Oracle Enterprise Manager European User Group

Oracle Enterprise Manager

European User Group

Martin Pena, Director of Product Management Dave LeRoy, Principal Product Manager Andrew Bulloch, Consulting Member of Technical Staff Ralf Durban, Principal Sales Consultant Oracle Enterprise Manager European User Group • Introductions 10:00am – 10:30am • Enterprise Manager 10g Release 3 Update 10:30am – 12:00pm • Enterprise Manager Deployment Best Practices 12:00pm – 1:00pm • Lunch 1:00pm – 2:00pm • Configuration Management / ITIL 2:00pm – 2:45pm • Enterprise Manager 11g / Beta Discussion 2:45pm – 3:30pm • EM10g implementation at CERN 3:30pm – 3:45pm • Closing Discussion 3:45pm – 4:00pm

Oracle Enterprise Manager 10g Management Environment – Breadth of Capabilities Managed Environment

E-Business ApplicationsSuite, Siebel, PeopleSoft Enterprise Manager

Fusion Middleware,Middleware WebSphere, WebLogic, .NET

Oracle, DatabaseSQL Server, DB2

Host, OS, Storage and Network Enterprise Manager 10g Product Family ÄEnterprise Manager 10g Grid Control • Oracle’s grid-ready framework, allowing IT professionals to manage the entire Oracle eco-system through one integrated management console. ÄEnterprise Manager 10g Database Control • Database Control is the front-end tool for managing a single instance of the 10g database or single cluster instance. ÄEnterprise Manager 10g Application Server Control • Oracle’s application server management interface built directly into the Oracle 10g application server infrastructure Enterprise Manager 10g Management Packs Enterprise Manager 10g Management Plug-ins Enterprise Manager 10g Management Connectors Oracle Grid Control 17 Management Packs

• Database Management Packs • Stand Alone Management Packs • Tuning Pack • Service Level Management Pack • Diagnostics Pack • Configuration Management Pack • Configuration Pack for DB for Non-Oracle Systems • Change Management Pack • Provisioning Pack • Provisioning Pack for DB • Linux Management Pack • Middleware Management Packs • Application Management Packs • Diagnostics Pack • Application Management Pack for • Configuration Pack for AS PeopleSoft Enterprise • Provisioning Pack for AS • Application Management Pack for Siebel • SOA Suite Management Pack • Application Management Pack for • IDM Management Pack Oracle E-Business Suite* Oracle Grid Control 20 Management Plug-Ins • Storage Devices • Non-Oracle Middleware • EMC Symmetrix • BEA WebLogic, • EMC Celerra Server • IBM WebSphere • NetApp Storage Filers • Microsoft .Net Framework • Non-Oracle DBs • Microsoft Active Directory • Microsoft SQL Server • Microsoft BizTalk Server • IBM DB2 Database • Microsoft Commerce Server • Network Devices • Microsoft Internet Information • Check Point Firewall Server (IIS) • Juniper Netscreen Firewall • Microsoft Internet Security and • F5 BigIP Local Traffic Acceleration (ISA) Server Manager &Load Balancers • Host systems • JBOSS Application Server • (Linux, Windows, Unix) • IBM WebSphere MQ Oracle Grid Control 2 Management Connectors

• Connector for BMC Remedy Help Desk • Connector for Microsoft Operations Manager Oracle’s Management Solutions Answers to Today’s Top Challenges

IT Operations Challenges Oracle Enterprise Manager

Improve alignment between Service Level business customers & IT on Management service levels

Transition from reacting to Application Performance end-user complaints to Management proactively resolving issues

Assess correct status of Configuration system and application Management configurations

Reduce cost of managing IT Grid infrastructure Automation Enterprise Manager Breadth of Capabilities

Enterprise Manager

Application Management E

(

e s

O t

p r

e o

Oracle Infrastructure Management b

l e

n R

a d Extended Infrastructure Management r

Extended Infrastructure Management n n

, a

n s

t d

n r Application

Service

I a

Configuration System o

Automation Performance Level t o

p Management Monitoring e

e b Management Management f

r h

e s

s a

)

i D

CMDB y (Discover & Reconcile) Grid Automation Cost effectively manage “many as one”

