Entuity Core Reference
Entuity Core Reference
Entuity® 15.5
Entuity System Administrator Reference
Manual
www.entuity.com 0000-0155-PD008_entuity_core_reference.rev1.fm
Entuity
Entuity
The Entuity product and its related documentation are protected by copyright and distributed under licenses restricting
use, copying, distribution and decompilation. Unless you have negotiated with Entuity specific terms and conditions
for using its product and associated documentation, such use shall be governed by Entuity's standard licence terms, a
copy of which is distributed with the product.
Entuity may make improvements and/or changes to the product(s) and/or program(s) described in this publication at
any time. These changes will be incorporated into new editions of the relevant publication.
Entuity®, SurePath®, Eye of the Storm®, InSight Center®, Green IT Perspective™, Network Delivery Perspective™ and Service
Delivery Perspective™ are registered trademarks of Entuity. All other trademarks are the property of their respective
owners.
License terms and conditions of use for Entuity and included third party software can be found on the Entuity server at
entuity_home/licenseTerms/. A listing of these third party trademarks, references and software included with Entuity
is available through its web UI.
Contents
eyeclientrpc ...................................................................................44
availableFunctions ...................................................................46
changePassword .....................................................................46
changePolled ...........................................................................47
clearDNSCache .......................................................................49
createIPSLA .............................................................................49
createUser ...............................................................................51
createViews .............................................................................52
deleteDevices ..........................................................................54
deleteIPSLA .............................................................................54
deleteUser ...............................................................................55
deleteViews ..............................................................................55
editIPSLA .................................................................................56
editViews ..................................................................................57
manageConfigMonitor .............................................................58
manageInterfaces and unmanageInterfaces ..........................59
modifyViews ............................................................................60
renameDevices ........................................................................63
unManageInterfaces ................................................................64
updateCommunity ...................................................................64
updateSpeed ...........................................................................64
ValidateDevices .......................................................................66
eyepoller .......................................................................................66
FixNewBinVendor .........................................................................67
flowCollector.bat ...........................................................................67
getDownstream .............................................................................69
hostIdent .......................................................................................71
httpd ..............................................................................................71
install .............................................................................................72
instService .....................................................................................72
ipman ............................................................................................73
java ................................................................................................74
kill ..................................................................................................75
licenseSrvr ....................................................................................75
macman ........................................................................................76
macScheduler ...............................................................................77
myisamchk ....................................................................................77
myisampack ..................................................................................77
mysql .............................................................................................78
mysqladmin ..................................................................................78
mysqlcheck ...................................................................................78
mysqld ..........................................................................................79
mysqldump ...................................................................................79
mysqlimport ..................................................................................80
mysqlshow ....................................................................................80
newcommunity ..............................................................................80
nicman ..........................................................................................81
ObtainGenericVendor ...................................................................81
perror .............................................................................................82
probity ...........................................................................................82
prodigy ..........................................................................................83
profluent ........................................................................................84
prole ..............................................................................................84
proliferate ......................................................................................84
Usage, Syntax and Options ....................................................86
prolifprodigy ..................................................................................91
prolifsys .........................................................................................91
prologV2 ........................................................................................91
protean ..........................................................................................92
provost ..........................................................................................93
replace ..........................................................................................93
restore ...........................................................................................93
rollLog ...........................................................................................94
runbg .............................................................................................95
setupProle .....................................................................................95
showdevs ......................................................................................96
slalogger .......................................................................................97
snmpbulkget .................................................................................97
snmpcmd ......................................................................................98
snmpdelta ...................................................................................110
snmpdf ........................................................................................112
snmpdump ..................................................................................114
snmpget ......................................................................................116
snmpgetnext ...............................................................................117
snmpset ......................................................................................118
snmpstatus ..................................................................................119
snmptable ...................................................................................121
snmptest .....................................................................................123
snmptranslate .............................................................................128
snmptrap .....................................................................................133
snmpusm ....................................................................................134
snmpvacm ..................................................................................138
snmpwalk ....................................................................................142
start .............................................................................................144
starteye ........................................................................................145
starteotssvr ..................................................................................145
stop .............................................................................................146
stopeye .......................................................................................146
stpman ........................................................................................147
swmaint .......................................................................................147
sysLogger ...................................................................................149
ticker ............................................................................................149
trapsplit .......................................................................................150
vendinfo ......................................................................................150
viewserver ...................................................................................155
vipman .........................................................................................155
vtpDomainTool ............................................................................156
vtpman ........................................................................................157
flow-exclusions-template.properties ...........................................207
flowUserDefGroups.xml ..............................................................207
forkevent.cfg ...............................................................................209
httpd_eye.conf ............................................................................210
installed_modules.cfg .................................................................211
license.dat (license file) ..............................................................212
mib.txt ..........................................................................................213
MIBPoll.cfg ..................................................................................213
module_definitions.cfg ................................................................216
newbin.vendor ............................................................................218
nominal_power.cfg .....................................................................218
provost.conf ................................................................................219
security.cfg.xml ...........................................................................220
serverid.xml .................................................................................230
shutdown_policies.cfg ................................................................231
site_specific_nominal_power.cfg ................................................232
snmpMaxPduOverrides.cfg ........................................................233
snmpV3.cfg .................................................................................234
startup_o/s.cfg ............................................................................234
startup_o/s_site_specific.cfg .......................................................236
start_run_manufacturer.expect ...................................................237
sw.cfg ..........................................................................................237
sw_cm_transforms.cfg ................................................................238
sw_common.cfg ..........................................................................239
sw_iptosysname.cfg ...................................................................240
sw_menu_def_site_specific.cfg ..................................................240
sw_module_file_list.cfg ...............................................................241
sw_ph.cfg ....................................................................................242
sw_report_system_site_specific.cfg ...........................................242
sw_site_specific.cfg ....................................................................243
sw_user_defined_components.cfg .............................................243
systemcontrol.log .......................................................................245
system_menus.xml .....................................................................245
user_menus.xml ..........................................................................245
XMLDataCollector.xml ................................................................245
XMLDataCollector-log4j.properties ............................................247
Glossary ...........................................................................................330
Index ................................................................................................358
For details on managed object attributes refer to the Entuity User Reference Manual, useful
for understanding the relevance of attribute values. The Entuity User Reference Manual
manual groups attributes according to their parent type, for example:
Device Attributes
Port Attributes
Availability Monitoring Attributes
Virtual Platform Attributes.
This section gives brief details of the system processes and tools that monitor and manage
the Entuity environment. Care should always be taken when running Entuity processes from
the command line or using the supplied utilities tools. When in doubt always consult your
Entuity support before undertaking any actions.
Where mentioned, the processes generate messages in log files, whether to provide
information or flag errors. These log files will automatically wrap when they have reached a
pre-determined size.
Always
Processes Run By/From Location
Running
applicationMonitor starteye Yes entuity_home\bin
authtool (.bat) User Invocation No entuity_home\bin
autoDiscovery Application Server No entuity_home\bin
(tomcat)
backup provost/user No entuity_home\bin
invocation
cfgdigest entuity_home\lib\tools
changeState entuity_home\bin
checkvcs entuity_home\bin
checkLicense entuity_home\bin
configure entuity_home\install
customPoller Configurable entuity_home\lib\tools
dbcheck starteye, configure, No entuity_home\bin
user invocation
devDefunct provost No entuity_home\lib\tools
deviceDelete entuity_home\lib\tools
devpoller Manual adding of a No entuity_home\bin
device
devsysman provost No entuity_home\bin
diskMonitor starteye Yes entuity_home\bin
Table 1 Entuity System Processes and Utilities
Always
Processes Run By/From Location
Running
domman provost No entuity_home\bin
DsKernelStatic starteye Yes entuity_home\bin
dumpipnettoport entuity_home\lib\tools
dumpiptodev entuity_home\lib\tools
dumpvip entuity_home\lib\tools
duplexman provost No entuity_home\bin
encode_keychange entuity_home\lib\tools
eosserver entuity_home\lib\httpd\E
OS
eyeclientrpc entuity_home\lib\tools
eyepoller entuity_home\bin
FixNewBinVendor entuity_home\lib\tools
getDownstream entuity_home\lib\tools
hostIdent entuity_home\lib\tools
httpd Always Running Yes entuity_home\lib\apache\
bin
install ISO image
instService entuity_home\bin
ipman provost No entuity_home\bin
jasperStudio entuity_home\bin
java Always Running Yes
kill entuity_home\lib\tools
licenseSrvr starteye Yes entuity_home\bin
macman provost No entuity_home\bin
macScheduler starteye Yes entuity_home\bin
myisamchk entuity_home\database\bi
n
myisampack entuity_home\database\bi
n
mysql entuity_home\database\bi
n
mysqladmin entuity_home\database\bi
n
Always
Processes Run By/From Location
Running
mysqlcheck entuity_home\database\bi
n
mysqld-nt entuity_home\database\bi
n
mysqldump entuity_home\database\bi
n
mysqlimport entuity_home\database\bi
n
mysqlshow entuity_home\database\bi
n
newcommunity entuity_home\lib\tools
nicman provost No entuity_home\bin
perror entuity_home\database\bi
n
probity entuity_home\lib\tools
prodigy provost No entuity_home\bin
profluent provost No entuity_home\bin
prole provost No entuity_home\bin
proliferate autoDiscovery/user N0 entuity_home\bin
invocation
prolifprodigy entuity_home\bin
prolifsys entuity_home\bin
prologV2 Always Running Yes entuity_home\bin
protean provost No entuity_home\bin
provost starteye Yes entuity_home\bin
replace entuity_home\database\bi
n
restore entuity_home\bin
rollLog entuity_home\lib\tools
runbg entuity_home\bin
search entuity_home\bin
setupProle entuity_home\bin
showdevs entuity_home\lib\tools
slalogger entuity_home\bin
Table 1 Entuity System Processes and Utilities
Always
Processes Run By/From Location
Running
snmpbulkget entuity_home\lib\tools
snmpdelta entuity_home\lib\tools
snmpdump entuity_home\lib\tools
snmpget entuity_home\lib\tools
snmpgetnext entuity_home\lib\tools
snmpset entuity_home\lib\tools
snmpstatus entuity_home\lib\tools
snmptable entuity_home\lib\tools
snmptranslate entuity_home\lib\tools
snmpusm entuity_home\lib\tools
snmpvacm entuity_home\lib\tools
snmpwalk entuity_home\lib\tools
start entuity_home\bin
starteotssvr Always Running Yes entuity_home\bin
starteye entuity_home\bin
stop entuity_home\bin
stopeye entuity_home\bin
stpman provost No entuity_home\bin
swdoc entuity_home\bin
swmaint entuity_home\bin
sysLogger starteye Yes entuity_home\bin
TestMsgFilter entuity_home\lib\tools
ticker Always Running Yes entuity_home\bin
trapsplit System Administrator Not Run. entuity_home\bin
trashtable entuity_home\lib\tools
trendmigrate entuity_home\lib\tools
vendinfo entuity_home\lib\tools
viewserver starteye entuity_home\bin
vipman provost No entuity_home\bin
vtpDomainTool entuity_home\lib\tools
vtpman provost No entuity_home\bin
Table 1 Entuity System Processes and Utilities
applicationMonitor
Location entuity_home\bin
Type process, runs every 120 seconds
Invoked By starteots
User Invocation Command line
Invoked Processes n/a
Configured Through Component Viewer, entuity.cfg, startup_O/S.cfg
Log File entuity_home\log\applicationMonitor.log[1..4]
Description
applicationMonitor performs all forms of availability monitoring, i.e. device, server and
application availability. Full functionality is available for devices with IPv4 management
addresses, with currently more limited support for devices with IPv6 management addresses.
When Entuity monitors a device using IPv6, then applicationMonitor monitors the
device management address using ICMPv6. applicationMonitor can raise events when
the management address fails to respond, but does not perform traceroute or route cause
analysis. Also, applicationMonitor does not monitor other IPv6 addresses on the
device.
When there are IPv4 addresses on a device with an IPv6 management address, Entuity only
considers the device as down when all of the addresses are unreachable.
h
Entuity currently supports application monitoring using IPv4 and does not support
application monitoring using IPv6.
authtool
Location entuity_home\bin
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
authtool is intended to assist testing of external user authentication configurations and
management of the Entuity emergency access user accounts. In Windows environments it is
a batch file, authtool.bat.
Syntax Options
list
Lists emergency access user accents used to logon in an emergency situation.
./authtool list
Emergency access is enabled
Users:
eUser
root
Total users:2
check
Checks whether user is able to logon in emergency situation. You must enter the
emergency access user name and password.
./authtool check
name of the user must be present and non-empty
Please enter name of the user:
root
user's password must be present and non-empty
Please enter user's password:
root
Emergency access is enabled
User 'root' is allowed to connect
passwd
Creates new, or updates an existing, emergency access user. To access this function you
must enter a valid Entuity administrator username and password, and then specify the
emergency access username and password.
./authtool passwd
name of an administrator user must be present and non-empty
delete
Deletes the named emergency access user profile.
./authtool delete
name of the user to delete must be present and non-empty
Please enter name of the user to delete:
root
Emergency access is enabled
Are you sure you want to delete user named 'root'? [yes/no]:
yes
serverAccess
authtool serverAccess allows you to check user access module for a particular user, and
optionally specify the user group.
authtool serverAccess user=jsmith groups=operation
Testing server access for user 'jsmith' as member of:
operation
Access to server allowed
mapping
Performs mapping of supplied attributes to groups.
You invoke mapping action as follows:
You can also run authtool mapping just against the group:
authtool -d mapping groups=developers
logon
Once you have configured external authentication, or are in the process of doing so, you
can test the user logon configuration, with the authtool logon function:
authtool logon [user=username] [password=password]
ldaptree
Displays the whole LDAP tree, with the option of listing the details of one entry.
authtool ldaptree [url=] [user=username] [password=password] [basedn=]
[entry=]
cn: tu1
encrypt
Encrypts the LDAP administrator’s password.
authtool encrypt [user=username] [password=password]
autoDiscovery
Location entuity_home\bin
Type Process
Invoked By Application Server (tomcat)
User Invocation Command line, web UI
Invoked Processes proliferate
Configured Through autodisc.cfg, entuity.cfg, command line
Log File entuity_home\log\autoDiscovery.log [1..4]
Description
Entuity strongly recommend you configure how Entuity discovers network objects using the
administration Inventory page, available through the web UI. This section details the options
available when you decide to configure autoDiscovery through configuration files, or run it
from the command line. Consult with your Entuity contact before configuring
autoDiscovery through configuration files, or running it from the command line.
h
autoDiscovery can only be configured and run once. If, for example, you configure and run
autoDiscovery from the web UI and then attempt to run it from the command line Entuity
reports autoDiscovery is already running and does not start a second instance.
Through provost.conf you can configure when autoDiscovery runs, for example so
each Sunday at 01:00 provost runs autoDiscovery. When autoDiscovery starts, and
every subsequent minute whilst it is running, it checks the value of automatic in the
autoDiscovery section of entuity.cfg. When it is set to:
0, autoDiscovery is not automatically started. When it is already running having been:
manually started, then this setting is ignored.
automatically started, then autoDiscovery is stopped.
1, autoDiscovery runs. It finds devices on a network, by ‘pinging’ every IP address on
each specified network.
does not search the local subnet when you include addresses. To search the local subnet
use -local.
Command line values take precedence over any configuration file values, apart from
when including addresses, excluding addresses and specifying port and community
strings where the values are combined.
Generates output to the dev.txt file. To specify a different name, use a parameter of –o
<filename>. (See Chapter 3 - Entuity System Files.)
The device file is written in a format that can be used directly by proliferate,
consisting of lines of IP addresses followed by community strings (the file also contains
comments, beginning with the ‘#’ character).
autoDiscovery calls proliferate which by default adds all SNMP pollable devices to
the candidate devices list in Entuity. Devices of a type Entuity:
Recognizes are added to the candidate devices as devices of that type.
Can generate an uncertified vendor file, are added to the candidate devices list as
Unclassified.
Does not recognize are added to the candidate devices list as devices without type.
Usage 2
This usage is only available with SNMPv1/v2c devices:
autoDiscovery -in addresses [ -ex addresses ] [ -local ] [-follow ] [
options... ]
Search only the hosts or networks specified.
-in <addresses>
Comma separated list of hosts or networks to include in the search.
-ex <addresses>
Comma separated list of hosts or networks to exclude from the search.
-local
Search the networks to which the current host is attached.
-follow
Automatically search new network(s) that are discovered.
In this usage autoDiscovery is run with a list of addresses to include in, or exclude from,
the search. When you want to:
Search the network to which the current host is attached either include it in the list or use
the -local option.
Follow new subnets the -follow option must be given.
Usage 3
This usage is available with SNMPv1/v2c and SNMPv3 devices:
autoDiscovery -config [ file ] [ options... ]
Read options from configuration file.
-config
autoDiscovery can read options and data, such as included addresses, from a
configuration file. When a file is not specified then autoDiscovery looks for the default
configuration file, entuity_home\etc\autodisc.cfg.
It is preferable to specify all of the required options in the configuration file, although you
can also use the command line. When options have already been specified in the
configuration file, the command line options usually take precedence. The exceptions are
include addresses, exclude addresses, ports and community strings where configuration
file and command line values are combined.
The scope of autoDiscovery’s search is therefore derived from a combination of
command line, configuration file and default values, for example:
If you do not include addresses, autoDiscovery takes the host’s subnet as the
scope. If you have included addresses but also want to search the host’s subnet then
use -local. Alternatively, you can give the local network as an included address.
If you include addresses through the configuration file and command line,
autoDiscovery takes the combined address list as its scope. Similarly, if you
exclude addresses through the configuration file and command line autoDiscovery
takes the combined list and excludes it from the scope.
If you include and exclude the same port, then autoDiscovery excludes the port
from the search.
If you want autoDiscovery to follow subnets it discovers then it must be configured
with -follow.
Syntax Options
-addpingonly
Instructs autoDiscovery to set management level for the device to Ping Only when a
device only responds to ping. When autoDiscovery -nodb is set, this option is ignored.
-auto
During the configuration of Entuity if you created your device file using autoDiscovery,
then autoDiscovery is running using -auto. By default automatic is set to 1, so
autoDiscovery will automatically run every Sunday (for details on automatic see
entuity.cfg).
-c <string>
Where <string> is comma separated list of community strings, no white spaces
between, to be tried when SNMP data is requested. The default - “public” - should be
included in the list if it is required. If the -c parameter is not specified, “public” is used.
-dontallowipchange
Instructs autoDiscovery to use the first discovered IP address on a device as its
management address.
-excludesysoids=<sysoid>
Excludes the detailed sysoid from AutoDiscovery. This example excludes Cisco Unified
Communications Manager from AutoDiscovery:
-excludesysoids=1.3.6.1.4.1.311.1.1.3.1.2
-f <n>
This sets the SNMP final wait period, the period autoDiscovery waits to capture
responses from final requests. When SNMP responses are slow or you are using more
threads you may need to increase this final wait period.
The SNMP final wait is linked to the Ping response time (-pt). The default of 30 seconds is
10 times the Ping response time. If you amend the Ping response time you may want to
maintain this 10:1 relationship.
To change the final wait period, enter the new value in seconds.
-h and -?
Both open the help file, supplying an up-to-date list of commands and associated
descriptions.
-hn
Do not resolve discovered IP addresses to host names. The default is on.
-i
Instructs autoDiscovery to mark all interfaces on discovered devices as unmanaged.
-ith <n>
Determines the number of addresses autoDiscovery can ping simultaneously, by setting
the number of threads on the IP address queue. The default is 512 (see Setting the
Number of Threads).
-m
Instructs autoDiscovery to mark only management interfaces on discovered devices as
managed.
-ma <n>
Sets the largest allowed subnet size that is included in the autoDiscovery search, e.g. -ma
16 excludes from the search subnets that have more than 16 addresses. The default is
unlimited, therefore all classes of subnets are fully pingable.
-nodb
Do not automatically populate the database.
-o <filename>
Name of device output file (default is dev.txt).
-p <ports>
Where <ports> is a comma separated list of ports, no white spaces between, to be tried
when SNMP data is requested.
-progress
Includes progress details to standard out.
-prune
autoDiscovery discards networks if it receives a Network Unreachable response for the
address or a subnet within it.
As prune causes autoDiscovery to discard networks you must be careful that you specify
the search address(es) at an appropriate level. If you specify a network address that has
a number of subnets, it only requires one of those subnets to be unreachable for
autoDiscovery to regard that whole network address being unreachable. autoDiscovery
then stops searching the specified network address (possibly missing reachable subnets)
and moves to the next specified address.
For example, this network list is suitable for -prune:
212.15.70.0
212.15.71.0
212.15.72.0
204.4.143.0
These are Class C subnets which do not contain subnets. If one of these networks is
unreachable, it is not searched, speeding up the autoDiscovery process. The
unreachable subnet does not stop autoDiscovery searching the other two subnets.
In this network list the first address is not suitable for -prune:
212.15.0.0
204.4.143.0
-rememberendhosts
Maintain a list of all IP addresses, even those that are only able to respond to ping. This is
a resource intensive setting.
-sth <n>
Determines the number of simultaneous autoDiscovery SNMP requests by setting the
number of threads on the SNMP queue. The default is 64 (see Setting the Number of
Threads).
-usestdout
Sets autoDiscovery output to standard out (i.e. the console) rather than the output file.
-v
Verbose mode, where detailed diagnostic information is produced and written to the log
file, autodiscovery.log.
See Also
proliferate, showdevs, prolifprodigy and prolifsys.
To change the final wait period, use –f <n>. This defaults to 30 to allow for ‘worst case
scenario’ SNMP timeout.
Thread specifications that are set on the command line override any that are set in the
configuration file.
-local
-nodb
Specifying IP Addresses
autoDiscovery takes the IP address and subnet mask of the local machine. You can specify
other machines or networks if required.
The format for specifying hosts and subnets is:
{ a[.b[.c[.d]]][/e.f.g.h] | hostname }
where each letter a..h is a number between 0 and 255 decimal inclusive.
IP addresses may be partial, and can optionally be followed by a slash and a subnet mask
on the same line. In these cases a subnet is specified. A host can also be a machine name.
Examples are:
204.4.143.147 (a machine)
hurricane (machine)
204.4.143 (a subnet)
204.4.143.0 (a subnet)
204.4.143.147/255.255.255.0 (a subnet).
h
If you specify a big subnet, or if one turns up during the search, the number of potential
addresses is checked against the maximum allowed. The default is not specified, so all sizes
of subnets are allowed. You can change this using -ma to reduce the size of subnets that
autoDiscovery is allowed to search.
Files
For SNMPv1/v2c and SNMPv3 devices autoDiscovery configuration is defined through
entuity_home/etc/autodisc.cfg. In addition you can also configure discovery of
SNMPv1/v2c devices from the command line. Where a device supports both SNMPv1/v2c
and SNMPv3 credentials Entuity uses SNMPv3.
Discovered devices are added to Entuity and to the device file, by default dev.txt.
backup
Location entuity_home\bin
Type Process, by default runs each evening at 23:00
Invoked By provost
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\log\backup.log.[1..4]
Usage
By default, backup is run automatically by provost every evening at 23:00.
You can also run backup from the command line:
backup
When run manually, then you need to ensure that the MySQL database server is running.
Description
The backup utility dumps the:
DSALPHA database to entuity_home\database\data\backupsw
EOSdb database to entuity_home\database\data\backupdb
GreenIT database to entuity_home\database\data\GreenIT
secdb database to entuity_home\database\data\backupsecdb
MySQL users table to entuity_home\database\data\backupmysql.
h
The contents of DSALPHA, EOSdb, secdb and MySQL are dumped automatically. The only
exception from EOSdstream is the dsutilization table that contains fast port data. The table
structure is backed up but its contents are not currently included in the backup. With regard
to EOStrend, all tables that have not been backed up before, or are empty, are backed up,
together with all the data contained in existing tables that is more recent than the data in
previous backups.
The number of tables (if any) to be backed up is output to the screen, together with the
confirmation as to whether or not the backup has been successful.
If you need to restore the databases from a backup, use the restore command.restore both
restores the databases and also repairs any errors.
By default this backup is run every evening at 23:00 by provost. You can also run it from
the command line.
See Also
restore
cfgdigest
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
cfgdigest is an investigative tool used with Entuity configuration files. It has two usages to:
Present a configuration file in a standard structure.
cfgdigest c:\entuity\etc\sw_cpu_times.cfg
Compare two named configuration files.
cfgdigest c:\entuity\etc\sw_cpu_times.cfg c:\entuity\etc\
sw_cpu_times.cfg
changeState
Location entuity_home\bin
Type Internal process
Invoked By provost
User Invocation No
Invoked Processes n/a
Configured Through entuity_home\etc\provost.conf
Log File n/a
Description
changeState updates a prole sequence number in the database after prole has run.
checkvcs
Location entuity_home\bin
Type Internal process
Invoked By n/a
User Invocation No
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
Internal use only. Used by the VCS integration to check status of the Entuity system.
checkLicense
Location entuity_home\bin
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Syntax
From the command line of the Entuity server machine for which the license was generated
you can use checkLicense to check the state of the license. It must always be run with one or
more parameters, otherwise it may return an error.
You should always specify the license file, for example when running checkLicense from
entuity_home\bin of the Entuity server machine use this structure:
checkLicense -f c:\Entuity\etc\license.dat
When you want to run checkLicense on a different machine to the one on which the
license is to be installed, then you must define additional parameters, e.g. the operating
system to which the Entuity server is installed, its IP address, host identifier, MAC address.
For example this allows you to check from Windows a license generated for an Entuity server
installed to a Unix server:
checkLicense -s -i 10.0.0.1 -f c:\license\license.dat
Description
This utility checks the validity of the license file, by default license.dat, against the license
server, decoding the contents of the license file and writing them to file stdout.
This is an extract of example output, with checkLicense ran from C:\Entuity\bin:
checkLicense -f c:\Entuity\etc\license.dat
PRODUCT EOSDevices
Expiry 01/Oct/2012 01:00:00
Count 1
OPTION 'C' - 600
PRODUCT IFA
Expiry 01/Oct/2012 01:00:00
Count 1
OPTION 'C' - 2
PRODUCT IFAPremium
Expiry 01/Oct/2012 01:00:00
Count 1
PRODUCT EOSsnews
PRODUCT EOSprovost
Expiry 01/Oct/2012 01:00:00
Count 1
PRODUCT TopologyMap
Expiry 01/Oct/2012 01:00:00
Count 1
PRODUCT EOSrca
Expiry 01/Oct/2012 01:00:00
Count 1
PRODUCT ReportServer
Expiry 01/Oct/2012 01:00:00
Count 1
PRODUCT TrapIntegration
Expiry 01/Oct/2012 01:00:00
Count 1
PRODUCT EOSobject0
Expiry 01/Oct/2012 01:00:00
Count 1
OPTION 'C' - 50000
OPTION 'P' - CISCOErrorDisableObject:0
OPTION 'P' - CheckpointModule:0
OPTION 'P' - HostConnectionTopoNodeEx:0
OPTION 'P' - HostConnection:0
OPTION 'P' - HostConnectionTopoNode:0
OPTION 'P' - VirtualCDROM:0
OPTION 'P' - VirtualController:0
OPTION 'P' - VirtualNIC:0
OPTION 'P' - VirtualDisk:0
OPTION 'P' - VirtualMachine:0
OPTION 'P' - ChargeableHypervisor:0:1
OPTION 'P' - HyperVisor:0
where:
C is the total amount of credits that the license permits.
P is the policy group. Each group has its own rating, when set to 0 the group objects do
not cost a license object.
S is the credit value of one switch.
Error Messages
When checkLicense returns expiry dates of 1969 or 1970 for each process, this indicates
the license file is invalid. When the license file was valid but is now expired, checkLicense
returns the correct expiry date.
WARNING: Hardware change detected, indicates a change in the hardware setup of the
Entuity server since the license was installed, e.g. a change in MAC address.
Files
entuity.cfg, license.dat, hostIdentifier.txt.
configure
Location entuity_home\install
Type Command line utility
Invoked By n/a
Description
configure sets up the Entuity server, for example configure:
Configures the Entuity software, for example:
MySQL database settings.
Activates and deactivates modules.
Sets module parameters.
Security settings.
Specifies Map and Single Channel Configuration.
Adds and updates available reports.
Sets the ports that Entuity uses, e.g. for Event Viewer, Entuity database.
Sets up necessary services (in a Windows environment).
Allows you to select the license file.
You can only run configure after install has successfully completed. In a Windows
environment configure runs as a Java wizard or through the command line. In Linux
environments only the command line option is available.
Following the initial configuration of Entuity, you can run configure as often as is required
to apply customizations to your system, for example updates to site specific files. You can
only run configure when the Entuity server is not running.
Syntax
configure [[text | gui] [showportwarning]] | [defaults] | [services] |
[serverid ...]
Where:
text instructs configure to run through the command line which is the default on Linux
machines, but not Windows.
gui instructs configure to run through the Java wizard which is the default on
Windows machines.
defaults instructs configure to run from the command line using the responses
made the last time configure ran, rather than presenting you with a series of prompts to
which you have to respond.
configure defaults is useful when you have to re-run configure and do not want to
amend any of the options available through configure, for example you have:
Applied 1 or more patches.
Upgraded Entuity.
Amended a setting in a configuration file (for which you must run configure to apply
them).
showportwarning instructs configure when run from the command line to display
warnings when a port you are assigning to an Entuity process is already assigned to
another process.
services instructs configure to run but to only update the Windows services so that
they apply to the current installation; the current installation must have been previously
fully configured. The services option may be useful in a test environment where you have
a number of Entuity installations. It is not recommended for use on your live installation.
serverid includes a series of functions for identifying and updating the Entuity server
identifier.
The server identifier is used within Entuity to uniquely identify a particular installation, this is
especially important:
In multi-server environments where serverid distinguishes 1 server from another.
Restoring a database from 1 server to another server.
See Also
install, serverid.xml
customPoller
Location entuity_home\lib\tools
Type Command line utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File Command line output
Description
customPoller converts custom polling configuration developed for the test tool to the
StormWorks configuration required when adding it to Entuity through configure.
After using customPoller to create a configuration file, you must include the file to the
Entuity server through sw_site_specific.cfg. You can then run configure to include
the configuration to the Entuity server.
Syntax
..\lib\tools\customPoller test_tool.cfg sw_output_configuration.cfg
where:
..\lib\tools\customPoller indicates customPoller is called from a remote
folder, specifically entuity_home\etc.
test_tool.cfg is the file used when developing the custom poller configuration with
the test tool, the example file is MIBPoll.cfg. Test tool configuration files must be located
in entuity_home\etc.
sw_output_configuration.cfg is the file customPoller creates for the
StormWorks configuration. You should assign it a meaningful name, ensure it is located in
entuity_home\etc, and that it retains the CFG extension which also allows Entuity to
retain the file during upgrades.
See Also
MIBPoll.cfg
dbcheck
Location entuity_home\bin
Type Process, runs once when Entuity is started
Invoked By starteye, configure
User Invocation Command line
Invoked Processes myisamchk
Configured Through entuity_home\startup_o/s.cfg
Log File entuity_home\log\dbcheck.log.[1..4]
dbcheck verifies the last shutdown of mysqld completed successfully. When the shutdown
was not successful it initiates a full check and, if necessary repair, of all database tables.
Depending up on the size of your database this may take a significant amount of time, and
so delay the start of Entuity. You can view its progress through dbcheck.log.
dbcheck is also called when configure runs if there is an existing database but no
mysql.error.log which is usually the case when running an Entuity upgrade. dbcheck
runs in fast mode (dbcheck -F) although you can set it to run in a more extensive mode
(dbcheck -E).
You can run dbcheck from the command line but you should not run it when the database is
running. dbcheck determines the successful shutdown of mysqld by scanning
entuity_home\log\mysqld.error.log file for these messages:
081215 19:14:19 [Note] C:\entuity_z\database\bin\mysqld-nt: ready for
connections.
081215 19:14:46 [Note] C:\entuity_z\database\bin\mysqld-nt: Normal
shutdown
081215 19:14:46 [Note] C:\entuity_z\database\bin\mysqld-nt: Shutdown
complete
071022 20:50:52 [ERROR] D:\Entuity\database\bin\mysqld-nt: Incorrect
key file for table '.\dsalpha\dss_switchsystemresources.MYI'; try to
repair it
When dbcheck detects an error, it invokes myisamchk to perform the table check and
repair. A check and repair is also run when the previous run of mysqld contains an Incorrect
Key file message.
Options
-f, forces dbcheck to run without analyzing mysql.error.log for errors.
-Q do not scan the database rows to check for incorrect links.
-F, dbcheck checks only tables that were not properly closed. This is the default Repair
option selected when re-running configure, for example during an Entuity upgrade.
-C, dbcheck checks only tables that have been changed since the last check or that
were not properly closed.
-M, dbcheck scans rows to verify that deleted links are valid and calculates a key
checksum for the rows and verifies this with a calculated checksum for the keys.
-E, dbcheck runs a full key lookup for all keys for each row which ensures that the table
is 100% consistent. This is an extended database check and, depending on the size of
the database, may take a significant length of time.
-h, dbcheck displays the help text.
Logs
Messages are written to dbcheck.log in entuity_home\log. Each time dbcheck starts it
scans mysql.error.log and then records its actions in the log file, for example:
11/07/2014 13:59:37 INFO: (DBCheck.cpp)Scanning
"C:\Entuity\log\mysqld.error.log" to check mysqld was correctly
shutdown
11/07/2014 13:59:37 INFO: (MysqlErrorLog.cpp)mysqld last shutdown
completed successfully: 141106 13:51:22
11/07/2014 13:59:37 INFO: (DBCheck.cpp)Check/Repair complete
The file automatically wraps to dbcheck.log.[1-4] when the log becomes full.
devDefunct
Location entuity_home\lib\tools
Type Process, runs once a day at 00:00
Invoked By provost
User Invocation Command line
Invoked Processes n/a
Configured Through entuity.cfg
Log File entuity_home\log\devdefunct.log.[1..4]
Description
It is responsible for deleting devices from Entuity that have aged out and are therefore
deemed defunct. By default an age out value is not set, so devices are not automatically
removed from Entuity. Through the devDefunct section in entuity.cfg you can set an age out
value.
deviceDelete
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Syntax
deviceDelete deviceName
Description
The deviceDelete utility can be used to delete individual devices by name.
The output upon successful deletion is in the following format:
INFO: Successfully deleted deviceName
See Also
Associated administration web interface option. eyeclientrpc also includes a
deleteDevices option.
devpoller
Location entuity_home\bin
Type Process, run when devices are added to Entuity
Invoked By n/a
User Invocation Command line
Invoked Processes prolifsys, macman, ipman, vipman, nicman
Configured Through entuity.cfg
Log File entuity_home\log\devpoller.log.[1..4]
Description
This process is run when devices are added to Entuity, calling the processes that identify
device details.
devsysman
Location entuity_home\bin
Description
It is responsible for the SNMP polling of network devices for system-related information,
including system location and description.
diskMonitor
Location entuity_home\bin
Type Process, runs continuously
Invoked By starteye
User Invocation Command line
Invoked Processes prolifsys, macman, ipman, vipman, nicman
Configured Through entuity.cfg
Log File entuity_home\log\diskMonitor.log.[1..4]
Description
This process monitors disk space on the Entuity server and is invoked when Entuity starts
up. diskMonitor polls for disk space where the Entuity database is installed. It compares
this value to two thresholds, if it falls below the:
First diskMonitor sends events to Event Viewer.
Second diskMonitor initiates the shutdown of Entuity. This prevents corruption of the
database that can occur when disk space is not available.
You can configure diskMonitor, e.g. set threshold values, period between samples,
through entuity.cfg.
Logs
Messages are written to diskMonitor.log in entuity_home\log. Each time diskMonitor
starts it writes to the log its current settings. Each time it analyzes a sample, it writes the
results to the log. The file automatically wraps to diskMonitor.log.[1-4] when the log
becomes full.
domman
Location entuity_home\bin
Description
It is responsible for maintaining the system domain tables, including device and VLAN
domains.
DsKernelStatic
Location entuity_home\bin
Type Process, runs continuously
Invoked By starteye
User Invocation n/a
Invoked Processes StormWorks functionality
Configured Through sw_Name.cfg. startup_O/S.cfg
Log File entuity_home\log\dskernel.log.[1..4]
Description
This process actions activities for which it has been configured through StormWorks
configure.
dumpipnettoport
Location entuity_home\lib\tools
Type Utility
Invoked By Command line
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
dumpipnettoport exports the ipnettoport table to the command line. ipnettoport maps IP
addresses to device ports.
dumpiptodev
Location entuity_home\lib\tools
Type Utility
Invoked By Command line
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
dumpipnettodev exports the ipnettodev table to the command line. ipnettodev maps
IP addresses to devices.
dumpvip
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
dumpvip exports virtual IP addresses to the command line.
duplexman
Location entuity_home\bin
Type Process, runs daily at 07:00
Invoked By provost
User Invocation n/a
Invoked Processes n/a
Configured Through entuity.cfg
Log File entuity_home\log\duplexman.log.[1..4]
Description
It is responsible for maintaining the port duplex tables, so Entuity recognizes whether each
managed port is full or half duplex.
encode_keychange
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
encode_keychange -t md5|sha1 [OPTIONS]
Description
encode_keychange produces a KeyChange string using the old and new passphrases as
described in Section 5 of RFC 2274 "User-based Security Model (USM) for version 3 of the
Simple Network Management Protocol (SNMPv3)". -t option is mandatory and specifies the
hash transform type to use.
The transform is used to convert passphrase to master key for a given user (Ku), convert
master key to the localized key (Kul), and to hash the old Kul with the random bits.
Passphrases are obtained by examining a number of sources until success (in order listed):
Command line options (see -N and -O options below);
The file $HOME\.snmp\passphrase.ek which should only contain two lines with old and
new passphrase;
Standard input -or- user input from the terminal.
Options
-E [0x]<engineID> EngineID used for Kul generation.
<engineID> is interpreted as a hex string when preceded by 0x, otherwise it is treated as
a text string. If no <engineID> is specified, it is constructed from the first IP address for
the local host.
-f, force passphrases to be read from standard input.
eosserver
Location entuity_home\lib\httpd\EOS
Type process
Invoked By starteye
User Invocation n/a
Invoked Processes Internal Entuity server processes
Configured Through startup_O/S.cfg, entuity.cfg
Log File entuity_home\log\EOSServer.log.[1..4]
Description
This process manages the communication between Component Viewer and the database. It
is a java process, started with the other main system processes and runs continuously.
eyeclientrpc
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line, scripts
Invoked Processes n/a
Configured Through Command line
Log File n/a
Description
eyeclientrpc provides access to administration functionality without having to use the
Entuity interface. eyeclientrpc allows you to perform Entuity management functions from
the command line, or automate administration tasks through scripts. eyeclientrpc allows
you to:
Manage view content; adding, deleting, emptying and moving managed objects within
views.
Create and delete Entuity business views. This includes support for view hierarchy
creation.
eyeclientrpc can only be run from the Entuity server. eyeclientrpc assumes that users
that have administrator rights on the Entuity server command line can be entrusted with
access to Entuity administrator functionality.
Syntax
eyeclientrpc has the following command line options:
eyeclientrpc FunctionName FunctionOptions
where:
FunctionName is the first and mandatory argument.
FunctionOptions are specific to the selected function.
eyeclientrpc, its functions and arguments are case insensitive. The examples given here
include mixed casing only to assist their readability.
Where values include spaces, for example view names or spacing within interface names,
you should enter the function and its value within double inverted commas, for example:
eyeclientrpc createViews "–-views=View 1,View 2" –-user=PJones
availableFunctions deleteViews
changePassword editIPSLA
changePolled editViews
clearDNSCache manageConfigMonitor
createIPSLA manageInterfaces and unmanageInterfaces
createUser modifyViews
createViews renameDevices
deleteDevices updateCommunity
deleteIPSLA updateSpeed
deleteUser ValidateDevices
availableFunctions
eyeclientrpc availableFunctions lists the available eyeclientrpc functions.
Example Usages
1) For example to see a list of available functions enter:
eyeclientrpc availableFunctions --help
Remote Call Result:
Available Functions:
createViews manageInterfaces
changePassword editViews
deleteViews validateDevices
availableFunctions createUser
updateCommunity deleteDevices
deleteUser deleteIPSLA
renameDevices createIPSLA
unManageInterfaces updateSpeed
changePolled modifyViews
editIPSLA manageConfigMonitor
changePassword
eyeclientrpc changePassword changes the password of the specified Entuity user
account. When changing a user account password you must enter either the current
password for the account or a system administrator account name.
Parameters Description
--currUser User account that you want to amend the password.
--newPass The password for the new user account.
--currPass The current password for the user account.
--user An existing user name that is a member of the system administrator group.
Parameters Description
--help Displays help for changePassword.
Example Usages
1) This example changes the password for the user MeiChen. It includes the current
password for MeiChen as verification of the right to change the account password, as well
as the new password.
eyeclientrpc changePassword --currUser=MeiChen --currPass=b7i7l7l
--newPass=71f4rgH
Remote Call Result:
Password change for user MeiChen succeeded.
2) This example changes the password for the user MeiChen. It includes the user account of
an administrator as verification of the right to change the account password, as well as
the new password.
eyeclientrpc changePassword --currUser=MeiChen --newPass=b1i2l4l7
--user=admin
Remote Call Result:
Password change for user MeiChen succeeded.
changePolled
eyeclientrpc changePolled changes specified polled names with the specified
replacement names. To change the device name used within Entuity use eyeclientrpc
renameDevices.
The polled names can be:
Specified as a comma separated list of polled names.
Matched using a regular expression pattern.
Matched using an SQL expression pattern.
Set to the IP address of the device.
Set to the resolvable device name.
Set to the full qualified domain name of the device.
