VMware vSphere Express Scan

Overview Copied

AutoMonitor allows users to quickly and effortlessly discover and import hosts into their Opsview Monitor environment. The new wizard-based functionality simplifies and automates the scanning and configuration steps providing a fast and reliable way of maintaining continuous monitoring of your changing Enterprise landscape.

VMware vSphere Express Scan provides a configuration wizard to guide you through and quickly discover VMware objects (ESXi Hosts, VMs, Datastores, Resources Pools) within a given vCenter or ESXi Host and automatically import them into Opsview Monitor.

VMware vSphere Express Scan Copied

ESXi hosts discovered by the VMware Scan will be imported into the following Host group Structure:

Opsview > AutoMonitor > VMware vSphere Express Scan  > {VMware server} - ESXi > {ESXi Hostname}

Virtual Machine guests discovered by the VMware Scan will be imported into the following Host group Structure:

Opsview > AutoMonitor > VMware vSphere Express Scan  > {VMware server} - VMs > {Virtual Machine Hostname}

This scan will inspect discovered Hosts to allocate relevant Host Templates from the following list:

See more information about Host Templates within the OS - VMware vSphere Opspack.

Prerequisites Copied

In order to access the AutoMonitor Application and run a VMware Express Scan, the following permissions are required:

VMware vSphere Credentials Copied

Credentials for Privilege Name Description
vCenter Global > Act as vCenter Server - Allows Automonitor Scan to discovery ESXi Hosts, VMs, Datastores, Resource Pools and other VMware elements through vCenter
- Allows Opspacks to be informed of vMotion send and receive operations
ESXi Root >
- Alarm
- Datacenter
- Datastore
- HealthUpdateProvider
- Performance
- System
- VirtualMachine
- Allows Automonitor Scan to discovery ESXi Hosts, VMs, Datastores, Resource Pools and other VMware elements through ESXi
- Allows relevant Host Templates to be allocated and Service Checks to retrieve metrics for the discovered resources

Warning

If the ESXi user to be used for monitoring is part of a role with lower privileges than root (e.g. read-only), it needs to be added to the SystemConfiguration.Administrators group. If the VMware server account DOES NOT have the right permissions, VMware Scan will fail.

Note

Depending on your organisation structure, you may prefer to NOT give user permissions to CONFIGUREHOSTGROUPS and/or have access to the Opsview Host Groups. In this case, you need to create the Host Group Structure in advance (Opsview > Automonitor > VMware Express Scan > Server - ESXi and Opsview > Automonitor > VMware Express Scan > Server - VMs) and provide access only to the Server - ESXi and Server - VMs Host Groups to the user(s) running a VMware AutoMonitor Scan.

Run a Scan Copied

AutoMonitor VMware Express Scan feature is accessible from the Configuration > AutoMonitor menu. When selecting this option you will be presented with the following screen:

Running a scan

Select VMware to start with the AutoMonitor VMware Express configuration wizard

In the configuration wizard (VMware > Input your vCenter or ESXi credentials), as per the screen shown below, you need to enter the following information.

VMware credentials

When running a VMware Express Scan using vCenter credentials, the discovered and imported ESXi Hosts will use those credentials to run relevant Service checks. If your ESXi Hosts have different credentials, you will have to manually re-configure the default variable VSPHERE_ESXI_CREDENTIALS value (in Configuration > Variables) so the Service Checks can connect and retrieve metrics for ESXi Hosts, VMs, Datastores and Resource Pools.

When running a VMware Express Scan against either vCenter or ESXi host, AutoMonitor will try to ensure the correct global variables are set, to ensure Host checks and Service checks are green once Apply Changes has been completed after scanning. There may be occasions, like a specific case above, where checking the following Global Variable values after the scan has run would ensure Service checks are green:

Once you have entered the relevant information for the required fields, the “Start Scan” button will be enabled for you to proceed when you are ready to start the scan.

If the credentials are invalid or fail to be authorised, the following error message will be displayed:

VMware credentials error

If the following Connection timed out - service did not respond message appears this indicates that something in the back-end failed to respond in a timely fashion. This may indicate that the back-end is overloaded or that there is a network outage. Alternatively, a Connection has timed out error indicates some other operational error has occurred during the authentication process.

VMware connection timed out

Upon successful authorisation, the Scan starts by interrogating the server for a list of Virtual Machines (VMware guests) to scan. The Virtual Machines will only be scanned if they are running VMware Tools. Once the scan has started the progress bar will be displayed which indicates how many of the discovered Virtual Machines have been scanned:

Vmware scanning

As the scan is being carried out, it can be aborted by hovering over the ‘Abort’ button which displays a panel to confirm the aborting of the scan. Once the ‘Yes’ button is clicked, the form from the previous page is displayed and the scan is aborted. Note that if the scan is close to finishing then it may be completed before it can be aborted.

Abort scan

If an unrecoverable error occurs during the scan, the following error page will be displayed:

VMware scan error

A connection timed out message indicates that something in the back-end failed to respond in a timely fashion. This may indicate that the back-end is overloaded or that there is a network outage. Alternatively, a Sorry there was an error that we can't identify message indicates that some other error occurred during scanning. This may indicate a system outage or configuration problem. Scans will recover from short Datastore (i.e. CouchDB) outages. However, if an outage lasts longer than one hour the scan will time out with and show this error message.

If such errors occur, you can click Try again to restart the scan. You can also view the log to understand what the problem could be, for example, you might see access denied when creating Host Group or importing Host, in which case, check you have sufficient permissions to either create or write to the desired Host Group.

When the scan completes the following screen will be displayed:

Scan completed

At this point, you can click on Apply Changes to trigger a system reload and start monitoring the scanned hosts. Clicking on New will allow you to start another scan. Hosts that have already been imported will be disregarded and will NOT be re-imported by later scans:

Clicking View log will display a detailed list of the steps completed by the scan:

VMware logs

If the scan fails for some reason, View log is a good way to help diagnose the problem.

Once the scan has finished, you can see the pending hosts by clicking the Host Settings link. It is worth noting at this point you may wish to check the host configurations to ensure the details are correct, as although AutoMonitor tries its best to fill them in correctly, you may have a case where the credentials used for scanning are NOT the same credentials that are required by the service check.

Host Certificates Copied

The AutoMonitor scan does not use certificates for host checking. However several of the service checks do use certificates for host identification checks. You have two options:

Note

In a clustered environment (multiple clusters and collectors) these certificates should be uploaded to the Master Monitoring Server and ALL collectors. To do this, follow the steps above, and then run Apply Changes.

If you want to manage certificates in a sub-folder of /opt/opsview/monitoringscripts/etc/certs, the orchestratorimportscripts tool can also be pointed at a directory structure to replicate that in the right location with the right permissions. Then update the VSPHERE_CERTIFICATES host variable paths and run Apply Changes.

Variables Copied

Considerations Copied

Troubleshooting Copied

["Opsview"] ["User Guide"]

Was this topic helpful?