• Manage many as one • Dashboard views • Management Templates • Automated Software Imaging and Provisioning • Clone Oracle Homes and Instances • Provisioning of RAC/CRS and AS clusters • Bare Metal OS Provisioning • Automation of Oracle patch processes • Direct connection to MetaLink (Oracle Support) • Critical Patch Facility (security)

y Config Mgt Pack for DB; Config Mgt Pack for AS; Config Mgt Pack for Non-Oracle; Provisioning Pack Manage Many as One Bare Metal Provisioning Automatically deploy new, fully configured systems to spec without risk of human error

Image Library

9 Reference images 9 Hierarchical composition Database 9 Patches DB1 Image + Patches 9 Versioned DB2 Image Settings Linux OS + Configuration DB3 Image Patches

AS2 Image Bare Metal Server AS1 Image AS3 Image

OS1 Image OS2 Image OS3 Image Oracle Automation: Provisioning New in 10gR3

Oracle SOA and Oracle Database Fusion and RAC Middleware

Simple, Accurate, Reliable Capacity on Demand • Automate RAC provisioning while providing service – Convert DB to RAC – One-click-extend RAC to meet increased demand – De-provision RAC nodes Best on Oracle • Simplified way to scale up or down RAC – Integrated provisioning of RAC, ASM, and Clusterware – Bare metal provisioning integrated with RAC provisioning • Flexible and Adaptable to your IT environment • Extend or customize Out-of-Box provisioning process • Integration of provisioning procedures into your IT environment Overall RAC Deployment cycle

Test users Testing and Staging

1 2 Create reference RAC systems Stage gold images

Production

1 5 4 3 Scale down Scale up RAC cluster Create Production clusters Oracle Automation:Patching New in 10gR3 Oracle SOA and Oracle Database Fusion and RAC Middleware

Simple, Accurate, Reliable Maintenance of Distributed Systems • Automate patching while continuing to provide service • Customizable Orchestration of Multi-tier Patching of Oracle Systems Environment (COMPOSE) Best on • Rolling and non-rolling patching automation Oracle • Out-of-Box best practices for DB, RAC, ASM, CRS, Dataguard and middle-tier • Automatic orchestration of system shutdown, switchover, patching, and restart • Adaptable to your IT environment • Extend or customize the out-of-box provisioning process • Enriched OS Patching (Linux, Solaris, Windows) • Vendor site integration e.g RHAT Network • Reduce possibility of errors and improve reliability EM driven HA (Dataguard) Patching

1 2 Both sites running Dataguard Standby site patched EM DDD

4 3 Primary site patched Sites switched over Configuration Management Know what you have and know what you’re running

• CMDB reports • Discover • CMDB Statistics – All hardware & software Software • Policy standards configurations Installations • Audit Reports – Oracle inventory, including patch • Decision support history and updates SW and HW for incident, Configurations problem, change, • Analyze and release – Monitor and audit change Resource management – Configuration comparisons against Relationships reference, saved or live configurations Certified – Comprehensive reporting Configurations • Foundation for compliance and Best change control Practices – Policy Management – Standardize IT operations management – Security configuration policies Configuration Management Database (CMDB) Configuration Management Know what you have and know what you’re running

y Manage software and hardware configurations and deployments – Policy management – Compliance support – Security configuration scoring y Bare metal provisioning of operating systems and software images y Cloning of existing installations and software images (such as RAC, CRS, and AS), y Patching Automation y Config Mgt Pack for DB; Config Mgt Pack for AS; Config Mgt Pack for Non-Oracle; Provisioning Pack; DB Change Management Poor Management Tools Policy-based Monitoring Apply consistent, adaptive management practices across environment

• Templates • Metric baselines • Adaptive thresholds • Normalized views Sampling of Security Policies