Example Usages
1) This example changes the polled name of the device keoni to kh1.
eyeclientrpc changePolled --polledNames=keoni --replaceNames=kh1
Remote Call Result:
Polled name changed for 'keoni' to 'kh1' successfully
The message indicates for the device named keoni its polled name is changed to kh1.
2) This example uses a regular expression to amend the polled name of the three identified
devices, changing the prefix from dev to test.
eyeclientrpc changePolled --polledNames=dev1,dev2, dev3
--replaceRegEx=dev --replacement=test
3) This example uses a SQL expression to amend the polled name of devices with the prefix
dev to use the test prefix.
eyeclientrpc changePolled --polledLike=dev% --replaceRegEx=dev
--replacement=test
4) This example replaces all digits in the polled name top3550 with X:
eyeclientrpc changePolled --polledNames=top3550 --replaceRegEx=[0-9]
--replacement=x
5) This example replaces the resolved polled name with the IP address of the device, from
ac1 to 10.44.1.135:
eyeclientrpc changePolled --polledNames=ac1 --setIP
Remote Call Result:
6) This example amends the polled name by replacing the IP address of the device with its
resolved name, from 10.44.1.135 to ac1:
eyeclientrpc changePolled --polledNames=10.44.1.135 --setName
Remote Call Result:
Polled name changed for 'ac1' to 'ac1' successfully
The message indicates for the device named ac1 that its polled name is changed to ac1.
7) This example amends the polled name by replacing the resolved name of the device with
its fully qualified domain name, from ac1 to ac1.skipton.local:
eyeclientrpc changePolled --polledNames=10.44.1.135 --setFQDN
Remote Call Result:
Polled name changed for 'ac1' to 'ac1.skipton.local' successfully
The message indicates for the device named ac1 that its polled name is changed to
ac1.skipton.local.
clearDNSCache
eyeclientrpc clearDNSCache clears the Entuity server DNS cache. This initiates a check
by Entuity on all devices and their resolved DNS; this a resource intensive process which
Entuity performs once every 24 hours. eyeclientrpc clearDNSCache is a
troubleshooting tool that is not listed within the list of available functions.
eyeclientrpc clearDNSCache
Remote Call Result:
DNS cache cleared successfully
You can configure whether the DNS lookup is performed by the server or client machine,
through DNSLookup.location setting in client.cfg.
createIPSLA
The eyeclientrpc createIPSLA function creates an IPSLA object on the device for the
set creator type. The device names can be specified as a comma separated list. Alternatively,
the device names can be matched using an SQL or regular expression pattern.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
Parameters Description
--type A IPSLA creator type, which can be IPSLAHTTPCreator,
IPSLAEchoCreator, IPSLADHCPCreator, IPSLAHTTPRawCreator,
IPSLAJitterCreator, IPSLAEchoPathCreator, IPSLATCPCreator,
IPSLAJitterVoIPCreator or IPSLADNSCreator.
--help Displays this help message.
Example Usages
1) This example creates an IP SLA DNS operation definition, which checks the performance
of the DNS server 10.44.2.5 using the target blade.
eyeclientrpc createIPSLA --type=IPSLADNSCreator --devices=10.44.1.205
--IPSLACreatorName=ecr_dns_lndn
--IPSLArttMonEchoAdminTargetAddString=blade --IPSLAConfiguredIndex=900
--IPSLArttMonEchoAdminNameServer=10.44.2.5
Remote Call Result:
Successfully created IPSLA for device 10.44.1.205
createUser
eyeclientrpc createUser creates Entuity user accounts, together with their password
and assigned to 1 user group, in addition to the All Users group. The user groups must
already exist in Entuity. The system administrator is also required to enter their user name to
verify the operation.
Parameters Description
--newUser Name of the new user. This user name must be unique.
--newPass The password for the new user account.
--group The user group to which the user is assigned. All users are also assigned to the
All Users group. You can assign the user to more user groups through the web
UI.
--user An existing user name that is a member of the system administrator group.
--help Displays help for createUser.
Example Usages
1) This example creates a new user account, bill, assigned to the Beijing user group (and
automatically to the All Users group). A system administrator account is also required,
admin, to authorize the creation of the new user account.
eyeclientrpc createUser --newUser=bill --newPass=b2i3l4l5
--group=Beijing --user=admin
Remote Call Result:
New user "bill" created and assigned to group "Beijing".
createViews
eyeclientrpc createViews creates views for which you can specify:
A content filter, which determines the objects within a view.
An event filter, which determines the events that Entuity can raise within the view.
Ownership of the view, and the permissions user groups have to the view.
When eyeclientrpc attempts to create a view with a name that already exists on Entuity,
Entuity returns an appropriate create view failure message.
Parameters Description
--views A comma separated list of view paths. Each view path must be unique, and
where the path has a hierarchy the separator is a forward slash / .
This example can include three views with the same name (key_switches) as
their view paths are different:
--views=london,london/key_switches,new_york,new_york/
key_switches,key_switches
--viewsFromFile A file containing one view path per line.
--user A valid Entuity username which is assigned ownership of the view.
--baseViewType One of One of either NONE, INTERSECTION or UNION. The default is
UNION if base views are specified, otherwise NONE.
Parameters Description
--baseViews A comma separated list of base view paths. The view hierarchy separator is the
forward slash(/) character.
--groups A comma separated list of user group names that can access this view. You can
specify attributes for a group using the format:
group_name:editable:viewable
When you want the view to not be viewable, or editable do not specify that
attribute, for example:
group_name
--domainFilter A valid content filter name. Use an empty content filter to change the content
type to empty, you would then manually add objects to the view.
--eventFilter A valid event filter name.
--incidentFilter A valid incident filter name.
--help Displays help for createViews.
Example Usages
1) This example creates two views, both owned by PJones.
eyeclientrpc createViews –-views=View1,View2 –-user=PJones
Remote Call Result:
Successfully added view: view1
Successfully added view: view2
3) Create view view3 from the union of views View1 and London and with owner
JamesSmith.
C:\Entuity\lib\tools>eyeclientrpc createViews --views=View3
--baseViews=View1,London --baseViewType=UNION --user=JamesSmith
Remote Call Result:
Successfully added view: View3
4) Create view view2 and sub-view subview2 and where group2 has viewable but not
editable permission.
eyeclientrpc createViews --views=view2,view2/subview2
--groups=group2:noedit:viewable --user=admin
Remote Call Result:
deleteDevices
The eyeclientrpc deleteDevices function deletes the specified device from Entuity.
You can specify device names as a comma delimited list, or as the result of an SQL or
regular expression pattern.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--help Displays the deleteDevices help message, for example
eyeclientrpc deleteDevices --help.
Example Usages
1) This example deletes from Entuity the device ted.
eyeclientrpc deleteDevices --devices=ted
deleteIPSLA
The eyeclientrpc deleteIPSLA function deletes the IPSLA operation on the device for
the given IPSLA creator name and type. The device names can be specified as a comma
separated list. Alternatively, the device names can be matched using an SQL or regular
expression pattern.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--type A IPSLA creator type, which can be IPSLAHTTPCreator, IPSLAEchoCreator,
IPSLADHCPCreator, IPSLAHTTPRawCreator, IPSLAJitterCreator,
IPSLAEchoPathCreator, IPSLATCPCreator, IPSLAJitterVoIPCreator or
IPSLADNSCreator.
--name Name of the IPSLA operation for deletion.
--help Displays the deleteIPSLA help message, for example eyeclientrpc
deleteIPSLA --help.
Example Usages
1) Deletes a DNS IP SLA operation definition from the Entuity server, specifically the
ecr_dns_lndn IP SLA creator from device 10.44.1.205.
eyeclientrpc deleteIPSLA --type=IPSLADNSCreator --devices=10.44.1.205
--name=ecr_dns_lndn
Remote Call Result:
Successfully deleted IPSLA object for device 10.44.1.205
deleteUser
eyeclientrpc deleteUser deletes an Entuity user account.The system administrator is
required to enter their user name to verify the operation.
Parameters Description
--currUser User account you want to delete from Entuity.
--user An existing user name that is a member of the system administrator group.
--help Displays help for deleteUser.
Example Usages
1) To delete a user you must also enter the user name of an Entuity system administrator.
eyeclientrpc deleteUser --currUser=bill --user=admin
Remote Call Result:
User remove succeeded: bill
deleteViews
The eyeclientrpc deleteViews function removes user created views from Entuity.
When eyeclientrpc attempts to delete a view with a name that does not exist, or is the All
Objects view, Entuity returns an appropriate delete view failure message.
Parameters Description
--views A comma separated list of view paths. The view hierarchy separator is the
forward slash(/) character.
--viewsFromFile For options that specify a file, the full path to the file is required. A file
containing one view path per line.
--help Displays this help message.
Example Usages
1) This example deletes one view, view1 (and any sub-views).
2) This example shows deletion of multiple views, including subview7. Its parent view, view7,
is not deleted.
eyeclientrpc deleteViews --views=view5,view7/subview7
Remote Call Result:
Successfully removed view: view5
Successfully removed view: view7/subview7
editIPSLA
The eyeclientrpc editIPSLA function amends the IPSLA operation on the device for the
given IPSLA creator name and type. The device names can be specified as a comma
separated list. Alternatively, the device names can be matched using an SQL or regular
expression pattern.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--type A IPSLA creator type, which can be IPSLAHTTPCreator, IPSLAEchoCreator,
IPSLADHCPCreator, IPSLAHTTPRawCreator, IPSLAJitterCreator,
IPSLAEchoPathCreator, IPSLATCPCreator, IPSLAJitterVoIPCreator or
IPSLADNSCreator.
--name Name of the IPSLA operation for amendment.
--help Displays the editIPSLA help message, for example eyeclientrpc
editIPSLA --help.
Example Usages
1) Amends a DNS IP SLA operation definition on the Entuity server, specifically the
ecr_dns_lndn IP SLA creator on device 10.44.1.205 is assigned a new target string,
neptune.
eyeclientrpc editIPSLA --type=IPSLADNSCreator --devices=10.44.1.205
--name=ecr_dns_lndn --IPSLArttMonEchoAdminNameServer=10.44.2.5
--IPSLArttMonEchoAdminTargetAddString=neptune
Remote Call Result:
Successfully edited IPSLA object for device 10.44.1.205
editViews
Using the eyeclientrpc editViews function you can amend the attributes of existing
views. You can rename views using both the --views and --names options together;
where each item in the --views list is replaced by a corresponding item in the --names list.
h
Parameters Description
--views A comma separated list of view paths, and where the path has a hierarchy the
separator is a forward slash / .
--viewsFromFile A file containing one view path per line.
--names A comma separated list of new view names. Path separators are not allowed
here.
--namesFromFile A file containing one new view name per line. Path separators are not allowed
here.
--baseViewType One of One of either NONE, INTERSECTION or UNION. The default is
UNION if base views are specified, otherwise NONE.
--baseViews A comma separated list of base view paths. The view hierarchy separator is the
forward slash(/) character.
--user A valid Entuity user name which owns the view.
--groups A comma separated list of user group names that can access this view. You can
specify attributes for a group using the format:
group_name:editable:viewable
When you want the view to not be viewable, or editable do not specify that
attribute, for example:
group_name:nedit:noview
--domainFilter A valid content filter name. Use an empty content filter to change the content
type to empty, you would then manually add objects to the view.
--eventFilter A valid event filter name.
--incidentFilter A valid incident filter name.
--help Displays help for createViews.
Example Usages
1) The London user group has access to view7 with edit and view permissions assigned and
the owner set to admin where admin belongs to the administrators group.
eyeclientrpc editViews --views=view7
--groups=London:editable:viewable --user=admin
Remote Call Result:
Successfully edited view: view7
2) The London user group cannot view or edit view7. A new owner is assigned, supervisor
who is a member of the administrators group.
eyeclientrpc editViews --views=view7
--groups=London:noedit:noview --user=supervisor
Remote Call Result:
Successfully edited view: view7
manageConfigMonitor
You can use the eyeclientrpc manageConfigMonitor function to edit configuration
monitor settings for the specified target devices.
You can specify the target devices through one of the device options, either using their
device name, or by giving an SQL or regular expression pattern that will be matched against
the device name.
For options that specify a file, the full path to the file is required.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--cbRetrievalEnabled Sets change-based configuration retrieval for the device, set to true to
enable, false to disable. When set to true Entuity checks every five minutes
for configuration change. When a change is identified Entuity does not
immediately retrieve the configuration but waits until two consecutive polls
return the same timestamp; this delay is to ensure configurations are not
retrieved as they are being edited.
--retrievalEnabled Sets scheduled configuration retrieval for the device, set to true to enable,
false to disable. Scheduled retrieval starts at 02:00, with scheduled jobs
running at one minute intervals.
--archiveNumber Set the number of configuration retrieval archives.
--transferMethod Set the transfer method, valid values are TFTP, FTP, NONE.
--scriptFile The file (name) where configuration retrieval settings are specified. Use
DEFAULT to set to the default file, which is determined by mapping the
device sysOid to its associated script file as defined in
sw_cm_transforms.cfg
Parameters Description
--excludeDiffFile The file (name) where configuration retrieval excluded differences are
specified. Use DEFAULT to set to the default file, which is determined by
mapping the device sysOid to its associated script file as defined in
sw_cm_transforms.cfg
--policyFile The file (name) where configuration retrieval policy rules are specified. Use
DEFAULT to set to the default file, which is determined by mapping the
device sysOid to its associated script file as defined in
sw_cm_transforms.cfg
--debug Enable or disable configuration retrieval debug mode by setting to true/
false.
--credentialSet Name of a credential set.
--help Displays the help message.
Example Usages
1) Sets up and schedules configuration retrieval using a regular expression to identify all
devices with the IP address root of 192.169.93. The credential set name is enclosed within
quotation marks as it includes spaces.
eyeclientrpc manageConfigMonitor --deviceRegEx=192.168.93.*
--retrievalEnabled=true --transferMethod=TFTP
--scriptFile=start_run_cisco_001.expect
--excludeDiffFile=cisco-generic-exclusions.cfg
--policyFile=cisco-generic-policies.cfg
--credentialSet="ren Credential Set"
Remote Call Result:
Successfully updated config monitor settings for device 192.168.93.2
Successfully updated config monitor settings for device 192.168.93.22
Parameters Description
--devices A list of comma separated device names. This option only applicable if
interfaces option is specified.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--interfaces A list of comma separated interface names. Interface names within Entuity
include spaces and must be exact. The first example has correct spacing
and would work, the second example has the four spaces removed and fails
(it would fail with only one space missing):
eyeclientrpc unmanageInterfaces --devices=10.44.1.12
"--interfaces=[ 00001 ] FastEthernet0/1"
eyeclientrpc unmanageInterfaces --devices=10.44.1.12
"--interfaces=[00001]FastEthernet0/1"
--interfaceRegEx A regular expression pattern that is matched against interface names.
--interfaceLike An expression using SQL wildcards pattern that is matched against interface
names.
--interfaceIndex An expression using LT (less than), GT (greater), EQ (equal to), AND (logical
and) and OR (logical or) to match on the interface index.
--interfaceType An expression using LT (less than), GT (greater), EQ (equal to), AND (logical
and) and OR (logical or) to match on the interface type.
--interfacesFromFile A file (name) that contains one device name and interface name, separated
by single space, per line.
--swIDs A list of comma separated StormWorks identifiers.
--swIDsFromFile A file (name) that contains one StormWorks identifier per line.
Example Usages
1) This example manages interfaces where the ifIndex is greater than 50 and less than 90 OR
equal to 100.
eyeclientrpc manageInterfaces "--interfaceIndex=LT 50 AND GT 90 OR EQ
100"
modifyViews
The eyeclientrpc modifyViews function allows you to apply add, remove, move or
empty operations to a view's contents. As part of each eyeclientrpc modifyViews
function you must specify the managed objects on which you want to perform the instruction,
for example devices, interfaces, DLCIs.
Mandatory options are:
add|remove|empty
views|allviews
Each eyeclientrpc instruction should only specify one object type. The only exception is
when specifying an interface type, when you must specify both device and interface
identifiers.
Parameters Description
--add Adds the specified Entuity managed object(s) to the specified view(s). This
example, adds two devices to the two named views.
eyeclientrpc modifyViews -–add
-–devices=10.44.1.42,sunrise –-views=View1,View2
--remove Removes the specified Entuity object(s) from the specified view(s), that
eyeclientrpc is permitted to modify.
This example removes a device from two named views.
eyeclientrpc modifyViews –-remove –-devices=sunrise
-–views=View1,View3
--empty Removes all of the managed objects from the specified view(s),
eyeclientrpc is permitted to modify. You can only specify the views, you
can not specify managed object type, all objects are removed.
--move Removes the specified Entuity managed object(s) from all views not
specified here and that it is permitted to modify. --move also ensures the
specified views do contain the specified objects, adding them where
appropriate.
--views A comma separated list of view paths. The view hierarchy separator is the
forward slash(/) character.
--allViews Specifies all permitted views.
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--devicesFromFile A file (name) that contains one device name per line.
--interfaces A comma separated list of interface names.
--interfaceRegEx A regular expression pattern that is matched against interface names.
--interfaceLike An expression using SQL wildcards pattern that is matched against interface
names.
Parameters Description
--interfaceIndex An expression using LT (less than), GT (greater), EQ (equal to), AND (logical
and) and OR (logical or) to match on the interface index.
--interfaceType An expression using LT (less than), GT (greater), EQ (equal to), AND (logical
and) and OR (logical or) to match on the interface type.
--interfacesFromFile A file (name) that contains one device name and interface name, separated
by single space, per line. Each interface name should start with the device
name and a white space followed by the interface name.
--swIDs A list of comma separated StormWorks identifiers.
--swIDsFromFile A file (name) that contains one StormWorks identifier per line. You must
specify the full path to the file.
--file A file (name) that contains a list of commands, each comprised from the
modifyViews options, with one command per line. You must specify the full
path to the file.
--help Displays this help message.
Example Usages
1) This example empties views view1 and view3.
eyeclientrpc modifyViews –-empty -–views=view1,view3
3) This example adds the interfaces on switch1, that have descriptions matching the regular
expression Fast.*, to view2.
eyeclientrpc modifyViews --add --devices=switch1
--interfaceRegEx=Fast.* --views=view2
4) This example specifies a file that contains one modifyViews entry per line.
eyeclientrpc modifyViews --file=c:\modify_files\add_ports.txt
This is an example entry from the file. It use uses the --interfaceIndex option to add
interfaces with ifIndex values less than 10000.
--add --devices=switch1 --interfaceIndex=LT10000 --views=view2
6) This example moves a device to two named views, and would remove it from any
non-designated restricted views, for example the unmentioned view2.
eyeclientrpc modifyViews –-move –-devices=Device1 -–views=view1,view3
renameDevices
eyeclientrpc renameDevices renames all of the device names given with the
replacement device names. The device name is used as an identifier within Entuity, to
change the polled name use changePolled.
You can pass both the original and replacement device names to this function as:
A list of comma separated device names.
An SQL like pattern or regular expression.
Each eyeclientrpc instruction should only specify one object type. The only exception is
when specifying an interface type, when you must specify both device and interface
identifiers.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--replaceNames A list of comma separated replacement device names.
--replaceRegEx A regular expression to be used against each device names specified.
--replacement Replacement text to be used with --replaceRegEx.
--help Displays the renameDevices help text:
Example Usages
1) This example changes the name of the device keoni to kh1.
eyeclientrpc renameDevices --devices=keoni --replaceNames=kh1
Remote Call Result:
Device name changed from 'keoni' to 'kh1' successfully
2) This example amends the name of the three identified devices, changing the prefix from
dev to test.
eyeclientrpc renameDevices --devices=dev1,dev2, dev3
--replaceRegEx=dev --replacement=test
3) This example amends the name of devices with the prefix dev to use the test prefix.
eyeclientrpc renameDevices --deviceLike=dev% --replaceRegEx=dev
--replacement=test
4) This example replaces all digits in the device name top3550 with X:
eyeclientrpc renameDevices --devices=top3550 --replaceRegEx=[0-9]
--replacement=x
unManageInterfaces
See manageInterfaces and unmanageInterfaces.
updateCommunity
The function updates the device read community and write community strings for the
specified device names in the Entuity database. It does not update or amend the community
string values on the device. The device read, write or both community strings can be
specified when changing community strings. The device names can be specified as a
comma separated list.
Alternatively, the device names can be matched using an SQL or regular expression pattern.
Replacement device names can be specified as a comma separated list.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--readCommunity A read community string.
--writeCommunity A write community string.
--help Displays the updateCommunity help text:
updateSpeed
The eyeclientrpc updateSpeed function allows modification to port inbound and
outbound speed settings. The default speed is obtained via SNMP but might not accurately
reflect the actual maximum data rate of the port. Setting the speed changes the perceived
maximum (100% utilized) speed within Entuity and therefore results in more accurate port
utilization metrics. eyeclientrpc updateSpeed does not change the configuration on the
device itself.
The target ports are identified through one of the interface options, either giving the interface
description, or by giving a pattern expression that will be matched against the interface
description.
Each eyeclientrpc instruction should only specify one object type. The only exception is
when specifying an interface type, when you must specify both device and interface
identifiers.
Parameters Description
--devices A comma separated list of device names.
--deviceRegEx A regular expression pattern that will match the required device names.
--deviceLike An SQL expression pattern that will match the required device names.
--interfaces A comma separated list of interface names.
--interfaceRegEx A regular expression pattern that is matched against interface names.
--interfaceLike An expression using SQL wildcards pattern that is matched against interface
names.
--interfaceIndex An expression using LT (less than), GT (greater), EQ (equal to), AND (logical
and) and OR (logical or) to match on the interface index.
--interfaceType An expression using LT (less than), GT (greater), EQ (equal to), AND (logical
and) and OR (logical or) to match on the interface type.
--interfacesFromFile A file (name) that contains one device name and interface name, separated
by single space, per line. Each interface name should start with the device
name and a white space followed by the interface name.
--swIDs A list of comma separated StormWorks identifiers.
--swIDsFromFile A file (name) that contains one StormWorks identifier per line. You must
specify the full path to the file.
--file A file (name) that contains a list of commands, each comprised from the
modifyViews options, with one command per line. You must specify the full
path to the file.
--inSpeed Interface input speed in bits per second. A negative value removes an
interface speed override, returning it to the default polled value.
--outSpeed Interface output speed in bits per second. A negative value removes an
interface speed override, returning it to the default polled value
--help Displays this help message.
Example Usages
1) Sets to 1Gig/second the inbound and outbound speed for the interface with StormWorks
id 1311.
eyeclientrpc updateSpeed --swIDs=1311 --inspeed=1000000000
--outspeed=1000000000
2) Sets to 1Gig/second the inbound and outbound speed for all interfaces with the
description " [ Gi0/1 ] GigabitEthernet0/1"
When specifying an interface description, it must be preceded by a space character and the
entire option should therefore be enclosed in quotes.
3) Marks for rediscovery during the next poll the inbound and outbound speeds for all of the
matching interfaces. Inbound and outbound speeds would be reset to the value set on
the port.
eyeclientrpc updateSpeed "--interfaces= [ Gi0/1 ] GigabitEthernet0/1"
--inspeed=-1 --outspeed=-1
ValidateDevices
eyeclientrpc validateDevices initiates an update of the device cache on the Entuity
server.
eyeclientrpc validateDevices
Remote Call Result:
Devices are validated successfully
When you have the Entuity client open during the validation you may have to refresh (F5) the
client to view the updated device list. By default Entuity updates the device list approximately
every ten minutes, or when there is a change in the list e.g. a new device is added to Entuity.
eyepoller
Location entuity_home\bin
Type Utility
Invoked By starteye
User Invocation n/a
Invoked Processes n/a
Configured Through entuity_home/etc/startup_o/s.cfg
entuity_home/etc/eyepoller_overrides.cfg
Log File entuity_home/log/eyepoller.log
Description
By default eyepoller polls for interface utilization, fault and congestion data at five minute
intervals. It is configurable through entuity.cfg, as are associated events which monitor
the accuracy of polling. These events are not enabled by default.
RFC 2863 requires interfaces that operate above 20 Mbps to support 64 bit counters; SNMP
agents that support 64 bit counters are available from SNMPv2 onwards. However,
eyepoller can successfully poll ports with a speed of 105Mbps or below using SNMPv1
polling of 32 bit counters. For eyepoller to collect traffic and utilization data for ports with a
speed above 105Mbps there must be accompanying 64 bit counter support in the device’s
SNMP agent.
Entuity recommend checking devices for installation of SNMP agents that support 64 bit
counters. For example you can test a device’s 64 bit counter support using
entuity_home\lib\tools\snmpwalk:
snmpwalk –v2c -c <community> <device> .1.3.6.1.2.1.31.1.1.1.6
eyepoller uses a number of 64 bit counters including IF-MIB::ifHCInOctets.
Where the device agent does not support 64 bit counters you should consider upgrading the
agent.
FixNewBinVendor
Location entuity_home\lib\tools
Type Utility
Invoked By Command line
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
Prior to Entuity’s introduction of generically managed devices Entuity would, where possible,
automatically generate device definitions and assign device types to devices for which it did
not contain vendor definition details.
FixNewBinVendor allows you amend attr.cfg, so existing devices that are managed
through newbin.vendor use the generic device type, rather than switch or router. This
utility only requires running once.
flowCollector.bat
Location entuity_home\bin
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
With Integrated Flow Analyzer you should amend port to application mapping through the
web UI. These mappings are held in
entuity_home\etc\flow-applications-template.txt, which you can directly amend.
flowCollector.bat is a batch file to be run when you have edited the template file.
To load the mappings, from entuity_home\bin enter:
flowCollector -loadMappings
You can also run the batch file to check the status of current flow collection, from
entuity_home\bin enter:
flowCollector -stats
getDownstream
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line, Extensible Menu
Invoked Processes n/a
Configured Through n/a
Log File n/a
Syntax
Entuity identifies managed objects using two different methods, each method assigns
objects their own unique identifiers. These identifiers are normally only used by internal
Entuity processes. However you can access these identifiers:
ForkEvent forwards objectID and objectType as part of eosObjectID.
Entuity Remedy AR System integration module uses ForkEvent to forward objectID,
objectType and StormWorksID as part of eosObjectID.
Flex Reports allow you to report on StormWorks identifiers when you select Show
Hidden Data.
Where you are receiving the identifiers through ForkEvent, you should use getDownstream
with:
getDownStream.exe objectID objectType
where:
objectID is the unique identifier for that managed object.
ObjectType is 0 for device, and 1 for port.
Where you identify the object through running a Flex Report to find the StormWorks
identifier use this syntax:
getDownStream StormWorksID
Description
Network Outage events indicate the number of devices impacted by a node failure. From the
command line you can run getDownstream to view a list of the devices impacted by the
failure. getDownstream shows the devices Availability Monitor identified as being impacted
by the node failure the last time Availability Monitor ran.
getDownstream can also be called from a context sensitive User Action in Event Viewer.
h
By default availability monitor polls every two minutes. It is possible that when you run
getDownstream to investigate an event raised in Event Viewer, Availability monitor will have
already run again. Occasionally a change in the node status or network may result in
getDownstream correctly returning a different number of impacted devices to that identified
in the original event.
Files
entuity.cfg, license.dat (See Chapter 3 - Entuity System Files.)
hostIdent
Location entuity_home\bin
Type Process, runs during Install
Invoked By Install
User Invocation Command Line
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\etc\hostIdentifier.txt
Description
The license file restricts installation of Entuity to the server for which you provided a host
identifier.
You must provide to your Entuity supplier the host identifier of the machine to which you
want to install Entuity. You can discover this by running hostident:
Before installation, by obtaining a copy of hostident from your Entuity contact, and
running it from the command line. hostident displays the host identifier on the
command line.
As part of install, install displays the host identifier.
As part of configure, configure displays the host identifier.
httpd
Location entuity_home\lib\apache\bin
Type Process, runs continuously
Invoked By
User Invocation n/a
Invoked Processes n/a
Configured Through entuity.cfg, httpd_eye.conf
Log File entuity_home\log\http.error_log,
http.access_log
Description
This process is a web server for the GUI front end. It is started and stopped automatically.
The web server used is the public domain Apache web server. For details on the error and
access log messages created, refer to the Apache documentation at http://www.apache.org .
install
Description
install installs the Entuity software to your server. It is the first step in setting up your
server, and must successfully complete before you can configure it.
Through install you can specify the folders Entuity uses to build the database and locate
the log files. On completion it identifies the current license file and the host identifier.
Syntax
install [ text ]
Where:
text instructs install to run through the command line which is the default on Linux
machines, but not Windows. In Windows install runs as a Java wizard.
See Also
configure
instService
Location entuity_home\bin
Type Process, run during install
Invoked By configure
User Invocation n/a
Invoked Processes n/a
Configured Through configure
Log File n/a
Description
instService creates the Entuity Windows services during Entuity server installation.
ipman
Location entuity_home\bin
Type Process, run each day at 05:00, 10:000 and 15:00
Invoked By provost
User Invocation n/a
Invoked Processes n/a
Configured Through provost.conf, entuity.cfg
Log File entuity_home\log\ipman.log.[1..4]
Syntax
ipman usage options
ipman <ttl> [deviceName] [-d] [-f] ¦ ipman -h
where:
ttl, sets the number of iterations of ipman before a MAC to IP address mapping expires.
deviceName, device to poll. When not specified ipman polls all managed devices.
-d, sets the debug level.
-f, instructs ipman to check ipman.devicefile in entuity.cfg for a device file. In
this device file you can specify routers which Entuity does not manage but from which
you want to collect ARP cache information. Entuity requires ARP cache details for
connected end host IP address identification.
By default provost runs ipman with -f but does not reference, or require, a device file.
ipman.log includes an information message reporting a device file is not specified:
INFO: Unable to open a device file: please set ipman.devicefile in
entuity.cfg to the full path and name of your device file.
-h, calls help when used from the command line.
Description
ipman uses SNMP to gather ARP (Address Resolution Protocol) entries from devices.
ipman, by default, gathers ARP information from each of the devices being managed by
Entuity, checking ARP cache entries for switch and router capabilities.
You can configure ipman to gather ARP data from devices not managed by the Entuity
server by running ipman against a specific device, or a list of devices specified in a
configuration file.
ipman ignores MAC addresses in the range 00:00:0C:07:AC:00 to 00:00:0C:07:AC:FF, this
range can be extended through the macman section in entuity.cfg.
Entuity recommend you use the example location and name of the device file to ensure it is
maintained during Entuity upgrades.
java
Description
This process is always running and enables the running of EOSServer.jar, which allows
the client to access to the server.
kill
Location entuity_home\lib\tool
Type Command line
Invoked By
User Invocation n/a
Invoked Processes n/a
Configured Through
Log File
Description
Terminates the process using its process identifier, for example to kill process number 9:
kill 9
licenseSrvr
Location entuity_home\bin
Type Process, runs continuously
Invoked By starteye
User Invocation n/a
Invoked Processes n/a
Configured Through license.dat, startup_O/S.cfg
Log File entuity_home\log\license.log.[1..4]
Description
This process, together with DsKernelStatic, manages the Entuity licenses. It is started
with the other main system processes. Before managing a new object Entuity checks that the
license allows the object to be managed. Licensing information is read from the license each
time the Entuity server starts. By default licensing information is read from file
entuity_home\etc\license.dat.
macman
Location entuity_home\bin
Type Process, runs daily at 09:30
Invoked By provost, macScheduler
User Invocation n/a
Invoked Processes n/a
Configured Through
Log File entuity_home\log\macman.log.[1..4]
Description
macman gathers MAC (Media Access Control) information for the devices Entuity manages.
This allows Entuity to display port end hosts.
macman ignores MAC addresses in the range 00:00:0C:07:AC:00 to 00:00:0C:07:AC:FF,
these are reserved for ethernet and FFDI HSRP group virtual mac addresses. You can extend
the MAC addresses macman ignores through the macman section in entuity.cfg.
macScheduler, also runs macman on devices when the port operational status of any
monitored non-router port changes from inactive to active. This status change implies other
changes have also occurred on the port and MAC addresses require checking.
Entuity checks for the port operational status every hour for non-router ports.
Entuity adds a five minute delay before running a MAC address check on a device, resulting
from a port status change, in order to suppress many port changes occurring in a short
space of time and flooding the server (and device) with requests. When port status changes
occur on many devices in a short period of time (e.g. at the beginning of the day when
everyone connects and logs on), then the MAC checks for some devices may be delayed
further due to the load on the server.
h
Entuity may not report some MAC address changes. For example, if a MAC address is seen
by a port (node added or transmits a packet), and then no longer seen (node removed or no
longer transmitting), and the MAC address is aged out of the device’s MAC table before
Entuity has polled the table for changes.
Switch ports that have more than ten MAC addresses and also have associated VLANs are
identified as trunk ports. Entuity does not display the end hosts of trunk ports.
MAC addresses are aged out of the database using a ‘time to live’ scheme whereby a MAC
address is only discarded when it has not been seen anywhere in the network for seven
days. However Entuity retains MAC address change history until the number of event
changes reaches a set limit, at which point Entuity discards the oldest change history record.
macScheduler
Location entuity_home\bin
Type Process, runs daily at 09:30
Invoked By Change in port status to active
User Invocation n/a
Invoked Processes macman
Configured Through startup_O/S.cfg
Log File entuity_home\log\macScheduler.log.[1..4]
Description
This process runs macman on devices when the port operational status of any monitored
non-router port changes from inactive to active. This status change implies other changes
have also occurred on the port and MAC addresses require checking.
myisamchk
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
myisamchk gets information about your database tables or checks, repairs, or optimizes
them. myisamchk works with MyISAM tables (.MYD and .MYI suffixed files).
myisampack
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
myisampack compresses MyISAM tables (.MYD and .MYI suffixed files), compressing each
column in the table separately.
mysql
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
mysql is a simple SQL shell (with GNU readline capabilities). It supports interactive and non-
interactive use. When used interactively, query results are presented in an ASCII-table format.
When used non-interactively (for example, as a filter), the result is presented in tab-separated
format. The output format can be changed using command options.
mysqladmin
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
mysqladmin is a client for performing administrative operations. You can use it to check the
server's configuration and current status, to create and drop databases, and more.
mysqlcheck
Location entuity_home\database\bin
Description
mysqlcheck client checks, repairs, optimizes, and analyzes tables.
mysqld
Location entuity_home\database\bin
Type MySQL database utility
Invoked By starteye
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File entuity_home\database\data\<hostname>.err
Description
This process is the database server. It listens on a single TCP/IP port number (default 3306)
through which both the Entuity database can be accessed.
mysqldump
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
mysqldump can be used to dump a database or a collection of databases for backup or
transfer to another SQL server (not necessarily a MySQL server). The dump typically
contains SQL statements to create the table, populate it, or both. However, mysqldump can
also be used to generate files in CSV, other delimited text, or XML format.
mysqlimport
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
mysqlimport is a data import utility providing a command-line interface to the LOAD DATA
INFILE SQL statement.
mysqlshow
Location entuity_home\database\bin
Type MySQL database utility
Invoked By User
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
mysqlshow allows you to view which databases exist, their tables, or a table's columns or
indexes.
newcommunity
Location entuity_home\lib\tools
Type MySQL database utility
Invoked By User
User Invocation Command line
Syntax
newcommunity old-community new-community
Description
The newcommunity utility is used to change all instances of device SNMP read community
string old-community to new-community.
Once the utility has completed its processing successfully, the following confirmation
message is displayed:
Modified community strings of n devices
where n is the number of instances that were changed.
Files
entuity.cfg and bin.vendor
See Also
showdevs.
nicman
Location entuity_home\bin
Type Process, run daily at 21:00
Invoked By provost
User Invocation Command line
Invoked Processes n/a
Configured Through provost.conf
Log File entuity_home\log\nicman.log.[1..4]
This process combines end host MAC and IP address information held in the database, and
stores it in a form suitable for use by other applications.
ObtainGenericVendor
Location entuity_home\bin
Type Process
Invoked By -
User Invocation Command line
Invoked Processes n/a
Configured Through -
Log File entuity_home\log\ObtainGenericVendor.log.[1..4]
Entuity now takes under its management devices without a device support dataset (vendor
file). Entuity first attempts to create a generic vendor file and if that fails devices are still
polled.
ObtainGenericVendor -y
For example if Entuity is managing a device with the unsupported sysoid sysoid:
.1.3.6.1.4.1.9694.1.4, ObtainGenericVendor would create a new device support dataset:
entuity_home\Entuity\etc\uncertified\1.3.6.1.4.1.9694.1.4.vendor
perror
Location entuity_home\database\bin
Type Database utility
Invoked By User
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
perror prints a description for a system error code or for a storage engine (table handler)
error code.
probity
Location entuity_home\lib\tools
Type Process, runs continuously
Invoked By User
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Syntax
probity
Description
probity displays information about the devices currently being monitored in the Entuity
management environment. It is useful for checking the integrity of the database, and can be
used to troubleshoot system problems.
An example of the output produced is shown below:
1 routerb2 Attr:1 Prole ID:5 RawData:12
2 routerc1 Attr:1 Prole ID:5 RawData:16
3 routerc2 Attr:1 Prole ID:4 RawData:16
One row of information appears for each device being managed. The first column lists the
device ID, and is used for internal purposes. The second column lists the device name, as
defined by the System Administrator. The third column lists the number of entries this device
has in the database ‘attributes’ table (this value should always be set to 1). The fourth column
displays the ID of the poller responsible for monitoring the device. If this value is set to
‘INVALID’, then Entuity is not polling the device, the most likely reason being that the poll
time is too long. The fifth column displays the number of ports that are being monitored for
the given device.
Files
entuity.cfg
See Also
showdevs
prodigy
Location entuity_home\bin
Type Process, runs on completion of prole
Invoked By provost
User Invocation n/a
Invoked Processes n/a
Configured Through provost.conf
Log File entuity_home\log\prodigy.log.[1..4]
Description
prodigy is responsible for analyzing the polled data, forwarding information to the trend
database for storage, and for removing any ports that are marked for deletion. It also checks
there are enough license credits to manage all of the ports on the device.
profluent
Location entuity_home\bin
Type Process, runs once a day, at 04:00
Invoked By provost
User Invocation n/a
Invoked Processes n/a
Configured Through provost.conf
Log File entuity_home\log\prof.log.[1..4]
Description
This process manages the relationship between the prole process(es) and network
devices. The profluent process calculates the number of proles that need to be run,
based on the variances between typical device polling times.
prole
Location entuity_home\bin
Type Process, runs every 20 minutes
Invoked By provost
User Invocation n/a
Invoked Processes setupProle
Configured Through provost.conf
Log File entuity_home\log\prole.log.[1..4]
Description
This process is responsible for SNMP polling a pre-defined list of networking devices.
Multiple proles may be started simultaneously, depending on the number of devices being
managed.
The SNMP response data is forwarded to the database for storage and subsequent analysis
by prodigy. For hubs prole also artificially creates outbound data (octets/packets), which
hubs do not provide.
prole uses vendor information, supplied through bin.vendor individual vendor files, and
mib.txt.
proliferate
Location entuity_home\bin
Type Process
Invoked By autoDiscovery
User Invocation Command line, Extensible Menu
Invoked Processes prolifprodigy, prolifsys and prolifmodule
Configured Through device file, command line, startup_O/S.cfg
Log File Output is usually to stdout, unless autoDiscovery is
run from the command line with the appropriate settings
then output is to
entuity_home\log\proliferate.log.[1..4]
Description
proliferate compares the SNMP devices Entuity currently manages against those you
specify it should be managing, attempting to add devices when found. When adding devices
to Entuity proliferate:
Attempts to identify the device type, first using individual vendor and then bin.vendor
files.
Identifies whether the device supports router, switch, router/switch or none of these
system capabilities.
Has an extensive set of switches that you can use to tailor its behavior for each device:
The communication protocol Entuity uses to manage a device, i.e. IPv4 (default), IPv6.
The Entuity device management level, e.g. Full, Full (Mgmt Port Only), Full
Management (No Ports).
You can set the device(s) proliferate attempts to add to Entuity using:
A device file, proliferate compares the devices detailed in the file to the devices
Entuity currently manages. You can create your own device file, or use autoDiscovery.
When autoDiscovery runs it creates a device file, autodisc.cfg, ready for
proliferate.
A single IP address and community string that proliferate compares to the devices
Entuity currently manages.
The options available through Inventory Administration.
When a device:
Passes all of the checks proliferate adds it to Entuity, with devices of a type listed in
entuity_home\etc\uncertified being added as Unclassified devices.
-g is a powerful, resource intensive option and should only be used when specifying an IP
! address or community string. Adding one device can take fifteen minutes; Entuity do not
recommend you use it with large device files.
Switch
Description
Short / Long
-a --auth= SNMPv3 specific parameter. Sets the authentication protocol, valid
values are:
MD5 (Message-Digest algorithm 5).
SHA (Secure Hash Algorithm).
-A --auth-pass= SNMPv3 specific parameter. Sets the authentication password,
valid values must be between eight and thirty-two characters long.
-c --community= Sets the device community string.
-d --device= Sets the device name or IP address Entuity uses when polling the
device.
-D --name= Specify a name to identify the device. This overrides -N.
-e --engine-id= SNMPv3 specific parameter. Specifies the SNMP engine identifier.
-E --exitMessage Displays a machine readable exit message.
-f --file= Instructs proliferate to get the device information from the
specified device file.
Switch
Description
Short / Long
-g --unrecognized-into- When proliferate cannot identify a device type and this option
generic is:
Specified, proliferate uses the closest matching attributes
of the device types defined in bin.vendor to create a
generically managed device type. proliferate adds the
new device type to entuity_home\etc\uncertified, and
adds the device to Entuity as a generically managed device
type. Generically managed device types should be considered
a temporary measure, only being used until Entuity Support
provide you with the appropriate vendor definition. If a new
device type cannot be built then proliferate adds the
device to Entuity as an Unclassified device.
Not specified the SNMP pollable device is added to Entuity as
an Unclassified device.
