System Administration SL1 version 8.12.1 Table of Contents Introduction 6 Who Should Read This Manual? 6 What's In This Manual? 6 Requirements 7 Global Settings 8 Global Settings for API 9 Global Settings for Appliances 11 The Web Configuration Utility 12 Global Settings for Asset Automation 14 Global Settings for User Logins, Discovery, Data Collection, UI Features, and Expiration Warnings 15 Global Settings for Data Retention 27 Global Settings for Inbound Email and Outbound Email 30 Global Settings for Login Alert Messages 34 Global Settings for Password Reset Emails 35 Defining the Email Message for "I forgot my password" 36 Global Settings for System Thresholds 38 Global Settings for Interface Thresholds 42 Settings in Silo.Conf 50 Disabling the User Interface on a Database Server 60 Collector Groups 62 Installing, Configuring, and Licensing Data Collectors 63 Technical Information About Data Collectors 63 Duplicate IP Addresses 64 Open Ports 64 Viewing the List of Collector Groups 64 Creating a Collector Group 65 Editing a Collector Group 67 Collector Groups and Load Balancing 68 Tuning Collector Groups in the silo.conf File 69 Collector Affinity 71 Failover for Collector Groups for Component Devices 72 Collector Groups for Merged Devices 72 Creating a Collector Group for Data Storage Only 73 Deleting a Collector Group 74 Aligning the Collector Group for A Single Device 74 Aligning the Collector Group in a Device Template 75 Changing the Collector Group for One or More Devices 76 Managing the Host Files for a Collector Group 76 Processes for Collector Groups 77 Daily Health Tasks 79 Monitoring System Events 80 Searching the System Logs 80 Deleting Entries from the System Logs 82 Monitoring System Processes 82 Viewing the List of System Processes 82 Searching and Filtering the List of System Processes 83 Monitoring the Status of Each Appliance 84 Monitoring User Actions and Events 86 Viewing the List of Audit Logs 87 Searching and Filtering the List of Audit Logs 87 Special Characters 88 Generating Reports on Audit Logs 92 Monitoring the Status of Data Collectors 92 Updating, Monitoring, and Maintaining SL1 94 Viewing the List of Updates 95 Downloading Patches and Updates 96 Importing Updates on to the Platform 97 Automatic Staging 98 Manually Staging an Update 100 Deploying Updates 102 Viewing the Log Files for Updates 103 Configuring Timeouts for Updates in Distributed Systems 103 Managing New Features on the Content Management Page 103 Remote Reboot After an Update 105 Upgrading Default PowerPacks 106 Monitoring and Managing User Access 107 Viewing Information about Each Access Session 108 Deleting a User's Session 109 Viewing Lockouts and Unlocking Lockouts 109 Global Settings for Lockouts 111 Audit Logs 111 Managing Scheduled Tasks 111 Viewing the List of Schedules 112 Enabling or Disabling One or More Schedules 113 Deleting One or More Schedules 114 Monitoring Overall System Usage and Statistics 114 Viewing an Overview of All Events 115 Viewing Events by Appliance and Event Source 117 Diagnostic Tools 120 Viewing Information About ScienceLogic Processes 121 Viewing the List of ScienceLogic Processes 121 Searching and Filtering the List of ScienceLogic Processes 123 Editing the Parameters of a ScienceLogic Process 124 Debugging a Process and Viewing Debug Logs 126 Viewing Information About Unhandled Exceptions 127 Viewing the List of Unhandled Exceptions 128 Searching and Filtering the list of Unhandled Exceptions 128 Saving the Unhandled Exception to the Local Computer 129 Viewing the Database Tables on the Database Server 130 Accessing the Database Tool 130 Disabling Normalization, Re-Enabling Normalization, and Backfilling Raw Data 132 Changing Passwords and IP Addresses 135 Disabling phpMyAdmin 136 Changing the Password for the Default Account for the User Interface 137 Changing the Password for the Default Console User 138 Changing the Password for the Web Configuration Utility 138 Changing Database Passwords 139 Configuring a New Password in the Database Instance 139 Configuring the Platform to Use the New Password 140 Editing Silo.Conf 140 Updating the master.system_settings_licenses Table 141 Changing IP Addresses 142 Preparing to Change the IP Address of a Database Server 142 Changing the IP Address of an Appliance 143 Reconfiguring Administration Portals After Changing the IP Address of a Database Server 145 Backup Management 147 Overview 147 Creating a Backup Credential 147 Configuration Backups 148 Defining a Configuration Backup 149 Restoring a Configuration Backup 151 Full Backup 152 Defining a Full Backup 153 Restoring a Full Backup 154 Additional Configuration for Solaris NFS Mounts 155 Defining a DR Backup 156 Restoring a DR Backup 158 Subscription Licenses 159 Viewing a Report on License Usage 160 Viewing Delivery Status 161 Manually Uploading License Usage to ScienceLogic 162 Downloading the Daily License-Usage File 162 Manually Uploading the Daily License-Usage File to ScienceLogic 163 Uploading the ScienceLogic Receipt 164 Data Retention Settings for Licensing 165 CAC Authentication 167 