All Oracle Software Database Services 1. Security alerts 1. Enable listener logging 2. Critical security patches 2. Password-protect listeners 3. Disallow default listener name Host 4. Ensure listener log file is valid and owned by 1. Detect open ports Oracle 2. Detect insecure services 3. Ensure NTFS file system type (Windows) 5. Ensure listener host name is specified with IP Application Server Database File Permissions 1. HTTPD has minimal privileges 1. Init.ora should have restricted file permission 2. Use HTTP/S 2. Files in $OH/bin should be owned by Oracle 3. Apache logging should be on 3. Data files should be owned by Oracle 4. Demo applications disabled Database Profile/Configuration 5. Disable default banner page 1. Disallow access to objects by a fixed user link 6. Disable access to unused directories 2. Disallow default tablespace set to SYSTEM 7. Disable directory indexing 3. Set password_grace_time 8. Forbid access to certain packages 4. Limit or deny access to DBMS_LOB 9. Disable packages not used by DAD owner 5. Set password_reuse_max 10. Remove unused DAD configurations 6. Avoid using utl_file_dir parameter 11. Password complexity enabled 7. Set trace_directory_server to a valid directory Configuration Mgmt. & Compliance New in 10gR3 Oracle SOA and Oracle Database Fusion and RAC Middleware

Evaluate, Report & Remediate Systems Against Best Practices

• At a glance compliance scores for your IT environment. • C-level reporting of target compliance scores in dashboard. • Evaluate targets and groups against collection(s) of configurationsBest on • Out-of-Box best practices captured as collection(s) of configurationOra cle policies. Secure DB, Secure Listener, Secure RAC • Report compliance score trends over time • Ability to drill down from compliance dashboards into violations and take corrective actions Compliance Dashboards

• Compliance Scoring – Security settings and configurations – System and application configurations – Corporate best practices

• Drilldowns – Policy and rule descriptions – Violation details – Impacts Service Level Management Align IT and business customers on service levels y Align IT Objectives with Business Objectives y Real-time Service Level Measurement – Services Dashboard y Track actual performance to SLAs • Forms support (10.1.2 & 9.0.4) • Automated creation of System and Service for deployed applications • Change history tracking of system membership • Configuration change history tracking of entire system • Customization of system model allowed – by adding/removing individual components y Service Level Mgt Pack (including Dashboards) Service Level Management • Automated creation of System and Service for deployed applications • Change history tracking of system membership • Configuration change history tracking of entire system • Customization of system model allowed – by adding/removing individual components

• Forms service test / transaction monitoring • Supported for Forms versions 10.1.2 and 9.0.4 • Monitors Forms Application availability, performance, usage, service level compliance • Monitors transaction metrics: • Forms total transaction time • Login time • Average time per message • Network latency • Slowest message block time • Database time Optimized Service Levels

Grid Control y Define service level goals – Agreements and limits y Measure actuals – Availability – Performance – Usage y Report – Alerts – Monitoring Dashboards – Usage y Diagnose problems – Root-cause – Performance bottlenecks Service Level Compliance

• Service Level parameters specification: • Business Days, Hours • Availability Criteria • Performance Criteria

• Calculation of Service Level over a time-period as: • % of time during business hours Service meets the availability and performance criteria

• Comparison of achieved Service Levels to requirements in your SLA Rich Coverage for Service Test Protocols

Any service Representative protocol Client

NY DNS, FTP, HTTP(s), Ping, Related ICMP Ping, IMAP, System Components Tokyo JDBC SQL Timing, LDAP, Paris NNTP, Oracle SQL Timing, POP, Port Checker SF (includes SSL), SMTP, SOAP,

Berlin TNS Ping, Web Transaction, WEBDAV Rio Monitor more services Custom Script by incorporating tests for nearly any application protocol Service Dashboard Application Performance Management Identify and resolve end-user problems quickly

• Complete system monitoring for entire application infrastructure

• Monitor from end-user perspective – Test application services from

w representative geographies

r k – Capture real end-user performance

/ • Diagnostics and Tuning

S P – Rapid problem identification

r v – Root Cause Analysis (RCA)

t – Problem remediation/tuning

C Application / y Service Level Mgt Pack; Application Server Diagnostics Pack; Database Diagnostics Pack; Database Tuning; Plug-ins