-h --help Run from the command line displays command help.
-i --ignore-interfaces Takes the device under management but not its interfaces, i.e.
ignore all interfaces.
-I --allow-duplicate-ip If this option (capitalized i) is not specified, then proliferate runs in
‘unique IP address enforcement’ mode, disregarding any devices
with one or more IP addresses that already exist in the main
database.
If this option is specified, then proliferate ignores ‘unique IP
address enforcement’ mode. This means, for example, that Cisco
routers can be added even though they share IP addresses
through HSRP (Hot Standby Routing Protocol).
-l --level This option (lowercase L) specifies the device management level,
e.g. pingOnly, basic, full, fullMgmtOnly and fullNoPorts. Entuity
also includes web, for use by proliferate when adding VM
platforms to Entuity.
-k --keep-slow-devices By default proliferate does not add to Entuity devices that take
longer to poll than the 300 seconds maximum allowed
(configurable through proliferate.maxpolltime in
entuity.cfg and through -K). With this option you can run
proliferate so it accepts slow devices.
-K --killafter= By default proliferate does not add to Entuity devices that take
longer to poll than the 300 seconds maximum allowed. This
timeout period is configurable here and through
proliferate.maxpolltime in entuity.cfg.
-m --managed-interface-only Running proliferate -m on a device results in Entuity only
managing the management port. When a management port is not
found then no ports are monitored. If new ports appear on the
device Entuity does not manage them.
Switch
Description
Short / Long
-N --name-using= The display name used in Entuity which when set to:
PolledName displays the identifier Entuity uses to poll the
device.
SystemName displays the administrator set device system
name,
IpAddress displays the management IP address.
ResolvableName displays the resolved host name of the
device.
ResolvableNameFQ displays the fully resolved host name of
the device.
-o --owner The owner of the proliferate action.
-p --protocol= Sets the communication protocol Entuity uses to manage a
device, either IPv4 (default) or IPv6. These are the valid formats 4,
V4, IPV4, 6, V6, IPV6.
-P --pdu-size= Sets the maximum PDU size.
-r --retry= Sets the number of SNMP poll retries.
–R --reevaluate-device-type This option enables a refresh of device vendor file information. For
example, a device using the Not Classified Generically Managed
device type, should be updated to use the appropriate vendor file
as soon as you receive the vendor definition from Entuity Support.
As part of the refresh the device would be assigned an appropriate
device type, e.g. router, switch.
-s --suspend-polling Stops SNMP polling of the specified device(s).
-t --timeout= Sets the SNMP request timeout, in seconds. It is configurable
through eostimeoutsnmp, by default 300 seconds.
-T --override-type Associates the numeric internal Entuity identifier device type to the
specified device.
-u --user= SNMPv3 specific parameter. Sets user security name.
-U --update-view- Updates the managed object map used as the basis for objects
membership viewed through the web interface and client.
-v --version= Sets the SNMP version used to manage the device, where:
1, is SNMPv1. Devices solely managed through the SNMPv1
protocol will have limited device support within Entuity.
2, is SNMPv2c.
2c, is SNMPv2c.
3, is SNMPv3.
default includes both SNMPv1 and SNMPv2c support.
-V --verbose Puts proliferate into ‘verbose’ mode, so that it produces
detailed diagnostic information.
Switch
Description
Short / Long
-w --web-polling-details Specifies connection details for web service polling, for example
for use with VM Platform device types. Enter the parameters in this
order '[type],[url],[user],[password]' where type can be
2(esx)|3(oracle). You can use Escape commas where present in
any of the four parts.
-x --priv= SNMPv3 specific parameter. Sets the privacy protocol, valid values
are DES (Data Encryption Standard), AES.
-X --priv-pass= SNMPv3 specific parameter. Sets the privacy password, valid
values must be between eight and thirty-two characters long.
-y --createVendorForExisting Create a vendor file for the specified device, a device which is
already in the database.
proliferate:
Compares the devices in the device file, dev.txt, to the devices Entuity manages.
Runs in ‘unique IP address enforcement’ mode, disregarding any devices with IP
addresses that already exist in the main database.
h
When you add a new or updated vendor file to Entuity you should instruct Entuity to refresh
the devices that use that definition so they use the latest vendor file.
-g is a powerful, resource intensive option and should only be used when specifying an IP
! address or community string. Adding one device can take fifteen minutes; Entuity do not
recommend you use it with large device files.
proliferate:
Compares the device 187.15.70.155 with the devices Entuity manages.
Attempts to create a new bin.vendor file definition, and adds the device to Entuity, as a
Not Classified Generically Managed device.
proliferate:
Compares the device 10.25.90.155 with the devices Entuity manages.
Adds only the device’s management port to Entuity.
For example to add the VM platform blade to Entuity you can enter:
proliferate -d blade -l web -w 2,https://blade/sdk,devuser,232neree -T
1144
Files
entuity.cfg, mib.txt, bin.vendor, Device File (Seed File) and autodisc.cfg.
See Also
autoDiscovery, showdevs, prolifprodigy, prolifsys and prolifmodule.
prolifprodigy
Location entuity_home\bin
Type Process,
Invoked By proliferate
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
Process internal to Entuity used when adding devices.
prolifsys
Location entuity_home\bin
Type Process,
Invoked By proliferate
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\log\prolifsys.log.[1..4]
Description
Process internal to Entuity used when adding devices.
prologV2
Location entuity_home\bin
Type Process,
Invoked By starteye
User Invocation n/a
Invoked Processes n/a
Configured Through startup_O/S.cfg, entuity.cfg
Log File entuity_home\log\prologV2.log.[1..4]
Description
It receives SNMPv1 and SNMPv2c traps from managed network devices and forwards them
to the event system as events.
prologV2 also caches credentials for SNMPv3 devices, both managed and unmanaged.
SNMPv3 traps are decoded through a configuration file, which the system administrator must
manually maintain. Only successfully decrypted and authenticated traps are forwarded, all
other traps are dropped.
prologV2 listens for IPv4 and IPv6 traps and informs. For IPv6 traps, when the source
address:
Matches the management IP address of the device Entuity can raise an event against the
managed device.
Does not match the device management address Entuity cannot identify the device as a
managed device. Entuity raises the event as though it is against an unmanaged device,
using the IPv6 address as the source of the event.
By default prologV2 listens on UDP port 162, although this can be changed using the
trapportnum variable set in entuity.cfg.
prologV2 trap handling settings can also be configured through the Traps section of
entuity.cfg. For example, enterpriseFormat allows you to configure Entuity to include
more information to enterprise traps, replaceEventDetailsAction to replace problematic
characters from the event details. The remaining parameters allow you to amend the setup of
prologV2 to handle the rate of incoming traps.
prologV2 supports HP OpenView style expansions in trap description strings, i.e. $A $E $e
$G $S $O $o $T $# $$ $*. Wildcard specific trap numbers and sub-oid matching are also
supported.
protean
Location entuity_home\bin
Type Process,
Invoked By provost, runs once a day at 02:00
User Invocation n/a
Invoked Processes n/a
Configured Through provost.conf
Log File entuity_home\log\protean.log.[1..4]
Description
protean updates the IP and VLAN network information used by other processes. protean
uses SNMP to gather new addressing information from each device managed by Entuity,
and forwards this information to the main database for storage.
provost
Location entuity_home\bin
Type Process,
Invoked By starteye
User Invocation n/a
Invoked Processes All those specified in provost.conf
Configured Through startup_O/S.cfg
Log File entuity_home\log\provost.log.[1..4]
Description
This process is responsible for the scheduling of non-Event Stream Manager processes
within the Entuity environment. provost is only stopped when Entuity closes down.
replace
Location entuity_home\database\bin
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Documentation entuity_home\database\docs\manual.htm
Log File n/a
Description
replace utility changes strings in place in files or on the standard input.
restore
Location entuity_home\bin
Type Process,
Invoked By n/a
User Invocation Command line
Syntax
restore [-f]
h
The command can only be run if the database server mysqld is running without the rest of
Entuity.
The -f parameter will suppress the prompt for confirmation immediately prior to the removal
of the existing databases.
Description
restore destroys existing Entuity databases, and any existing mysql.user table, builds
new ones, and recreates the tables and data from the backup files, which will have been
created via the backup command. After running restore, and before restarting the Entuity
server, you should run swmaint to audit and maintain the database.
h
You are informed whether or not the restore has been successful.
Files
Messages relating to start, failure and completion are written to the file restore.log in the
entuity_home\log directory (where entuity_home is the Entuity installation directory) This
wraps to restore.log.[1-4] when the log becomes full. The mysql output is also written
to restore.log.
See Also
backup
rollLog
Location entuity_home\lib\tools
Type Process
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
RollLog copies or moves a file and adds a timestamp to the filename.
Syntax
RollLog.exe Y|M|D|H|N|S M|C FileName [DestDir]
where:
Y, specifies only the year (YY).
M, specifies year and month (YYMM).
D, specifies year, month and day (YYMMDD).
H, specifies year, month, day and hours (YYMMDDHH).
N, specifies year, month, day, hours and minutes (YYMMDDHHMM).
S, specifies year, month, day, hours, minutes and seconds (YYMMDDHHMMSS).
M|C, specifies whether to move or copy the file.
FileName, full name of the file to copy or move. When the file name includes spaces use
double quotes.
DestDir, is an optional destination directory. When not specified the copy is done to the
same directory as the source file.
runbg
Location entuity_home\bin
Type Process
Invoked By User
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Description
runbg allows you to run Entuity binaries in the background from the command line.
setupProle
Location entuity_home\bin
Type Process,
Invoked By startup
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Description
setupProle is an internal Entuity process involved in setting up proles.
showdevs
Location entuity_home\lib\tools
Type Process,
Invoked By User
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
Syntax
showdevs > outputfile.txt
Description
The showdevs utility displays the devices currently being monitored in the Entuity
management environment, together with their SNMP read community strings. An example of
the output produced is shown below:
# VM Platform blade
-d 10.44.1.249 -D 10.44.1.249 -l full -c public
-d apcr1 -D apcr1 -l full -c public
-d entlonsw03 -D entlonsw03 -l full -c public
-d 10.66.24.1 -N IpAddress -l full -c public
-d 10.66.13.25 -N PolledName -l full -c public
-d 10.66.13.22 -N PolledName -l full -c public
One row of information appears for each device being managed. The first column displays
the device name, as defined by the System Administrator. The second column displays the
device community string, used for SNMP polling of the device.
h
This is the only tool for checking the current SNMP community string of a device. Individual
community strings can be changed by using the ‘Modify Attributes’ option in the
Administration part of the GUI, whilst global changes can be effected via the newcommunity
utility.
Files
entuity.cfg (See Chapter 3 - Entuity System Files.)
See Also
newcommunity and probity.
slalogger
Location entuity_home\bin
Type Process,
Invoked By provost, runs every 60 minutes
User Invocation n/a
Invoked Processes n/a
Configured Through provost.conf, entuity.cfg
Log File entuity_home\log\slalogger.log.[1..4]
snmpbulkget
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpbulkget [APPLICATION OPTIONS] [COMMON OPTIONS] OID [OID]...
Description
snmpbulkget is an SNMP application that uses the SNMP GETBULK request to query a
network entity efficiently for information. One or more object identifiers (OIDs) may be given
as arguments on the command line. Each variable name is given in the format specified in
variables(5).
If the network entity has an error processing the request packet, an error packet will be
returned and a message will be shown, helping to pinpoint why the request was malformed.
Options
-Cn<NUM>
Set the non-repeaters field in the GETBULK PDU. This specifies the number of supplied
variables that should not be iterated over. The default is 0.
-Cr<NUM>
Set the max-repetitions field in the GETBULK PDU. This specifies the maximum number
of iterations over the repeating variables. The default is 10.
In addition to these options, snmpbulkget takes the common options described in the
snmpcmd(1) manual page.
Example
The command:
snmpbulkget -v2c -Cn1 -Cr5 -Os -c public zeus system ifTable
retrieves the variable system.sysDescr.0 (which is the lexicographically next object to
system) and the first 5 objects in the ifTable:
sysDescr.0 = STRING: "SunOS zeus.net.cmu.edu 4.1.3_U1 1 sun4m"
ifIndex.1 = INTEGER: 1
ifIndex.2 = INTEGER: 2
ifDescr.1 = STRING: "lo0"
et cetera.
h
As the name implies, snmpbulkget utilizes the SNMP GETBULK message, which is not
available in SNMPv1.
snmpcmd
Location n/a
Type This Man page is only available when your system
administrator has separately installed man pages to the
Entuity server.
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through n/a
Log File n/a
This documentation is provided according to its license terms, which can be viewed under
entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpcmd [OPTIONS] AGENT [PARAMETERS]
Description
This section describes the common options for the SNMP commands: snmpbulkget,
snmpbulkwalk, snmpdelta, snmpget, snmpgetnext, snmpset, snmpstatus,
snmptable, snmptest, snmptrap, snmpdf, snmpusm, snmpwalk. The command line
applications use the SNMP protocol to communicate with an SNMP capable network entity,
an agent. Individual applications typically (but not necessarily) take additional parameters
that are given after the agent specification. These parameters are documented in the manual
pages for each application.
Options
-3[MmKk] 0xHEXKEY
Sets the keys to be used for SNMPv3 transactions. These options allow you to set the
master authentication and encryption keys (-3m and -3M respectively) or set the localized
authentication and encryption keys (-3k and -3K respectively). SNMPv3 keys can be
either passed in by hand using these flags, or by the use of keys generated from
passwords using the -A and -X flags discussed below. For further details on SNMPv3 and
its usage of keying information, see the Net-SNMP tutorial web site (http://www.Net-
SNMP.org/tutorial-5/commands/). Overrides the defAuthMasterKey (-3m),
defPrivMasterKey (-3M), defAuthLocalizedKey (-3k) or defPrivLocalizedKey (-3K) tokens,
respectively, in the snmp.conf file, see snmp.conf(5).
-a authProtocol
Set the authentication protocol (MD5 or SHA) used for authenticated SNMPv3 messages.
Overrides the defAuthType token in the snmp.conf file.
-A authPassword
Set the authentication pass phrase used for authenticated SNMPv3 messages. Overrides
the defAuthPassphrase token in the snmp.conf file. It is insecure to specify pass phrases
on the command line, see snmp.conf(5).
-c community
Set the community string for SNMPv1/v2c transactions. Overrides the defCommunity
token in the snmp.conf file.
-d
Dump (in hexadecimal) the raw SNMP packets sent and received.
-D TOKEN[,...]
Turn on debugging output for the given TOKEN(s). Try ALL for extremely verbose output.
-e engineID
Set the authoritative (security) engineID used for SNMPv3 REQUEST messages. It is
typically not necessary to specify this, as it will usually be discovered automatically.
-E engineID
Set the context engineID used for SNMPv3 REQUEST messages scopedPdu. If not
specified, this will default to the authoritative engineID.
-h, --help
Display a brief usage message and then exit.
-H
Display a list of configuration file directives understood by the command and then exit.
-I [brRhu]
Specifies input parsing options. See INPUT OPTIONS below.
-l secLevel
Set the security level used for SNMPv3 messages (noAuthNoPriv|authNoPriv|authPriv).
Appropriate pass phrase(s) must provided when using any level higher than
noAuthNoPriv. Overrides the defSecurityLevel token in the snmp.conf file.
-L [eEfFoOsS]
Specifies output logging options.
-m MIBLIST
Specifies a colon separated list of MIB modules (not files) to load for this application. This
overrides (or augments) the environment variable MIBS, the snmp.conf directive mibs,
and the list of MIBs hardcoded into the Net-SNMP library.
If MIBLIST has a leading '-' or '+' character, then the MIB modules listed are loaded in
addition to the default list, coming before or after this list respectively. Otherwise, the
specified MIBs are loaded instead of this default list.
The special keyword ALL is used to load all MIB modules in the MIB directory search list.
Every file whose name does not begin with "." will be parsed as if it were a MIB file.
-M DIRLIST
Specifies a colon separated list of directories to search for MIBs. This overrides (or
augments) the environment variable MIBDIRS, the snmp.conf directive mibdirs, and the
default directory hardcoded into the Net-SNMP library (/usr/local/share/snmp/
mibs).
If DIRLIST has a leading '-' or '+' character, then the given directories are added to the
default list, being searched before or after the directories on this list respectively.
Otherwise, the specified directories are searched instead of this default list.
h
Note that the directories appearing later in the list take precedence over earlier ones. To
avoid searching any MIB directories, set the MIBDIRS environment variable to the empty
string ("").
Note that MIBs specified using the -m option or the mibs configuration directive will be
loaded from one of the directories listed by the -M option (or equivalents). The mibfile
directive takes a full path to the specified MIB file, so this does not need to be in the MIB
directory search list.
-n contextName
Set the contextName used for SNMPv3 messages. The default contextName is the empty
string "". Overrides the defContext token in the snmp.conf file.
-O [abeEfnqQsStTuUvxX]
Specifies output printing options.
-P [cdeRuwW]
Specifies MIB parsing options.
-r retries
Specifies the number of retries to be used in the requests. The default is 5.
-t timeout
Specifies the timeout in seconds between retries. The default is 1.
-u secName
Set the securityName used for authenticated SNMPv3 messages. Overrides the
defSecurityName token in the snmp.conf file.
-v 1 | 2c | 3
Specifies the protocol version to use: 1 (RFCs 1155-1157), 2c (RFCs 1901-1908), or 3
(RFCs 2571-2574). The default is typically version 3. Overrides the defVersion token in the
snmp.conf file.
-V, --version
Display version information for the application and then exit.
-x privProtocol
Set the privacy protocol (DES or AES) used for encrypted SNMPv3 messages. Overrides
the defPrivType token in the snmp.conf file. This option is only valid if the Net-SNMP
software was build to use OpenSSL.
-X privPassword
Set the privacy pass phrase used for encrypted SNMPv3 messages. Overrides the
defPrivPassphrase token in the snmp.conf file. It is insecure to specify pass phrases on
the command line, see snmp.conf(5).
-Z boots,time
Set the engineBoots and engineTime used for authenticated SNMPv3 messages. This will
initialize the local notion of the agents boots/time with an authenticated value stored in
the LCD. It is typically not necessary to specify this option, as these values will usually be
discovered automatically.
-Yname=value
--name=value
Allows to specify any token ("name") supported in the snmp.conf file and sets its value to
"value". Overrides the corresponding token in the snmp.conf file. See snmp.conf(5) for
the full list of tokens.
Agent Specification
The string AGENT in the SYNOPSIS above specifies the remote SNMP entity with which to
communicate. This specification takes the form:
[<transport-specifier>:]<transport-address>
At its simplest, the AGENT specification may consist of a hostname, or an IPv4 address in the
standard "dotted quad" notation. In this case, communication will be attempted using UDP/
IPv4 to port 161 of the given host. Otherwise, the <transport-address> part of the
specification is parsed according to the following table:
<transport-specifier>
<transport-address> format
udp hostname[:port] or IPv4-address[:port]
tcp hostname[:port] or IPv4-address[:port]
unix pathname
ipx [network]:node[/port]
aal5pvc or pvc
[interface.][VPI.]VCI
udp6 or udpv6 or udpipv6
hostname[:port] or IPv6-address:port or
'['IPv6-address']'[:port]
tcp6 or tcpv6 or tcpipv6
hostname[:port] or IPv6-address:port or
'['IPv6-address']'[:port]
h
<transport-specifier> strings are case-insensitive so that, for example, "tcp" and "TCP" are
equivalent. Here are some examples, along with their interpretation:
hostname:161
perform query using UDP/IPv4 datagrams to hostname on port 161. The ":161" is
redundant here since that is the default SNMP port in any case.
udp:hostname
identical to the previous specification. The "udp:" is redundant here since UDP/IPv4 is the
default transport.
TCP:hostname:1161
connect to hostname on port 1161 using TCP/IPv4 and perform query over that
connection.
ipx::00D0B7AAE308
perform query using IPX datagrams to node number 00D0B7AAE308 on the default
network, and using the default IPX port of 36879 (900F hexadecimal), as suggested in
RFC 1906.
ipx:0AE43409:00D0B721C6C0/1161
perform query using IPX datagrams to port 1161 on node number 00D0B721C6C0 on
network number 0AE43409.
unix:/tmp/local-agent
connect to the Unix domain socket /tmp/local-agent, and perform the query over that
connection.
/tmp/local-agent
identical to the previous specification, since the Unix domain is the default transport if the
first character of the <transport-address> is a '/'.
AAL5PVC:100
perform the query using AAL5 PDUs sent on the permanent virtual circuit with VPI=0 and
VCI=100 (decimal) on the first ATM adapter in the machine.
PVC:1.10.32
perform the query using AAL5 PDUs sent on the permanent virtual circuit with VPI=10
(decimal) and VCI=32 (decimal) on the second ATM adapter in the machine. Note that
"PVC" is a synonym for "AAL5PVC".
udp6:hostname:10161
perform the query using UDP/IPv6 datagrams to port 10161 on hostname (which will be
looked up as an AAAA record).
UDP6:[fe80::2d0:b7ff:fe21:c6c0]
perform the query using UDP/IPv6 datagrams to port 161 at address
fe80::2d0:b7ff:fe21:c6c0.
tcpipv6:[::1]:1611
connect to port 1611 on the local host (::1 in IPv6 parlance) using TCP/IPv6 and perform
query over that connection.
h
Not all the transport domains listed above will always be available; for instance, hosts with no
IPv6 support will not be able to use udp6 transport addresses, and attempts to do so will
result in the error "Unknown host". Likewise, since AAL5 PVC support is only currently
available on Linux, it will fail with the same error on other platforms.
Output Options
The format of the output from SNMP commands can be controlled using various parameters
of the -O flag. The effects of these sub-options can be seen by comparison with the following
default output (unless otherwise specified):
$ snmpget -c public -v 1 localhost sysUpTime.0
SNMPv2-MIB::sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63
-Oa
Display string values as ASCII strings (unless there is a DISPLAY-HINT defined for the
corresponding MIB object). By default, the library attempts to determine whether the
value is a printable or binary string, and displays it accordingly.
This option does not affect objects that do have a Display Hint.
-Ob
Display table indexes numerically, rather than trying to interpret the instance
subidentifiers as string or OID values:
$ snmpgetnext -c public -v 1 localhost vacmSecurityModel
SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0."wes" = xxx
$ snmpgetnext -c public -v 1 -Ob localhost vacmSecurityModel
SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0.3.119.101.115 = xxx
-Oe
Removes the symbolic labels from enumeration values:
$ snmpget -c public -v 1 localhost ipForwarding.0
IP-MIB::ipForwarding.0 = INTEGER: forwarding(1)
$ snmpget -c public -v 1 -Oe localhost ipForwarding.0
IP-MIB::ipForwarding.0 = INTEGER: 1
-OE
Modifies index strings to escape the quote characters:
$ snmpgetnext -c public -v 1 localhost vacmSecurityModel
SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0."wes" = xxx
$ snmpgetnext -c public -v 1 -OE localhost vacmSecurityModel
SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0.\"wes\" = xxx
This allows the output to be reused in shell commands.
-Of
Include the full list of MIB objects when displaying an OID:
.iso.org.dod.internet.mgmt.mib-2.system.sysUpTime.0 =
Timeticks: (14096763) 1 day, 15:09:27.63
-On
Displays the OID numerically:
.1.3.6.1.2.1.1.3.0 = Timeticks: (14096763) 1 day, 15:09:27.63
-Oq
Removes the equal sign and type information when displaying varbind values:
SNMPv2-MIB::sysUpTime.0 1:15:09:27.63
-OQ
Logging Options
The mechanism and destination to use for logging of warning and error messages can be
controlled by passing various parameters to the -L flag.
-Le
Log messages to the standard error stream.
-Lf FILE
Log messages to the specified file.
-Lo
Log messages to the standard output stream.
-Ls FACILITY
Log messages via syslog, using the specified facility ('d' for LOG_DAEMON, 'u' for
LOG_USER, or '0'-'7' for LOG_LOCAL0 through LOG_LOCAL7).
There are also "upper case" versions of each of these options, which allow the
corresponding logging mechanism to be restricted to certain priorities of message. Using
standard error logging as an example:
-LE pri
will log messages of priority 'pri' and above to standard error.
-LE p1-p2
will log messages with priority between 'p1' and 'p2' (inclusive) to standard error.
For -LF and -LS the priority specification comes before the file or facility token. The
priorities recognised are:
0 or ! for LOG_EMERG,
1 or a for LOG_ALERT,
2 or c for LOG_CRIT,
3 or e for LOG_ERR,
4 or w for LOG_WARNING,
5 or n for LOG_NOTICE,
6 or i for LOG_INFO, and
7 or d for LOG_DEBUG.
Normal output is (or will be!) logged at a priority level of LOG_NOTICE
Input Options
The interpretation of input object names and the values to be assigned can be controlled
using various parameters of the -I flag. The default behaviour will be described at the end of
this section.
-Ib
Specifies that the given name should be regarded as a regular expression, to match
(case-insensitively) against object names in the MIB tree. The "best" match will be used -
calculated as the one that matches the closest to the beginning of the node name and the
highest in the tree. For example, the MIB object vacmSecurityModel could be matched by
the expression vacmsecuritymodel (full name, but different case), or vacm.*model
(regexp pattern).
h
'.' is a special character in regular expression patterns, so the expression cannot specify
instance subidentifiers or more than one object name. A "best match" expression will only be
applied against single MIB object names. For example, the expression sys*ontact.0 would
not match the instance sysContact.0 (although sys*ontact would match sysContact).
Similarly, specifying a MIB module name will not succeed (so SNMPv2-MIB::sys.*ontact
would not match either).
-Ih
Disables the use of DISPLAY-HINT information when assigning values. This would then
require providing the raw value:
snmpset ... HOST-RESOURCES-MIB::hrSystemData.0
x "07 D2 0C 0A 02 04 06 08"
instead of a formatted version:
snmpset ... HOST-RESOURCES-MIB::hrSystemDate.0
= 2002-12-10,2:4:6.8
-Ir
Disables checking table indexes and the value to be assigned against the relevant MIB
definitions. This will (hopefully) result in the remote agent reporting an invalid request,
rather than checking (and rejecting) this before it is sent to the remote agent.
Local checks are more efficient (and the diagnostics provided also tend to be more
precise), but disabling this behaviour is particularly useful when testing the remote agent.
-IR
Enables "random access" lookup of MIB names. Rather than providing a full OID path to
the desired MIB object (or qualifying this object with an explicit MIB module name), the
MIB tree will be searched for the matching object name. Thus .iso.org.dod.internet.mib-
2.system.sysDescr.0 (or SNMPv2-MIB::sysDescr.0) can be specified simply as
sysDescr.0.
Since MIB object names are not globally unique, this approach may return a different MIB
! object depending on which MIB files have been loaded. The MIB-MODULE::objectName
syntax has the advantage of uniquely identifying a particular MIB object, as well as being
slightly more efficient (and automatically loading the necessary MIB file if necessary).
-Is SUFFIX
Adds the specified suffix to each textual OID given on the command line. This can be
used to retrieve multiple objects from the same row of a table, by specifying a common
index value.
-IS PREFIX
Adds the specified prefix to each textual OID given on the command line. This can be
used to specify an explicit MIB module name for all objects being retrieved (or for
incurably lazy typists).
-Iu
Enables the traditional UCD-style approach to interpreting input OIDs. This assumes that
OIDs are rooted at the 'mib-2' point in the tree (unless they start with an explicit '.' or
include a MIB module name). So the sysDescr instance above would be referenced as
system.sysDescr.0.
Object names specified with a leading '.' are always interpreted as "fully qualified" OIDs,
listing the sequence of MIB objects from the root of the MIB tree. Such objects and those
qualified by an explicit MIB module name are unaffected by the -Ib, -IR and -Iu flags.
Otherwise, if none of the above input options are specified, the default behaviour for a
"relative" OID is to try and interpret it as an (implicitly) fully qualified OID, then apply "random
access" lookup (-IR), followed by "best match" pattern matching (-Ib).
Environment Variables
PREFIX
The standard prefix for object identifiers (when using UCD-style output). Defaults to
.iso.org.dod.internet.mgmt.mib-2
MIBS
The list of MIBs to load. Defaults to SNMPv2-TC:SNMPv2-MIB:IF-MIB:IP-MIB:TCP-MIB:UDP-
MIB:SNMP-VACM-MIB. Overridden by the -m option.
MIBDIRS
The list of directories to search for MIBs. Defaults to /usr/local/share/snmp/mibs.
Overridden by the -M option.
See Also
snmpget, snmpgetnext, snmpset, snmpbulkget, snmpbulkwalk, snmpwalk,
snmptable, snmpdelta, snmptrap, snmpinform, snmpusm, snmpstatus, snmptest(1),
snmp.conf.
snmpdelta
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpdelta [ common options ] [-Cf] [ -Ct ] [ -Cs ] [ -CS ] [ -Cm ] [ -CF configfile ] [ -Cl ] [ -Cp
period ] [ -CP Peaks ] [ -Ck ] [ -CT ] AGENT OID [ OID ... ]
Description
snmpdelta will monitor the specified integer valued OIDs, and report changes over time.
AGENT identifies a target SNMP agent, which is instrumented to monitor the given objects.
At its simplest, the AGENT specification will consist of a hostname or an IPv4 address. In this
situation, the command will attempt communication with the agent, using UDP/IPv4 to port
161 of the given target host. See snmpcmd(1) for a full list of the possible formats for AGENT.
OID is an object identifier which uniquely identifies the object type within a MIB. Multiple OIDs
can be specified on a single snmpdelta command.
Options
COMMON OPTIONS
Please see snmpcmd for a list of possible values for COMMON OPTIONS as well as their
descriptions.
-Cf
Don't fix errors and retry the request. Without this option, if multiple oids have been
specified for a single request and if the request for one or more of the oids fails,
snmpdelta will retry the request so that data for oids apart from the ones that failed will
still be returned. Specifying -Cf tells snmpdelta not to retry a request, even if there are
multiple oids specified.
-Ct
Flag will determine time interval from the monitored entity.
-Cs
Flag will display a timestamp.
-CS
Generates a "sum count" in addition to the individual instance counts. The "sum count" is
the total of all the individual deltas for each time period.
-Cm
Prints the maximum value ever attained.
-CF configfile
Tells snmpdelta to read it's configuration from the specified file. This options allows the
input to be set up in advance rather than having to be specified on the command line.
-Cl
Tells snmpdelta to write it's configuration to files whose names correspond to the MIB
instances monitored. For example, snmpdelta -Cl localhost ifInOctets.1 will create a file
"localhost-ifInOctets.1".
-Cp
Specifies the number of seconds between polling periods. Polling constitutes sending a
request to the agent. The default polling period is one second.
-CP peaks
Specifies the reporting period in number of polling periods. If this option is specified,
snmpdelta polls the agent peaks number of times before reporting the results. The result
reported includes the average value over the reporting period. In addition, the highest
polled value within the reporting period is shown.
-Ck
When the polling period (-Cp) is an increment of 60 seconds and the timestamp is
displayed in the output (-Cs), then the default display shows the timestamp in the format
hh:mm mm/dd. This option causes the timestamp format to be hh:mm:ss mm/dd.
-CT
Makes snmpdelta print its output in tabular form.
-Cv vars/pkt
Specifies the maximum number of oids allowed to be packaged in a single PDU. Multiple
PDUs can be created in a single request. The default value of variables per packet is 60.
This option is useful if a request response results in an error because the packet is too
big.
Examples
$ snmpdelta -c public -v 1 -Cs localhost IF-MIB::ifInUcastPkts.3 IF-
MIB::ifOutUcastPkts.3
[20:15:43 6/14] ifInUcastPkts.3 /1 sec: 158
[20:15:43 6/14] ifOutUcastPkts.3 /1 sec: 158
[20:15:44 6/14] ifInUcastPkts.3 /1 sec: 184
[20:15:44 6/14] ifOutUcastPkts.3 /1 sec: 184
snmpdf
Location entuity_home/lib/tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpdf [COMMON OPTIONS] [-Cu] AGENT
Description
snmpdf is simply a networked version of the typical df command. It checks the disk space on
the remote machine by examining the HOST-RESOURCES-MIB's hrStorageTable or the
UCD-SNMP-MIB's dskTable. By default, the hrStorageTable is preferred as it typically
contains more information. However, the -Cu argument can be passed to snmpdf to force the
usage of the dskTable.
AGENT identifies a target SNMP agent, which is instrumented to monitor the given objects.
At its simplest, the AGENT specification will consist of a hostname or an IPv4 address. In this
situation, the command will attempt communication with the agent, using UDP/IPv4 to port
161 of the given target host. See the snmpcmd(1) manual page for a full list of the possible
formats for AGENT.
See the snmpd.conf(5) manual page on setting up the dskTable using the disk directive in
the snmpd.conf file.
Options
Please see snmpcmd(1) for a list of possible values for COMMON OPTIONS as well as their
descriptions.
-Cu
Forces the command to use dskTable in mib UCD-SNMP-MIB instead of the default to
determine the storage information. Generally, the default use of hrStorageTable in mib
HOST-RESOURCES-MIB is preferred because it typically contains more information.
Examples
% snmpdf -v 2c -c public localhost
Description size (kB) Used Available Used%
/ 7524587 2186910 5337677 29%
/proc 0 0 0 0%
/etc/mnttab 0 0 0 0%
/var/run 1223088 32 1223056 0%
/tmp 1289904 66848 1223056 5%
/cache 124330 2416 121914 1%
/vol 0 0 0 0%
snmpdump
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
Syntax
snmpdump [OPTIONS] hostname
Description
snmpdump is an SNMP application that uses SNMP GETNEXT requests to query and return
the full MIB, including the enterprise section (unlike the OID specific snmpwalk). snmpdump
is more tolerant of faults and loops than snmpwalk. By default snmpdump:
Has 6 retries with a 10 second timeout.
Assumes SNMP version 2c, with public as the community string.
Uses MIB Loop detection, which you can turn off using -C switch.
When snmpdump completes it displays an "End of MIB" message, number of variables and
the time taken.
You can configure snmpdump to work with SNMP v3.
Options
These options are available with snmpdump:
-h, --help
Display a brief usage message and then exit.
-C
Turn off loop checking.
-v 1 | 2c | 3
Specifies the protocol version to use: 1 (RFCs 1155-1157), 2c (RFCs 1901-1908), or 3
(RFCs 2571-2574). The default is version 2c.
-V, --version
Display version information for the application and then exit.
Example
The command:
snmpdump 10.1.1.1
will retrieve the full MIB.
snmpget
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpget [COMMON OPTIONS] [-Cf] OID [OID]...
Description
snmpget is an SNMP application that uses the SNMP GET request to query for information
on a network entity. One or more object identifiers (OIDs) may be given as arguments on the
command line. Each variable name is given in the format specified in variables(5).
For example:
snmpget -c public zeus system.sysDescr.0
will retrieve the variable system.sysDescr.0:
system.sysDescr.0 = "SunOS zeus.net.cmu.edu 4.1.3_U1 1 sun4m"
If the network entity has an error processing the request packet, an error packet will be
returned and a message will be shown, helping to pinpoint in what way the request was
malformed. If there were other variables in the request, the request will be resent without the
bad variable.
Options
-Cf
If -Cf is not specified, some applications (snmpdelta, snmpget, snmpgetnext and
snmpstatus) will try to fix errors returned by the agent that you were talking to and resend
the request. The only time this is really useful is if you specified a OID that didn't exist in
your request and you're using SNMPv1 which requires "all or nothing" kinds of requests.
Here is an example (note that system.sysUpTime is an incomplete OID as it needs the .0
index appended to it):
snmpget -v1 -Cf -c public localhost system.sysUpTime
system.sysContact.0
Errorinpacket
Reason: (noSuchName) There is no such variable name in this MIB.
This name doesn't exist: system.sysUpTime
snmpgetnext
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpgetnext [COMMON OPTIONS] [-Cf] OID [OID]...
Description
snmpget is an SNMP application that uses the SNMP GETNEXT request to query for
information on a network entity. One or more object identifiers (OIDs) may be given as
arguments on the command line. Each variable name is given in the format specified in
variables(5). For each one, the variable that is lexicographically "next" in the remote entity's
MIB will be returned.
For example:
snmpgetnext -c public zeus interfaces.ifTable.ifEntry.ifType.1
will retrieve the variable interfaces.ifTable.ifEntry.ifType.2:
interfaces.ifTable.ifEntry.ifType.2 = softwareLoopback(24)
If the network entity has an error processing the request packet, an error message will be
shown, helping to pinpoint in what way the request was malformed.
Options
snmpgetnext takes the common options described in the snmpcmd(1) manual page and
also the -Cf option described in the snmpget(1) manual page
snmpset
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpset [COMMON OPTIONS] OID TYPE VALUE [OID TYPE VALUE]...
Description
snmpset is an SNMP application that uses the SNMP SET request to set information on a
network entity. One or more object identifiers (OIDs) must be given as arguments on the
command line. A type and a value to be set must accompany each object identifier. Each
variable name is given in the format specified in variables(5).
The TYPE is a single character, one of:
i INTEGER
u UNSIGNED
s STRING
x HEX STRING
d DECIMAL STRING
n NULLOBJ
o OBJID
t TIMETICKS
a IPADDRESS
b BITS
Most of these will use the obvious corresponding ASN.1 type. 's', 'x', 'd' and 'b' are all different
ways of specifying an OCTET STRING value, and the 'u' unsigned type is also used for
handling Gauge32 values.
If you have the proper MIB file loaded, you can, in most cases, replace the type with an '='
sign. For an object of type OCTET STRING this will assume a string like the 's' type notation.
For other types it will do "The Right Thing".
For example:
snmpset -c private -v 1 test-hub system.sysContact.0 s
[email protected] ip.ipforwarding.0 = 2
will set the variables sysContact.0 and ipForwarding.0:
system.sysContact.0 = STRING: "[email protected]"
ip.ipForwarding.0 = INTEGER: not-forwarding(2)
If the network entity has an error processing the request packet, an error packet will be
returned and a message will be shown, helping to pinpoint in what way the request was
malformed.
Options
Common options
See snmpcmd for a list of possible values for common options.
snmpstatus
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation are provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpstatus [COMMON OPTIONS] [-Cf] AGENT
Description
snmpstatus is an SNMP application that retrieves several important statistics from a
network entity.
AGENT identifies a target SNMP agent, which is instrumented to monitor the given objects.
At its simplest, the AGENT specification will consist of a hostname or an IPv4 address. In this
situation, the command will attempt communication with the agent, using UDP/IPv4 to port
161 of the given target host.
See the snmpcmd for a full list of the possible formats for AGENT.
The information returned is:
The IP address of the entity.
A textual description of the entity (sysDescr.0).
The uptime of the entity's SNMP agent (sysUpTime.0).
The sum of received packets on all interfaces (ifInUCastPkts.* + ifInNUCastPkts.*).
The sum of transmitted packets on all interfaces (ifOutUCastPkts.* + ifOutNUCastPkts.*).
The number of IP input packets (ipInReceives.0).
The number of IP output packets (ipOutRequests.0).
For example:
snmpstatus -c public -v 1 netdev-kbox.cc.cmu.edu
will produce output similar to the following:
[128.2.56.220]=>[Kinetics FastPath2] Up: 1 day, 4:43:31
Interfaces: 1, Recv/Trans packets: 262874/39867 | IP: 31603/15805
snmpstatus also checks the operational status of all interfaces (ifOperStatus.*), and if it
finds any that are not running, it will report in a manner similar to this:
2 interfaces are down!
If the network entity has an error processing the request packet, an error packet will be
returned and a message will be shown, helping to pinpoint in what way the request was
malformed. snmpstatus will attempt to reform its request to eliminate the malformed variable
(unless the -Cf option is given, see below), but this variable will then be missing from the
displayed data.
Options
Common options
See snmpcmd for a list of possible values for common options.
-Cf
By default, snmpstatus will try to fix errors returned by the agent and retry a request. In
this situation, the command will display the data that it can. If the -Cf option is specified,
then snmpstatus will not try to fix errors, and the error will cause the command to
terminate.
snmptable
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmptable [COMMON OPTIONS] [-Cb] [-CB] [-Ch] [-CH] [-Ci] [-Cf STRING] [-Cw WIDTH]
AGENT TABLE-OID
Description
snmptable is an SNMP application that repeatedly uses the SNMP GETNEXT or GETBULK
requests to query for information on a network entity. The parameter TABLE-OID must
specify an SNMP table.
snmptable is an SNMP application that repeatedly uses the SNMP GETNEXT or GETBULK
requests to query for information on a network entity. The parameter TABLE-OID must
specify an SNMP table.
AGENT identifies a target SNMP agent, which is instrumented to monitor the given objects.
At its simplest, the AGENT specification will consist of a hostname or an IPv4 address. In this
situation, the command will attempt communication with the agent, using UDP/IPv4 to port
161 of the given target host. See snmpcmd(1) for a full list of the possible formats for AGENT.
Options
Common options
See snmpcmd for a list of possible values for common options.
-Cb
Display only a brief heading. Any common prefix of the table field names will be deleted.
-CB
snmptest
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmptest [COMMON OPTIONS] AGENT
Description
snmptest is a flexible SNMP application that can monitor and manage information on a
network entity.
After invoking the program, a command line interpreter proceeds to accept commands. This
interpreter enables the user to send different types of SNMP requests to target agents.
AGENT identifies a target SNMP agent, which is instrumented to monitor the given objects.
At its simplest, the AGENT specification will consist of a hostname or an IPv4 address. In this
situation, the command will attempt communication with the agent, using UDP/IPv4 to port
161 of the given target host. See snmpcmd(1) for a full list of the possible formats for AGENT.