Prerequisites 168 Importing an SSL Certificate 169 Updating the ScienceLogic Configuration File 170 Defining the Client Certificate 170 Testing the Configuration 172 Installing an SSL Certificate 174 Certificates for ScienceLogic Servers 175 Requesting a Commercial SSL Certificate 175 Creating Your Own Certificate 176 Installing the Certificate on an SL1 Appliance 177 Authentication Profiles and Resources 180 Authentication Profiles 181 Viewing the List of Authentication Profiles 181 Filtering the List of Authentication Profiles 182 The "default" Authentication Profile 183 Creating an Authentication Profile 184 Editing an Authentication Profile 187 Deleting One or More Authentication Profiles 187 Authentication Resources 187 Viewing the List of Authentication Resources 188 Filtering the List of Authentication Resources 189 The "EM7 Internal" Resource 190 The Legacy Authentication Resources 190 Creating an LDAP/AD Authentication Resource 191 Creating an SSO Authentication Resource 197 Editing an Authentication Resource 202 Deleting an Authentication Resource 202 Managing Host Files 203 Viewing the List of Host Entries 204 Creating a New Host Entry 205 Editing a Host Entry 206 Using an Existing Host File Entry to Create a New Host File Entry (Save As) 208 Deleting One or More Host Entries 209 Chapter 1 Introduction Overview This manual describes the tasks that System Administrators who monitor and maintain the health of SL1 must perform, and the tools they can use to perform those tasks. This chapter includes the following topics: Who Should Read This Manual? 6 What's In This Manual? 6 Requirements 7 Who Should Read This Manual? This manual is intended for System Administrators who must monitor and maintain the health of SL1. This manual describes tasks in the [System] tab that are related to maintenance and monitoring of SL1. This manual also includes advanced tasks that are performed at the console or in an SSH session. What's In This Manual? This manual includes information on global settings, collector groups, health tasks, maintenance tasks, and tools for troubleshooting and debugging. Who Should Read This Manual? 6 Requirements To follow some of the steps listed in this manual, you must have administrator-level access to the console of your SL1 appliances. 7 Requirements Chapter 2 Global Settings Overview In SL1, global settings allow you to define default behavior that applies to all elements in the platform. For settings that affect devices, these global settings can be overridden by applying device-level settings. SL1 includes global settings for: l API l SL1 appliances l Asset Automation l Logins, discovery, data collection, and expiration warnings l Data retention l Inbound email and outbound email l Login Alert Messages l Password Reset Emails l Thresholds for: o System latency, file system usage, counter rollovers, availability, and component devices o Interfaces o Class-based quality of service (CBQoS) You can also define global settings for SL1 appliances, system backups, collector groups, API behavior, and processes. These global settings allow system administrators to define and automate best practices and SOPs for SL1. Use the following menu options to navigate the SL1 user interface: 8 l To view a pop-out list of menu options, click the menu icon ( ). l To view a page containing all of the menu options, click the Advanced menu icon ( ). This chapter includes the following topics: Global Settings for API 9 Global Settings for Appliances 11 Global Settings for Asset Automation 14 Global Settings for User Logins, Discovery, Data Collection, UI Features, and Expiration Warnings 15 Global Settings for Data Retention 27 Global Settings for Inbound Email and Outbound Email 30 Global Settings for Login Alert Messages 34 Global Settings for Password Reset Emails 35 Global Settings for System Thresholds 38 Global Settings for Interface Thresholds 42 Settings in Silo.Conf 50 Disabling the User Interface on a Database Server 60 Global Settings for API The REST API Settings page (System > Settings > API) allows you to define global parameters that affect the behavior of the REST API. When defined, these parameters affect all interaction with the API. NOTE: This page is available only to administrator users. To edit the settings in the REST API Settings page: 1. Go to the REST API Settings page (System > Settings > API). 9 Global Settings for API 2. In the REST API Settings page, edit the values in one or more of the following fields: l Internal Request Account. Specify the user account that allows SL1 to make API requests without a password. For details on building such an API request, see the ScienceLogic API manual. l X-EM7-run-as Header Support. Specifies whether administrator users can make API requests using the permissions of another user without that user's password. Choices are: o Disabled. Administrator users cannot make API requests using the permissions of another user. o Enabled (Admin only). Administrator users can include the X-EM7-run-as Header to make API requests using the permissions of another user.