Application Service Level Management End-to-End Performance, Availability & Diagnostics

Representative Client Mail service NY Related System Components Tokyo

Monitor key Network service Paris business transactions 9 Availability SF 9 Performance Payroll service

Berlin

Rio Any service Diagnose Identify full root- cause of impact of service system problem problem Application Service Level Management End-to-End Performance, Availability & Diagnostics

Representative Client Mail service NY Related System Components Tokyo Network service Paris

SF Payroll service

Berlin

All All All End to End Rio J2EE or Forms Your Your the Any service Tracing on Oracle AS Users URLs Time

External network Internal network Application Content App Server Database Infrastructure Management Manage the systems supporting the applications better and for lower cost

Enterprise Manager Enterprise Manager y Applications depend upon a variety of infrastructure y Complete application Other SOA and Fusion Middleware Middleware management requires broad infrastructure management EM delivers: Oracle Database and RAC Other Databases y Best, most complete management for the Oracle stack y Strong, broad Other Extended Infrastructure Components management for non- Oracle components Oracle Infrastructure Management Broad management for all application- dependent components

Extended Infrastructure Management

Operating Operating Databases Middleware Network Systems

• Linux • Checkpoint Firewall • All Unix • Juniper Firewall • Microsoft • IBM DB2 • IBM WebSphere • F5 BigIP Load Balancer • MVS • MS SQL Server • BEA WebLogic • OpenVMS • MS .NET • MS BizTalk Server • MS IIS Storage Servers • MS Commerce Server • MS ISA Server • Active Directory • JBoss AS • IBM MQ Series • NetApp Filer • Dell • Citrix (partner-built) • EMC Celerra • Pillar Axiom (partner-built) Management Plug-Ins & Connectors

• RoadmapNon-Oracle DBs • Non-Oracle Middleware • Microsoft SQL Server (2000/2005) • BEA WebLogic • IBM DB2 Database • Citrix Presentation Server • Network Devices • IBM WebSphere • Blue Lane PatchPoint Manger • IBM MQSeries • Check Point Firewall • JBoss AS • Juniper Netscreen Firewall • Microsoft .NET Framework • F5 BIG-IP Local Traffic Manager • Microsoft Active Directory • Nortel Alteon Application Switch • Microsoft BizTalk Server • Radware • Microsoft Commerce Server • Storage Devices • Microsoft Internet Information Server • EMC Celerra Server (IIS) • EMC Symmetrix • Microsoft Internet Security and • NetApp Filers Acceleration (ISA) Server • Onaro SANScreen • Connectors • Pillar Data Systems Axiom • BMC Remedy Help Desk • Host systems • Microsoft Operations Manager • Supported Platforms • PeopleSoft Help Desk • Siebel Help Desk (Linux, Windows, Unix) Released by partners • Dell PowerEdge OMSA • HP OpenView Coming soon • Egenera pServer Coming by partners Extended Infrastructure Management

Extended Infrastructure Management

Common Capabilities

• Discovery • Service level monitoring • Topologies • Root cause analysis and impact • Configuration management • Extensive metric monitoring • System dashboards • Events and escalations • Reporting • Real-time and historical data Enterprise Manager Storage Monitoring Plug-ins EMC Symmetrix EMC Celerra NAS NetApp Filer EMC CLARiiON (later this year)

• Discovery • Monitoring • Availability • Performance • Volumes usage • Hardware component failures and status • Configuration • Reporting Storage monitoring features

• Storage Capacity Analysis • Database storage layout best practices • Host volume configuration • Device performance metrics Support for Microsoft SQL Server