Once snmptest is invoked, the command line interpreter will prompt with:
Variable:
At this point you can enter one or more variable names, one per line. A blank line ends the
parameter input and will send the request (variables entered) in a single packet, to the
remote entity. Each variable name is given in the format specified in variables(5). For
example:
snmptest -c public -v 1 zeus
Variable: system.sysDescr.0
Variable:
will return some information about the request and reply packets, as well as the information:
requestid 0x5992478A errstat 0x0 errindex 0x0
system.sysDescr.0 = STRING: "Unix 4.3BSD"
The errstatus value shows the error status code for the call. The possible values for errstat
are in the header file snmp.h. The errindex value identifies the variable that has the given
error. Index values are assigned to all the variables entered at the "Variable": prompt. The first
value is assigned an index of 1.
Upon startup, the program defaults to sending a GET request packet. The type of request
can be changed by typing one of the following commands at the "Variable:" prompt:
$G - send a GET request
$N - send a GETNEXT request
$S - send a SET request
$B - send a GETBULK request
h
Request Types:
GET Request:
When in "GET request" mode ($G or default), the user can enter an OID at the "Variable:"
prompt. The user can enter multiple OIDs, one per prompt. The user enters a blank line to
send the GET request.
GETNEXT Request:
The "GETNEXT request" mode ($N) is similar to the "Get request" mode, described
above.
SET Request:
When in the "SET request" mode ($S), more information is requested by the prompt for
each variable. The prompt:
Type [i|s|x|d|n|o|t|a]:
requests the type of the variable be entered. Depending on the type of value you want to
set, you can type one of the following:
i - integer
u - unsigned integer
s - octet string in ASCII
x - octet string in hex bytes, separated by whitespace
d - octet string as decimal bytes, separated by whitespace
a - ip address in dotted IP notation
o - object identifier
n - null
t - timeticks
At this point a value will be prompted for:
Value:
If this is an integer value, just type the integer (in decimal). If it is a decimal string, type in
white-space separated decimal numbers, one per byte of the string. Again type a blank
line at the prompt for the variable name to send the packet.
GETBULK Request:
The "GETBULK request" mode ($B) is similar to the "Set request" mode. GETBULK,
however, is not available in SNMPv1.
Inform Request:
The "Inform request" mode ($I) is similar to the "Set request" mode. This type of request,
however, is not available in SNMPv1. Also, the _agent_ specified on the snmptest
command should correspond to the target snmptrapd agent.
SNMPv2 Trap Request:
The "SNMPv2 Trap Request" mode ($T) is similar to the "Set request" mode. This type of
request, however, is not available in SNMPv1. Also, the _agent_ specified on the
snmptest command should correspond to the target snmptrapd agent.
Options
Common options
See snmpcmd for a list of possible values for common options.
Examples
The following is an example of sending a GET request for two OIDs:
% snmptest -v 2c -c public testhost:9999
Variable: system.sysDescr.0
Variable: system.sysContact.0
Variable:
Received Get Response from 128.2.56.220
requestid 0x7D9FCD63 errstat 0x0 errindex 0x0
SNMPv2-MIB::sysDescr.0 = STRING: SunOS testhost 5.9 Generic_112233-02
sun4u
SNMPv2-MIB::sysContact.0 = STRING: x1111
The following is an example of sending a GETNEXT request:
Variable: SNMPv2-MIB::sysORUpTime
Variable:
Received Get Response from 128.2.56.220
requestid 0x7D9FCD64 errstat 0x0 errindex 0x0
SNMPv2-MIB::sysORUpTime.1 = Timeticks: (6) 0:00:00.06
Variable:
The following is an example of sending a SET request:
Variable: $S
Request type is Set Request
Variable: system.sysLocation.0
Type [i|u|s|x|d|n|o|t|a]: s
Value: building 17
Variable:
Received Get Response from 128.2.56.220
requestid 0x7D9FCD65 errstat 0x0 errindex 0x0
SNMPv2-MIB::sysLocation.0 = STRING: building A
Variable:
snmptranslate
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmptranslate [OPTIONS] OID [OID]...
Description
snmptranslate is an application that translates one or more SNMP object identifier values
from their symbolic (textual) forms into their numerical forms (or vice versa).
OID is either a numeric or textual object identifier.
Options
-D TOKEN[,...]
Turn on debugging output for the given TOKEN(s). Try ALL for extremely verbose output.
-h
Display a brief usage message and then exit.
-m MIBLIST
Specifies a colon separated list of MIB modules to load for this application. This overrides
the environment variable MIBS.
The special keyword ALL is used to specify all modules in all directories when searching
for MIB files. Every file whose name does not begin with "." will be parsed as if it were a
MIB file.
-M DIRLIST
Specifies a colon separated list of directories to search for MIBs. This overrides the
environment variable MIBDIRS.
-T TRANSOPTS
Provides control over the translation of the OID values. The following TRANSOPTS are
available:
-Td
Print full details of the specified OID.
-Tp
Print a graphical tree, rooted at the specified OID.
-Ta
Dump the loaded MIB in a trivial form.
-Tl
Dump a labelled form of all objects.
-To
Dump a numeric form of all objects.
-Ts
Dump a symbolic form of all objects.
-Tt
Dump a tree form of the loaded MIBs (mostly useful for debugging).
-Tz
Dump a numeric and labelled form of all objects (compatible with MIB2SCHEMA format).
-V
Display version information for the application and then exit.
-w WIDTH
Specifies the width of -Tp and -Td output. The default is very large.
In addition to the above options, snmptranslate takes the OID input (-I), MIB parsing (-M)
and OID output (-O) options described in the INPUT OPTIONS, MIB PARSING OPTIONS
and OUTPUT OPTIONS sections of the snmpcmd(1) manual page.
Examples
* snmptranslate -On -IR seceders
will translate "sysDescr" to a more qualified form:
system.sysDescr
* snmptranslate -Onf -IR sysDescr
will translate "sysDecr" to:
.iso.org.dod.internet.mgmt.mib-2.system.sysDescr
* snmptranslate -Td -OS system.sysDescr
will translate "sysDecr" into:
SNMPv2-MIB::sysDescr
sysDescr OBJECT-TYPE
-- FROM SNMPv2-MIB
-- TEXTUAL CONVENTION DisplayString
SYNTAX OCTET STRING (0..255)
DISPLAY-HINT "255a"
MAX-ACCESS read-only
STATUS current
DESCRIPTION "A textual description of the entity. This
value should include the full name and
version identification of the system's
hardware type, software operating-system,
and networking software."
::= { iso(1) org(3) dod(6) internet(1) mgmt(2) mib-2(1) system(1) 1 }
* snmptranslate -Tp -OS system
will print the following tree:
+--system(1)
|
+-- -R-- String sysDescr(1)
| Textual Convention: DisplayString
| Size: 0..255
+-- -R-- ObjID sysObjectID(2)
+-- -R-- TimeTicks sysUpTime(3)
+-- -RW- String sysContact(4)
| Textual Convention: DisplayString
| Size: 0..255
+-- -RW- String sysName(5)
| Textual Convention: DisplayString
| Size: 0..255
+-- -RW- String sysLocation(6)
.iso(1).org(3).dod(6).internet(1).mgmt(2).mib-2(1)
.iso(1).org(3).dod(6).internet(1).mgmt(2).mib-2(1).system(1)
.iso(1).org(3).dod(6).internet(1).mgmt(2).mib-
2(1).system(1).sysDescr(1)
.iso(1).org(3).dod(6).internet(1).mgmt(2).mib-2(1).system(1).sysOb-
jectID(2)
.iso(1).org(3).dod(6).internet(1).mgmt(2).mib-
2(1).system(1).sysUpTime(3)
* snmptranslate -To | head
will produce the following dump
.1.3
.1.3.6
.1.3.6.1
.1.3.6.1.1
.1.3.6.1.2
.1.3.6.1.2.1
.1.3.6.1.2.1.1
.1.3.6.1.2.1.1.1
.1.3.6.1.2.1.1.2
.1.3.6.1.2.1.1.3
* snmptranslate -Ts | head
will produce the following dump
.iso.org
.iso.org.dod
.iso.org.dod.internet
.iso.org.dod.internet.directory
.iso.org.dod.internet.mgmt
.iso.org.dod.internet.mgmt.mib-2
.iso.org.dod.internet.mgmt.mib-2.system
.iso.org.dod.internet.mgmt.mib-2.system.sysDescr
.iso.org.dod.internet.mgmt.mib-2.system.sysObjectID
.iso.org.dod.internet.mgmt.mib-2.system.sysUpTime
* snmptranslate -Tt | head
will produce the following dump
org(3) type=0
dod(6) type=0
internet(1) type=0
directory(1) type=0
mgmt(2) type=0
mib-2(1) type=0
system(1) type=0
sysDescr(1) type=2 tc=4 hint=255a
sysObjectID(2) type=1
sysUpTime(3) type=8
snmptrap
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmptrap -v 1 [COMMON OPTIONS] [-Ci] enterprise-oid agent generic-trap
specific-trap uptime [OID TYPE VALUE]...
snmptrap -v [2c|3] [COMMON OPTIONS] [-Ci] uptime trap-oid [OID TYPE
VALUE]...
snmpinform -v [2c|3] [COMMON OPTIONS] uptime trap-oid [OID TYPE
VALUE]...
Description
snmptrap is an SNMP application that uses the SNMP TRAP operation to send information to
a network manager. One or more object identifiers (OIDs) can be given as arguments on the
command line. A type and a value must accompany each object identifier. Each variable
name is given in the format specified in variables(5).
When invoked as snmpinform, or when -Ci is added to the command line flags of snmptrap,
it sends an INFORM-PDU, expecting a response from the trap receiver, retransmitting if
required. Otherwise it sends an TRAP-PDU or TRAP2-PDU.
If any of the required version 1 parameters, enterprise-oid, agent, and uptime are specified
as empty, it defaults to 1.3.6.1.4.1.3.1.1 (enterprises.cmu.1.1), hostname, and host-uptime
respectively.
Options
Common options
See snmpcmd for a list of possible values for common options.
-Ci.
snmpusm
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpusm [COMMON OPTIONS] create USER [CLONEFROM-USER]
snmpusm [COMMON OPTIONS] delete USER
snmpusm [COMMON OPTIONS] cloneFrom USER CLONEFROM-USER
snmpusm [COMMON OPTIONS] [-Ca] [-Cx] passwd OLD-PASSPHRASE NEW-
PASSPHRASE [USER]
snmpusm [COMMON OPTIONS] <-Ca | -Cx> -Ck passwd OLD-KEY-OR-PASSPHRASE
NEW-KEY-OR-PASSPHRASE [USER]
snmpusm [COMMON OPTIONS] [-Ca] [-Cx] changekey [USER]
Description
snmpusm is an SNMP application that can be used to do simple maintenance on the users
known to an SNMP agent, by manipulating the agent's User-based Security Module (USM)
table. The user needs write access to the usmUserTable MIB table. This tool can be used to
create, delete, clone, and change the passphrase of users configured on a running SNMP
agent.
Options
Common options
See snmpcmd for a list of possible values for common options.
-CE ENGINE-ID
Set usmUserEngineID to be used as part of the index of the usmUserTable. Default is to
use the contextEngineID (set via -E or probed) as the usmUserEngineID.
-Cp STRING
Set the usmUserPublic value of the (new) user to the specified STRING.
Options for the passwd and changekey commands:
-Ca
Change the authentication key.
-Cx
Change the privacy key.
-Ck
Allows to use localized key (must start with 0x) instead of passphrase. When this option is
used, either the -Ca or -Cx option (but not both) must also be used.
Creating Users
An unauthenticated SNMPv3 user can be created using the command
snmpusm [OPTIONS] create USER
This constructs an (inactive) entry in the usmUserTable, with no authentication or privacy
settings. In principle, this user should be useable for 'noAuthNoPriv' requests, but in practise
the Net-SNMP agent will not allow such an entry to be made active.
In order to activate this entry, it is necessary to "clone" an existing user, using the command
snmpusm [OPTIONS] cloneFrom USER CLONEFROM-USER
The USER entry then inherits the same authentication and privacy settings (including pass
phrases) as the CLONEFROM user.
These two steps can be combined into one, by using the command
snmpusm [OPTIONS] create USER CLONEFROM-USER
The two forms of the create sub-command require that the user being created does not
already exist. The cloneFrom sub-command requires that the user being cloned to does
already exist.
Cloning is the only way to specify which authentication and privacy protocols to use for a
given user, and it is only possible to do this once. Subsequent attempts to reclone onto the
same user will appear to succeed, but will be silently ignored. This (somewhat unexpected)
behaviour is mandated by the SNMPv3 USM specifications (RFC 3414). To change the
authentication and privacy settings for a given user, it is necessary to delete and recreate the
user entry. This is not necessary for simply changing the pass phrases (see below). This
means that the agent must be initialized with at least one user for each combination of
authentication and privacy protocols. See the snmpd.conf(5) manual page for details of the
createUser configuration directive.
Deleting Users
A user can be deleted from the usmUserTable using the command
snmpusm [OPTIONS] delete USER
Since these keys are randomly generated based on a diffie helman exchange, they are no
longer derived from a more easily typed password. They are, however, much more secure.
To change from a localized key back to a password, the following variant of the passwd sub-
command is used:
snmpusm [OPTIONS] <-Ca | -Cx> -Ck passwd OLD-KEY-OR-PASSPHRASE NEW-
KEY-OR-PASSPHRASE [USER]
Either the -Ca or the -Cx option must be specified. The OLD-KEY-OR-PASSPHRASE and/or
NEW-KEY-OR-PASSPHRASE arguments can either be a passphrase or a localized key
starting with "0x", e.g. as printed out by the changekey sub-command.
Examples
Let's assume for our examples that the following VACM and USM configurations lines were in
the snmpd.conf file for a Net-SNMP agent. These lines set up a default user called "initial"
with the authentication passphrase "setup_passphrase" so that we can perform the initial
setup of an agent:
# VACM configuration entries
rwuser initial
# lets add the new user we'll create too:
rwuser wes
# USM configuration entries
createUser initial MD5 setup_passphrase DES
h
The "initial" user's setup should be removed after creating a real user that you grant
administrative privileges to.
Manipulating the usmUserTable using this command can only be done using SNMPv3. This
! command will not work with the community-based versions, even if they have write access to
the table.
snmpvacm
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpvacm [COMMON OPTIONS] createSec2Group MODEL SECURITYNAME GROUPNAME
snmpvacm [COMMON OPTIONS] deleteSec2Group MODEL SECURITYNAME
snmpvacm [COMMON OPTIONS] createView [-Ce] NAME SUBTREE MASK
snmpvacm [COMMON OPTIONS] deleteView NAME SUBTREE
snmpvacm [COMMON OPTIONS] createAccess GROUPNAME [CONTEXTPREFIX] MODEL
LEVEL CONTEXTMATCH READVIEW WRITEVIEW NOTIFYVIEW
snmpvacm [COMMON OPTIONS] deleteAccess GROUPNAME [CONTEXTPREFIX] MODEL
LEVEL
snmpvacm [COMMON OPTIONS] createAuth GROUPNAME [CONTEXTPREFIX] MODEL
LEVEL AUTHTYPE CONTEXTMATCH VIEW
snmpvacm [COMMON OPTIONS] deleteAuth GROUPNAME [CONTEXTPREFIX] MODEL
LEVEL AUTHTYPE
Description
snmpvacm is an SNMP application that can be used to do simple maintenance on the View-
based Control Module (VACM) tables of an SNMP agent. The SNMPv3 VACM specifications
(see RFC2575) define assorted tables to specify groups of users, MIB views, and authorized
access settings. These snmpvacm commands effectively create or delete rows in the
appropriate one of these tables, and match the equivalent configure directives which are
documented in the snmpd.conf(5) man page.
Sub-Commands
createSec2Group MODEL SECURITYNAME GROUPNAME
Create an entry in the SNMPv3 security name to group table. This table allows a single
access control entry to be applied to a number of users (or 'principals'), and is indexed by the
security model and security name values.
MODEL, An integer representing the security model, taking one of the following values:
1 - reserved for SNMPv1
2 - reserved for SNMPv2c
3 - User-based Security Model (USM)
SECURITYNAME, A string representing the security name for a principal (represented in a
security-model-independent format). For USM-based requests, the security name is the
same as the username.
GROUPNAME, A string identifying the group that this entry (i.e. security name/model
pair) should belong to. This group name will then be referenced in the access table (see
createAccess below).
SUBTREE, the OID defining the root of the subtree to add to (or exclude from) the named
view.
MASK, a bit mask indicating which sub-identifiers of the associated subtree OID should
be regarded as significant.
If this field has the value '2' (representing 'prefix') then the initial substring of the context
name of a request must match the CONTEXTPREFIX value for this access entry to be
applicable to that request. This provides a simple form of wildcarding.
READVIEW, the name of the MIB view (as set up by createView or equivalent) defining the
MIB objects for which this request may request the current values.
If there is no view with this name, then read access is not granted.
WRITEVIEW, the name of the MIB view (as set up by createView or equivalent) defining
the MIB objects for which this request may potentially SET new values.
If there is no view with this name, then read access is not granted.
NOTIFYVIEW, the name of the MIB view (as set up by createView or equivalent) defining
the MIB objects which may be included in notification request.
h
VIEW, the name of the MIB view (as set up by createView or equivalent) defining the MIB
objects for which this style of access is authorized.
Examples
Given a pre-existing user dave (which could be set up using the snmpusm(1) command), we
could configure full read-write access to the whole OID tree using the commands:
snmpwalk
Location entuity_home\lib\tools
Type Third party utility
Invoked By n/a
User Invocation Command line
Invoked Processes n/a
This utility and documentation is provided according to its license terms, which can be
viewed under entuity_home\licenseTerms\Net-SNMP.
Syntax
snmpwalk [APPLICATION OPTIONS] [COMMON OPTIONS] [OID]
Description
snmpwalk is an SNMP application that uses SNMP GETNEXT requests to query a network
entity for a tree of information.
An object identifier (OID) may be given on the command line. This OID specifies which
portion of the object identifier space will be searched using GETNEXT requests. All variables
in the subtree below the given OID are queried and their values presented to the user. Each
variable name is given in the format specified in variables(5).
If no OID argument is present, snmpwalk will search the subtree rooted at SNMPv2-SMI::mib-
2 (including any MIB object values from other MIB modules, that are defined as lying within
this subtree). If the network entity has an error processing the request packet, an error
packet will be returned and a message will be shown, helping to pinpoint why the request
was malformed.
If the tree search causes attempts to search beyond the end of the MIB, the message "End of
MIB" will be displayed.
Options
Common options
See snmpcmd for a list of possible values for common options.
-Cc, do not check whether the returned OIDs are increasing. Some agents (LaserJets are
an example) return OIDs out of order, but can complete the walk anyway. Other agents
return OIDs that are out of order and can cause snmpwalk to loop indefinitely. By default,
snmpwalk tries to detect this behavior and warns you when it hits an agent acting illegally.
Use -Cc to turn off this check.
-Ci, include the given OID in the search range. Normally snmpwalk uses GETNEXT
requests starting with the OID you specified and returns all results in the MIB subtree
rooted at that OID. Sometimes, you may wish to include the OID specified on the
command line in the printed results if it is a valid OID in the tree itself. This option lets you
do this explicitly.
-CI, in fact, the given OID will be retrieved automatically if the main subtree walk returns
no useable values. This allows a walk of a single instance to behave as generally
expected, and return the specified instance value. This option turns off this final GET
request, so a walk of a single instance will return nothing.
-Cp, upon completion of the walk, print the number of variables found.
-Ct, upon completion of the walk, print the total wall-clock time it took to collect the data
(in seconds). Note that the timer is started just before the beginning of the data request
series and stopped just after it finishes. Most importantly, this means that it does not
include snmp library initialization, shutdown, argument processing, and any other
overhead.
Example
The command:
snmpwalk -Os -c public -v 1 zeus system
will retrieve all of the variables under system:
sysDescr.0 = STRING: "SunOS zeus.net.cmu.edu 4.1.3_U1 1 sun4m"
sysObjectID.0 = OID: enterprises.hp.nm.hpsystem.10.1.1
sysUpTime.0 = Timeticks: (155274552) 17 days, 23:19:05
sysContact.0 = STRING: ""
sysName.0 = STRING: "zeus.net.cmu.edu"
sysLocation.0 = STRING: ""
sysServices.0 = INTEGER: 72
start
Location entuity_home\bin
Type Process,
Invoked By Command line
User Invocation Command line
Invoked Processes n/a
Configured Through Command line
Log File n/a
Syntax
start database
Description
This command starts the Entuity database server mysqld in readiness for a restore from
the previous backup.
In Windows start is also the name of a Windows command. To use start specify the full
path:
C:\Entuity\bin\start database
See Also
stop.
starteye
Location entuity_home\bin
Type Process,
Invoked By startup
User Invocation Command line
Invoked Processes Entuity processes
Configured Through n/a
Log File n/a
Syntax
starteye
Description
starteye starts and monitors processes specified in startup_o/s.cfg. When a process
stops starteye attempts to re-start the process, if four re-start attempts fail then starteye
shuts down Entuity.
Files
entuity.cfg (see Chapter 3 - Entuity System Files), and /top/start.log.
See Also
stopeye.
starteotssvr
Location entuity_home\bin
Type Process,
Invoked By starteye
User Invocation Windows Service
Invoked Processes n/a
Configured Through startup_WIN32.cfg
Log File entuity_home\log\starteyesvr.log.[1..4]
Description
This process is a Windows service that controls the starting and continued running of
processes specified through startup_WIN32.cfg. When starteotssvr fails to restart a
process four times within five minutes then Entuity is shutdown.
Logs
Messages are written to the file systemcontrol.log in the entuity_home\log directory.
stop
Location entuity_home\bin
Type Process,
Invoked By n/a
User Invocation Command line
Invoked Processes Context dependant
Configured Through n/a
Log File n/a
Syntax
stop database
Description
This command stops the Entuity database server mysqld following a restore from the
previous backup.
See Also
start.
stopeye
Location entuity_home\bin
Type Process,
Invoked By n/a
User Invocation Command line
Invoked Processes Entuity processes
Configured Through n/a
Log File n/a
Syntax
stopeye
Description
The stopeye script stops the:
web server
scheduler
database
license server.
Files
entuity.cfg (see Chapter 3 - Entuity System Files), and \tmp\start.log.
See Also
starteye.
stpman
Location entuity_home\bin
Type Process, run daily, at 05:15
Invoked By provost
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\log\stpman.log.[1..4]
Description
When you have the Device News (Device Network Early Warning System) module installed,
is responsible for gathering STP (Spanning Tree Protocol)-related information from each
switch and hub in the network. The information is gathered using SNMP, and includes the
root switch, STP port status (blocking, forwarding, etc.), and STP timers.
swmaint
Location entuity_home\bin
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes None
Configured Through Command line parameters
Log File No
Syntax
swmaint[-c <connection string>] [-d <days>] [-force] [-n] [-o] [-q]
[-s] [-v]
Description
swmaint removes inconsistencies between StormWorks objects, associations and streams.
It can also delete stale objects and optimize database tables, so incorporate swmaint into
your Entuity housekeeping process. When restoring an Entuity database you should also
always run swmaint before restarting the Entuity server.
h
You must not run swmaint when Entuity is polling your network, otherwise it will corrupt
! your database. Only run swmaint when the Entuity database is the only Entuity process
running.
Options
-c, database connection string. When swmaint is run from the Entuityserver it is not
required. The database connection string has the format:
HOST=<host>;UID=<user>;PWD=<password>;DB=<database>;PORT=<port>
-d, objects that are considered stale for more days than this value are deleted. On long
running systems the number of stale objects can impact database performance. By
default swmaint does not delete stale objects.
-force, continue swmaint even when the previous run failed or the Entuity server is
running.
h
Examples
This example optimizes the database, deletes StormWorks objects with incomplete
associations and delivers a full set of progress messages:
swmaint -v
This example reports on the number of stale objects that have been in the system more than
seven days:
swmaint -n -d 7
This removes all stale objects from the database:
swmaint -d 0
sysLogger
Location entuity_home\bin
Type Process,
Invoked By starteots
User Invocation n/a
Invoked Processes None
Configured Through entuity_home\etc\startup_O/S.cfg entuity.cfg
Log File entuity_home\log\syslogger.log.[1..4]
Description
Invoked during system startup and continues to run until the system closes. It receives
device syslog messages, discards those from devices not managed by Entuity and forwards
to the Event Viewer as events those it does. sysLogger uses the Entuity database to identify
the device and possibly add additional information, e.g. CPU utilization, buffer capacity and
mismatches in protocol.
Through the syslogger section of entuity.cfg you can use replaceEventDetailsAction to
replace problematic characters from the event details.
ticker
Location entuity_home\bin
Type Process
Invoked By starteots
User Invocation n/a
Invoked Processes None
Configured Through entuity_home\etc\startup_O/S.cfg
Log File entuity_home\log\ticker.log.[1..4]
Description
This is the ticker process. It is a daemon process, invoked during software startup, that
allows you to view real time output at the device and port level, viewing data changes as they
occur.
trapsplit
Location entuity_home\bin
Type Process
Invoked By Command line, starteots
User Invocation Yes
Invoked Processes None
Configured Through Command line, trapsplit configuration file,
startup_o/s.cfg,
Log File entuity_home\log\trapsplit.log.[1..4]
Syntax
trapsplit [-p portnumber] [-l logfilename] configfilename
Description
This is a daemon process that can be started by the System Administrator. It is a trap
receiver that forwards traps on to a user specified list of recipient hosts on user-definable
UDP ports.
Listens for SNMP traps on UDP port 162. It then forwards the traps to one or more ports
specified through the configuration file.
-p portnumber is the UDP port on which trapsplit listens for traps. The default is UDP port
162. To amend the port, for example to listen on port 2162, enter:
trapsplit -p 2162 trapconfig.cfg
-l logfilename enables logging and specifies the name and path of the trapsplit log file. By
default logging is not enabled. To output the trapsplit messages to the Entuity log folder
enter:
trapsplit -l ..\log\trapsplit.log trapconfig.cfg
configfilename is the trapsplit configuration file. Each entry should be on a separate line
and have the format:
host [port]
Where:
host specifies the destination host, either the hostname or IP address.
port specifies the destination port. When not entered the default is UDP port 162.
vendinfo
Location entuity_home\lib\tools
Type Utility
Invoked By n/a
User Invocation Command line
Invoked Processes None
Configured Through Command line parameters
Log File No
Description
vendinfo identifies the vendor device support datasets available to Entuity and the
decisions made when more than one vendor file is available for a particular sysoid; which
device support dataset Entuity uses to manage that device type (as identified through its
sysoid).
Each device support dataset is associated with a specific device sysoid. Where there:
is only one available device support dataset for a given sysoid, Entuity uses that dataset
when managing a device with that sysoid.
are two or more device support datasets for a given sysoid, Entuity uses the dataset with
the highest priority.
Datasets are available through four types of vendor files, all have a .vendor extension. These
vendor files are, listed in ascending order of priority:
1) uncertified device definitions in entuity_home\etc\uncertified folder when Entuity
discovers devices with sysoids for which there is not a device support dataset. These
generic device support datasets should be considered temporary definitions, and only
used until Entuity supply an appropriate vendor file.
2) bin.vendor, which is installed to entuity_home\etc. It contains multiple device support
datasets, many of which are also listed in their individual vanilla vendor files.
bin.vendor has the second lowest priority when Entuity is determining the source of
device information.
Device support datasets in bin.vendor have the second lowest priority when Entuity is
determining which of those available to use to manage a device type.
3) vanilla vendor files are installed to entuity_home\etc and entuity_home\vanilla during
Entuity installation and configuration.
4) Device support datasets in vanilla vendor files have the second highest priority when
Entuity is determining which vendor device definition to use to manage a device type.
5) exotica vendor files are installed to entuity_home\etc\exotica. Exotica files are only
used by Entuity when they are copied to entuity_home\etc, either manually or during
Entuity configuration, e.g. when selecting a module.
Device support datasets in exotica vendor files have the highest priority when Entuity is
determining which vendor device definition to use to manage a device type.These files
use a simple naming convention, using the vanilla filename, with a plus sign in the
filename and identifying name, e.g. SOLSERV+managed Host.vendor.
Entuity does not make operational use of vendor files from directories etc\vanilla and
etc\exotica; the files from these two directories are primarily reference resources. Entuity
only uses vendor files in the active configuration directory, by default entuity_home\etc,
when determining how to manage a device type.
vendinfo Switches
vendinfo is supplied with a number of case sensitive switches, that you can use
individually, or combine to investigate vendor information:
-e directory, instructs vendinfo to consider device support datasets in the specified
folder as though they are in the active configuration folder, by default entuity_home\etc
directory. You must specify the full path e.g.
vendinfo -e c:\entuity\etc -I 1.3.6.1.4.1.42.2.1.1
-V directory, instructs vendinfo to consider device support datasets in the specified
folder as though they are in the vanilla vendor file reference folder, by default
entuity_home\etc\vanilla directory. You must specify the full path e.g.
vendinfo -V c:\entuity\etc\vanilla -I 1.3.6.1.4.1.42.2.1.1
-E directory, instructs vendinfo to consider device support datasets in the specified
folder as though they are in the exotica vendor file reference folder, by default
entuity_home\etc\exotica directory. You must specify the full path e.g.
vendinfo -E c:\entuity\etc\exotica -I 1.3.6.1.4.1.42.2.1.1
-B directory, instructs vendinfo to take the specified folder as the root folder for relative
path folders specified with other switches, e.g.:
vendinfo -B c:\entuity -e etc -I 1.3.6.1.4.1.42.2.1.1
-H directory, instructs vendinfo to take the specified folder as the root folder. Unlike the
-B switch you do not need to specify paths to vanilla and exotica folders, e.g.:
vendinfo -H c:\entuity -I 1.3.6.1.4.1.42.2.1.1
-n filename, forces vendinfo to use newbin.vendor format when reading the specified
file (newbin.vendor is a deprecated file):
vendinfo -n c:\entuity\etc\newbin.vendor
-c filename, forces vendinfo to use classic .vendor format when reading the specified
file:
vendinfo -c c:\entuity\etc\bin.vendor
-x prefix, exclude data for sysoids starting with the entered prefix:
vendinfo -H c:\entuity -x 1.3.6.1.4.1.9 -x 1.3.6.1.4.1.42
-X sysoid, excludes data for the entered sysoid:
vendinfo -H c:\entuity -X 1.3.6.1.4.1.42.2.1.1 -X 1.3.6.1.4.1.9.1.8
-i prefix, includes data for sysoids starting with the entered prefix:
vendinfo -H c:\entuity -x 1.3.6.1.4.1.42 -x 1.3.6.1.4.1.9
-I sysoid, allows you to specify the particular sysoid in which you are interested:
vendinfo -H c:\entuity -I 1.3.6.1.4.1.42.2.1.1
-m, restricts vendinfo output to sysoids for devices currently under Entuity
management.
vendinfo -H c:\entuity -m
-q, restricts vendinfo output to sysoids with concerns or questionable status. This is
useful when investigating the current status of your system’s device support datasets.
vendinfo -H c:\entuity -q
-h, displays command line help.
vendinfo -h
-u, displays command line help.
vendinfo -u
-v, displays vendinfo version number:
vendinfo version 1.7 [@(#)buildstamp.h $Revision: 6.48 $]
When you run vendinfo it returns a report on device support datasets it has processed:
exotica and uncertified vendor files contain one dataset each, bin.vendor contains
multiple datasets.
Null files are old, deprecated vendor files that no longer contain vendor definitions. They
are supplied to prevent older Entuity installations continuing to use these definitions.
Others, are files in the entuity_home\etc, entuity_home\etc\vanilla and
entuity_home\etc\exotica folders that do not have the vendor extension and so
Entuity, and vendinfo do not consider as device support files.
The results for each sysoid all have the same format:
sysoid
When vendinfo is only run against one folder, VendorStatus indicators that rely on
comparisons across folders, e.g. ?Provenance, are not meaningful.
Variation=n, is only used where there is more than one vendor entry that would yield
different operational behavior for the sysoid. Vendor definitions with the same variation
value would exhibit the same operational behavior.
ResultStatus can be:
winner, the device support dataset identified as being the highest ranked available in
entuity_home\etc for that sysoid.
loser, a device support dataset for which there is another higher ranked dataset
available in entuity_home\etc for that sysoid.
reference, device support datasets that are not in operational use but held in the
resource folders, entuity_home\etc\exotica and entuity_home\etc\vanilla.
Usually for every winner and loser there is an equivalent reference file for that sysoid.
viewserver
Location entuity_home\bin
Type Process
Invoked By starteots
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\log\viewserver.log.[1..4]
Description
By default event management process uses the internal Entuity mechanism, viewserver
for view membership checks. viewserver checks object-view and content filter settings, by
default every twenty minutes, or when a view is amended.
vipman
Location entuity_home\bin
Type Process, run at 19:00 and 02:00
Invoked By provost
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\log\vipman.log.[1..4]
Description
It is responsible for ascertaining which ports in the network are deemed to be infrastructure
ports, i. e.
router ports
trunk ports (i.e. ports connecting switches together)
uplinks (i.e. ports connecting routers with switches).
Entuity uses three methods to identify trunk ports; through the MIB, by counting the number
of MAC addresses on the port and then identifying whether there are associated VLANs and
lastly through Cisco’s CDP trunk discovery protocol. Through the VIPMAN Trunk Promote
module you can also identify to vipman ports you want Entuity to manage as trunk ports.
vtpDomainTool
Location entuity_home\lib\tools
Type Utility,
Invoked By provost, user
User Invocation User, Command line
Invoked Processes n/a
Configured Through provost.conf
Log File
Syntax
vtpDomainTool [-c] [-d] [-h] [-p] [-b]
where:
-c, deletes the Regional by VTP view
-d, sets debug logging level
-h, displays help information
-p, preserves user tags
-b, preserves blank domain.
Description
vtpDomainTool automatically assigns aliases for use in Entuity, enabling Entuity to
distinguish between VLANs that have the same name but are members of a different VTP
domain. The VLAN alias is built by combining the VTP Domain Name with the VLAN name.
vtpDomainTool also generates a view in Component Viewer called Regional by VTP,
which shows devices and VLANs grouped by VTP domain name.
vtpDomainTool can be run from the command line, or scheduled and run by provost. It
uses information collected by vtpman to identify devices and VLANs, and their correct VTP
domains. To maintain the accuracy of the view, you should schedule vtpDomainTool to run
after vtpman has completed. Scheduling is set through provost.conf, for example:
job vtpDomainTool {
count 1, start @06:15:00, repeat forever, interval 24h, command
'${entuity_home}/lib/tools/vtpDomainTool'
}
Changes to configuration files are not maintained after upgrading Entuity, and so
VTPDomainTool would have to be rescheduled in provost.conf.
vtpman
Location entuity_home\bin
Type Process
Invoked By provost, run daily, at 05:15
User Invocation n/a
Invoked Processes n/a
Configured Through n/a
Log File entuity_home\log\vtpman.log.[1..4]
Description
vtpman is responsible for gathering VTP (VLAN Trunking Protocol)-related information from
each switch in the network. The information is gathered using SNMP, and includes the VTP
server, VTP domain name, and pruning status.
This section describes the main system files used in the Entuity environment. These files
should not be moved, deleted or modified unless otherwise stated.
h
Directory names are given in Linux/Unix format. The names still apply if you are a Windows
user, reverse the slashes to enter them in DOS format.
bin.vendor
Location
entuity_home/etc
Format
Internal use only.
Description
Contains MIB-related information for each networking vendor supported by the Entuity
environment. The file is used by various SNMP polling processes, including prole.
This MIB information is also detailed in individual device type vendor files, installed by default
to entuity_home/etc/vanilla. Additional device type definitions, not detailed in
bin.vendor are held in entuity_home/etc/exotica. Device definitions held in these
folders are only used by Entuity, when you copy them to entuity_home/etc. Also
proliferate can generate new device types, called Unclassified, and these are held in
entuity_home\etc\uncertified. (See the Entuity User and System Administrator Guide.)
Status
Read-only.
client.cfg
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value
Description
Contains details to configure the Entuity client. For example:
lookAndFeel=Windows
[DNSLookup]
location=remote
where:
LookAndFeel sets the look of the client. This can be Metal, CDE/Motif, Windows or
system. The default is system which picks up the most platform suitable interface.
Windows only works on a Windows platform.
DNSLookup.location sets the site from which DNS lookup is performed for the Entuity
client, e.g. Component Viewer. You can enter:
remote, all of the DNS lookup is performed on the Entuity server. By default all the
DNS lookup is performed on the server.
local, all of the DNS lookup is performed on the client machine.
none, DNS lookup is deactivated.
Status
Maintained by the System Administrator.
The recommended format supports SNMP1v1/v2 and SNMPv3 devices, for example:
SNMP1v1/v2:
-d jupiter -D jupiter -l full -c public
SNMPv3:
-d 10.44.2.44 -u paul -a MD5 -A xyy1232h -x DES -X fgdgg34g
Description
The device file is also known as the seed file, it contains instructions used by proliferate
when adding devices to Entuity, e.g. device identifiers, authentication details, SNMP version.
A device file can be created by:
System Administrators who specify in it the list of devices they want to import to Entuity
through the Inventory Administration Import Devices function.
Historically this import device file was known as dev.txt and was expected in
entuity_home\etc, however both name and location are user definable.
Devices can either be referred to by an IP address or a host name. Host names should either
be added to the local /etc/hosts file, or be present within the DNS (Domain Name
System). Once a device is added to the Entuity management environment, it continues to be
referenced by the name specified in the device file.This is an example extract from a device
file using the new format for an SNMPv1c/v2 device:
-d 10.44.1.40 -c public # sysoid ".1.3.6.1.4.1.9.1.716" sysDescr
"Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version
12.2(25)FX, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2005 by Cisco
Systems, Inc. Compiled Wed 12-Oct-05 22:05 by yenanh".
where:
#, indicates the subsequent text on that line is a comment. Comments can inform you:
That the device is already managed by Entuity using another interface.
Of the current device’s IP address, sysoid and system description.
Of a device that could not be managed.
-d, indicates the following value is the device name.
-c, indicates the following value is the device community string.
This is an example extract from a device file, using the new format for an SNMPv3 device:
-d 10.44.2.44 -u paul -a MD5 -A xyy1232h -x DES -X fgdgg34g
Adding VM Platforms
Entuity manages VM platforms through their SDK which necessitates a different set of
connection attributes to other device types. To specify a VM platform the format is:
-d IpAddress -l manLevel -w type,url,user,password -T deviceType
where:
-d IpAddress, identifies the device name or IP address.
-l manLevel, must be set to the management level web.
-w sets the web connection details, which must be comma delimited and entered in this
order:
type, enter 2 for a VMware ESXi or 3 for an Oracle VM platform.
url, the url to the VM platform’s SDK.
user, user account Entuity uses to access the SDK.
password, user account password.
-T, sets the device to the internal Entuity identifier for a VM platform, i.e. 1144.
For example to add the VM platform blade to Entuity you can enter:
-d blade -l web -w 2,https://blade/sdk,devuser,232neree -T 1144
Status
Created and maintained by the System Administrator, name and location are user definable.
Also created each time autoDiscovery runs, being saved to entuity_home/etc/
deviceFiles as autodisc.txt.
entuity.cfg
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under headings denoted by
square brackets [].
h
entuity.cfg is white space sensitive, therefore do not, for example, enter spaces at the
start of a line or before or after the equals sign.
Description
This file holds the key information about the Entuity configuration. You must only use the
configuration procedure described in the Entuity Getting Started Guide to reconfigure the
software.
h
Do not directly modify the parameters in entuity.cfg, Entuity cannot be held responsible
! for the consequences. If you want to further amend these settings contact your Entuity
Support representative.
Status
Maintained by the System Administrator.
entuity.cfg Sections
Within entuity.cfg related parameters are grouped together within sections, for example:
[autodiscovery]
config=${ENTUITY_HOME}${FPS}etc${FPS}autodisc.cfg
automatic=1
where:
[autodiscovery] is the section header for autoDiscovery, identified as it is placed between
square brackets.
config and automatic are autoDiscovery parameters.
Parameters must follow the correct section headings to have the required effect. Therefore
variable names must only be unique within a section, e.g. config is used in a number of
different sections.
Following is a list of some of the sections and parameters available within entuity.cfg. If
you require changes to the default settings please contact your Entuity representative.
[]
Most parameters are held within sections that relate to particular Entuity functionality. These
parameters are of a more general application and are in the first section of entuity.cfg (it
has the square brackets that denote a section, but no section name):
You can configure Entuity so it does not limit PDU size, however some devices may
report over length packets as too big or silently ignore them. To set PDU size to
unrestricted set:
snmpMaxPduSize=0
snmpMaxPduSizeOverridesfile sets the name of the file, by default
snmpMaxPduOverrides.cfg, containing sysoids with the maximum PDU size for
devices with that sysoid.(See snmpMaxPduOverrides.cfg.)
You can amend the name of the PDU override configuration file, useful when a customer
wants to add their own override values and preserve them during upgrades:
snmpMaxPduSizeOverridesfile=snmpMaxPDUoveride.cfg
snmpVlanContextPrefix is for use with SNMPv3 devices configured to provide VLAN
information using an SNMPv3 context. When you have configured these devices Entuity
can convert any characters in the SNMP v1/v2c community string into SNMPv3 context
by comparing the community string provided in the SNMP request with the stored
community string. Any difference, excluding a leading @, is appended to a string, by
default vlan-. You can change the vlan- prefix by setting
snmpVlanContextPrefix=cVLAN-
source is the directory from which the software was copied (i.e. the CD-ROM directory).
StartupProperties=-Djava.rmi.dummy=dummy
trapportnum is the port used for receiving SNMP traps, by default port 162.
trendconfigured=0
version is the Entuity software version number.
webportnum is the port number used by the web server (typically, 80).
[auditlog]
Parameters in this section are applicable to the audit log. The default is:
[auditlog]
rowlimit=1000
where:
rowlimit determines the maximum number of log entries displayed through the Audit Log
page, by default set to 1000.
