]

Creating a Failover-Group in cDOT would be good.

[WHITECLOUD]

Another item for the list:  The get-* commands can take a very long time to run.  It would be nice to have the ability to only gather certain parts.  Get-navol or get-naefficiency are good examples that pull much more data than the admin could possibly use for any one script. The -terse option helps but maybe other options could be added. 

Thanks

[cknight]

The time taken by most of the getter cmdlets is proportional to the time taken by Data ONTAP to assemble and transmit the data.  Clustered Data ONTAP is far superior in this regard, as it supports controller-side filtering as you describe.  The cDOT APIs support queries that limit not only which objects are returned, but also which fields are populated; the Toolkit's cDOT cmdlets support that capability.