• Discovery • Monitoring • Availability • Performance • Space Usage • Users and Roles • Configuration • Server Configuration • Database Settings • Registry Settings • Security Settings • Reports Support for WebSphere and WebLogic • Discovery • Monitoring • Activity • Performance • Response • Top ‘n’ • Reporting, events, process control • Synthetic transactions • App Servers and clusters • Configuration management • View collected configuration • Ports and protocols • Resource usage settings • Deployed applications and associated modules • JDBC providers and data sources • Compare configurations • Track configuration changes Compare IBM WebSphere Application Server Configurations Enhancements to IBM WebSphere Application Server Plug-in

• Configuration management • View collected configuration • Ports and protocols • Resource usage settings • Deployed applications and associated modules • JDBC providers and data sources • Compare configurations • Track configuration changes • Out-of-box configuration searches • Data Sources • Deployed Applications • J2EE Modules • Automated creation of System and Service for deployed applications Support for NetApp Filer and F5 Load Balancer • Discovery • Monitoring NetApp Filer • Logical volume usage • Hardware component failures and status F5 Load Balancer • Tiered monitoring • Health checks • Reporting, events Oracle Management Connector for Remedy Service Desk

• Automatically open Remedy trouble- tickets in response to EM Alerts • Keep systems synchronized to streamline support processes and improve operational efficiencies • In-context launch of EM from Remedy and vice versa • Fully customizable ticket creation via ticket templates • Out-of-box, best practice Oracle templates • Flexible mapping of EM fields to Remedy trouble ticket fields • Ability to pre-seed values for Remedy fields Oracle Management Connector for Microsoft MOM

• Consolidate events from the two systems in EM console • Enables selective forwarding of MOM alerts to Enterprise Manager • Automatic and manual alert forwarding • Enterprise Manager is automatically updated when changes in MOM occur • Flexible modeling options inside Enterprise Manager: • Generic MOM Managed Host target • Map MOM computers to individual targets in EM • Associate MOM alerts with existing EM targets Integration Benefits Better diagnose availability and performance problems • Correlate problems across your entire IT environment • Enhance Service modeling • Perform comprehensive Root Cause Analysis Root Cause Analysis Enterprise Reporting Proactively deliver specialized management information to users, managers, and executives

• Easy-access out-of-box reports Email Web Console for all Oracle components • Configuration • Performance • Service level • Audit

Reports • Graphical report creation tool • Complete repository access Open Published Repository • Secure publishing capabilities for Views entire user-community • Views accessible by any Grid reporting product Control Sampling EM 10g Reports (110+

Security (cont’d) Configurationin total) Monitoring y Database Privileges • Hardware Summary y Alerts and Violations – Users and Roles with • Operating System – Most common Critical – DBA Group membership • OS Summary – History – File permissions and • Non-Compliant Linux Pkgs – Outstanding owners • Patchable Linux Hosts y Availability History – System Packages with • Oracle Application Server Public execute y Root Cause Analysis • Cluster Configuration – Privileges granted to Public – Most significant impacts • Target Configuration – Users and roles with • Software Summary y Services, Service Levels Access to Key Objects • Oracle Database – Alerts y Security Policy Overview – Performance and Usage • Instance Overview – Compliance – Service Tests Summary • Configuration Summary – Violation Flux • Software Summary – Slowest Pages by Category Storage • Space Usage – Top 5 Most Active Regions • Tablespace Space Usage – Top 10 Most Popular URLs y Database Space Issues • Oracle Home Patch Advisories – Slowest URL Requests – Segments with row chaining – Transaction performance – Tablespaces with problem • Affected Oracle Homes segments • Applicable Interim Patches Security – Tablespaces with • Applicable Patchsets y Database Audit reclaimable space • Applied Interim Patches – Failed logins y Database Space Usage • Applied Patchsets – SYS user ops Release 3: Managing Applications Application Management Categories Management for ALL our customers’ applications

Application Management • Packaged apps –Vendor delivered

• Custom apps Packaged Custom Application –Custom extensions Applications Applications Services built on SOA and J2EE/.Net

• Application Services –Application Security (Identity & Access) –Business Intelligence –Portal, Collaboration, etc. (Workplace) Managing Packaged Applications