[AuthLog]
Parameters in this section are applicable to the login authorization log file. The default is:
[AuthLog]
FailureOnly=0
where:
FailureOnly is set to:
0, all login events are recorded in auth.log.
[autodiscovery]
Parameters in this section are applicable to autoDiscovery:
automatic when set to:
0, autoDiscovery is not automatically started. When it is already running manually
then this value is ignored. When it is already running automatically then autoDiscovery
is stopped.
1, autoDiscovery runs each Sunday at 01:00 hours. autoDiscovery uses the specified
configuration file. Where the file does not exist, autoDiscovery searches for devices on
the network(s) to which the current host is attached.
h
During the configuration of Entuity if you created your device file using autoDiscovery
automatic is set to 1, otherwise it is set to 0.
config holds the path and name of the default autoDiscovery configuration file,
entuity_home/etc/autodisc.cfg.
duplicateIpCheck when set to:
1, autoDiscovery checks that discovered devices do not have the same IP address as
devices already under management. Entuity hides devices with duplicate IP
addresses from the list of candidate devices, you can view them by selecting show
devices already in inventory.
0 (default), autoDiscovery displays in the Inventory Candidates page devices with
duplicate IP addresses to those already under management. When you attempt to
add them to Entuity, Entuity reports them as already under management and does
not add then again.
suppressNotRecognized, controls how autoDiscovery handles unrecognized device
types. When suppressNotRecognized is set to:
0 (default), autoDiscovery adds unrecognized device types to Entuity as non-
classified devices.
1, autoDiscovery does not add unrecognized device types to Entuity.
[AvailabilityMonitor]
Parameters in this section are applicable to the Availability Monitor, and all Entuity functions
that use ping.
[AvailabilityMonitor]
maxReportedEffectedItems=32
maxThreads=256
pingMaxTTL=32
pingTimeout=5
ignoreIfType=59,60,70
Where:
maxReportedEffectedItems, restricts the total number of impacted items that can be
displayed for an event to, by default, 32. On Network Outage events calling from the
context menu Impacted Items, Entuity can only display Nodes, Applications and Servers
up to this maximum.
maxThreads is the maximum number of concurrent traceroute threads, default 256.
pingMaxTTL is the maximum ICMP TTL to use, default 32.
pingTimeout is the maximum number of pings to a device that Entuity sends before
timing out, default 5.0.
ignoreIfType, instructs Availability Monitor to ignore interfaces of the specified type. These
are detailed in Appendix C - Port Interface Types.
ignorevirtualaddress when set to:
0, applicationMonitor would ping HSRP virtual IP addresses. These pinged
addresses would be included when Entuity is determining the state of a device, or
performing root cause analysis, with potentially misleading consequences.
1 (default), applicationMonitor does not ping HSRP virtual addresses. For newly
added devices there would be a short period between a port being taken under
management and its IP address being recognized as an HSRP virtual IP address.
loglevel, level of error reporting written to the log file, i.e. error, warning, info, debug and
all.
resetstatsinterval, sets the reporting period of availability statistics used for, for example,
SLA reporting. by default this is hourly, i.e. 3600 seconds.
tracecoreinterval, (default 120 seconds) controls how frequently Availability Monitor
attempts to do full traceroutes to non-edge ip addresses and shortcut traceroutes to edge
ip addresses.
[bem]
Parameters in this section are applicable to forwarding events and incidents to BMC Event
Manager:
[bem]
connection_username=admin
connection_view=All Objects
consolidation_server_name=entlonppvm01
consolidation_server_web_port=81
Where:
connection_username is the Entuity user account used to access the Entuity server from
the associated event or incident URL available from the BMC Event Manager.
connection_view is the Entuity view used to access the Entuity server from the associated
event or incident URL available from the BMC Event Manager.
h
Which events and incidents are forwarded to the BMC Event Manager is determined by the
conditions added to rules or triggers. The connection_username and connection_view
settings must allow access to the data associated with those events and incidents for the
associated URL to succeed. For example admin and All Objects provide access to all
managed objects on a server, however Entuity support recommend using a
non-administrator account.
[bemSender]
Parameters in this section are applicable to forwarding events and incidents to BMC Event
Manager:
[bemSender]
MaxSendingThreads=1
EventQueueSize=10000
Where:
MaxSendingThreads should not be amended. It is set to meet the BMC Impact Manager
multi-threading requirements.
EventQueueSize sets the maximum size of the sending tasks queue waiting to be
processed by the BMC Event Manager sender. The default value is 10000.
[client]
Parameters in this section are applicable to the java client (see also client.cfg):
[client]
config=${ENTUITY_HOME}${FPS}etc${FPS}client.cfg
java.version=1.7.0_10
java.heapSize=255
java.maxHeapSize=1024
java.shared.vm=false
Where:
config holds the path and name of the java client configuration file, entuity_home/etc/
client.cfg.
java.version, version of the JRE used to run the Entuity client.
You can fully specify a JRE version, e.g. 1.7.0_10, or for Entuity to use the first installed
JRE it locates that meets a wider criteria, e.g. 1.7 would allow the client to use any JRE
1.7 version.
h
If you replace on the client the JRE specified through java.version then the client fails to run.
You must amend java.version to use the newly installed JRE version. The Entuity Getting
Started Guide details the current Entuity system requirements.
java.heapSize, sets memory allocated to the Entuity client. You should not need to amend
this setting.
java.maxHeapSize, sets the maximum memory that can be allocated to the Entuity client.
You should not need to amend this setting.
java.shared.vm, for use when running the Entuity client on a virtual machine (VM). Each
time you launch the client, when set to:
true, a new VM is created. You are required to type your Entuity password each time
you launch Entuity, unless you have enabled the auto logon feature. By default this
feature is disabled.
false (default), Entuity uses the existing VM.
[database]
Parameters in this section are used when configuring Entuity’s database. This is the default
setting:
[database]
key_buffer=192M
Where:
key_buffer defines the size of the buffer that holds details of recently used keys. On large
sites, and where the Entuity server machine has available resources, performance can be
improved by increasing the size of the key buffer.
[datastream]
Parameters in this section are used when configuring StormWorks. These are the default
settings and must not be amended:
[datastream]
connection=HOST=127.0.0.1;UID=root;PWD=;DB=DSALPHA; PORT=${dbportnum}
Where:
connection defines the link to the StormWorks database and
HOST is the IP address of the machine holding the database.
UID is the database login.
PWD is the database password.
DB is the database.
[devdefunct]
devDefunct removes devices from Entuity that have aged out. devDefunct is configured
through:
ageout, the number of days after which a device is deemed to be defunct and can be
removed via the daily run devDefunct. When a value is not entered devDefunct does
not delete any devices. This is the default state.
[discovery]
By default the details of newly added devices and ports are given priority in the discovery
queue. When you do not want to interrupt Entuity’s normal discovery cycle, you can turn off
the priority setting through:
[discovery]
noPrioritiseNewInProliferate=1
noPrioritiseNewInGUI=1
noRefreshViewMapInProliferate=0
HostNameFormat=Qualified
where:
noPrioritiseNewInProliferate when set to 1 does not move devices and ports newly added
using autodiscovery, to the top of the discovery queue.
noPrioritiseNewInGUI when set to 1 does not move devices and ports newly added
through the web interface, to the top of the discovery queue.
noRefreshViewMapInProliferate when set to:
0 (default), changes made from the web UI to the devices Entuity manages trigger a
refresh of the underlying object map used by the Entuity client and web interface.
1, changes made from the web UI to the devices Entuity manages do not trigger a
refresh of the underlying object map used by the Entuity client and web interface. The
changes are only visible after the next refresh.
h
The length of time it takes to refresh the object map partly depends upon the size of the
managed network. As there is a overhead to regenerating the map, proliferate only
allows a queue of two refresh requests.
HostNameFormat determines the device name used by Entuity when adding a device
through auto discovery. When it is set to:
Mixed (default), discovery uses the qualified DNS name when possible. When the
name is too long, over 59 characters, then Entuity uses the unqualified name and
when that is not available Entuity uses the device IP address.
Qualified, discovery uses the qualified DNS name when possible. When the name is
too long, over 59 characters, then Entuity uses the unqualified name and if that is not
available Entuity uses the device IP address.
Unqualified, discovery uses the unqualified DNS name and when that is not available
the device IP address.
IpAddress, Entuity uses the device IP address.
h
When adding devices using a seed file, Entuity uses the device name as it appears in the file.
[diskmonitor]
Parameters in this section configure diskMonitor which monitors the available disk space
on the Entuity server. This is an example section:
[diskmonitor]
sample_period=60
message_period=600
message_threshold=200
shutdown_threshold=100
where:
sample_period is the period in seconds between monitoring of the disk space. The
default is 60, i.e. disk space is measured every minute.
message_period is the interval, in seconds, between diskMonitor generating disk
space low warning events that appear on Event Viewer. The default is 600, i.e. an event is
generated every ten minutes when disk space reaches the messagethreshold.
message_threshold is compared to the available disk space. When that value falls below
the messagethreshold diskMonitor generates a disk space warning event. The default
value, is 200Mb, setting it to 0 turns off this feature.
shutdown_threshold is compared to the available disk space. When that value falls below
the shutdownthreshold diskMonitor initiates Entuity shutdown. The default value is
100Mb, setting it to 0 turns off this feature.
h
On UNIX systems the disk space value is unreliable for NFS partitions. When Entuity and its
database are on different machines disabling diskMonitor is recommended.
[dns]
The parameter in this section configures frequency of hostname resolution.
[dns]
positivestaletime=86400
where:
positivestaletime, determines how long Entuity retains resolved IP address and hostname
information in both memory and the database, by default 86400 seconds (twenty-four
hours). It therefore also determines how quickly Entuity identifies a change in hostname
resolution.
[eosserver]
Parameters in this section configure eosserver, the process managing the communication
between Component Viewer and the database.
[eosserver]
javaMemory=192m
Where:
javaMemory is the amount of memory assigned to the eosserver java process.
[Events]
Parameters in this section extend Entuity functionality.
[Events]
engineIdOverwrite=a2fed1312070f4dcc9eb2b483318ef317
portEventsForDevices=false
excludeGiants=1
enableDeviceUnreachableEvents=1
SnmpTimeoutFilterByReachability=1
jmxserver_port=12122
jmxFile=eventEngineJmxUrl.jmx
licenseLowWarningThreshold=100
# RPC timeout for calls into DsKernel
swRpcTimeout=60
# Maximum number of threads executing external processes
processExecutorMaxCount=4
# Number of threads processing events in parallel
workerMaxCount=10
# Number of times event can be derived or forwarded between event
engines
maxEventProcessingDepth=10
# Number of seconds between e-mails to the same address
emailThrottlingPeriodSec=300
# For how long to store events
dbKeepDays=14
dbPartitionDurationHours=24
# Receiver settings
receiverPort=19194
receiverHostname=localhost
receiverBacklog=10
receiverThreads=10
receiverTimeout=60
# Request listener settings
requestListenerPort=19193
requestListenerHostname=localhost
requestListenerBacklog=10
requestListenerThreads=10
requestListenerTimeout=60
requestListenerEventsInBatch=100
Where:
engineIdOverwrite is an hexadecimal string that when defined would override the default
engine ID used by the Entuity server when forwarding SNMPv3 traps. The default engine
ID is derived from the Entuity server.id. You may want to override the default string
when there is a conflict with another device's engine id.
Engine ID is represented by a hexadecimal string including just 0-9 and A-F. It must be at
least 5 bytes long but no more than 32 bytes. If you enter a string with an invalid length or
one that contains invalid characters Entuity records the error in
entuity_home\log\groovyEvents.log.
engineIdOverwrite can have one of these formats:
xxxxxxxxxx, no separator.
xx:xx:xx:xx:xx, separated by colon.
xx xx xx xx xx, separated by space.
portEventsForDevices when set to:
true, events raised against a port contribute to the event status of its device.
false (default), events raised against a port do not contribute to the event status of its
device.
excludeGiants when set to:
1 (default) excludes giants from error calculations, therefore Packet Corruption events
cannot be raised by giants. When excluded Entuity writes to prodigy.log Excluding
Giants, (prodigy calculates packet corruption errors).
0, giants are included as part of error calculations.
enableDeviceUnreachableEvents controls when Entuity raises the Device Reachability
Degraded, Device Unreachable and Device Unreachable Cleared events and the Device
Reachability incident. The Network Outage event is independent of this parameter.
When set to:
1 Entuity raises the Device Reachability Degraded event when the device is the root
cause of the network outage, and Device Unreachable when the device is unavailable
but not the root cause.
0 (default) the device unreachable events and incident are not configured.
licenseLowWarningThreshold sets the threshold for the number Entuity Server License
Alert event. By default when there are fewer than 100 device or object credits available
Entuity raises the event.
SnmpTimeoutFilterByReachability, controls how Entuity manages SNMP Agent Not
Responding events. When set to:
1 (default), SNMP Agent Not Responding events are only generated when the device
is reachable.
0, SNMP Agent Not Responding events are generated regardless of whether Entuity
can reach the device. With this setting Entuity does not generate the clearing SNMP
Agent Responding events.
mix, allows generation of SNMP Agent Not Responding events regardless of whether
the device is reachable by Entuity. It also raises the clearing SNMP Agent Responding
events. This setting is for test purposes only.
[eyepoller]
These parameters control configuration of eyepoller. Misconfiguration of some eyepoller
parameters can result in poor Entuity performance, including missing polling of data. Always
consult with Entuity Support before amending the eyepoller configuration.
h
Changes to the polling frequency must always be multiples of five minutes for the polled data
to meaningfully integrate with the Entuity roll-up processes.
[eyepoller]
pollerEventsEnable=1
workers=25
backlog=2
timeSkewTolPercent=2.0
timeSkewTolAbsSecs=5.0
wrapDetectionMarginSecsCrit=2.0
wrapDetectionMarginSecsWarn=5
disableEventGrouping=0
fetchUpdatesRetryLimit=5
fetchUpdatesItemsPerReq=100
Where:
pollerEventsEnable, controls whether these events which report on the efficacy of
eyepoller, are enabled or disabled:
Device Port(s) Utilization Accuracy Lost
Device Port(s) Utilization Accuracy At Risk
Device Clock Inconsistency
By default wrapDetectionMarginSecsCrit is set to 2.0, while valid values range from 0.0 to
10.0. A larger margin implies more sensitive checking, and potentially more discarded
samples and more Device Port(s) Utilization Accuracy Lost events (when enabled).
wrapDetectionMarginSecsWarn, sets the margin, in seconds, for Entuity to identify
potential undetected 32 bit counter wraps as the interval between pollings is too great.
When the margin threshold is crossed Entuity raises a Device Port(s) Utilization Accuracy
At Risk event (when it is enabled).
By default wrapDetectionMarginSecsWarn is set to 5.0, while valid values range from 0.0
to 10.0. A larger margin implies more sensitive checking, and potentially the raising of
more Device Port(s) Utilization Accuracy At Risk events (when enabled).
disableEventGrouping, controls whether polling problem events are raised against the
device or the port. When set to:
0 (default), events associated with eyepoller are raised against the device
1, polling problem events are raised at the port level. Only use this setting under
guidance from Entuity Support as the consequences are likely to be a great increase
in events.
fetchUpdatesRetryLimit, controls the number of attempts eyepoller makes to obtain
polling duty updates from dskernel, before abandoning the attempt.
By default fetchUpdatesRetryLimit is set to 5, while valid values range from 0 to 20.
Do not amend this setting unless specifically advised to do so by your Entuity Support
contact.
fetchUpdatesItemsPerReq, determines the maximum amount of data per response when
eyepoller is requesting polling duty updates from dskernel. By default
fetchUpdatesItemsPerReq is set to 100, while valid values range from 10 to 1000.
useCounter32_ifTypeList, identifies the interface type as using 32 bit counters, the default
is ifType 24 (loopback).
useCounter64_ifTypeList, identifies interface types for which Entuity performs 64 bit
counter polling. By default this list is empty.
Do not amend the useCounter settings unless specifically advised to do so by your
Entuity Support contact.
[FlexReporting]
Parameters in this section enable additional Flex Report functionality.
EnableExpressionBuilder when set to 1 switches on, and when set to 0 switches off,
Expression Builder. This example section switches on Expression Builder:
[FlexReporting]
EnableExpressionBuilder=1
[Flow]
Parameters in this section configure Integrated Flow Analyzer (IFA) ports and data rollups.
[flow]
port=9996
managementport=12121
compression=1
maxCountValue=10000
defaultQueryResultLimit=100
collectorWindowSec=300
# rollup0 is an IFA Premium setting, inactive by default
rollup0=0,1800,1Minute
rollup1=300,7200,5Minute
rollup2=3600,172800,1Hour
rollup3=21600,604800,6Hour
rollup4=86400,3024000,1Day
where:
port is the port on which the Entuity server receives NetFlow, Netstream and JFlow data,
by default 9996. Entuity IFA requires the exporting router to be configured with the IP
address of the target Entuity server and a port number.
You can set Flow Port during configure and through flowcfg.properties, where
you can set multiple receiving ports.
Entuity IFA receives sFlow and IPFIX packets through 2 non-configurable ports, for:
IPFIX you must set your router to export IPFIX to port 2055 of the Entuity server.
sFlow you must set your router to export sFlow to port 6343 of the Entuity server.
managementport, the port Entuity uses to manage, e.g. stop, the flow collector process.
You can set Flow Management Port during configure, by default to 12121.
h
compression, sets how Entuity stores flow data. When set to:
0, Entuity retains the raw flow data, which implicitly increases the size of its database.
1 (default), Entuity compresses the flow data.
maxCountValue, sets the count limit, by default 10000, a value over 10000 and Entuity
displays in the Count column 10k>. Count is an option available through Custom
Breakdowns, an IFA Premium feature.
defaultQueryResultLimit, sets the maximum number of results that can be returned to a
Flow Analysis table.
collectorWindSec, sets how Entuity handles flow records to account for differences in
flow receipt and collection intervals creating spurious data spikes.
For example, assume flow records are sent every two minutes for a continuous data
transfer of 1k per second. You would expect a five minute sample to show 300k total.
However since five is not a multiple of two the collector would alternate between two and
three records per sample causing the displayed data to flip between 240k and 360k. Even
if the flow records were sent every one minute there would still occasionally be a spike
when the receipt of the flow records coincided with the collection boundaries.
To overcome this incoming records are apportioned into multiple buckets using the
concept of a collection window which defaults to five minutes (300 seconds).
rollupN, Entuity rolls up data to extract the most meaningful information and save it in a
form that can be efficiently used to graph and report on over a longer period. For flow
data there are five levels of rollup, with three attributes:
frequency, is the frequency of flow collection in seconds. When set to 0 Entuity does
not collect flow data.
keeptime, is the length of time measured in seconds Entuity retains the rolled up data.
directory, is the name of the directory holding the rolled up data, for example 5minute.
You should only amend the name when you amend the rollup frequency.
Through the rollup1 definition IFA supports a maximum flow collection frequency of five
minutes. However through the rollup0 definition IFA Premium can support a one minute
flow collection frequency and retain that data for 30 minutes (1800 seconds), although by
default it is not activated. To activate one minute flow collection amend the rollup0
frequency from 0 to 60 seconds:
[flow]
rollup0=60,1800,1Minute
h
When you run IFA Premium the Entuity web UI includes options for running reports and flow
breakdowns using one minute polling. However if you do not configure devices to send flow
at one minute intervals, or activate the one minute rollup (rollup0), Entuity continues to use
the five minute rollup data.
[image]
Parameters in this section apply to images used to represent services.
[image]
user_defined_directory=${ENTUITY_HOME}${FPS}etc${FPS}user_images
service_image_size=128
where:
user_defined_directory, location of the custom images used in services. You must create
this folder on the Entuity server.
service_image, display size in pixels of the service image, by default 64x64.
[install]
Parameters in this section are installation settings for Entuity, for example:
[install]
dir=${ENTUITY_HOME}${FPS}install
java=${INSTALL.DIR}${FPS}JRE${FPS}bin${FPS}java
jre=${INSTALL.DIR}${FPS}JRE${FPS}bin${FPS}jre
platformfile=${ENTUITY_HOME}${FPS}etc${FPS}install.cfg
where:
dir is the Entuity installation directory.
java is the Java Runtime Environment.
jre is the Java Runtime Environment used for the server installation.
h
In this example the java and jre paths are built using dir (i.e. INSTALL.DIR), where INSTALL
refers to the section and DIR the variable name.
[ipman]
These parameters control configuration of ipman.
[ipman]
devicefile=D:\Entuity\etc\arp_cache_devices.cfg
where:
devicefile, defines the location and name of a user defined file containing router
hostname or IP address, and community string details for ipman to use to pull for ARP
cache information.
A device file is only required when an Entuity server does not manage a router containing
ARP cache information it requires to populate connected end host IP addresses. (See
ipman.)
[ipsla]
Parameters in this section are applicable to the Entuity Cisco IP SLA module:
[ipsla]
MinDiscoverableIndex=10000
MaxDiscoverableIndex=15000
where:
MinDiscoverableIndex, defines the start of the range that Entuity checks for operator
indices.
MaxDiscoverableIndex, defines the end of the range that Entuity checks for operator
indices
Entuity checks for operations, with an owner of Entuity, on a device. If it finds an
operation that it does not manage then it deletes the operation. When you have more
than one Entuity server managing your network you should define a different range of
operator indices for each server. This prevents two servers managing the same device
destroying each others IP SLA operations, i.e. each server only checks operations that
have an owner of Entuity and have an index within their discoverable range.
[Jasper]
Parameters in this section are applicable to the main Entuity reporting function. For example:
[Jasper]
maxCachedReportsPerSession=10
where:
maxCachedReportsPerSession, sets the number of reports Entuity caches for each user’s
session. By default Entuity maintains 10 reports.
You may want to increase this value, for example when using custom dashboards that
include more than one report. However the greater the value the potentially greater
increase in Apache Tomcat’s memory footprint, and this greater load can slow
performance.
[lcm]
Parameters in this section are applicable to the Entuity Configuration Monitor module. For
example:
[lcm]
tftpServerIp=10.44.1.109
scriptDir=ENTUITY_HOME\integ\SCRAPE
expectProg=ENTUITY_HOME\integ\SCRAPE\expect
FTPUsername=anonymous
FTPPassword=EYE
diffDir=ENTUITY_HOME\integ\etc
tftpHome=c:\tftphome
archivedir=c:\tftpArchive
SNMPTriggerHoldOffTime=300
where:
tftpServerIp is the Entuity server IP address provided to the device, used during TFTP and
FTP transfers. It is set during configure.
scriptDir, is the location of script files, by default entuity_home/integ/SCRAPE. Entuity
Configuration Monitor includes these example scripts:
start_run_cisco.expect, for Cisco devices
start_run_hp.expect, for HP devices
start_run_juniper.expect, for Juniper devices.
expectProg, full path to the Expect program, by default entuity_home/integ/SCRAPE/
expect.
FTPUsername, username for access to devices where the FTP credentials are set on the
command line, by default anonymous.
FTPPassword, password for access to devices where the FTP credentials are set on the
command line, by default EYE.
Where:
excludedMacs, defines MAC addresses for ipman and macman to ignore, in addition to
the default range of 00:00:0C:07:AC:00 to 00:00:0C:07:AC:FF, which are reserved for
ethernet and FFDI HSRP group virtual mac addresses.
trunkdevicecount is the threshold level of MAC addresses associated with a port, above
which Entuity considers it a trunk port. When absent, or set to 0, the default value 10 is
used.
When trunk ports do not have encapsulation, or it has not been detected in the MIB, the
MAC address count could become very large. This could lead to the database running
slowly or memory exceptions. Limiting the MAC count using trunkdevicecount prevents
this.
recallqueuetime, the interval between the reading of requests to run macman against
devices. By default it is set to 300 seconds, with a maximum value of 3600 seconds. After
this delay, macScheduler may run all pending requests.
machistorylimit, sets the limit on the retained history of MAC addresses. Entuity maintains
two histories, for each:
Port Entuity retains, by default, the last fifty MAC addresses discovered on that port,
when this threshold is passed Entuity discards the oldest MAC address.
MAC address Entuity retains, by default, the last fifty ports discovered for the MAC
address. When this threshold is passed Entuity discards the oldest port.
You should take care when amending machistorylimit:
Setting very large values increases the amount of data stored and can impact
database performance.
The MAC Address New event is triggered when a MAC address is not listed in the
retained history of MAC addresses for that port. Amending this variable changes when
the event is triggered.
The MAC Address Port Change event is raised when a port is not listed in the history
of that MAC address..
queuemaxitems, maximum number of items in the macScheduler queue. By default the
queue size is 64, with a maximum of 512.
queuemaxthreads determines the maximum number of macman’s that macScheduler
can run at any one time. For example when set to 1, only one macman can run. By default
set to 1, with a maximum of 16. macman run by provost is not included in these
restrictions.
[mibs]
Parameters in this section are applicable to how Entuity manages the MIB files it uses when
managing the network.
[mibs]
MibDir = =${ENTUITY_HOME}${FPS}lib${FPS}mibs
parsedlimit = 50
parseMibDir = =${ENTUITY_HOME}${FPS}lib${FPS}mibs
where
MibDir is the location of the directory holding the MIBs.
parsedlimit sets the maximum number of MIB files that can be included to a batch. When
you open the MIB Manager it loads the MIB file in batches.
parseMibDir is the location of the directory holding the parsed MIBs.
h
When deploying traps and rules across multiple Entuity servers the events project file,
together with the MIBs and parsed mibs directories must be identical across the servers.
[MibServ]
Parameters in this section are applicable to StormWorks SNMP collection.
The setting of MibServ parameters requires an understanding of the Entuity SNMP request
! architecture, therefore you should only amend the default settings with the guidance of
Entuity Support. Incorrect configuration of these parameters can seriously impact Entuity
performance.
backlog controls how readily StormWorks increases the number of concurrent SNMP
operations (but the concurrency will never go beyond the level set by workers). The
higher the value the longer StormWorks will delay before increasing the concurrency
level.
The default value is 2, minimum value 0, maximum value 100.
h
It can be very hard to predict long term effects of changes here. Effects may only come to
! light long after the value was last changed.
SNMPagentPort is the default port used by StormWorks for SNMP access to devices.
The default is 161.
SNMPbadGraceCount is the number of consecutive failures to communicate with a given
device which StormWorks will tolerate before marking the device in question as bad. (A
failed operation is counted once only, regardless of the number of retries involved.) While
a device is marked as bad, all further requests to that device will be treated as though
they had failed, without even attempting communication with the device. A device
remains marked as bad for SNMPbadHoldSecs(qv), after which time StormWorks will try
to resume normal communication with the device.
SNMPbadGraceCount=0 means StormWorks will consider a device to be bad after
first error
SNMPbadGraceCount=1 means StormWorks will consider a device to be bad after
two consecutive errors
The default value is 1, minimum 0, maximum 10. It is a single setting applied to all devices
accessed via StormWorks.
h
Adjusting this value may degrade performance, but effects may only come to light long after
the value was last changed.
SNMPbadHoldSecs is the time StormWorks keeps a device marked as bad. During this
period all requests to that device will be treated as though they had failed, without even
attempting communication with the device. At the end of that period StormWorks will try
to resume normal communication with the device.
The default value is 30, minimum 5, maximum 120. It is a single setting affecting all
devices accessed via StormWorks.
h
Adjusting this value may degrade performance, but effects may only come to light long after
the value was last changed.
Adjusting this value may degrade performance, but effects may only come to light long after
the value was last changed.
SNMPgatherMinMsecs
StormWorks normally holds back SNMP requests for a short time to take advantage of
the efficiency benefit from combining them with other requests to the same device. If a
request is held back and a further request on the same device arrives within the time
specified here, those requests will continue to be held. If no further requests for some
device arrive within the time specified here, all held back requests for that device will then
be actioned. Single setting affecting all devices accessed via StormWorks.
The default value is 500, minimum 100, maximum 5000.
h
Adjusting this value may degrade performance, but effects may only come to light long after
the value was last changed.
Red alert messages indicate serious problems internal to StormWorks which may need
! involvement from Entuity Support. The solution will involve adjustments elsewhere, changing
the value here could make it harder to solve any resulting problems.
SNMPretryLimit=0 means that if initial attempt fails, StormWorks will not retry. The
default value is 3, minimum 0, maximum 20.
h
Increasing this value may degrade performance, but effects may only come to light long after
the value was last changed.
SNMPretryMillisecs is the time allowed before attempting to retry. Values must allow for
worst case round trip times, with particular attention to any devices accessed via slow or
high-latency links.
The default value is 3000, minimum 0, maximum 30000. It is a single setting affecting all
devices accessed via StormWorks.
h
Increasing this value may degrade performance, but effects may only come to light long after
the value was last changed.
Yellow alert messages indicate problems internal to StormWorks which may need
! involvement from Entuity Support.
workers is the maximum number of SNMP operations that can be concurrently active.
When the limit is reached operations are queued until a worker is available. The default
value is 15, minimum 1, maximum 500.
h
Excessive values can cause serious performance degradation, but effects may only come to
light long after the value was last changed.
udpWorkers is the maximum number of SNMP operations that can be concurrently active
with user defined polling. When the limit is reached operations are queued until a worker
is available. The default value is 10, minimum 1, maximum 500.
h
Excessive values can cause serious performance degradation, but effects may only come to
light long after the value was last changed.
[OTR]
Parameters in this section are applicable to Entuity trap management and how prologV2
handles traps from unmanaged devices and interfaces.
[OTR]
suppressUnmanagedDevices=false
suppressUnmanagedInterfaces=false
where
suppressUnmanagedDevices controls how Entuity handles unmanaged devices. When
set to:
false (default) Entuity handles traps from unmanaged devices.
true, Entuity suppresses traps from unmanaged devices.
suppressUnmanagedInterfaces controls how Entuity handles unmanaged interfaces.
When set to:
false (default) Entuity handles traps from unmanaged interfaces.
true, Entuity suppresses traps from unmanaged interfaces.
[prole]
Entuity constructs port descriptions by placing within square brackets the port’s index value,
using either its enterprise MIB index (entIndex) when available, or interface index (ifIndex).
The index value is followed by the port description. Parameters in this section allow you to
control exactly how Entuity constructs the displayed interface descriptions.
There will be a delay between activating these settings and the changes becoming apparent
in Entuity. One cause of delay is prole, or on a large site a number of instances of prole,
only running every twenty minutes. Another is the Entuity UI refresh rate. There may also be
occasions when some ports show the description in the old format, and some in the new
format, this is because prole cannot read all ports at exactly the same time.
You can configure interface descriptions through this section:
[prole]
PollIfName=1
ifDescrUseAlias=true
ifDescrAppendAlias=false
ifDescrSortableIndex=false
ifDescrLabelIfIndex=false
Where:
PollIfName, controls the port description square bracket population. When set to:
1 (default), Entuity populates the interface name from the ifName mib variable
0, Entuity derives the interface name entIndex or ifIndex.
ifDescrUseAlias, sets the port description used by Entuity when set to:
true (default) Entuity uses the port’s interface alias
ifDescrLabelIfIndex, prefixes the interface description with if:, to indicate the value is an
interface index (and so should only be used when port data is accessed using its
interface index). When set to:
true Entuity applies the if: prefix, e.g. [if:0001]
false (default) Entuity does not apply the if: prefix, e.g. [0001].
[proliferate]
Parameters in this section are used with proliferate:
[proliferate]
maxpolltime=300
Where:
maxpolltime, sets the maximum time, in seconds, for a device to respond to an SNMP poll
[reporting]
Parameters in this section are used when generating Flex Reports and standard reports:
[reporting]
spareporttime=40
ViewReportsDefault:showFlex=1
generateReportUseRedirect=0
generateReportRPCTimeout=60
regenerateReportRPCTimeout=600
deleteFlexReportRPCTimeout=1
generateReportcommand lineRPCTimeout=86400
javaMemory=128000000
viewReportOnScreenMessageSize=200
foCommand=java -cp
${XML.XERCES};${XML.XALAN};org.apache.xalan.xslt.Process
pdfCommand=java -cp
${XML.FOP};${XML.BATIK};${XML.FOPXALAN};${XML.FOPXERCES};${XML.JIMI};
org.apache.fop.apps.Fop
JasperChangeDataKeepTime=63072000
Where:
spareporttime, sets the threshold number of days a port is unused, used in spare port
calculations. The default is 40.
ViewReportsDefault:showFlex when set to:
1 automatically displays Flex Reports in the Report Center’s View Reports page.
0 (default) does not automatically display Flex Reports in the Report Center’s View
Reports page.
generateReportUseRedirect, when set to:
1 (default), a redirect page is used with reports generated from Report Center.
0, a redirect page is not used.
regenerateReportUseRedirect, when set to:
1 (default), a redirect page is used with reports regenerated from Report Center.
0, a redirect page is not used.
generateReportRPCTimeout, period of time, in seconds, before Flex Report generation
times out (by default one minute). In the browser Entuity displays an information
message that the report is still being generated.
When running Flex Reports using URLs and setting noCreate=1 increase the timeout
parameter. This prevents the CGI timing out during report generation and the report
object not being deleted. This can be set as a runtime parameter in the URL.
[search]
This section configures the Search tool.
[search]
rpcServerPort=5469
maxResultSize=50,100,500,1000,2000
Where:
rpcServerPort specifies the RPC port used by Tomcat to communicate with the Search
tool.
maxResultSize, sets the options available to the user when selecting how many search
results to return from Entuity servers.
[Server]
Parameters in this section are set during configure and relate to the Entuity server:
proxy_timeout=300
ssl_enabled=false
map_server_port=10981
single_socket_enabled=true
single_socket_port=12321
id=9c3d450f-a80e-42cc-864a-b9dec8b49549
Where:
[Sla]
Parameters in this section configure slalogger and the roll up of its data. This example
uses the default values:
[sla]
Rollup=192@1h;100@1d;13@1w;24@1m;5@1y
startdayofweek=0
Where:
Rollup specifies how the data collected by Availability Monitor is retained. This has the
format:
<no of retained samples>@<interval length><unit of time>
where:
<no of retained samples> is how many samples to keep
<interval length> is how the original data should be rolled up.
<unit of time> is the original sample interval, i.e. h for hour, d for day, w for week, m
for month and y for year.
Hourly samples start on the hour, daily at midnight, weekly start time is set through
startdayofweek, monthly at midnight on the first day of the month and yearly samples start at
midnight on the first of January.
For example:
Rollup=192@1h;100@1d;13@1w;24@1m;5@1y
If you amend these defaults you must ensure you enter valid values, i.e. do not define
strings that request too little data. For example:
RollUp=12@1h;31@1d
This requests twelve one hour data samples, which is less than the twenty four one hour
samples required to make one day. Therefore, Entuity overrides the entered value and
takes twenty four one hour samples.
h
If you amend Rollup you must stop and then restart the Entuity server for the changes to take
! effect.
startdayofweek is used in SLA reports to specify the first day of the reporting week. 0 =
Sunday, 1 = Monday, through to 6 = Saturday. The default is 0.
[snews]
Parameters in this section are applicable to Device News module:
maxSamples sets the number of days Device News configuration details should be held
(i.e. device and VLAN switch details). The default value is 7, for 7 days.
[SNMPserv]
The parameters within this section are used by the SNMP Server:
checkWalkOrder is used when determining whether Entuity performs lexicographic
checking on data returned by a MIB agent.
This is useful when an agent returns data out of sequence as part of a SNMP GetNext
request. For example, with many lower end Cisco devices (e.g. 1900, 2820 and 2900XL’s)
the section that contains mac address information is unordered. Without the
lexicographic checking this data can cause the GetNext request to form a recursive loop,
with checking this can be avoided.
When checkWalkOrder is set to:
0, Entuity does not check that the returned data is in the correct order. This is the
default state.
1, Entuity performs lexicographic checking. If returned data fails the checking Entuity
writes an error message to the calling process’ log file and discards the data. For
example, if macman is run and the data fails the checking, error messages are written
to macman.log and in the Component Viewer you would notice mac addresses are
missing.
h
If a process inexplicably locks up, e.g. macman, prole, it may be due to a GetNext request
loop and setting checkWalkOrder to 1 may solve the problem.
SNMP operations controlled through StormWorks are separate from SNMP Server.
Lexicographic setting is always enabled.
[syslogger]
Configuration section for the System Logger process. It determines the port the System
Logger process listens for syslog messages on and the level of urgency and facility
(message type) that then lead to alarms being generated in Event Viewer.
This example section configures syslogger to only accept messages that are: from Entuity
managed devices; received on port 514; either of message type mail with a log level of
debug or higher, or kern with a log level of notice or higher.
[syslogger]
loglevel=notice
portnum=514
openReceiver=0
acceptfacs=mail.debug,kern.
replaceEventDetailsAction=s/\n/ /g s/^//g
Where:
loglevel is the message urgency level. It sets the urgency level of syslog messages for
which Entuity generates events. This level can used/overridden through acceptfacs.
portnum is the port System Logger process listens on, the default is 514.
openReceiver when set to:
0, limits System Logger process so it only handles messages from devices managed
by Entuity.
1, the default, System Logger process handles messages from all devices.
acceptfacs allows you to specify which facilities are accepted by Entuity and at what
urgency level. These are the acceptable formats:
When the syslogger section is not included in entuity.cfg, then System Logger process
is set to its default state. It accepts messages from the notice urgency level, listens on port
514 and accepts all facilities from all devices.
[system_control]
Parameters in this section define Entuity system control. This example section starts Entuity
in maintenance mode:
[system_control]
defaultState=maint
Entuity recommend you do not adjust the default system control settings.
!
[ticker]
Parameters in this section are applicable to Ticker:
maxClients is the maximum number of Ticker clients the server can monitor. The default is
256.
port is the port the Ticker server monitors its client ports’ activity. The default is 20202, set
during Entuity configuration.
[tomcat]
Parameters in this section configure Apache Tomcat application server:
adminport, is the Tomcat administration port, by default 8005.
port, is the Tomcat port, by default 8080.
javaMemory, is the amount of memory assigned to the tomcat java process, by default
512M.
[Topology]
Parameters in this section control the display of topology information in maps.
[Topology]
PingStateIncludedDeviceTypes=168,1049,1058,1077,1128,1200
PingStateExcludedInterfaceTypes=24, 28, 33, 34, 48
EnableSpanningTree=1
EnableUplinkDetection=1
Where:
PingStateIncludedDeviceTypes allows you to override the default device types included
to Trace Route - Ping State maps. This list replaces the default list so you must include all
device types you want included to the map, not only the additional device types.
PingStateExcludedInterfaceTypes sets the port types Entuity excludes from the displayed
Trace Route - Ping State in maps. This list replaces the default list so you must include all
interface types you want excluded from the map, not only the additional interface types.
h
Device and interface types are listed in Appendix B - Entuity Internal Identifiers.
[Traps]
Parameters in this section are applicable to prologV2. You should only adjust these settings
when you suspect that the rate at which traps are being received is faster than they can be
handled by prologV2 and traps are being lost. This example section details the default
configuration:
[Traps]
usetrapqueue=F
queuemaxitems=512
queueresumethreshold=480
Where:
usetrapqueue when set to
F, a queue is not used.
T, a queue is created by prologV2 to supplement the system cache.
queuemaxitems is the maximum number of items in the queue, by default 512 traps.
queueresumethreshold causes the queue to stop receiving traps.
[viewServer]
By default the event engine process uses the internal Entuity mechanism, viewserver for
view membership checks.
[viewServer]
RefreshInterval=1200
where:
RefreshInterval, viewserver checks object-view and content filter settings, by default
every twenty minutes (1200 seconds). This coincides, but is not synchronised, with the
default interval for the running of prole. Valid values are in the range of 60 to 86400
seconds, i.e. one minute to one day.
[webUI]
Parameters in this section configure Event Viewer. This is an example configuration:
[webUI]
EventViewerMaxEvents=1000
EventViewer.BatchSize=1000
EventViewerShowServerColumn=1
EventViewerSeveritySound=info:chimes.wav, minor:chord.wav,
major:ding.wav, severe:notify.wav, critical:ringin.wav
customDashboardMaxCount=20
customDashboardMaxUrlCount=20
ActiveChartDefaultGroupApproximation=average
where:
EventViewerMaxEvents, sets the maximum number of events that can be held by Event
Viewer, by default 1000.
EventViewer.BatchSize, sets the maximum number of events that can be displayed by
Event Viewer, by default 1000.
EventViewerShowServerColumn, when set to:
0 (default) the server column is hidden in Event Viewer.
1, Event Viewer displays the server column which identifies the Entuity server that
raised the event, which you may require in multi Entuity server environments.
Changes to this setting are only applied after a restart of tomcat. The setting is only
retrieved from the server you are logged into. Setting this option on a remote server has
no effect unless you directly login to the remote server.
EventViewerSeveritySound, allows you to set a sound for each event severity level. You
must install your own sound files (WAV or MIDI) to entuity_home/lib/TomCat/webapps/
webUI/sounds. For changes to this setting to be applied you must restart Apache Tomcat.
customDashboardMaxCount sets the upper limit to the number of custom dashboards a
user can potentially have available from the Dashboards > Custom Dashboards menu.
The user configures the maximum custom dashboards available to them through the
Preferences page and the Dashboard Count, which by default has an upper limit of 20.
From the Preferences page the user can amend the Dashboard Count from 5 up to 20.
By adjusting the value of customDashboardMaxCount, up to a maximum value of 50, you
can allow the user to potentially set a higher number of custom dashboard menu items. If
you set a value greater than 50 Entuity sets the number of dashboards to 50.
customDashboardMaxUrlCount sets the upper limit to the number of URLs in a custom
dashboard. By default the maximum number of URLs per dashboard is 20, you can
amend this to an upper limit of 50. If you set a value greater than 50 Entuity sets the
number of URLs per dashboard to 50.