Enterprise Manager

Oracle E-Business Suite – PeopleSoft – Siebel Common Capabilities • 1-step Discovery • Out-of-box transactions • Reports • Topologies • System monitoring • Configuration Management • Service Level Management • Application monitoring • Transaction Tracing • Out-of-box service models • Dashboards • Root-cause/Impact Analysis Embedded Application-Specific Capabilities E-Business Suite PeopleSoft Siebel • Topological root-cause views • 500+ config metrics & • 50+ business metrics • 100+ configuration metrics PSAdmin admin tasks • Out-of-box processes • Clone automation for test Æ • 25+ “tribal” knowledge- • HI Component support based policies production environments • SARM integration – real • Cross-instance patch • Centralized Log Mgt end user metrics, comparisons • Key bus flow monitoring transaction diagnostics Application Management Pack for E-Business Suite

• Manage EBS R12 and 11i • Automated discovery • Service Level Management • Out of box service models & beacon transactions • Configuration Management • Topology views • Integration with AS & DB diagnostics

• Clone Automation for production Æ test environments • Out of box “order to cash” business process model • Customized beacon for Forms components Application Management Pack for Siebel • Manage Siebel 7.7, 7.8, 8.0 – Automated discovery – Service Level Management – Out of box service models & beacon transactions – Configuration Management – Topology views – Integration with DB diagnostics • Over 50 business metric monitored for key Siebel applications • Customized beacon for HI components • SARM integration – real end user metrics, transaction diagnostics Application Management Pack for PeopleSoft Enterprise

• Manage versions running on PeopleTools 8.48 (app versions 8.4, 8.8, 8.9) • Automated discovery • Service Level Management • Out of box service models & beacon transactions • Configuration Management • Topology views • Integration with AS & DB diagnostics

• Access for 500+ configuration metrics and admin tasks through PSAdmin API • 25+ policies based on PeopleSoft “tribal” knowledge • Centralized Log Management Managing Custom Applications

Packaged Custom Application Applications Applications Services

SOA SOA Runtime Governance • BPEL Process Monitoring – Auto-discover design time dependencies into production – Accelerate problem resolution in process • Web Service Monitoring and Policy Management Application Diagnostics • Top servlets, EJBs, Transaction tracing • Extend by Application defined Mbeans, WS Business – IT Alignment • SLA on business KPIs Infrastructure Management • SOA - BPEL PM Management SOA Management Pack

SOA Runtime Governance • BPEL Process Monitoring – Auto-discover design time dependencies into production – Accelerate problem resolution in process • Web Service Monitoring • Web Service Policy Management

Business – IT Alignment • BAM – EM Integration • Service Level Management

SOA Infrastructure Management • BPEL PM Management • ESB Management Managing Application Services

Packaged Custom Application Applications Applications Services

Identity and Access Management

• Support for Oracle Access Manager, Identify Manager, and Identify Federation (Oracle Identify Management Suite) – Automatic discovery – Pre-instrumented monitoring of key metrics – Service Level Management – Server performance diagnostics – Configuration Management of OAM components • Upcoming Æ BI, Workplace, etc. Management of Application Services

Management of IAM suite • Support for OAM (CoreID), OIM (Xellerate), OIF (OctetString), OID, DAS, DIP, OSSO – Automatic discovery – Pre-instrumented monitoring of key metrics – Service Level Management – Server performance diagnostics – Configuration Management of OAM components Management of other Application Services under discussion, e.g. BI, Workplace, etc.

Management Connector Use case Tablespace Full Alert Resolution Flow Service Request Analyze TT Route TT to created RSD RSD technician Notification EM Rule Launch Triggered EM TICKET EM Event Oracle CMDB EM Review Root Cause and Fix Issue EM TT Closed EM Verify Fix Ticket gets updated Managing Fusion Applications

Enterprise Manager Grid Control

Oracle Fusion Applications

• Enterprise Manager – the platform for fusion management • End-to-end application management • Business flow monitoring • End-user monitoring • Service level management • Change workflow and lifecycle management • Configuration management • Application software provisioning • Tight integration with technology stack management for complete view