ActiveChartDefaultGroupApproximation sets how Entuity displays a large amount of data
on a chart. When set to:
average (default), Entuity uses a grouping algorithm to prevent the chart from
becoming crowded with overlapping data points. This algorithm can lead to the loss
of peak information.
High, Entuity retains peak data points where high resolution data is available.
You can modify this setting for individual charts through the Customize Chart dialog and
setting Group Approximation to Preserve Peak (High) or Average (average).
[xml]
Parameters in this section are used by the reporting section in entuity.cfg when
generating Flex Reports. They must not be amended from the default settings:
[xml]
xmlDir=${ENTUITY_HOME}${FPS}lib${FPS}xml${FPS}
xerces=${XML.XMLDIR}xalan${FPS}xerces.jar
xalan=${XML.XMLDIR}xalan${FPS}xalan.jar
transformCommand=java -cp
${XML.XERCES};${XML.XALAN};org.apache.xalan.xslt.Process
fop=${XML.XMLDIR}fop${FPS}fop.jar
batik=${XML.XMLDIR}fop${FPS}batik.jar
fopXalan=${XML.XMLDIR}fop${FPS}xalan-2.0.0.jar
fopXerces=${XML.XMLDIR}fop${FPS}xerces-1.2.3.jar
jimi=${XML.XMLDIR}fop${FPS}jimi-1.0.jar
IllegalCharacters=27,146,147,148
Where:
xmlDir is the folder under which are the folders holding the xml library files.
xerces references the java XML parser Xerces.
xalan references the java XSLT stylesheet processor Xalan.
transformCommand generates the report object file (FO file) which is used when
displaying report data to screen.
fop references the java XSL Formatting Object processor FOP.
batik references the java based toolkit for Scalable Vector Graphics.
fopXalan references a version of Xalan compatible with FOP.
fopXerces references a version of Xerces compatible with FOP.
jimi references a version of jimi compatible with FOP.
IllegalCharacters identifies unprintable control characters that when encountered when
generating the XML would otherwise cause the report to fail. Each unprintable character
is replaced with a question mark. Characters are referenced using ISO-8859-1 encoding,
but by default are not specified in the configuration.
eventEngine.bat
Location
entuity_home/bin
Format
Maintained by Entuity.
Description
A Windows batch file (Linux shell script is eventEngine) which when run configures the
eventEngine according to settings in event-engine-cfg.properties. The eventEngine
does not require restarting for the configuration changes to be applied, for example when run
from the entuity_home/etc directory enter:
bin/eventEngine.bat -reloadCfg
Status
Read-only.
event-engine-cfg-template.properties
Location
entuity_home/etc
Format
Maintained by Entuity.
Description
This is a template file and may be overridden. To make persistent changes copy this file to
the event-engine-cfg.properties file and edit it. You can apply changes by running
the batch file eventEngine.bat (in Linux the shell script eventEngine).
You should contact your Entuity representative before amending these configurations.
# Indicates if tracing is switched on for every incoming event: useful
for debugging rules
traceAllEvents = false
# Queue sizes for the events originating from external systems:
# - initial: the initial size of the queue per worker
# - max: the maximum size of the queue per worker
# - total: total size of queues across all workers
initialRawEventQueueSize = 100
maxRawEventQueueSize = 10000
totalMaxRawEventQueue = 50000
# Queue sizes for the events originating from the event engine itself
initialDerivedEventQueueSize = 10
maxDerivedEventQueueSize = 1000
totalMaxDerivedEventQueue = 5000
# Maximum number of states available to rules
maxRuleStates = 50000
# The duration since the last update to the NofM rule state after
which the state can be discarded
nmRuleStateTimeoutSec = 172800
# Number of events stored in the event cache
maxEventCacheSize = 20000
# The time period for flushing events from the event cache to the
database
eventFlusherFlushPeriodMs = 1000
# The time between archive cleanup jobs
archiveClenupPeriodSec = 1700
# The number of records to delete in a single batch
archiveDeleteBatchSize = 20000
# The number of events which can be stored in the archive per
situation
archiveMaxSituationEvents = 100
# Maximum number of incidents: including open, closed and expired
maxSituationCount = 50000
# The maximum number of events returned per incident
maxReturnedEventsPerSituation = 100
# The duration for which expired incidents should be kept
situationEvictionPeriodSec = 604800
# The duration for which deleted incidents should remain in memory
situationExtraEvictionPeriodSec = 600
# The name for the default incident
defaultSituationName = Unclassified
# Age out for the default incident
defaultSituationAgeOutSec = 3600
# Expiry window for the default incident
defaultSituationReopenWindowSec = 10800
# Opening window for the default incident
defaultSituationOpeningWindowSec = 300
# Indicates if incident needs to be created for the event with
severity = info
informationalEventCausesDefaultSituation = false
# The minimum duration, which may pass before system event's cache can
be reloaded
minSystemEventReloadPeriodSec = 300
# The View event/incident filter reload period
viewEFilterRefreshPeriodSec = 300
# Positive and negative caching durations for compId to swId
keepTimeForCompIdToSwIdSec = 7200
keepTimeForCompIdToSwIdNegSec = 5
# Positive and negative caching durations for swId to object
description
keepTimeForSwIdToObjectDescriptorSec = 300
keepTimeForSwIdToObjectDescriptorNegSec = 5
# Positive and negative caching durations for swId to object details
keepTimeForSwIdToObjectDetailsSec = 20
keepTimeForSwIdToObjectDetailsNegSec = 20
# Positive and negative caching durations for swId reference to swId[]
keepTimeForSwIdRefToObjectIdsSec = 20
keepTimeForSwIdRefToObjectIdsNegSec = 20
# Positive and negative caching durations for serverId to deviceId
keepTimeForServerIdToDeviceIdSec = 3600
keepTimeForServerIdToDeviceIdNegSec = 5
Status
Read-only.
Changes to
eventProject.xml
Location
entuity_home/etc
Format
Maintained by Entuity.
Description
This file configures the event system, for example its incidents, rules, actions. Entuity is
shipped with a default project file. When you save and deploy a project Entuity updates the
XML file.
Status
Read-only.
eyepoller_overrides.cfg
Location
entuity_home/etc
Format
Text file.
Description
Entuity’s default behavior is to poll a device using a port with MIB2 support. When a device
does not include a port with MIB2 support and uses its own enterprise MIB to collect device
data Entuity’s default behavior would not return data. Through
eyepoller_overrides.cfg you can configure Entuity to poll the enterprise MIB. The
polling definitions are held in separate configuration files which would be developed by
Entuity Professional Services.
On Entuity startup eyepoller checks for eyepoller_overrides.cfg and when it is
available reads its configuration. eyepoller only checks eyepoller_overrides.cfg
when it starts, it does not reread the file again until it is restarted.
eyepoller configuration has the format:
sysoid> status <admin-status-oid:indexing> <oper-status-oid:indexing>
<time-of-last-change-oid:indexing> {<sysuptime-oid>}
<sysoid> util64 <in-octets-64:indexing> <out-octets-64:indexing>
where:
Indexing should be either M2 or ES to indicate use of ifIndex or entIndex respectively.
SNMPv1 polling is used for status.
SNMPv2 for util64, SNMPv3 for SNMPv3 devices.
Status sysuptime-oid is optional, and if not present the default of 1.3.6.1.2.1.1.3 is used.
If there is an error in the formatting of any line, the line’s instructions are ignored and a
warning of the failure is entered in eyepoller.log. An information message is also added
to eyepoller.log for each successful override read from the file. Comment lines starting
with # and blank lines are silently ignored.
Status
Maintained by Entuity and used with configuration produced by Professional Services.
Changes to this file are maintained during Entuity upgrades.
eyepoller_overrides_system.cfg
Location
entuity_home/etc
Format
Text file.
Description
Entuity’s default behavior is to poll a device using a port with MIB2 support. When a device
does not include a port with MIB2 support and uses its own enterprise MIB to collect device
data Entuity’s default behavior would not return data. Through
eyepoller_overrides.cfg you can configure Entuity to poll the enterprise MIB. The
polling definitions are held in separate configuration files which would be developed by
Entuity Professional Services.
On Entuity startup eyepoller checks for eyepoller_overrides.cfg and when it is
available reads its configuration. eyepoller only checks eyepoller_overrides.cfg
when it starts, it does not reread the file again until it is restarted.
eyepoller configuration has the format:
sysoid> status <admin-status-oid:indexing> <oper-status-oid:indexing>
<time-of-last-change-oid:indexing> {<sysuptime-oid>}
<sysoid> util64 <in-octets-64:indexing> <out-octets-64:indexing>
where:
Indexing should be either M2 or ES to indicate use of ifIndex or entIndex respectively.
SNMPv1 polling is used for status.
SNMPv2 for util64, SNMPv3 for SNMPv3 devices.
Status sysuptime-oid is optional, and if not present the default of 1.3.6.1.2.1.1.3 is used.
If there is an error in the formatting of any line, the line’s instructions are ignored and a
warning of the failure is entered in eyepoller.log. An information message is also added
to eyepoller.log for each successful override read from the file. Comment lines starting
with # and blank lines are silently ignored.
Status
Maintained by Entuity and used with configuration produced by Professional Services.
Changes to this file are maintained during Entuity upgrades.
flowcfg-template.properties
Location
entuity_home/etc
Format
Text file containing commented out examples of how to customize the configuration of
Entuity IFA flow collectors.
Description
Entuity IFA flow collectors are shipped with a factory configuration suitable for most network
environments. You can amend this configuration, for example specify more than one port for
Entuity to accept flow data, increase the size of the buffer handling incoming flow packets.
h
Default configuration:
receiver1_port = 9996
receive_buffer_size = 0
jmxserver_port = 12121
jmxFile = C:/Entuity/log/flowJmxUrl.jmx
packet_queue_limit = 10000
packet_sequence_check = 0
perform_inventory_filtering = 0
dbDriver = com.mysql.jdbc.Driver
dbUrl = jdbc:mysql://127.0.0.1:3306/flowdb
dbUser = root
dbPwd =
partition1_maxCount = 1000000
ageOutFlows1 = 65
ageOutRuns = 1500
ageOutStats = 1500
trace=0
packetLogging=off
where:
receiver1_port, by default there is only one receiver, but multiple can be specified, for
example:
receiver1_port = 9996
receiver2_port = 9998
h
The receiver port setting only applies to the receiving of NetFlow data, IFA only receives
IPFIX data on port 2055 and sFlow data on port 6343 of the Entuity server.
receive_buffer_siz,e, the size of the datagram socket receive buffer size in bytes. This is a
suggested value and does not reflect actual buffer size. If there are a lot of missed
packets observed then this value should be increased. Set it to zero to use OS default
settings.
jmxserver_port, the port Entuity uses to manage, e.g. stop, the flow collector process. You
can also set Flow Management Port during configure, by default to 12121.
jmxFile, the URL to the JMX agent
packet_queue_limit, the limit of the packet queue, by default 10000. Receivers write to the
queue and packet processor reads from that. If packet queue becomes full then packets
get dropped.
packet_sequence_check, indicates whether to check packet sequence numbers. When
set to:
1 packet processor calculates the number of missed packets and rejects
out-of-sequence packets.
0 (default) is off.
perform_inventory_filtering, indicates whether to filter out the flows. When set to:
1, IFA only accepts flow from known interfaces, i.e. interfaces under Entuity
management
0 (default), IFA accepts flows from all interfaces on known devices, i.e. devices under
Entuity management.
dbDriver, identifies the database driver.
dbUrl, specifies the flow database.
dbUser, name of the root database account.
dbPwd, password for the root database account.
partition1_maxCount, maximum number of flows allowed in the buffer before they get
written to the disk, if partition gets full, then flows get dropped. Set by default to 1000000.
ageOutFlows1, the number of minutes to keep flows in the database, by default 65.
ageOutRuns, he number of minutes to keep flow collector operational times in the
database, set by default to 1500.
ageOutStats, number of minutes to keep flow collector statistics in the database, set by
default to 1500.
trace, indicates whether to log the details of flow records as they are parsed and
distributed. When set to:
0 (default), disable tracing
1, enable tracing.
packetLogging, indicates of whether to dump binary flow packets to file. This file can later
be used to replay the packets back to the flow collector, replay packets are never logged.
When set to:
off (the default), packets are not logged
all, all incoming packets are logged
unknown, log only packets which are not recognized by the flow collector.
Status
Changes made to this file are included to the server configuration, however changes to this
file are not maintained during Entuity upgrades. You should specify your flow configuration
customizations in entuity_home\etc\flowcfg.properties.
Maintained by Entuity.
flowcfg.properties
Location
entuity_home/etc
Format
Text file containing customizations to the configuration of Entuity IFA flow collectors.
Description
Entuity IFA flow collectors are shipped with a factory configuration suitable for most network
environments. You can amend this configuration, for example specify more than one port for
Entuity to accept flow data, increase the size of the buffer handling incoming flow packets.
You should create flowcfg.properties by making a copy of the template file
flowcfg-template.properties. The template file contains descriptions and examples
of configuration options which you can edit.
h
When set, port values in flowcfg.properties take precedence over the values set in
flowcfg-template.properties and those entered during configure and stored in
entuity.cfg.
Status
Changes made to this file are included to the server configuration, and are maintained during
Entuity upgrades. Entuity automatically discovers changes in flowcfg.properties, you
do not have to run configure to apply updates.
flow-applications-template.txt
Location
entuity_home/etc
Format
Text file derived from a version of the application to port mapping file retrieved from http://
www.iana.org/assignments/port-numbers.
Description
This file maps port numbers and network protocol to application names and descriptions.
These port to application mappings are only used by the Entuity Integrated Flow Analyzer
(IFA). When a connection is made from a client to a server the TCP/UDP port on the server
end of the connection determines the application in use. The port number allocated to the
client end of the connection is referred to as an ephemeral port and has no meaning. Entuity
determines which end of a connection is the server end so that its port number can be used
to identify the application, by:
1) Considering ports < 1024 as having the highest priority, regardless of whether the other
port is in the mapping file or not.
Ports below 1024 are reserved port numbers, and so only one port (either the source or
the destination port) should be in the range.
2) Where both ports are greater than 1023, or, more unlikely, both are below 1024 Entuity
uses the first port mapping in flow-applications-template.txt.
System Administrators can amend and add new mappings to this file, and then include them
to the Entuity database using flowCollector.bat.
h
If a port is mapped to two applications, Entuity resolves this conflict by using the last
mapping for that port-protocol combination in the file.
This extract shows the port to application mapping for port 80:
ttp 80/tcp World Wide Web HTTP
http 80/udp World Wide Web HTTP
www 80/tcp World Wide Web HTTP
www 80/udp World Wide Web HTTP
www-http 80/tcp World Wide Web HTTP
www-http 80/udp World Wide Web HTTP
where:
www-http, is the last entry for the port 80 and TCP combination, and is therefore the name
Entuity uses for the application.
80/tcp, identifies the port number and protocol. Entuity Integrated Flow Analyzer supports
UDP and TCP protocols.
World Wide Web HTTP, is the application description. Entuity Integrated Flow Analyzer
does not use the application description.
Status
Maintained by the System Administrator.
flow-exclusions.properties
Location
entuity_home/etc
Format
Text file containing configurations to exclude flow data from Entuity IFA flow collectors.
Description
Exclusion filters allow you to exclude data based on source and destination IP addresses
and/or source and destination ports. You can enter exact values, or use wild cards to create
more extensive filters.
You should specify your exclusion filters in entuity_home\etc\flow-
exclusions.properties, on each server acting as a flow collector.
You specify exclusion filters:
On the endpoint, so flows outgoing from or incoming to the specified endpoint are filtered
out.
IPAddressPattern : PortPattern
that are unidirectional, so flows which originate from the specified source endpoint and
end at the specified destination endpoint are filtered out.
SrcIPAddressPattern : SrcPortPattern > DstIPAddressPattern : DstPort-
Pattern
that are bidirectional, so flows in both directions between two endpoints are filtered out:
IPAddressPattern1 : PortPattern1 = IPAddressPattern2 : PortPattern2
A PortPattern can be one or more port numbers, or range of port numbers. These are
examples of valid patterns:
matches a single port:
3066
matches all ports within the range:
2048-2099
an asterisk matches all ports, equivalent to 0 to 65535:
*
Status
Created and maintained by System Administrator.
flow-exclusions-template.properties
Location
entuity_home/etc
Format
Text file containing commented out examples of how to exclude flow data from Entuity
Integrated Flow Analyzer collectors.
Description
Exclusion filters allow you to exclude data based on source and destination IP addresses
and/or source and destination ports. You can enter exact values, or use wild cards to create
more extensive filters.
Status
Changes made to this file are included to the server configuration, however changes to this
file are not maintained during Entuity upgrades. You should specify your exclusion filters in
entuity_home\etc\flow-exclusions.properties.
Maintained by Entuity.
flowUserDefGroups.xml
Location
entuity_home/etc
Format
Text file containing a commented out example of how to define user defined groups for flows
managed by IFA.
Description
This file contains an example of how you can define user defined groups for flows managed
by IFA. Definition of custom data types, for example Location, Department, Customer, whose
members, for example UK, US, Dev, Sales, Customer A, Customer B are defined in terms of
the available raw data types. This example is synonymous with custom groups and group
based analysis.
Each user defined group is structured as a bean definition, with these properties:
name, a unique name for each group definition. Duplicate names will result in an error.
displayName, the textual description shown to user for the group.
unmatchedName, an optional set name where it will be mapped to this name if any of the
filter criteria is not met.
unmatchedDisplayName, an optional set display name which is shown to the user for an
unsatisfied match.
userSets, a list of set definitions where matching need to be done. Each set in the list is
structured as bean definition. The set has these properties:
name, a unique name for each set that is defined in a group. Duplicate names will
result in an error.
displayName, a textual description shown to user for the set.
expression, an SQL type expression which flows must meet to be included in the set.
</bean>
<bean class="com.entuity.flows.UserDefinedGroup">
<property name="name" value="IFS" />
<property name="displayName" value="All Interfaces" />
<property name="userSets">
<list>
<bean class="com.entuity.flows.UserDefinedSet">
<property name="name" value="IF_3" />
<property name="displayName" value="if 3" />
<property name="expression" value="ifIn eq 3 or ifOut eq 3" />
</bean>
<bean class="com.entuity.flows.UserDefinedSet">
<property name="name" value="IF_4" />
<property name="displayName" value="if 4" />
<property name="expression" value="ifIn eq 4 or ifOut eq 4" />
</bean>
<bean class="com.entuity.flows.UserDefinedSet">
<property name="name" value="IFS_OTHER" />
<property name="displayName" value="if not 3 or 4" />
<property name="expression" value="not (ifIn in (3, 4) or
ifOut in (3, 4))" />
</bean>
</list>
</property>
</bean>
</beans>
Status
Maintained by the System Administrator, only an example is shipped with Entuity.
forkevent.cfg
Location
entuity_home/etc
Format
Text file containing configuration information for Entuity Event Forwarding.
Description
forkevent.cfg is the event forwarding configuration file. It includes sample configurations
and instructions for their activation.
Event Forwarding functionality is included with the standard Entuity installation, and is
installed but not activated, on the Entuity server. Event Forwarding requires Entuity and the
receiving third party software are installed and running, with permitted communication
between the two.
ForkEvent is an Event Forwarding executable, and is installed to:
entuity_home/integ/ForkEvent/
[connection]
[connection]
username=admin
view=All Objects
eventsPerBatch=100
extendedEvents=0
where:
[connection] is the name of the section that contains the details required to access
Entuity event data.
username is the Entuity login name.
view is the Entuity view from which events are collected. Only when an event occurs on a
device within the defined view is it forwarded by ForkEvent.
extendedEvents sets the maximum number of characters that forkevent forwards for
the event description. Event descriptions greater than this setting are truncated. When set
to:
0 (default), forwards event descriptions to a maximum of 127 characters.
1, forwards event descriptions to a maximum of 4095 characters. Extended event
descriptions are not currently stored in the Entuity database.
Status
Maintained by the System Administrator. Entuity does not maintain user changes to this file
during Entuity upgrades.
httpd_eye.conf
Location
entuity_home/lib/apache/conf/
entuity_home/install/template/lib/apache/conf
Format
Text file containing configuration information for the Apache web server. For further
information on this type of configuration file (default name httpd.conf) refer to the Apache
documentation which is available from the Apache website:
http://www.apache.org/
Description
httpd_eye.conf includes all of the information required by the Apache web server to
deliver the Entuity web UI and the RESTful API.
entuity_home/lib/apache/conf/httpd_eye.conf is generated when you run
configure from the template file, entuity_home/install/template/lib/apache/
conf/httpd_eye.conf.
If you want to amend the HTTPD configuration of the Apache webserver, for example to
reconfigure port numbers or amend log file settings, you should:
Not amend entuity_home/lib/apache/conf/httpd_eye.conf as the next time you
run configure a new version of this file is generated from the template file and all of
your changes would be lost.
Amend entuity_home/install/template/lib/apache/conf/httpd_eye.conf.
You will then have to stop Entuity and run configure to generate a new version of
entuity_home/lib/apache/conf/httpd_eye.conf. When you start Entuity then
Apache will run using the updated version of httpd_eye.conf.
Status
Maintained by the System Administrator. Entuity does not maintain user changes to either
versions of this file during Entuity upgrades.
installed_modules.cfg
Text file containing a record of installed modules and their current enabled and visibility
states. The default states for each module is initially inherited from
module_definitions.cfg via configure, however when you amend these default
states the changes are held here. Where there is a conflict between settings in
installed_modules.cfg and module_definitions.cfg, installed_modules.cfg
settings take precedence.
Entuity configure references this file when reconfiguring an existing Entuity installation, so
the Modules Configuration page displays the current active/inactive status for each module.
configure also updates installed_modules.cfg.
Each Entuity module installed status is defined through its own section:
[moduleDefinition autonomous_WAP]
isEnabled=1
isHidden=0
[moduleDefinition Global_Search]
isEnabled=0
isHidden=1
[moduleDefinition Auto_Device_Renaming]
isEnabled=0
isHidden=1
where:
[moduleDefinition autonomous_WAP], is the internal module section name. This section
name must match that of the module defined in module_definitions.cfg.
IsEnabled when set to:
0, indicates the module is not enabled
1, is enabled.
A module can be enabled but Entuity only activates that module when its license
supports that module. During configure the Module Configuration page indicates the
license status for each module, you can also check license status through checkLicense.
IsHidden when set to:
0, indicates the module is listed in the Modules Configuration page during Entuity
configure.
1, indicates the module is not listed in the Modules Configuration page during Entuity
configure.
Status
Maintained by configure and the Entuity System Administrator.
Format
Internal use only.
Description
Contains coded information about the Entuity managed object credits and expiry dates. The
license file, by default license.dat, is used by licenseSrvr and can be checked using
checkLicense.
Entuity is shipped with an evaluation license which can only be used for a limited period and
should only be used in a test environment.
Status
Provided by an Entuity representative.
Maintained by the System Administrator.
mib.txt
Location
entuity_home/etc
Format
Internal use only.
Description
Contains information relating to ASN (Abstract Syntax Notation). The file is used by various
SNMP polling processes, including prole, as well as by snmpget and snmpwalk.
Status
Read only.
MIBPoll.cfg
Location
entuity_home/etc
Format
Administrator use only, and primarily for developing and testing custom polling. This file is
overwritten each time Entuity is upgraded.
Description
Custom Poller Test Tool allows you to quickly develop and test polling of new values without
having to develop it using StormWorks. Configuration is through entuity_home/etc/
MIBPoll.cfg. You can then run this configuration through customPoller to generate a
configuration file that can be included to Entuity.
The Custom Poller Development Tool:
Does not support Custom Poller events, event configuration is only actioned using
customPoller..
Only supports the Absolute type, if Delta or Rate are entered Entuity displays the
Absolute value. The Delta and Rate types are only actioned using customPoller..
[MIBPoll Temperature]
AttachedTo=device
DataType=gauge
Type=Absolute
OID=.1.3.6.1.4.1.9.9.13.1.3.1.3.1
EnterpriseFilter=9
DefaultPollState=true
PollingRate=5min
RaisingEventID=436
ClearingEventID=437
MinThreshold=10
MaxThreshold=100
ThresholdType=high
DefaultThreshold=20
InitialEventEnablement=on
CVGroupName=Temperature
WebUIGroupName=Temperature
where:
[MIBPoll Temperature], sets the name used within Entuity to identify the data collected
from this OID. MIBPoll is mandatory, Temperature should be a relevant and unique
description of the polled value.
If you amend the name Entuity would consider it a new configuration and any historical
data would be lost.
AttachedTo, the object type to which the OID applies. Currently only device is supported.
DataType, sets the data type returned by the poll. Valid values are uint32, timeticks,
gauge, counter32, uint64, counter64, int32, int64, string, ipv4addr, address, OID, oid
and checkForEntry. checkForEntry checks to see if there is one or more entries in the
specified table by doing a single getNext, and not by walking the entire table.
OID, sets the object identifier to poll.
Type sets how Entuity handles the polled data:
Absolute displays the data as it is polled.
Rate displays the difference between two contiguous samples as a per second
average.
Delta displays the difference between two contiguous samples.
The Delta and Rate types are only:
Actioned using customPoller. If Delta or Rate are entered with the Custom Poller
Development Tool Entuity displays the Absolute value.
Usable when Data Type is uint32, gauge, counter32, uint64 or counter64.
customPoller reports an error if you attempt to use the Delta and Rate types with
other data types.
EnterpriseFilter, specifies which enterprise number to which this OID is applicable. For
example, when set to 9, only devices with sysOIDs .1.3.6.1.4.1.9...... are polled if this line
is not present, the MIBPoll is applied to all devices.
DefaultPollState, polling can be turned on/off on a per instance basis, this sets the default
state.
PollingRate, rate at which Custom Poller polls the attribute, valid values are 5min, 20min,
1hour and 1day. The Custom Poller Development Tool always polls at five minute
intervals, so this setting only applies to configuration generated through customPoller.
RaisingEventID, the event identifier of the raising event, which has a default severity level
of 4, Severe and an ageout value of sixty minutes. This event can also be cleared, when
the clearing event is defined in ClearingEventID.
Entuity reserves a range of event identifiers for use with Custom Poller. Entuity assigns
events with the identifiers:
430 through to 510 to the event group 1024, e.g. 1024_430, 1024_431.
1 through to 429 and 511 to 1024 to the event group 8192, e.g. 8129_1, 8129_2.
h
Do not create events with identifiers outside of the specified Custom Poller ranges. Where
there are multiple Entuity servers you should avoid using the same event identifiers for
different event definitions on different Entuity servers.
ClearingEventID, the event identifier of the closing event, which has a default severity level
of 1, Information or Cleared. This event can only be raised when RaisingEventID is also
defined.
MinThreshold, minimum value for the event threshold, by default 0.
MaxThreshold, maximum value for the event threshold, by default 10000.
ThresholdType, indicates whether the event is a high or low threshold event, by default
high. When set to high Entuity raises an event when the polled value is greater than
InitialThreshold.
h
Entuity derives the event name, e.g. Temperature High Cleared, from the MIBPoll section
name, e.g Temperature, ThresholdType e.g. High and whether the event is a raising or
clearing event.
DefaultThreshold the initial threshold value, by default this is midway between the
MinThreshold and MaxThreshold values.
InitialEventEnablement, whether or not the event is on/off by default for all devices, by
default off.
CVGroupName, event threshold group name displayed on the Threshold Settings tab in
Component Viewer, by default Custom Poller N. You should use a brief, descriptive name
to best fit the available space.
WebUIGroupName, user specified group name for the threshold group in the web UI, by
default Custom Poller.
Temperature
IP SLA Version
Last SNMP Auth Fail Address
Juniper Device Last Inventory Change
Conf Register
Unknown Contexts
BGP Peers.
Status
Supplied with commented out example configuration. This file is overwritten during Entuity
upgrades, and should only be used when developing custom polling functions.
customPoller converts MIBPoll.cfg, custom polling configuration developed for the
test tool, to the StormWorks configuration required when adding it to Entuity through
configure.
module_definitions.cfg
Location
entuity_home/etc
Format
Internal use only.
Description
Module definition file provides a central location for the definition of modules available with
Entuity. Entuity configure references this file when listing available modules and during
configuration.
Where there is a conflict between settings in installed_modules.cfg and
module_definitions.cfg, installed_modules.cfg settings take precedence. During
an upgrade module_definitions.cfg is overwritten.
[moduleDefinition autonomous_WAP]
displayname=Autonomous WAP
typeLicenses=
=AutonomousWap,
=AwapHostCountHiThreshold,
=AwapHostCountLoThreshold,
=WirelessPort,
=Wlan,
productLicenses=
configFiles=
=sw_device_awap.cfg,
=sw_port_wireless.cfg,
reportSystemConfigFiles=
=sw_report_system_wireless_access_point.cfg
menuDefConfigFiles=
exoticaFiles=
=Cisco-c1130+AWAP.vendor,
=c1200+AWAP.vendor,
deprecatedConfig=
dataLossWhenDisabled=1
isEnabledByDefault=0
isHidden=0
where
[moduleDefinition autonomous_WAP], is the internal module section name
displayname, module name used within Entuity, e.g. on the Module Configuration panel
during configuration.
typeLicenses, the StormWorks types that must be licensed for successful module
activation.
productLicenses, the product license required to run the module.
configFiles, the StormWorks configuration files through which module functionality is
defined.
reportSystemConfigFiles, the StormWorks configuration files through which any module
Flex reports are defined.
menuDefConfigFiles, the StormWorks configuration file(s) through which any module
user actions are defined.
exoticaFiles, the vendor device definition files associated with the module.
When a module is enabled configure copies these files from their reference folder,
entuity_home\etc\exotica to entuity_home\etc, if subsequently disabled configure
deletes these files from entuity_home\etc.
You can use exotica files without activating the module, although you must rename them
to prevent configure automatically deleting them the next time it is run. Entuity
recommend replacing the plus sign (+) in exotica file names with an underscore (_), for
example Cisco-c1130+AWAP.vendor, to Cisco-c1130_AWAP.vendor.
deprecatedConfig, references to deprecated files that are still being used to include this
module to Entuity. These files should not be included to the configuration. (See the
Entuity Migration Guide.)
dataLossWhenDisabled, when set to:
0, prevents configure from displaying a warning that disabling of the module will
result in loss of data already collected by that module.
1 (default), sets configure to display a warning that disabling of the module will
result in loss of data already collected by that module.
isEnabledByDefault, when set to:
0, indicates the module is not enabled
1, indicates the module is enabled.
This setting can be overridden by IsEnabled in installed_modules.cfg.
A module can be enabled but Entuity only activates that module when its license
supports that module. During configure the Module Configuration page indicates the
license status for each module, you can also check license status through checkLicense.
IsHidden when set to:
0, indicates the module is listed in the Modules Configuration page during Entuity
configure.
1, indicates the module is not listed in the Modules Configuration page during Entuity
configure.
This setting can be overridden by IsEnabled in installed_modules.cfg.
Status
Read only.
newbin.vendor
Location
entuity_home/etc
Format
Internal use only.
Description
Deprecated, retained for backward compatibility.
Status
Deprecated. Read-only.
nominal_power.cfg
Location
entuity_home/etc
Format
[Device Cisco 5505]
SysOID=.1.3.6.1.4.1.9.5.34
NominalPowerWatts=800
Reference=005, 006
where:
Device is a unique name identifying the device.
SysOID is the device system OID.
NominalPowerWatts is the estimated power consumption of the object.
Reference, identifies the device. It is also used by modules to make the device - module
association.
[Module WX-X5530]
NominalPowerWatts=376
Reference=006
Module is a unique name identifying the module.
NominalPowerWatts is the estimated power consumption of the object.
Reference, associated the module with its device.
Description
Identifies a device or module through their system OID, and then maps the object to a
nominal power consumption value. Nominal power values are used with the Entuity Green IT
Perspective functionality, for example the Green IT Perspective dashboard includes
estimates of power consumption in your network and potential for savings.
Status
Read only. When you want add your own power configurations include them to
site_specific_nominal_power.cfg.
provost.conf
Location
entuity_home/etc
Format
Internal use only.
Description
Configuration file for the main scheduling process, provost (see Chapter 2 - Entuity System
Processes and Utilities).
Status
Read only.
security.cfg.xml
Location
entuity_home/etc
Format
Entuity System Administrator can create this file from the supplied template file,
security_template.cfg.xml. The template file includes extensive notes to aid
successful configuration. Entuity recommend updating this internal documentation when
implementing authentication.
Description
Main configuration file for Entuity authentication. Each section within the file configures a
module.
Authentication module
This section configures the main authentication service behavior.
<module name="Authentication">
<authentication internal="true" sso="memory" externalAuth-
Handler="com.entuity.security.external.ldap.LdapLogon" allowSuperUser-
Access="true" />
</module>
where:
internal, is a mandatory attribute which specifies that kind of authentication that must be
used. When set to:
true, Entuity uses its internal authentication mechanism (default value)
false, Entuity uses its external authentication mechanism. When authentication
service is configured to use external authentication, then externalAuthHandler attribute
must also be set and ExternalAttributesMapping, ldap-config and ServerAccess
sections must also be configured.
sso, controls whether this server must support single sign-on. Possible values are:
none, disable single sign-on on this server
memory, allow single sign-on on this server (default value)
true, super users can to access this server in emergency situation (default value)
false, super user access to this server is disabled.
CentralDB Module
Connection properties for central security database.
<module name="CentralDB">
<database host="localhost" port="3306" username="root"
password="5742888A8EBD135553E6001F6442873B" />
</module>
where:
host, host name or IP address of the host on which the MySQL database is running.
When not specified localhost is used.
port, the port number on which the MySQL database is listening. Optional parameter, with
a default value of 3306.
username, name of the user to connect to the MySQL database server. MySQL server
must be configured to accept connections for that user from this host. This is a
mandatory parameter.
password, password for the user specified in username. If not present, then empty
password is used. However, Entuity strongly recommend user accounts are set up with
passwords.
h
If the central database resides on another host (not localhost), Entuity recommend setting up
a special MySQL user on that database and allow this user to connect from this specific host
and/or other hosts that use that central database.
LocalDB Module
Connection properties for a local Entuity database. This connection is used to locate and
administer super users.
<module name="LocalDB">
<database host="localhost" port="3306" username="root"
password="5742888A8EBD135553E6001F6442873B" />
</module>
where:
host, host name or IP address of the host on which the MySQL database is running.
When not specified localhost is used.
port, the port number on which MySQL database is listening. Optional parameter, with a
default value of 3306.
username, name of the user to connect to the MySQL database server. MySQL server
must be configured to accept connections for that user from this host. This is a
mandatory parameter.
password, password for the user specified in username. If not present, then empty
password is used. However, Entuity strongly recommend user accounts are set up with
passwords.
ExternalAttributesMapping
This section specifies how different attributes returned from an external authentication
system map to Entuity groups. These groups will be assigned to the authenticated user, with
permission being set through grant and revoke rules.
Each rule:
May have a list of groups to grant or revoke access
May include conditions, which control when the rule is applied. When a condition is not
specified or is empty, then the rule is applied unconditionally.
Is applied in the order specified in the configuration. You can order grant and revoke rules
as required to suite specific needs.
This example configuration grants members of the network domain user group Technical
Support, membership of the Entuity user group Administrators.
<module ignorecase="true" name="ExternalAttributesMapping">
<grant name="Admin groups">
<group name="Administrators" />
<condition>
<attr name="groups" contains="Technical Support" />
</condition>
</grant>
where:
ignorecase when set to
true, external authentication service is case insensitive, and so is recommended fro
Windows environments.
false, external authentication service is case sensitive.
This flag also affects condition evaluation, as text equality tests are done with reference to
this flag. So if you set this flag to false, then be careful to enter condition values in exactly
the same casing as returned from your external authentication server.
grant is the rule type, it can also be revoke.
group name is the an Entuity user group name, e.g. Administrators, that members of the
subsequently named network domain groups will be a member of.
condition specifies the rule condition, this can include one or more attributes:
attr name is the attribute name, e.g. groups refers to the network domain user group.
attr contains specifies the network user group name.
ldap-config Module
This section is only required when configuring Entuity to use Active Directory as an external
authentication service.
h
The example ldap-config module is for use with Active Directory external authentication that
does not require the user to enter a domain name in the logon screen.
<module name="ldap-config">
<ldap>
<userBindNameIsDN>false</userBindNameIsDN>
<userBindName>{1}@ENT</userBindName>
<userSearchBaseCtxDN>ou=Subset, ou=Users, ou=Live, ou=Migration,
dc=entuity, dc=local</userSearchBaseCtxDN>
<userMatchFilter>(sAMAccountName={1})</userMatchFilter>
<property name="java.naming.provider.url" value="ldap://entlondc01" />
</ldap>
</module>
where:
userBindNameIsDN, bind name for the user is not distinguished name.
userBindName, bind name for the user will be in format <username>@ENT, where:
<username> is entered by user at logon.
ENT, must be changed to your domain name.
userSearchBaseCtxDN, specifies location in the directory where to search for the user.
User entry must reside below this path.
userMatchFilter, if a user's bind name is not specified as a distinguished name, then this
element must be present and with a search criteria to find the user. You may use
placeholders in the criteria.
property value, the address of the LDAP server. You can use LDAPs scheme instead of
ldap to establish SLL secure connections. You can also specify the port, for example
ldap://myserver:1233.
Placed values, numbers in curly brackets {}, are replaced with values entered by the
user. These are valid numbers and corresponding replacement values:
{0}, replaced by value user enters in logon screen. It could be just simple name or
user name and domain name in UNC (\\domain\username) or UPN
(username@domain) format.
{1}, replaced by username only without domain.
userRefersToGroup, indicates the user entry in the directory does not refer to groups,
instead group entries refer to user entries. Therefore, an additional search is required to
find groups that refer to our user.
<username> and <domain> are entered by user at logon.
groupSearchBaseCtxDN, specifies location in the directory where to search for the group.
Group entry must reside below this path.
groupMatchFilter, specifies the search criteria for the groups, when a user entry matches
the filter then the user is a member of the group.
</module>
where:
userBindNameIsDN, indicates whether userBindName element is specified as a
distinguished name or not. This is not always possible having username and domain
name to construct distinguished name of the user's entry. For example, your server may
be configured in such a way, that user's DN looks like:
CN=FirstName LastName, DC=mydomain
Values are false or true.
userBindName, bind name for the user, in the format uid=<username>, ou=People,
dc=example, dc=com where <username> is value entered by user at logon.
lookupUserBindDNAsSystemUser, if a user's bind name is not specified as a distinguished
name, then the authentication service must lookup the distinguished name. Lookup can
be for the authenticating user, or the system user when using a secured directory. When
set to:
true, then you need to specify systemUserName and systemUserPwd elements.
false, the default, the authentication service does not lookup the DN.
userSearchBaseCtxDN, if a user's bind name is not specified as a distinguished name,
then you must use this element to specify the directory under which search for the user
should be done.
userMatchFilter, if a user's bind name is not specified as a distinguished name, then this
element must be present and with a search criteria to find the user. You may use
placeholders in the criteria
searchGroupsAsSystemUser, during a user's group search you may specify whether the
search should be performed on behalf of an authenticated user or where there is a
secured directory on behalf of the system user. When set to:
false, the default, the authentication service does not lookup the DN.
true, you must also specify systemUserName and systemUserPwd.
systemUserName and systemUserPwd, specify system user name and passwords. These
only require setting when lookupUserBindDNAsSystemUser and/or
searchGroupsAsSystemUser are set to true.
userRefersToGroup, indicates the user entry in the directory does not refer to groups,
instead group entries refer to user entries. Therefore, an additional search is required to
find groups that refer to our user. When set to:
true, the default, an additional search is required to find the groups that refer to users.
false, indicates user entry refers to groups.
userMemberOfAttrID, if userRefersToGroup is true, then this element specifies the name
of the attribute in the user or group entry which refers to the group. If this element is
absent, than an assumed value of "memberOf" is taken. Defaults are Active Directory
friendly.
groupSearchBaseCtxDN, specifies the directory where a search for groups should be
performed. This element must be present if userRefersToGroup element is false.
groupMatchFilter, specifies the search criteria for a group search. This element must be
present if userRefersToGroup element is false. You can use placeholders in this filter.
groupSearchDepth, specifies the recursion level of the group search. This element is
used if userRefersToGroup is false. The default value is 5.
groupNameAttrID, specifies the name of the attribute on the group entry, which has value
of the group name. Default value is cn, applicable for most LDAP schemas.
property, specifies the address of the LDAP server. The format of the value is:
<scheme>://<host>[:<port>]
where:
<scheme> is ldap or ldaps (for SSL),
<host> is name or IP address of the LDAP server host
[:<port>] is the IP port for the LDAP server.
For example:
ldaps://myhost
property, this element is optional and its value should not be changed.
attemptAfterAuthError, this element is for use when multiple LDAP servers are providing
authentication services. You should:
create an ldap configuration section for each set ldap server. These configurations
should be numbered sequentially, i.e. ldap-config-1, ldap-config-2.
set attemptAfterAuthError from its default value of false to true:
<attemptAfterAuthError>true</attemptAfterAuthError>
Entuity attempts to connect to the first server using the first configuration, ldap-config-1.
When there is an authentication error, not a connection error, Entuity attempts to connect
to the next server using the next configuration, ldap-config-2. You can define as many
servers as required.
ServerAccess
ServerAccess restricts access to Entuity server. You can deny access through the user's
logon name, domain name or by Entuity user group membership. Server access is
calculated by applying allow or deny rules, where the order of these rules is important.
By default any authenticated user is allowed.
This example section denies access to the server to members of the Entuity Test Group user
group:
<module name="ServerAccess">
<serverAccess ignorecase="true">
<denyGroup name="Test Group"/>
</serverAccess>
</module>
These rule examples illustrate how you can control server access:
only accepts users who are members of Administrators group, except user named
oldAdmin
<denyUser name="*" domain="*/># deny all users
<allowGroup name="Administrators"/> # allow admins
<denyUser name="oldAdmin"/># deny specific user
allows access to all users:
<allowUser name="*" domain="*"/>
allows access to all users by group:
<allowGroup name="*"/>
denies access to a specific user from any domain:
<denyUser name="test"/>
denies access to a specific user from a specific domain:
<denyUser name="test" domain="test2"/>
<denyUser name="test" domain="test2.*"/>
denies access to all users from specific domains:
<denyUser domain="test2"/>
<denyUser domain="test2.*"/>
denies access to all users who are members of specific group:
<denyGroup name="Test Group"/>
AuthenticationService
This module defines Entuity’s authentication service and must not be amended.
<module name="AuthenticationService">
<securedService>
<keyStoreName>auth_cert_store.jks</keyStoreName>
<keyStoreType>jks</keyStoreType>
<keyStorePwd>entuity</keyStorePwd>
<entryAlias>AuthenticationService</entryAlias>
<entryPwd>entuity</entryPwd>
</securedService>
</module>
PreferenceService
This module defines Entuity’s preference service and must not be amended.
<module name="PreferenceService">
<securedService>
<keyStoreName>auth_cert_store.jks</keyStoreName>
<keyStoreType>jks</keyStoreType>
<keyStorePwd>entuity</keyStorePwd>
<entryAlias>PreferenceService</entryAlias>
<entryPwd>entuity</entryPwd>
</securedService>
</module>
UserManagementService
This module defines Entuity’s user management service and must not be amended.
<module name="UserManagementService">
<securedService>
<keyStoreName>auth_cert_store.jks</keyStoreName>
<keyStoreType>jks</keyStoreType>
<keyStorePwd>entuity</keyStorePwd>
<entryAlias>UserManagementService</entryAlias>
<entryPwd>entuity</entryPwd>
</securedService>
</module>
TicketGrantingService
This module defines Entuity’s ticket granting service and must not be amended.
<module name="TicketGrantingService">
<securedService>
<keyStoreName>auth_cert_store.jks</keyStoreName>
<keyStoreType>jks</keyStoreType>
<keyStorePwd>entuity</keyStorePwd>
<entryAlias>TicketGrantingService</entryAlias>
<entryPwd>entuity</entryPwd>
</securedService>
</module>
TGSConfig
This module defines Entuity’s TGS configuration and must not be amended.
<module name="TGSConfig">
<tgsConfig>
<servicesKeyStoreName>auth_cert_store.jks</servicesKeyStoreName>
<servicesKeyStoreType>jks</servicesKeyStoreType>
<servicesKeyStorePwd>entuity</servicesKeyStorePwd>
<tgsHostAddr>localhost</tgsHostAddr>
</tgsConfig>
</module>
</application>
serverid.xml
Location
entuity_home/etc
Format
This file includes details that are used when identifying the Entuity server identity, this is most
applicable when distinguishing between multiple Entuity servers.
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ns2:serverIdentity xmlns:ns2="http://www.entutity.com/webrpc">
<id>ce333d40-fc09-42b6-a4dd-a0315ed3da20</id>
<version>6.0.0.p0</version>
<versionDisplay>Entuity 12.5</versionDisplay>
<hostAddress>COMPRESSOR</hostAddress>
<webPort>80</webPort>
<sslAccess>false</sslAccess>
<certificate>MIIChzCCAfCgAwIBAgIGARUD8xxFMA0GCSqGSIb3DQEBBQUAMIGHMS
0wKwYDVQQhMDMxNWRhM2VkMjAxFDASBgNVBAsMC0RldmVsb3BtZW50MRAwDgYDVQQKD
AdFbnR1a0NVoXDTE3MDkxMTEyMTY0NVowgYcxLTArBgNVBAMMJGNlNDg0ZDQwLWZjMD
gtNDhiNi1hMWRkLWEwMzE1ZGEzZWQyMDEUMBIGA1UECwwLRGV2ZWxvcG1lbnQxEDAOB
gNVBAoMB0VudHVpdHkxDzANBgNVBAcMBkxvbmRvbjEQMA4GA1UECAwHRW5nbGFuZDEL
MAkGA1UEBhMCVUswgZ0wDQYJKoZIhvcNAQEBBQADgYsAMIGHAoGBAJCHNZjkkyWKl0H
sGs72mfU44xoiKiOddCzkSIS2Bj2NL3Qs4tfWslVXaz+Q2PuF4/
i3i5o8E4jJmZqHqTHaWK8KfGsE6y8eB470oh9ONnMxoFsd4YrUCntrd1X4mbVwvaa6E
mbQVZgEDZXTZoo2BbfVyhJzA9ey4k2jKSkVLPuTAgEDMA0GCSqGSIb3DQEBBQUAA4GB
AI2ykCawwzAZ2gfpjPCLymS0DMTDkhXgwc86trG6KnbRdpEpYpApx5I+N5eIaTEVj/
tH0xBnrKPWnhCMiXqiLgqAsCZ80aPRNc9wPnxIMXdTIwUfeK0wPa+pNe5GyofUYZa-
la8T4IpBqZy+JhGyLzF+0rSEuwVRoKzLeJQjO87gM</certificate>
</ns2:serverIdentity>
where:
serverIdentiity, web RPC of the Entuity server.
id, unique Entuity server identifier.
version, internal Entuity server version number.
versionDisplay, Entuity server version number displayed through the Help About dialog in
the Entuity client.
hostAddress, Entuity server host name.
webPort, Entuity server web port, by default 80.
sslAccess, indicates whether the Entuity server is using SSL, true, or not, false.
certificate, Entuity server certificate.
Description
This file includes details that are used when identifying the Entuity server identity, this is most
applicable when distinguishing between multiple Entuity servers.
Status
Automatically generated by Entuity install and configure. System administrators can
identify and change the id used with an Entuity server through configure serverid.
Entuity maintains changes to this file during Entuity upgrades.
shutdown_policies.cfg
Location
entuity_home/etc
Format
[ShutdownPolicyGroup All Hosts]
IPAddressRange=0.0.0.0-255.255.255.255
Description=All Hosts
[ShutdownPolicyGroup London Office]
IPAddressRange=10.44.1.1-10.44.1.50, 10.44.1.60-10.44.1.90,
= 1.2.3.4-1.2.3.5, 10.44.1.98-10.44.1.123, 10.44.1.140-10.44.1.247
Description=Workstations in London Office
[ShutdownPolicyExclusion London Security Cameras]
IPAddressRange=10.44.1.10-10.44.1.12
Description=IP CCTV
where
section header defines the:
type, ShutdownPolicyGroup for a policy group and ShutdownPolicyExclusion to
specify devices and modules by IP address, that should be excluded from the policy
group.
Name, name of the policy group, e.g. London Security Cameras.
IP Address Range, specifies the IP addresses to include to, or exclude from, the policy
group. For a contiguous IP address range enter the start and end addresses of the range
separated by a dash. Where you want the range to be constructed from a number of
component IP address ranges, comma separate each component.
Description, name of the policy group that appears in Entuity, e.g. as a group to report
on.
Description
Entuity Green IT allows you to group together devices and modules for which you want to
apply the same energy policy. Policy group membership is determined by IP addresses, as
are the exclusion groups.
Entuity recommend you configure policy groups and their exclusions through this file, where
you have full add, amend and delete control. Through Component Viewer you have more
restricted access rights where you can only delete configurations defined in this file. However
you can create new configurations in Component Viewer, and from Component Viewer
subsequently amend and delete those configurations.
Status
Maintained by the System Administrator. Entuity maintains changes to this file during Entuity
upgrades.
site_specific_nominal_power.cfg
Location
entuity_home/etc
Format
[Device Cisco 5505]
SysOID=.1.3.6.1.4.1.9.5.34
NominalPowerWatts=800
Reference=005, 006
where:
Device is a unique name identifying the device.
SysOID is the device system OID.
NominalPowerWatts is the estimated power consumption of the object.
Reference, identifies the device. It is also used by modules to make the device - module
association.
[Module WX-X5530]
NominalPowerWatts=376
Reference=006
where:
Module is a unique name identifying the module.
Description
Identifies a device or module through their system OID, and then maps the object to a
nominal power consumption value. Nominal power values are used with the Entuity Green IT
Perspective functionality, for example the Green IT Perspective dashboard includes
estimates of power consumption in your network and potential for savings.
This file is included to nominal_power.cfg, and so its configuration is included to Entuity.
You can use this file to amend power configurations defined in nominal_power.cfg.
Status
Administrator maintained.
snmpMaxPduOverrides.cfg
snmpMaxPDUoverrides.cfg includes a set of individual maximum PDU sizes for sysOids
identified by Entuity Support as having a problem handling larger PDUs.
Location
entuity_home/etc
Format
Text file with each line identifying a sysOid and its maximum PDU size.
Description
Users can also enter individual max PDU size for specified sysOids. The format is:
<sysoid>=<Maximum PDU Size>
For example:
.1.3.6.1.4.1.9.1.669=512 # Cisco ASA5510
.1.3.6.1.4.1.9.1.670=512 # Cisco ASA5520
.1.3.6.1.4.1.9.1.671=512 # Cisco ASA5520sc
.1.3.6.1.4.1.9.1.672=512 # Cisco ASA5540
.1.3.6.1.4.1.9.1.673=512 # Cisco ASA5540sc
.1.3.6.1.4.1.9.1.745=512 # Cisco ASA5505
.1.3.6.1.4.1.9.1.753=512 # Cisco ASA5550
.1.3.6.1.4.1.9.1.763=512 # Cisco ASA5550sc
.1.3.6.1.4.1.9.1.764=512 # Cisco ASA5520sy
Status
Maintained by Entuity.
When upgrading Entuity this file is overwritten. When wanting to amend or add to these PDU
size definitions you should create your own copy of this file and include it to Entuity through
entuity.cfg for example:
snmpMaxPduSizeOverridesfile=snmpMaxPDUoveride.cfg
snmpV3.cfg
For Entuity to handle SNMPv3 traps from devices it must, as a minimum, know device name
and user details. For devices Entuity manages, Entuity can retrieve the required information
from its database. For devices Entuity does not manage you should enter identifying details
in snmpV3.cfg.
Location
entuity_home/etc
Format
Text file, with each line defining information required to handle traps from a particular device.
Description
When you require Entuity to handle SNMPv3 traps from devices it does not manage, use this
configuration file to specify how Entuity should handle these traps.
Each line details one device, and must include the device name and user and optionally
engineID, authentication and privacy password.
For example:
-d 10.66.1.13 -u mark
-d 10.66.1.14 -e 0x80000312010A42010E -u mark -a MD5 -A "Auth
Password"
-d 10.66.1.15 -e 0x80000312010A42010F -u mark -a MD5 -A "Auth
Password" -x DES -X "Priv Password"
where:
-d specifies the device name, e.g. 10.66.1.15,
-u specifies the user name, e.g. mark
-e specifies the device engine, e.g. 0x80000312010A42010F
-a specifies the authentication protocol, i.e. MD5, SHA
-A specifies the authentication password, "Auth Password"
-x specifies the privacy protocol, i.e. AES, DES
-X specifies the privacy password, e.g. "Priv Password".
startup_o/s.cfg
The startup configuration file; for Windows named startup_WIN32.cfg and for Linux
systems startup_UNIX.cfg.
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under headings denoted by
square brackets [].
Description
Configuration file used by starteots when starting Entuity to determine which processes to
start. For Windows implementations Entuity services are also configured here. Each process
has its own section. Through the Entuity Health web page you can view the state and
criticality of each process, this report identifies each process through its section name.
This is an example section:
[syslogger]
state=normal
type=command
start=${ENTUITY_HOME}${FPS}bin${FPS}syslogger
directory=${LOGDIR}
memorylimitmb=4000
is_critical=n
The last line of the file must always be a reference to the site specific startup file:
!startup_WIN32_site_specific.cfg
Status
Maintained by Entuity.
When upgrading Entuity this file is overwritten. You should make any site specific changes to
startup_o/s_site_specifc.cfg.
startup_o/s_site_specific.cfg
The site specific startup configuration file; for Windows named startup_WIN32.cfg and
for Linux systems startup_UNIX.cfg.
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under headings denoted by
square brackets [].
Description
This file is referenced by startup_o/s.cfg. It is where you should enter site specific
configuration settings for your installation startup. Values entered here override values for the
same settings entered in by startup_o/s.cfg.
You can copy an entire section from startup_o/s.cfg to this file and amend its settings.
When you only want to amend a small part of an existing startup section, then you can add
the section name and just the required attribute(s). This makes it easier to identify your
changes. For example when you want to amend the state of remedy, in startup_o/s.cfg
the full section is:
[remedy]
state=none
type=command
start=${ENTUITY_HOME}\integ\ForkEvent\forkevent
${ENTUITY_HOME}\etc\remedyforkevent.cfg pipe_remedy
directory=${LOGDIR}
is_critical=n
Status
Maintained by the System Administrator. When upgrading Entuity this file is preserved.
start_run_manufacturer.expect
Location
entuity_home/integ/SCRAPE
Format
A text file containing an Expect script that specifies the transfer of device configurations.
Description
Entuity Configuration Monitor includes these example scripts:
start_run_cisco.expect
start_run_hp.expect
start_run_juniper.expect.
sw.cfg
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under headings denoted by
square brackets [].
Description
This is the main StormWorks configuration file and must not be edited. It also contains
references to secondary configuration files, particularly sw_common.cfg. sw_common.cfg
also contains secondary files all pre-fixed by sw_, that contain details regarding specific
Entuity StormWorks services, e.g. events, ip peering. These files also must not be edited.
When Entuity configure is run sw.cfg (and through it the secondary files) is referenced
and the StormWorks services are configured.
Status
Created and maintained by Entuity.
h
sw.cfg, sw_common.cfg and the sw_name.cfg files must only be edited by an Entuity
! representative, or under guidance of Entuity. Incorrect amendments of these files can
seriously impact Entuity’s performance.
sw_cm_transforms.cfg
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under headings denoted by
square brackets [].
Description
The retrieval script, policy file and exclusion files are included to Entuity through
sw_cm_transforms.cfg. These transforms first attempt to match on the full system OID,
e.g .1.3.6.1.4.1.9.1.495 then the vendor component .1.3.6.1.4.1.9 and finally null. You can
also individually assign scripts and files against devices through Component Viewer.
[Transform sysOidToRetrievalScriptTransform]
Description=Transform sysOID to configuration monitor retrieval script
ClientData=
InputType=string
OutputType=string
start_run_hp.expect(.1.3.6.1.4.1.11),
start_run_cisco.expect(.1.3.6.1.4.1.9),
start_run_juniper.expect(.1.3.6.1.4.1.2636),
null(*)
[Transform sysOidToExcludedDifferenceTransform]
Description=Transform sysOID to configuration monitor excluded differ-
ences file
ClientData=
InputType=string
OutputType=string
cisco-generic-exclusions(.1.3.6.1.4.1.9),
null(*)
[Transform sysOidToPolicyRulesTransform]
Description=Transform sysOID to configuration monitor policy rules
file
ClientData=
InputType=string
OutputType=string
cisco-generic-policies(.1.3.6.1.4.1.9),
hp-generic-policies(.1.3.6.1.4.1.11),
null(*)
Status
Created and maintained by Entuity. System administrators can amend this file, configure
must be run for changes to take affect. Entuity maintains changes to this file during Entuity
upgrades.
sw_common.cfg
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under headings denoted by
square brackets [].
Description
This is the main StormWorks configuration file included to sw.cfg and must not be edited.
It also contains references to secondary configuration files, all pre-fixed by sw_, that contain
details regarding specific Entuity StormWorks services, e.g. events, ip peering. These files
also must not be edited.
Status
Created and maintained by Entuity.
h
sw.cfg, sw_common.cfg and the sw_name.cfg files must only be edited by an Entuity
! representative, or under guidance of Entuity. Incorrect amendments of these files can
seriously impact Entuity’s performance.
sw_iptosysname.cfg
Location
entuity_home/etc
Format
Text file containing lines in the format: systemVariable=value, under a heading denoted by
square brackets [].
Description
This is the scheduling definition for running iptosysname, which changes within Entuity
device names to system names.
The default configuration is:
[Job jobIpToSysName]
Description=Job to change device names to be sysNames
Interval=86400
Offset=10800
ClientData=
Modes=normal
Method=simple;variable workdir=concat(get_config_var("entuity_home"),
"\\lib\\tools");
=logMessage(concat(piped_exec("iptosysname",
workdir,0,7200000,""),"\n"))
where:
Job, identifies the section as one that defines a job to change device names within Entuity
from IP address to sysname.
Interval, time in seconds between running of the job. The default is 86400, one day.
Offset, defines when the job runs as an offset from 00:00. the default is 10800, equivalent
to 03:00.
Client Data and Modes should not be amended.
Method, defines the job and should not be amended.
Status
Created and maintained by Entuity. This file is only enabled when included to
sw_site_specific.cfg and configure is then run.
sw_menu_def_site_specific.cfg
Location
entuity_home/etc
Format
Text file containing references to files that specify Extensible Menus. Files with a hash before
their name are not included to the Entuity configuration, for example:
#!sw_menu_discover_all.cfg
File names that prefixed with an exclamation mark are included to the Entuity configuration:
!sw_menu_discover_all.cfg
!sw_menu_example.cfg
Description
This is the StormWorks configuration file to which the configuration files of user specific
Extensible Menus are included.
When Entuity configure is run sw.cfg (and through it the secondary files, including
sw_menu_def.cfg) is referenced and the StormWorks services are configured.
Status
Created and maintained by Entuity. Administrators may be asked to include and exclude
references to files when adding and removing modules and other functionality.
When upgrading Entuity this file is overwritten. You should ensure you have taken a backup
so that can you refer to it when re-applying your site specific configuration.
sw_module_file_list.cfg
Location
entuity_home/etc
Format
Text file containing references to files that specify activated Entuity modules. This file is
created and maintained during configure. File names that prefixed with an exclamation mark
are included to the Entuity configuration, for example:
!sw_green.cfg
!sw_swport_matrix.cfg
!sw_swport.cfg
!sw_swport_status.cfg
Description
This is the StormWorks configuration file to which the configuration files of Entuity modules
are included. When Entuity configure is run sw.cfg (and through it the secondary files,
including sw_module_file_list.cfg) is referenced and the StormWorks services are
configured.
Status
Created and maintained by configure. When re-configuring or upgrading Entuity this file is
overwritten.
sw_ph.cfg
Location
entuity_home/etc
Description
Controls parsing of the StormWorks configuration files and must not be edited.
Status
Created and maintained by Entuity.
sw_report_system_site_specific.cfg
Location
entuity_home/etc
Format
Text file containing references to files that specify extra reporting functionality, e.g. delivered
with Entuity modules, customer specific modifications. Files with a hash before their name
are not included to the Entuity configuration, for example:
#!sw_report_site_specific.cfg
File names that are only prefixed with an exclamation mark are included to the Entuity
configuration:
!sw_report_site_specific.cfg
Description
This is the StormWorks configuration file to which extra reports are included, or more
specifically their configuration files.
When Entuity configure is run sw.cfg (and through it the secondary files, including
sw_report_system_site_specific.cfg) is referenced and the StormWorks services
are configured.
Status
Created and maintained by Entuity. Administrators may be asked to include and exclude
references to files when adding and removing site specific functionality.
When upgrading Entuity this file is overwritten. You should ensure you have taken a backup
so that can you refer to it when re-applying your site specific configuration.
sw_site_specific.cfg
Location
entuity_home/etc
Format
Text file containing references to files that specify extra functionality, i.e. customer specific
modifications. Files with a hash before their name are not included to the Entuity
configuration, e.g.
#!sw_user_specific_function.cfg
File names that are prefixed with an exclamation mark are included to the Entuity
configuration:
!sw_user_specific_function.cfg
Description
This is the StormWorks configuration file to which site specific functionality, specifically their
configuration files are included.
When Entuity configure is run sw.cfg (and through it the secondary files, including
sw_site_specific.cfg) is referenced and the StormWorks services are configured.
Status
Created and maintained by Entuity. Administrators may be asked to include and exclude
references to files when adding and removing site specific functionality.
When upgrading Entuity this file is not updated, as you would lose your site specific settings.
You should check the release notes as to whether the latest version of this file includes new
functionality, or examine the file directly.
sw_user_defined_components.cfg
Location
entuity_home/etc
Format
Text file containing the definition of 20 pre-configured object types for use with User Defined
Polling. It also includes an object configuration template.
[Type UDComponent1]
[Attribute uDComponents1]
ClientData+=displayName=UDComponents1\n
[Type UDComponent2]
ClientData+=displayName=UD Component 2\n
[Attribute uDComponents2]
ClientData+=displayName=UDComponents2\n
[Type UDComponent3]
ClientData+=displayName=UD Component 3\n
[Attribute uDComponents3]
ClientData+=displayName=UDComponents3\n
[Type UDComponent4]
ClientData+=displayName=UD Component 4\n
[Attribute uDComponents4]
ClientData+=displayName=UDComponents4\n
[Type UDComponent5]
ClientData+=displayName=UD Component 5\n
[Attribute uDComponents5]
ClientData+=displayName=UDComponents5\n
Description
User Defined Polling allows you to define your own object types and attributes. This file
defines the 20 preconfigured objects together with their attributes shipped with Entuity.
You should not amend this file because any changes to it are overwritten by subsequent
Entuity upgrades. Instead create a new configuration file, for example
sw_user_defined_components_site_specific.cfg, add your configuration to it and
include that configuration file to sw_site_specific.cfg. When you next run configure
Entuity includes your new configuration.
Status
Created and maintained by Entuity. When upgrading Entuity this file is updated and any user
customizations are not maintained.
systemcontrol.log
Location
entuity_home/log
Description
Log file recording the behavior and state of system processes. If the Process Health page
indicates an error in one or more processes you may review this file when troubleshooting
the cause.
Status
Created and maintained by Entuity.
system_menus.xml
This file specifies the system menus used in the Entuity web interface. The available web
interface menus are a combination of menus defined in this file and in user_menus.xml.
Menus are added to Entuity during Entuity configure.
system_menus.xml is managed by Entuity and should only be amended by Entuity.
user_menus.xml
This file specifies all user menus used in the Entuity web interface. The available web
interface menus are a combination of menus defined in this file and in system_menus.xml.
Menus are added to Entuity during Entuity configure.
user_menus.xml is user maintained. It is not overwritten during Entuity updates.
XMLDataCollector.xml
Specifies how to identify a device, apply the appropriate XML query to the device and
interpret its XML reply. For example for Nexus, XML Data Collector identifies a device through
its chassis identifier and system version. It can then perform the GET_MAC action with the
appropriate XML configuration.
This extract includes the XML for the MAC address implementation. There are 2:
Match sets with evaluation occurring in the order specified.
GET_MAC actions called by the version match set. Both actions write to the same table in
the XMLAPIDB.
Location
entuity_home/etc
Format
XML text file defining data collection.
<?xml version="1.0"?>
<XMLAPIRoot>
<version-match-sets>
<version-match-set version-match-set-id="Nexus-1000v-001" >
<version-match-set-test field="chassis_id" value="Nexus 1000V
Chassis" />
<version-match-set-test field="sys_ver_str" value="4.2\(1\)SV.*"
/>
</version-match-set>
<version-match-set version-match-set-id="Nexus-Default">
<version-match-set-test field="chassis_id" value=".*" />
</version-match-set>
</version-match-sets>
<!-- ********************* ACTIONS ********************* -->
<actions>
<action actionName = "GET_MAC" version-match-set-id="Nexus-1000v-
001" >
<command>
<show>
<mac>
<address-table>
<static/>
</address-table>
</mac>
</show>
</command>
<rowDelimiter delimiter="ROW_mac_address" />
<resultTable databaseAndTable="XMLAPIDB.MacToPort" />
<resultFields>
<resultField field="disp_port" column="Interface" />
<resultField field="disp_mac_addr" column="MACAddr" />
</resultFields>
</action>
<action actionName = "GET_MAC" version-match-set-id="Nexus-
Default" >
<command>
<show>
<mac>
<address-table>
<static/>
</address-table>
</mac>
</show>
</command>
<rowDelimiter delimiter="ROW_mac_address" />
<resultTable databaseAndTable="XMLAPIDB.MacToPort" />
<resultFields>
<resultField field="disp_port" column="Interface" />
<resultField field="disp_mac_addr" column="MACAddr" />
</resultFields>
</action>
</actions>
</XMLAPIRoot>
XMLDataCollector-log4j.properties
Location
entuity_home/etc/XMLDataCollector-log4j.properties
Description
Sets the level of logging applied to EYEXMLDataCollector.jar.
Status
Created and maintained by Entuity.
The following table details the OIDs and trap formats of generic standard and standard
enterprise traps. Entuity identifies the OID substring and then the trap number, from which it
can generate an appropriate event in Event Viewer. The first six traps are the standard
generic traps.
h
For Cisco STP traps Entuity performs extra processing to identify the VLAN affected by the
STP change, using the community string that was sent in the trap.
Entuity uses a series of codes to identify the types of objects it manages. These internal
codes are sometimes useful when troubleshooting. This section details two types of codes
and how they are used in a third, eosObjectID, to uniquely identify a managed object.
eosObjectID
eosObjectID is an internal Entuity identifier that uniquely identifies Entuity managed objects.
eosObjectID is a bit mask with the format:
objectType.objectID.portID.StormWorksID
where:
objectType is the internal Entuity object type, for example 1 for port, 4 for device.
objectID is the unique object, e.g. device identifier.
portID is the unique port identifier, when used in the context of objectID.
StormWorksID is the unique StormWorks identifier. It is set to 0 when the object does not
have a StormWorks number.
eosObjectID is normally only used by internal Entuity processes, however they can be
viewed:
ForkEvent forwards objectID and objectType as part of eosObjectID.
Entuity Remedy AR System integration module uses ForkEvent to forward objectID,
objectType and StormWorksID as part of eosObjectID.
Flex Reports allow you to report on StormWorks identifiers when you select Show Hidden
Data.
Entuity distinguishes between WAN and LAN ports by comparing the port’s interface type
against a list of types held in the Entuity database.
Entuity has determined the most probable use for each interface type and marked it as either
a LAN or WAN port interface. Entuity then uses this association to ensure it is reporting on
the correct ports when running Routing Summary report.
h
Entuity identifies a leased line by the interface type, by default either IANAifType 22
(propPointToPointSerial) or 23 (PPP). Entuity recognizes and discounts FrameRelay, ISDN
and ATM ports.
When sending the entity in the request, you must specify the Content-Type header. If
using the curl tool you can use the -H argument to specify the header, as in these
command extracts:
curl -H Content-Type:application/xml ...
curl -H Content-Type:application/json ...
h
The curl examples included with the documentation have been verified using different
versions of the generic curl install on both Windows and Linux operating systems.
Most, but not all, resources will return resource representations in either XML or JSON. You
can specify the media query parameter using a header field, for example to set the format of
the response as in these command extracts:
curl -H Accept:application/xml ...
curl -H Accept:application/json ...
Alternatively you can specify the representation by supplying a media query parameter with a
value of either xml or json:
http://entuity_server/api/info?media=xml
http://entuity_server/api/info?media=json
Each response has a response code, indicating the success or failure of the request. These
are standard HTTP specification response codes:
200-299: indicating success
300-399: indicating redirection: clients should repeat request at
redirected location
400-499: indicating a problem with a client request
500-599: indicating a problem on a server side
By default HTTP methods operate on the resources local to the server you are connecting to.
However, if the server you are connecting to has remote servers configured you can work
with any of them. You can qualify the server you want to be working with by using a query
parameter serverId, for example:
http://entuity_server/api/info?serverId=long-id-of-the-remote-server
domainFilters
This resource lists key attributes for identifying available domain filters.
Method Description
GET Lists available domain filters.
Name Description
id Domain filter id unique to the server.
name Domain filter name.
serverId Entuity Server Id on which the filter is defined.
This command retrieves domain filters and requests the response is in JSON:
curl -u admin:admin -X GET http://entuity_server/api/
domainFilters?media=json
{
"items" : [ {
"serverId" : "921c3f82-bcdf-4fef-a5e8-7d2524928d96",
"id" : "1",
"name" : "All Objects"
}, {
"serverId" : "921c3f82-bcdf-4fef-a5e8-7d2524928d96",
"id" : "2",
"name" : "Infrastructure Only"
} ],
"count" : 2
}
eventFilters
This resource lists key attributes for identifying available event filters.
Method Description
GET Lists available event filters.
Attribute Description
id Event filter id unique to the server.
name Event filter name.
serverId Entuity Server Id on which the resource resides.
</items>
This command retrieves event filters and requests the response is in JSON:
curl -u admin:admin -X GET http://entuity_server/api/
eventFilters?media=json
{
"items" : [ {
"serverId" : "d5f11137-be43-4c58-a547-6f4d68cb4e83",
"id" : "1",
"name" : "All Events"
}, {
"serverId" : "d5f11137-be43-4c58-a547-6f4d68cb4e83",
"id" : "1001",
"name" : "Entuity System Events"
} ],
"count" : 2
}
incidentFilters
This resource lists key attributes for identifying available incident filters.
Method Description
GET Lists available incident filters.
Attribute Description
serverId Entuity Server Id on which resource resides.
id Incident filter id unique to the server.
name Incident filter name.
incidentFilters Examples
Allows you to retrieve attributes important to incident filters. This example retrieves incident
filters and:
info
The resource returns key information about the installed product.
Method Description
GET Returns brief information about the installed product.
Attribute Description
hostAddress The host name for accessing the product.
id Server ID.
product Product edition.
sslAccess Specifies to use HTTP (false) or HTTPS (true).
version Version of the product.
versionDisplay User-friendly version string of the product.
webPort The port number for accessing the product over HTTP(S).
info Examples
Allows you to retrieve attributes important to identifying the Entuity server, for example:
This command retrieves server information and requests the response is in XML:
curl -u admin:admin http://entuity_server/api/info?media=xml
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<serverInfo sslAccess="false" webPort="80"
hostAddress="entuity_server" product="EYE" versionDisplay="Entuity
15.5" version="15.5.0.p0" id="921c3f82-bcdf-4fef-a5e8-7d2524928d96"/>
This command retrieves server information and requests the response is in JSON:
curl -u admin:admin http://entuity_server/api/info?media=json
{
"id" : "921c3f82-bcdf-4fef-a5e8-7d2524928d96",
"version" : "15.5.0.p0",
"versionDisplay" : "Entuity 15.5",
"product" : "EYE",
"hostAddress" : "entuity_server",
"webPort" : 80,
"sslAccess" : false
}
inventory
Provides access to the device inventory on the identified Entuity server or add a new device
to the inventory.
Name Description
Items Number of devices in the inventory.
Item List of device summary details:
name, device display Name.
id, unique device identifier. This is the identifier assigned to the object
when it is first taken under management by Entuity. It is therefore
different from the StormWorks identifier (dsObjectId) assigned when the
object’s properties are discovered.
polledName, DNS name or IP address.
serverId, server identifier.
Table D-10inventory Response Data Keys
This command retrieves device inventory information and requests the response is in
JSON:
Parameter Description
authType SNMP v3 authentication type, i.e. NONE, MD5, SHA.
Parameter Description
deviceType Device type, one of:
Hub
Token Ring Switch
Ethernet Switch
ATM Switch
Router
Blade Center
User Created Node
VM Platform
Autonomous WAP
Firewall
VPN
Managed Host
Non-SNMP Device
Unclassified (Full)
PoE Midspan Injector
Load Balancer
SSL Proxy
Unclassified
Wireless Controller
Uninterruptible Power Supply
Matrix Switch
Wide Area Application Service
Multiplexer.
encrType SNMP v3 encryption type, i.e. NONE, DES, AES.
managementLevel Management Level:
FULL
FULL_MGMT_PORT_ONLY
FULL_NO_PORTS
BASIC
PING_ONLY
WEB.
name Device name.
Parameter Description
nameUsing Device Name is determined using one of:
CUSTOM
IPADDRESS
POLLEDNAME
RESOLVABLENAME
RESOLVABLENAMEFQ
SYSTEMNAME.
polledName DNS Name or IP Address
protocol Transport protocol:
IPv4
IPv6.
readCommunity SNMP v1/v2 read community string
snmpPDUSize Maximum size of SNMP PDU, 0 = system default.
snmpRetry Number of SNMP retries, 0 = system default.
snmpTimeout SNMP timeout in seconds, 0 = system default.
snmpType SNMP type:
v1
v2c
v3
v1/2.
username SNMP v3 user name
vmAccessKey Access key (Amazon platform only)
vmPassword Virtual platform password (Non Amazon virtual platforms)
vmPlatformType Virtual Platform Type:
VMWARE_ESXi,
ORACLE_VM_MANAGER
HYPER_V
AMAZON_WEB_SERVICE.
vmSecretKey Secret key (Amazon platform only).
vmURL Virtual platform URL (Non Amazon virtual platforms).
vmUser Virtual platform user name (Non Amazon virtual platforms).
Response
A message indicating the device is queued for adding to the Entuity server inventory.
JSON notation. This example does not specify the response format and therefore uses
the default JSON:
curl -u admin:admin -H Content-Type:application/json -X POST http://
entuity_server/api/inventory -d '{"protocol":"IPv4",
"managementLevel":"FULL", "nameUsing":"POLLEDNAME",
"polledName":"apcr4", "readCommunity"="public" }'
{
"message" : "Queued"
}
inventory/id
List, update or delete an inventory device as identified through its device identifier.
Request Parameters
None
Parameter Description
authType SNMP v3 authentication type, i.e. NONE, MD5, SHA.
Parameter Description
capabilities Device Capabilities, i.e. Routing, Switching, Switching & Routing.
certified Device has been certified.
deviceType Device type, one of:
Hub
Token Ring Switch
Ethernet Switch
ATM Switch
Router
Blade Center
User Created Node
VM Platform
Autonomous WAP
Firewall
VPN
Managed Host
Non-SNMP Device
Unclassified (Full)
PoE Midspan Injector
Load Balancer
SSL Proxy
Unclassified
Wireless Controller
Uninterruptible Power Supply
Matrix Switch
Wide Area Application Service
Multiplexer.
dsObjectId Device's StormWorks identifier (dsObjectId) that is assigned when the
object’s properties are discovered.
encrType SNMP v3 encryption type, i.e. None, DES or AES.
id Device's unique identifier assigned to the object when it is first taken under
management by Entuity. It is therefore different from the StormWorks
identifier (dsObjectId) assigned when the object’s properties are discovered.
managementIP Management IP address.
Parameter Description
managementLevel Management Level:
FULL
FULL_MGMT_PORT_ONLY
FULL_NO_PORTS
BASIC
PING_ONLY
WEB.
name Device name.
nameUsing Device Name is determined using either
CUSTOM
IPADDRESS
POLLEDNAME
RESOLVABLENAME
RESOLVABLENAMEFQ
SYSTEMNAME.
polledName DNS Name or IP Address
protocol Transport protocol:
IPv4,
IPv6
readCommunity SNMP v1/v2 read community string
serverId Server identifier
snmpPDUSize Maximum size of SNMP PDU, 0 = system default.
snmpRetry Number of SNMP retries, 0 = system default.
snmpTimeout SNMP timeout in seconds, 0 = system default.
snmpType SNMP type:
v1,
v2c,
v3,
v1/2.
sysDescription SNMP description field
sysLocation SNMP retrieved system Location field
sysOid SNMP system identifier field
username SNMP v3 user name
vmAccessKey Access key (Amazon platform only)
vmPassword Virtual platform password (Non Amazon virtual platforms)
Parameter Description
vmPlatformType Virtual Platform Type:
VMWARE_ESXi,
ORACLE_VM_MANAGER
HYPER_V
AMAZON_WEB_SERVICE.
vmSecretKey Secret key (Amazon platform only)
vmURL Virtual platform URL (Non Amazon virtual platforms)
vmUser Virtual platform user name (Non Amazon virtual platforms)
The inventory device identifier is different to the device’s StormWorks identifier (dsObjectId).
! The device’s StormWorks identifier is the device identifier used with the views resource.
Using inventory/id GET you can retrieve details of the specified device using the device
identifier, for example:
This command retrieves inventory data on the device with the identifier 3, and specifies
the XML response format:
curl -u admin:admin -H Accept:application/xml -X GET http://
entuity_server/api/inventory/3
<inventoryDevice snmpPDUSize="0" snmpRetry="0" snmpTimeout="0"
encrType="NONE" authType="NONE" userName="" readCommunity="public"
snmpType="v1/v2c" protocol="IPv4" certified="Yes"
deviceType="Uninterruptible Power Supply" managementLevel="FULL"
capabilities="" sysLocation="London" sysDescription="APC Web/SNMP
Management Card (MB:v3.8.6 PF:v5.1.3 PN:apc_hw05_aos_513.bin
AF1:v5.1.3 AN1:apc_hw05_sumx_513.bin MN:AP9630 HR:05"
sysOid=".1.3.6.1.4.1.318.1.3.27" managementIP="10.44.1.65"
polledName="10.44.1.65" nameUsing="POLLEDNAME" dsObjectId="610"
name="10.44.1.65" id="3" serverId="4b9d48fa-e72f-4e03-b7c3-
0a853ddef8a3"/>
This command retrieves inventory data on the device with the identifier 3, and specifies
the JSON response format:
curl -u admin:admin -H Accept:application/json -X GET http://
entuity_server/api/inventory/3
{
"serverId" : "4b9d48fa-e72f-4e03-b7c3-0a853ddef8a3",
"id" : "3",
"name" : "10.44.1.65",
"dsObjectId" : 610,
"snmpTimeout" : 0,
"snmpRetry" : 0,
"snmpPDUSize" : 0,
"protocol" : "IPv4",
"snmpType" : "v1/v2c",
"nameUsing" : "POLLEDNAME",
"certified" : "Yes",
"polledName" : "10.44.1.65",
"managementIP" : "10.44.1.65",
"sysOid" : ".1.3.6.1.4.1.318.1.3.27",
"sysDescription" : "APC Web/SNMP Management Card",
"sysLocation" : "London",
"deviceType" : "Uninterruptible Power Supply",
"readCommunity" : "public",
"userName" : "",
"authPass" : null,
"encrPass" : null,
"vmUser" : null,
"vmPassword" : null,
"vmURL" : null,
"vmAccessKey" : null,
"vmSecretKey" : null,
"vmPlatformType" : null,
"authType" : "NONE",
"encrType" : "NONE",
"managementLevel" : "FULL"
}
Parameter Description
authPass SNMP v3 authentication password.
authType SNMP v3 authentication type, i.e. NONE, MD5, SHA.
encrType SNMP v3 encryption type, i.e. NONE, DES, AES.
encrPass SNMP v3 encryption password.
name Device name.
nameUsing Device Name is determined using either
CUSTOM
IPADDRESS
POLLEDNAME
RESOLVABLENAME
RESOLVABLENAMEFQ
SYSTEMNAME.
protocol Transport protocol:
IPv4,
IPv6
readCommunity SNMP v1/v2 read community string
snmpPDUSize Maximum size of SNMP PDU, 0 = system default.
snmpRetry Number of SNMP retries, 0 = system default.
snmpTimeout SNMP timeout in seconds, 0 = system default.
snmpType SNMP type:
v1,
v2c,
v3,
v1/2.
username SNMP v3 user name
vmAccessKey Access key (Amazon platform only)
vmPassword Virtual platform password (Non Amazon virtual platforms)
vmPlatformType Virtual Platform Type:
VMWARE_ESXi,
ORACLE_VM_MANAGER
HYPER_V
AMAZON_WEB_SERVICE.
vmSecretKey Secret key (Amazon platform only)
Parameter Description
vmURL Virtual platform URL (Non Amazon virtual platforms)
vmUser Virtual platform user name (Non Amazon virtual platforms)
Response data
Displays the updated inventory summary for the device.
The inventory device identifier is different to the device’s StormWorks identifier (dsObjectId).
! The device’s StormWorks identifier is the device identifier used with the views resource.
Using inventory/id PUT you can amend attributes important to managing the specified
device by using the device identifier, for example:
This command alters the list display name used for the device. The command uses the
XML format and requests the response is also in XML:
curl -u admin:admin -H Content-Type:application/xml -H
Accept:application/xml -X PUT http://entuity_server/api/inventory/11 -
d "<inventoryDevice nameUsing='POLLEDNAME' />"
"serverId" : "d5f11137-be43-4c58-a547-6f4d68cb4e83",
"id" : "11",
"name" : "apcr4",
"dsObjectId" : 3707,
"snmpTimeout" : 0,
"snmpRetry" : 0,
"snmpPDUSize" : 0,
"protocol" : "IPv4",
"snmpType" : "v1/v2c",
"nameUsing" : "SYSTEMNAME",
"certified" : "Yes",
"polledName" : "apcr4",
"managementIP" : "10.44.6.4",
"sysOid" : ".1.3.6.1.4.1.318.1.3.27",
"sysDescription" : "APC Web/SNMP Management Card (MB:v3.8.6
PF:v5.1.3 PN:apc_hw05_aos_513.bin AF1:v5.1.3 AN1:apc_hw05_sumx_513.bin
MN:AP9630 HR:05",
"sysLocation" : "London",
"deviceType" : "Uninterruptible Power Supply",
"readCommunity" : "public",
"userName" : "",
"authPass" : null,
"encrPass" : null,
"vmUser" : null,
"vmPassword" : null,
"vmURL" : null,
"vmAccessKey" : null,
"vmSecretKey" : null,
"vmPlatformType" : null,
"authType" : "NONE",
"encrType" : "NONE",
"managementLevel" : "FULL"
}
This command changes the name of view 23. It also gives edit permission on the view to
the user group London. The XML command reflects the structure of the XML definition,
with the accessGroup element inside the viewPathEditRequest element:
curl -u admin:admin -H Content-Type:application/xml -H
Accept:application/xml -X PUT http://entuity_server/api/views/23 -d
This command alters the list display name used for the device. The command uses the
JSON format and accepts the default response format:
curl -u admin:admin -H Content-Type:application/json -X PUT http://
entuity_server/api/inventory/11 -d '{"nameUsing":"SYSTEMNAME"}'
{
"serverId" : "d5f11137-be43-4c58-a547-6f4d68cb4e83",
"id" : "11",
"name" : "apcr4",
"dsObjectId" : 3707,
"snmpTimeout" : 0,
"snmpRetry" : 0,
"snmpPDUSize" : 0,
"protocol" : "IPv4",
"snmpType" : "v1/v2c",
"nameUsing" : "SYSTEMNAME",
"certified" : "Yes",
"polledName" : "apcr4",
"managementIP" : "10.44.6.4",
"sysOid" : ".1.3.6.1.4.1.318.1.3.27",
"sysDescription" : "APC Web/SNMP Management Card (MB:v3.8.6
PF:v5.1.3 PN:apc_hw05_aos_513.bin AF1:v5.1.3 AN1:apc_hw05_sumx_513.bin
MN:AP9630 HR:05",
"sysLocation" : "London",
"deviceType" : "Uninterruptible Power Supply",
"readCommunity" : "public",
"userName" : "",
"authPass" : null,
"encrPass" : null,
"vmUser" : null,
"vmPassword" : null,
"vmURL" : null,
"vmAccessKey" : null,
"vmSecretKey" : null,
"vmPlatformType" : null,
"authType" : "NONE",
"encrType" : "NONE",
"managementLevel" : "FULL"
}
Request
No request expected
Response
The command deletes the managed object and does not report on its success.
inventory/id Example
The device identifier used with the inventory resource is the identifier assigned to the device
when it is first taken under Entuity management. This identifier is not available through the
Entuity web UI, however you can retrieve it by making an inventory request. (See inventory
GET Method.)
h
The inventory device identifier is different to the device’s StormWorks identifier (dsObjectId).
! The device’s StormWorks identifier is the device identifier used with the views resource.
Using inventory/id DELETE you can delete the nominated device from the nominated
server. For example to delete the managed object with the id 48:
curl -u admin:admin -X DELETE http://entuity_server/api/inventory/48
servers
Allows you to list Entuity servers or add a new server.
Name Description
count Number of servers
servers List of servers
server Server summary details, with attributes:
name, DNS name of the host.
id, Unique server Identifier.
Table D-16Servers Response Data Keys
"id" : "d5f11137-be43-4c58-a547-6f4d68cb4e83",
"name" : "century"
} ],
"count" : 2
}
servers/id
Lists the identified server details.
Name Description
centralServer Is the server a Central Server? True or False.
name Name of host running the Entuity server.
included Does the server provide results in a multi server system? True or False.
licensed Is the server licensed? True or False.
local Is this server the one servicing the request? True or False.
role Servers role.Polling, FlowCollector or ESPServer.
serverId Unique server identifier.
ssl Is the server configured to use Secure Socket Layer? True or False.
webPort Port number of the web server.
userGroups
The resource identifies key attributes of the Entuity user groups.
Method Description
GET Lists available user groups
Response
Response includes a list of user groups together with key attributes.
Name Description
id User group id unique to the server
name User group name
serverId Entuity Server Id on which resource resides
users
The resource identifies key attributes of the Entuity users.
Method Description
GET Lists available users.
Attribute Description
id User group id unique to the server.
name User group name.
serverId Entuity Server Id on which resource resides.
"name" : "John"
}, {
"serverId" : "921c3f82-bcdf-4fef-a5e8-7d2524928d96",
"id" : "3",
"name" : "admin"
}, {
"serverId" : "921c3f82-bcdf-4fef-a5e8-7d2524928d96",
"id" : "4",
"name" : "user"
} ],
"count" : 3
}
version
Allows you to identify the Entuity RESTful API version.
Method Description
GET Lists available views.
Attribute Description
version Version of the Entuity RESTful API name.
views
Show views or add a view.
Method Description
GET Lists available views.
POST Create new view.
Attribute Description
displayName View name.
id View id unique to the server.
path View path with forward slash as a sub-view separator.
serverId Entuity Server Id on which resource resides.
.
. (This is an edited extract of the returned items)
.
<item xsi:type="viewPathItem" path="Europe" displayName="Europe"
id="10" serverId="d5f11137-be43-4c58-a547-6f4d68cb4e83"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"/>
<item xsi:type="viewPathItem" path="Europe/England"
displayName="Europe/England" id="12" serverId="d5f11137-be43-4c58-
a547-6f4d68cb4e83" xmlns:xsi="http://www.w3.org/2001/XMLSchema-
instance"/>
</items>
Request
Request is an object which may contain a subset of the following properties.
Name Description
accessGroups The array of access objects, specifying view access permissions.
Name Description
baseViewAggregation A way to aggregate base views: One of NONE (default), UNION or
INTERSECTION.
baseViewPaths An array of base views.
domainFilterName The name of the domain filter to use.
eventFilterName The name of the event filter to use.
incidentFilterName The name of the incident filter to use.
name The name of the view to create.
owner User name who will be an owner of the view. Defaults to the user making a
call. Only administrators may specify a user different to themselves.
parentViewPath Forward-slash separated path of the parent view. Leave out to create a top-
level view.
Response
After creating a view Entuity displays a summary of all views on the server, this includes the
id of your new view. You can use the id to display, and therefore check, your view
configuration, for example:
curl -u admin:admin -H Accept:application/xml -X GET http://
entuity_server/api/views/15
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<viewPathDetails owner="admin" incidentFilterName="All Incidents"
eventFilterName="All Events" manuallyPopulated="false"
domainFilterName="All Objects" baseViewAggregation="UNION"
displayName="London Core" path="London Core" id="15" serverId="e003cbb
4-5d98-4711-9bac-1cc8ffbf8cf6">
<baseViewPath>Europe/England/London Admin</baseViewPath>
<baseViewPath>Key Devices</baseViewPath>
<accessGroup editable="true" userGroupName="Administrators"/>
</viewPathDetails>
This command creates a new view, London Admin, that is the child view of England,
which itself is the child view of Europe. It also specifies domain, event and incident filters
and uses the XML request format and therefore you must specify the
viewPathCreateRequest element:
curl -u admin:admin -H Content-Type:application/xml -H
Accept:application/xml -X POST http://entuity_server/api/views -d
"<viewPathCreateRequest name='London Admin' parentViewPath='Europe/
England' domainFilterName='Routers' eventFilterName='Entuity System
Events' incidentFilterName='Entuity System Incidents'/>"
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<items count="14">
<item xsi:type="viewPathItem" path="All Objects" displayName="All
Objects" id="1" serverId="d5f11137-be43-4c58-a547-6f4d68cb4e83"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"/>
.
. (This edited extract only includes the first and last items)
.
<item xsi:type="viewPathItem" path="Europe/England/London Admin"
displayName="Europe/England/London Admin" id="18" serverId="d5f11137-
be43-4c58-a547-6f4d68cb4e83" xmlns:xsi="http://www.w3.org/2001/
XMLSchema-instance"/>
</items>
This command creates a new view, London Core, that contains the intersection of two
views. It uses the XML request format and therefore you must specify the
viewPathCreateRequest and baseViewPath elements:
curl -u admin:admin -H Content-Type:application/xml -H
Accept:application/xml -X POST http://entuity_server/api/views -d
"<viewPathCreateRequest name='London Core' parentViewPath='Europe/
England' baseViewAggregation='INTERSECTION'><accessGroup
editable='true' userGroupName='Europe'/> <baseViewPath>Key Devices</
baseViewPath><baseViewPath>Europe/England/London Admin</
baseViewPath></viewPathCreateRequest>"
You can also create views by specifying their configuration through a data file, for example
this calls a JSON data file:
curl -u admin:admin -H "Content-Type: application/json" -X POST --data
@createView.json http://entuity_server/api/views
These are JSON format examples which could be included to the data file
(createView.json):
Creates a top-level view, called Simple View with all other view attributes set to their
default:
{
"name" : "Simple View"
}
Creates a new view, London, that is the child view of England, which itself is the child view
of Europe:
{
"name" : "London",
"parentViewPath" : "Europe/England"
}
Creates a view which unions contents from the two base views:
{
"name" : "Eastern",
"baseViewAggregation" : "UNION",
"baseViewPaths" : [ "NewYork", "Boston" ]
}
Creates a view which contains the key devices in London by intersecting the content from
its two base views, Key_Devices and London:
{
"name" : "Intersection View",
"baseViewAggregation" : "INTERSECTION",
"baseViewPaths" : [ "Key_Devices", "Europe/England/London" ]
}
views/id
With this resource you can inspect, update or delete a specified view.
Method Description
GET Inspect a view
PUT Update a view
DELETE Delete a view
Name Description
accessGroups Group access permissions.
baseViewAggregation One of NONE, UNION, INTERSECTION.
baseViewPaths The array of base view paths.
displayName User-friendly view name.
domainFilterName Domain filter name.
eventFilterName Event filter name.
id view id unique to the server.
implicitAccessGroups Groups having implicit access.
implicitAccessUsers Users having implicit access.
incidentFilterName Incident filter name.
manuallyPopulated Specifies if contents of the view is manually populated (true) or
automatically (false).
owner User owning a view.
path View path.
serverId Entuity Server Id on which resource resides.
15 which is:
Based on the intersection of two base views. Views are identified through their full
view path, for example Europe/England/London Admin indicates London Admin is
the child view of England which is a sub-view of Europe.
Editable by the user group Europe user group with edit permission (as well as the
Administrators user group).
The command also requests the XML response format:
curl -u admin:admin -H Accept:application/xml -X GET http://
entuity_server/api/views/15
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<viewPathDetails owner="admin" incidentFilterName="All Incidents"
eventFilterName="All Events" manuallyPopulated="false"
domainFilterName="All Objects" baseViewAggregation="INTERSECTION"
displayName="London Core" path="London Core" id="15"
serverId="e003cbb4-5d98-4711-9bac-1cc8ffbf8cf6">
<baseViewPath>Europe/England/London Admin</baseViewPath>
<baseViewPath>Key Devices</baseViewPath>
<accessGroup editable="true" userGroupName="Administrators"/>
<accessGroup editable="true" userGroupName="Europe"/>
</viewPathDetails>
"baseViewPaths" : [ ],
"domainFilterName" : "All Objects",
"manuallyPopulated" : true,
"eventFilterName" : "All Events",
"incidentFilterName" : "All Incidents",
"owner" : "admin",
"accessGroups" : [ {
"userGroupName" : "Administrators",
"editable" : true
} ],
"implicitAccessGroups" : [ ],
"implicitAccessUsers" : [ ]
}
Request
Request has the same structure as the POST request of views resource for adding a new
view, except the parentViewPath property must be absent:. You need to specify only
properties you want to be changed.
Response
Response has the same structure as the GET response: shows view details after the update.
views/id Examples
You use the view identifier to apply your PUT request to the required view. You can retrieve
the identifier by making a view request. (See views GET Method.)
views/id PUT allows you to update the specified view, for example this command instructs
Entuity to update view:
15 with the new name London Key, using the XML format:
curl -u admin:admin -H Content-Type:application/xml -H
Accept:application/xml -X PUT http://entuity_server/api/views/15 -d
"<viewPathEditRequest name='London Key'> </viewPathEditRequest>"
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<viewPathDetails owner="admin" incidentFilterName="All Incidents"
eventFilterName="All Events" manuallyPopulated="false"
domainFilterName="All Objects" baseViewAggregation="UNION"
displayName="London Key" path="London Key" id="15" serverId="e003cbb4-
5d98-4711-9bac-1cc8ffbf8cf6">
<baseViewPath>Europe/England/London Admin</baseViewPath>
<baseViewPath>Key Devices</baseViewPath>
<accessGroup editable="true" userGroupName="Administrators"/>
<accessGroup editable="true" userGroupName="Europe"/>
</viewPathDetails>
Response
Entuity does not prompt you to confirm the deletion, the view is immediately deleted. Entuity
also does not confirm successful view deletion.
views/id DELETE Examples
You use the view identifier to apply your DELETE request to the required view. You can
retrieve the identifier by making a view request. (See views GET Method.)
views/id DELETE allows you to delete the specified view and any child views, for example
this command instructs Entuity to delete view 13:
curl -u admin:admin -X DELETE http://entuity_server/api/views/13
views/id/objects
Inspect, add or delete managed objects within the specified view.
Method Description
GET List view items.
PUT Add items to a view.
DELETE Remove items from a view.
Request
This resource identifies managed objects within the specified view.
Name Description
indirect Set to include to return objects from the view and its sub-views. By default,
objects from sub-views are not included.
Response
List each item within the specified view.
Name Description
displayName User-friendly name of the item.
id Item id unique to the server.
serverId Entuity Server Id on which resource resides.
typeDisplayName User-friendly name of the item type.
typeName Name of the item type.
<items count="4">
<item xsi:type="viewContentItem" displayName="1"
typeDisplayName="Vlan" typeName="Vlan" id="1070" serverId="d5f11137-
be43-4c58-a547-6f4d68cb4e83" xmlns:xsi="http://www.w3.org/2001/
XMLSchema-instance"/>
<item xsi:type="viewContentItem" displayName="bsw1"
typeDisplayName="Switch Device" typeName="SwitchDevice" id="3515"
serverId="d5f11137-be43-4c58-a547-6f4d68cb4e83" xmlns:xsi="http://
www.w3.org/2001/XMLSchema-instance"/>
<item xsi:type="viewContentItem" displayName="APCR1"
typeDisplayName="Device" typeName="DeviceEx" id="3603"
serverId="d5f11137-be43-4c58-a547-6f4d68cb4e83" xmlns:xsi="http://
www.w3.org/2001/XMLSchema-instance"/>
<item xsi:type="viewContentItem" displayName="apcr4"
typeDisplayName="Device" typeName="DeviceEx" id="3707"
serverId="d5f11137-be43-4c58-a547-6f4d68cb4e83" xmlns:xsi="http://
www.w3.org/2001/XMLSchema-instance"/>
</items>
Name Description
id Item id. This parameter can appear multiple times.
Table D-33views/id/objects
Response
Response is the same as from a GET method after items have been added.
The inventory device identifier is different to the device’s StormWorks identifier (dsObjectId).
! The device’s StormWorks identifier is the device identifier used with the views resource.
views/id/objects PUT adds the managed objects to the specified view, for example this
command:
Adds two items (1030 and 3482) to a previously empty view (211) using the XML format:
curl -u admin:admin -H Accept:application/xml -X PUT "http://
entuity_server/api/views/211/objects?&id=1030&id=3482"
Adds two items (1030 and 3482) to a previously empty view (211) using the JSON format:
curl -u admin:admin -H Accept:application/json -X PUT "http://
entuity_server/api/views/211/objects?&id=1030&id=3482"
{
"items" : [ {
"serverId" : "9e2456cd-1e19-47d9-860b-509af0e8a11a",
"id" : 1030,
"typeName" : "ManagedHost",
"typeDisplayName" : "Managed Host",
"displayName" : "buildervm"
}, {
"serverId" : "9e2456cd-1e19-47d9-860b-509af0e8a11a",
"id" : 3482,
"typeName" : "ManagedHost",
"typeDisplayName" : "Managed Host",
"displayName" : "jupiter"
} ],
"count" : 2
}
Name Description
id Item id. This parameter can appear multiple times.
include Can have a special value all to empty a view completely. If specified any id
parameters are ignored.
Response
Entuity does not prompt you to confirm the deletion, the objects are immediately removed
from the view. Entuity does not confirm successful deletion but it does display the contents of
the view for you to verify the success of the command. This response is the same as from the
GET method.
views/id/objects DELETE Examples
You use the view identifier to apply your DELETE request to the required view. You can
retrieve the identifier by making a view request. (See views GET Method.)
When deleting a device from a view you should use the device’s StormWorks identifier
(dsObjectId). When you make an inventory GET request (see inventory GET Method) the
returned inventory includes the device identifier which you can then use to retrieve the
StormWorks identifier. (See inventory/id GET Examples.)
h
The inventory device identifier is different to the device’s StormWorks identifier (dsObjectId).
! The device’s StormWorks identifier is the device identifier used with the views resource.
views/id/objects DELETE removes the managed objects from the specified view, for
example this command:
Removes two devices (1030 and 3482) from a view (211), leaving the view empty
requesting the XML response format:
Removes two devices (1030 and 3482) from a view (211), leaving the view empty using
the JSON format:
curl -u admin:admin -H Accept:application/json -X DELETE "http://
entuity_server/api/views/211/objects?&id=1030&id=3482"
{
"items" : [ ],
"count" : 0
}
Removes all items from the current view (23) (it does not remove the content from child
views) using the XML format:
curl -u admin:admin -H Accept:application/xml -X DELETE "http://
entuity_server/api/views/23/objects?&include=all"
Remove all items from a view (211) using the JSON format:
curl -u admin:admin -H Accept:application/json -X DELETE "http://
entuity_server/api/views/211/objects?&include=all"
{
"items" : [ ],
"count" : 0
}
for users. When required you can remove this filter to display all available data types, streams
and attributes.
To change the data access level:
1) From the Entuity Data Reference page click Advanced.
When you view details of an object, the metadata includes its Reportable Level.
Hyperlinks within the displayed data allow you to move through the data structure.
Following Associations
Associations define relationships between object types, for example there is an association
between a device and its ports. Associations are also used when identifying the topology of
your network.
To view a StormWorks association:
1) From the Entuity Data Reference page click Associations. Data Dictionary displays the
list of associations, together with their description in alphabetical order.
2) Locate and select the required association. The Data Dictionary displays a detailed
breakdown of the association.
You can navigate through this association’s section, and have the option of using
hyperlinks to drill further down to view attribute details.
Following Streams
Streams are the mechanism through which StormWorks maintains historic data, or rather the
time series attributes belonging to a stream.
To view a StormWorks stream:
1) From the Entuity Data Reference page click Streams. Data Dictionary displays the list of
streams, together with their description, in alphabetical order.
2) Locate and select the required stream. The Data Dictionary displays a detailed
breakdown of the stream.
You can navigate through this stream’s section, and have the option of using hyperlinks
to drill further down to view attribute details.
StormWorks Overview
Type is the underlying concept of StormWorks, not just the configuration of StormWorks.
Types can be split into:
built-in types, for example floats, strings.
Structs which are defined within the StormWorks configuration files but are not extended
from a Type. This means they are not written in the database but are used as a method of
combining attributes, which is useful in some calculations.
user-defined types, for example module, device. These are defined within the
StormWorks configuration files, and are extended from other types. It is user-defined
types that you are most concerned used with when defining data export jobs.
Associations define relationships between types, this ties related information collected
through different types together. For example, the types port and device have a many to
one relationship. A device can have many ports, a port can only have one device.
Attributes define data that can be polled. Attributes can be held:
directly against a type. This implies history data for that attribute is not required.
against a stream within a type. This is for time-series data.
Streams define properties of the polling process. A stream can only be connected to one
type, although through type inheritance it can appear otherwise. For example, in the
inheritance example the stream chassisInventory is defined against the device type, and
is then inherited by both the SwitchDevice and RouterDevice types.
StormWorks also has the concept of a virtual stream. A virtual stream does not contain
directly polled data, but rather data calculated from polled data. For example, Entuity
polls for device uptime, it uses this value to check whether the device has been
continuously up since it was last polled, or whether the device has been down. The virtual
stream v deviceUpTime maintains the poll timestamp, the amount of time the device was
up and the amount of time the device was in an unknown state. You can then use this
virtual stream when reporting on device uptime.
Types can be connected to more than one stream, for example port could have two
streams:
portData that records in-bound and out-bound octets, port speed and duplex
information collected every two minutes.
shortUtilization that records short term utilization (actually based on the octets, speed
information and time stamp collected through portData) calculated every two minutes.
Event State Engine processes the specified poll data from the specified stream.
Collectors describe a method of how an attribute can be polled. An attribute can have a
number of collectors, this allows different methods for attaining the same type of
information. Entuity uses the collectors priority level to determine which attribute method
to try first, Entuity works through the attribute collectors until a method is successful.
Transform allows data to be converted from one data type to another, e.g. to change an
integer to a string.
h
Entuity Data Dictionary provides a view into the Entuity data structure to assist in defining
data export jobs. Event State, Collector and Transform details collect and manage data. They
are not available for export and are not viewed through the Entuity Data Dictionary.
but the device instance of each reflects their different inheritances. RouterDevice and
SwitchDevice are extended from the same type, device. device contains generic device
information, e.g. attributes, associations that are common to both routers and switches.
These common attributes are inherited; specific router and switch characteristics are defined
against RouterDevice and SwitchDevice.
Attributes:
id
type
type
link
SwitchDevice RouterDevice
Stream: Stream:
switchSystemResources rnews
rnews5
rnews60
routerSystemResources
Inherited attributes: Inherited attributes:
id id
type type
link link
name name
snmpCommunity snmpCommunity
devType devType
sysOID sysOID
sysDescr sysDescr
sysLocation sysLocation
Inherited stream: Inherited stream:
chassisInventory chassisInventory
Figure E-7 Type Extension and Attribute and Stream Inheritance expands the device example:
type is the original type on which almost all other types are extended from. The
exceptions are types used as structs.
device which holds characteristics general to devices.
DeviceEx which extends the device definition.
SwitchDevice and RouterDevice have characteristics specific to switches and routers,
respectively.
The original type has three attributes, id, type and link (link is now deprecated). All
subsequent types extend from this type and inherit these attributes.
The device type inherits these three attributes but also extends the definition. device defines
data that can be collected against devices in general. Implicit in this is that device itself will
be extended by types that refer to particular devices. So, device includes attributes for
example name, snmpCommunity and the stream chassisInventory that are common to all
devices.
DeviceEx extends device having additional attributes and streams defined against it. It also
used for reporting, rather than device.
The SwitchDevice and RouterDevice types inherit all the characteristics of DeviceEx, device
and Type. They also extend the definition by including characteristics, in this example
streams, unique to each.
Once these types are compiled into Entuity they affect the characteristics of a discovered
device. For example, when Entuity discovers a new switch, it first discovers it as a device,
then as DeviceEx and finally as a SwitchDevice. The object instance created is of
SwitchDevice, but as it is derived from a composite type it can still be referred to as a device
and retains its original object identifier. Each discovery cycle is scheduled so a new cycle
only starts when the previous cycle has completed. This explains why the attributes
associated with a newly discovered device, appear in stages.
Discovery extends the object, but its identifier remains the same. An object can also still
be considered as any of the types from which it is extended.
as the primary (parent) type and ports as the secondary (child) type. It also indicates that
there is a one-to-many relationship between them.
Connections between types are mediated through association attributes (see Defining
Association Attributes).
Discoverable DevicePortDiscoverable
portIndex
Index Attribute
ports
Association portDeviceName
Attribute Data Attribute
Association
device devicePort port
Type Type ifDescr
Data Attribute
device
Association
Attribute
ifSpeed
Data Attribute
Where:
Stream is the keyword that defines the section as a stream definition.
Name is the particular stream’s name, e.g. rnewsPort.
KeepTime is the length of time to keep the data, defined by an integer followed by:
min minutes
h hours
d day
w week
m month
Care should be taken that KeepTime is compatible with rollup definitions.
ObtainRate is the polling interval.
StaleAgeOut is the length of time Entuity keeps stale data before deleting it.
Attributes is a comma delimited list of attribute names.
ConnectTo sets the object type the stream connects to.
Backup determines whether Entuity backups the stream, by default this is set to false.
Description is a text description of the stream. This must always be completed, and where
the stream is displayed in the client then so may be the description.
Filter can either be defined as part of the section or as a reference to a function. A filter
uses attributes of the type (e.g. the device sysoid). Only when the object instance meets
the filter condition is a stream created.
ClientData contains a set of commands and values for use by the client. Each instruction
is separated from the next by \n. Lines can be broken into smaller, readable units by
placing = at the start of continuation lines. Possible commands include:
displayName
isSampleList
leadPropertySheet
isHidden
showInParent
Timestamp.isHidden
iconImageURL=http://%host%/EOS/linkstat.gif
EventStreamClientData is set to hidden to suppress event values associated with a type
being displayed in Component viewer.
Instantiating Streams
For each discovered object that matches the filter, StormWorks creates a stream collector
which collects time series sample data for that object.
Stream collectors instantiated from the same stream specification are stored in the same
table, which has a name of the form dss_* where * is the stream name. These tables are
created dynamically at start-up time. Individual rows are differentiated by their stream
collector ids (column name dsStreamInstId) that in turn reference a row in the dsStreamInst
table. This table contains the data that connects a stream collector to a unique infrastructure
object, a stream and various data relating to the last time samples from this stream were
collected and written to the database.
To verify that the intended data is being collected by the stream, Entuity compares the
summarized samples captured between two contiguous poll periods. When the values are:
different a new row is written to the corresponding stream collector table and columns
updated in the dsStreamInst table to reflect the time at which this operation took place.
the same then just the last update time is changed to avoid storing redundant data.
So, it is not sufficient to check the table corresponding to stream collectors arising from a
stream alone. The master stream collector table, dsStreamInst, must be checked to ascertain
if a new sample has been written or only the time stamp relating to the stream collector
updated.
Advanced Actions
Advanced Actions, also known as user menus and user actions, are defined through
configuration files. Actions may be automatically triggered through Entuity raising an
appropriate event, or interactively through advanced action menus, available both from the
menu bar and context menus.
Agent
Intelligent management software embedded in a network device. In network management
systems, agents reside in all managed devices and report the values of specified variables to
management stations.
Antenna / Radio
Each Wireless Access Point has one or more Antennas. Each Antenna is attached to an
802.11 radio within the Access Point. Wireless Hosts communicate with the network via a
wireless association with an Antenna/Radio. Each Antenna/Radio can have multiple hosts
simultaneously attached. Each Antenna/Radio operates in a chosen 802.11 compatibility
mode such as 802.11a, 802.11b or 802.11g. Additionally, each Antenna/Radio has a single
SSID assigned. Each Antenna/Radio operates on a chosen radio channel and with a
specified transmit power setting, which is measured in mW. Many controller based
installations use dynamic optimization algorithms to pick a suitable channel and power
setting. Frequent auto-adjustment of these setting indicates that there are problems being
encountered with the quality of the wireless communications.
It bridges traffic from wireless attached hosts to/from an Ethernet interface that connects to
an access layer switch port. APs provide heightened wireless security and extend the
physical range of a wireless LAN. The access layer switch will see the MAC addresses of the
individual wireless attached hosts (the MAC address of the wireless NICs) plus the MAC of
the Access Point Ethernet interface.
AR System
BMC Remedy Action Request System (AR System) is a framework within which applications
are built by AR System administrators. Applications consist of a set of AR System forms that
are linked using workflow rules designed for the application. These forms contain fields
which Entuity can be configured to populate.
ARs
Entuity integrates with AR System to generate Action Requests (ARs). The sample integration
with the Remedy Help Desk includes ARs of the type incident.
ARP
ARP (Address Resolution Protocol) is the layer 2 standard for TCP/IP. It is used to obtain a
node’s physical address when only its logical IP address is known.
ATM
ATM (Asynchronous Transfer Mode) is a packet-switching technology, that delivers
high-speed performance together with a scalable architecture. Its use of small packets (fixed
length cells of 53 bytes), provide for low latency so sound and vision arrive together. It can
also handle bursty, non time-sensitive data, translating variable length packets to fixed size
packets.
Attribute
In Entuity an attribute is a property of an object that is defined through Entuity Configurable
Framework. Attribute data can be charted using the Attribute Grapher and is available to
Report Builder.
can coexist with ordinary wired connections to end user hosts and servers on the same
switch. AWAPs do not require wireless controllers and do not interact with them if they exist.
Backbone
The part of a network that acts as the primary path for traffic that is most often sourced from,
and destined for, other networks.
Bandwidth
The upper limit of the rate at which data can be transferred.
BMC Cell
BMC Impact Manager instance. A cell receives events from Entuity and displays them in the
BMC IX.
BMC IX
BMC IX (BMC Impact Explorer) displays events received from Entuity.
Blackout
Blackout is complete loss of the network, as opposed to a brownout, which is degradation in
the performance of the network.
BPDU
Bridge Data Protocol Units are special frames that contain spanning tree information. There
are two types of BPDU, Topology Change Notification (TCN) BPDU contains topology
change information, Configuration BDU contain configuration information.
Bridge
A device that interconnects local or remote networks. Bridges form a single logical network,
centralizing network administration. They operate at the physical and link layers of the OSI
Reference Model.
Brownout
Brownouts, also known as soft faults, are typically caused by cabling faults, faulty
transceivers, faulty NIC cards and configuration errors such as duplex/half-duplex
mismatches. These problems cause a percentage of the packets traversing that particular
area of the network to be corrupted. The total number of packets discarded as a percentage
of packets is directly related to the severity of the brownout.
Burst
Burst is the access rate of the physical connection to the Frame Relay carrier network.
Central Server
A central server is an Entuity server trusted by remote Entuity server(s). A user logged into
the central Entuity server is able to view information collected by the remote Entuity server(s),
according to their user account access rights. A remote Entuity server responds to requests
from a trusted central Entuity server, and freely shares information with it.
An Entuity server can be configured to perform both roles, be both a remote and central
Entuity Server. This allows administrators to create both hub-n-spoke and fully meshed
deployments.
A central Entuity server can also act as a central license server. From it you can allocate, and
de-allocate, license credits to its remote servers.
Configuration of central and remote servers is through the Multi-Server Administration area of
the Entuity web UI.
CI
Within BMC Atrium CMDB a Configuration Item (CI) is a collection of objects related to the
specific functionality of a larger system.
CIR
Committed Information Rate is the rate (in bps) that the network agrees to transfer
information over a permanent virtual circuit (PVC) in Frame Relay. The CIR applies to the rate
of data entering the network.
Client
A computer that requests a service from another. In Entuity the Java client is Component
Viewer which requests, for example, information from the Entuity server on the devices on
your network.
Collisions
Collisions occur when two transmitters attempt to send data at the same time. The greater
the number of collisions the poorer network performance appears.
Component Viewer
Component Viewer is the Entuity Java client, available through the web UI Tools menu.
Through it you can quickly scan the network for both current and historical performance
data. It creates an intuitive hierarchy which lets you easily view configuration settings, check
status information and launch fault, utilization and traffic volume history graphs.
Context Menus
Context menus are available from the Entuity web UI and Component Viewer. The contents
of the menu are dependent on the position of the mouse when you clicked the right button.
Core Ports
Entuity considers core ports, as WAN ports, administratively up ports which have a
configured IP addresses (i.e. layer 3 ports) on devices which are routers or have router
capability, or trunks and uplinks that are administratively up.
By default the port status event, Port Operationally Down, is only enabled for core ports.
Current Configuration
The device configuration (either startup- or running) currently being processed.
Data Path
A data direction on each PVC is a data path. For example, a PVC that connects points A and
B has two data paths, from A to B and from B to A. WAN News analyzes the data paths
separately.
Data Rollup
Data Rollup is a method of taking polled data and bundling it into larger more manageable
units, e.g. rolling 24 hourly datapoints into one daily sample. If Entuity generated monthly
reports from live polled data then this would cause a significant increase on the processing
overhead, i.e. instead of one datapoint for each day there would be hundreds.
DE (Discard Eligibility)
DE is a bit in the header of a frame-relay frame that indicate the frame may be discarded in
preference to other frames if congestion occurs. It is usually set by a network node if the user
is offering data (frames) at a higher rate than has been negotiated. This maintains the
committed quality of service within the network. Frames with the DE bit set are considered to
be excess data.
Derived Events
IA derived event is an event derived from an existing event definition. It retains the event
identifier of the original definition, unlike a custom event which has its own unique identifier.
Derived events are defined as part of an action. They useful for adding additional information
to an incoming event, and can also be called from an incident.
Devices
In Entuity devices refers to network devices, for example switches and routers.
vendinfo identifies the vendor device support datasets available to Entuity and the
decisions made when more than one vendor file is available for a particular sysoid; which
device support dataset Entuity uses to manage that device type (as identified through its
sysoid).
Device Types
In Entuity every device has a type, which you can view through the web interface and
Component Viewer. The device type is derived from its vendor file information, and helps to
determine how Entuity manages a device. Device types include hubs, switches and routers.
There are also two Unclassified device types, Basic Management and Ping Only, and also
Full Management.
Unclassified device types have two distinct roles:
Basic Management and Ping-only, is used for those devices Entuity has taken under
management at the Basic Management and Ping-only level.
Full Management, is used for those devices Entuity has taken under management at the
Full level but for which there is no vendor file information but Entuity can generate a
suitable generic device type. These are uncertified devices.
Domains
Domains and domain filters are terms used within Component Viewer, in fact supplied
domains are now only used within Component Viewer to group objects in its Explorer tree,
e.g. the routers domain. In the web UI, where you manage views In Entuity, domain filters are
referred to by the more apt term view content filters as they determine the type of object that
can potentially appear in a view.
DHCP Operation
The IP SLA DHCP operation measures the round trip time (RTT) taken to discover a DHCP
Server and obtaining a lease from it. After obtaining an IP Address, Cisco IOS IP SLA
releases the IP address that was leased by the server.
The Dynamic Host Configuration Protocol (DHCP) is an Internet protocol for automating the
configuration of computers that use TCP/IP. DHCP can be used to automatically assign IP
addresses, to deliver TCP/IP stack configuration parameters such as the subnet mask and
default router.
Drop Box
Drop box acts as a temporary repository for objects, for example gauges, charts, links,
device metrics, that you want to include to new reports, dashboards.
Duplex
A full-duplex link with one telegrapher at each end, transmitting alternately in each direction.
Dynamic Thresholds
Dynamic thresholds enable Entuity to alert the user to deviations from what Entuity’s
previous polling has established as normal behavior for that hour on that day. Entuity
establishes normal behavior for a given attribute on a given port by maintaining the last four
weeks worth of polled data, and applying an averaging algorithm.
EIR
The Excess Information Rate (EIR) is the sustainable rate of information in excess of CIR, that
the network will deliver if there is available bandwidth. The total information rate is CIR + EIR.
Frame Relay allows data rates in excess of the CIR to be successfully used on occasions. It is
also possible that the amount of data that can be transferred per measurement interval (Tc)
may be limited to less than the burst (or access rate) of the physical connection to the carrier
network.
EIR defines how many bits per second beyond the CIR the data rate may be exceeded. This
is may be policed by the carrier ingress switch per Tc on a pro-rata basis. This means that
although data can be transmitted for periods of time at the burst rate of the physical port it
would not be possible to continue transferring data at this rate successfully on a continuous
basis if the CIR+EIR were to be less than the burst rate.
Entuity
Entuity is both the name of the network management software and the company producing
it. Entuity software is designed for networks of any size and complexity, from the smallest,
simplest corporate infrastructure to the largest multinational. Every customer can access the
full functionality of our cornerstone solution, incorporating fault, performance and inventory
management.
entuity_home
entuity_home is used within the Entuity documentation to indicate the Entuity server’s root
folder. The root folder is set by Entuity install, in Windows environments the default is
C:\Entuity. You can view its current setting through destination in
entuity_home\etc\entuity.cfg. Within Entuity configuration files it is represented by the
variable ENTUITY_HOME.
Ethernet
IEEE standard network protocol that specifies how data is placed on and retrieved from a
common transmission medium. Forms the underlying transport vehicle used by several
upper-level protocols, including TCP/IP and XNS.
Events
Events are alerts and alarms that are generated through Entuity monitoring the network.
Event Viewer displays events and they can also be reported on.
Expect
Expect is a Unix automation and testing tool, written by Don Libes as an extension to the Tcl
scripting language, for interactive applications such as telnet, ftp, passwd, fsck, rlogin, tip,
ssh, and others. It uses Unix pseudo terminals to wrap up subprocesses transparently,
allowing the automation of arbitrary applications that are accessed over a terminal. With Tk,
interactive applications can be wrapped in X11 GUIs.
automatic generation of Action Requests (ARs), derived from Entuity events, to particular
application forms on target AR System servers
interactive generation of Action Requests (ARs), initiated from Entuity. The specified
application forms on target AR System servers are opened for editing, with default data
populated from the current Entuity managed object(s) or event(s).
Entuity can also pass to AR System a URL identifying the managed object that is the source
of the AR. From AR System you can open Entuity’s Component Viewer with the focus on the
managed object.
Factory Default
The shipped values of event thresholds are the factory defaults. You can amend a factory
default, which if done at the root level effectively changes the default value for all objects
against which that threshold can be set. For example, if you amend a threshold setting for a
device event at the Entuity (system) level, all devices on that server will have a new default
value.
FEC
Forwarding Equivalence Class (FEC) is central concept to MPLS. An FEC is a set of packets
that a single router forwards to the same next hop, using the same interface and with the
same handling (e.g. queuing). The FEC is determined only once, at the ingress to an LSP,
rather than at every router hop along the path.
Filters
Filters in Entuity act by filtering in those objects specified in the filter. There are three types of
filters, view, event and Flex Report.
Entuity uses these types of filter:
View content filters are applied to the views, restricting the components available from a
view to those that meet the criteria.
Event Filters restrict the events available through a view.
Flex Report filters restrict the data included to the report.
Flow Collector
The Flow Collector is the set of processes within an Entuity Integrated Flow Analyzer
responsible for the receiving, processing and storage of flow records.
Administrators can enable/disable an Entuity server’s Flow Collector through configure, a
decision which should be made according to the role the administrator wants the server to
perform in the management of the network.
Frame Relay
A fast packet protocol that relies on physical component and higher level software reliability.
The network discards any frame with bit errors. Frame relay services include PVCs
(Permanent Virtual Circuit) and SVCs (Switched Virtual Circuit).
Full Duplex
A full-duplex link with one telegrapher at each end, transmitting alternately in each direction.
Half-Duplex
A type of communication channel using a single circuit which can carry data in either
direction but not both directions at once.
Host Identifier
Your Entuity representative requires the host identifier of the Entuity server machine before
they can generate your license. The host identifier associates the Entuity license with the
physical footprint of the machine. Entuity install and configure programs both display the host
identifier, alternatively you can run the command line program hostIdent (which is included
with the software but is also available from the Support website).
Hot Standby Router Protocol (HSRP)
Hot Standby Router Protocol (HSRP) establishes a framework between network routers to
achieve default gateway failover if the primary gateway becomes unavailable in close
association with a rapid-converging routing protocol like EIGRP or OSPF. By multicasting
packets, HSRP sends its hello messages to the multicast address 224.0.0.2 (all routers)
using UDP port 1985, to other HSRP-enabled routers, defining priority between the routers.
The primary router with the highest configured priority will act as a virtual router with its own
IP and MAC address, which the hosts on the local segment will be configured to use as a
gateway to the destination in question. If the primary router should fail, or the link to the
destination drop, the router with the next-highest priority would take over communications
through alternative routes within seconds, without major interruption to network connectivity.
HSRP and VRRP on some routers have the ability to trigger a failover if one or more
interfaces on the router go down. This can be useful for dual branch routers each with a
single serial link back to the head end. If the serial link of the primary router goes down, you
would want the backup router to take over the primary functionality and thus retain
connectivity to the head end.
Hypervisor
A hypervisor, also called virtual machine monitor (VMM), allows multiple operating systems
to run concurrently on a host computer. The hypervisor presents to the guest operating
systems a virtual operating platform and monitors the execution of the guest operating
systems. Multiple instances of a variety of operating systems may share the virtualized
hardware resources. Hypervisors are installed on server hardware whose only task is to run
guest operating systems.
Infrastructure Ports
Entuity considers infrastructure ports, as:
Entuity considers infrastructure ports, as router ports, as uplinks which are ports connecting
routers with switches and as trunk ports which are ports connecting switches together.
Router ports.
Uplinks, ports connecting routers with switches.
Trunk ports, ports connecting switches together.
Interface
This is the entity on a node which is polled, such as a physical port. Nodes are likely to have
more than one interface.
IP
In TCP/IP, the standard for sending the basic unit of data, an IP datagram, through the
Internet.
IP Link
IP links may be autoDiscovered or created manually. They represents a link of some form at
layer 3 or above e.g. a pair of IP addresses, an IP address and a URL.
IP Peering
IP Peering provides visibility into your WAN links, i.e. leased line, Frame Relay DLCIs, ATM
VCCs, using subnet masking. It also reflects any manual IP pairings you may have made in
Entuity.
ISO
International body that is responsible for establishing standards for communications and
information exchange; developed the OSI reference model. ISO is not an acronym, but the
Greek word for "equal."
hosts and servers on the same switch. The associations between the LAPs and WCs are
negotiated dynamically and can change under fault conditions.
A LAP is an AP that is designed to be connected to a wireless LAN (WLAN) controller (WLC).
The LAP provides dual band support for IEEE 802.11a, 802.11b, and 802.11g and
simultaneous air monitoring for dynamic, real-time radio frequency (RF) management. In
addition, Cisco Aironet 1000 Series LAPs handle time-sensitive functions, such as Layer 2
encryption, that enable Cisco WLANs to securely support voice, video, and data applications.
Entuity Wireless currently supports Cisco LAP, part of the Cisco Unified Wireless Network
architecture.
Leased Line
A leased line is a dedicated point-to-point connection over a WAN via a router at the
subscriber’s premises to the telecommunications provider.
Entuity identifies a leased line, by default, when both of these conditions are true:
Load Balancers
Load balancers are devices that control and optimize traffic flow over your network. For
example directing traffic away from over utilized servers to those less utilized, improving
mission critical service delivery, providing fall over protection.
Entuity delivers a similar level of fault, performance and inventory management for load
balancers as provided for other standard Entuity device types, e.g. routers, switches, hubs.
For example device reports include load balancers, you can build your own reports using
Flex Reports, device and port events apply and full load balancer details are viewable
through Component Viewer.
Entuity currently manages F5 Labs Big IP 6400 Load Balancer. Entuity delivers additional
polling of the device ports using F5 lab’s propriety MIB, returning additional port
identification, port status, port traffic and port utilization data. The full integration of this
additional data within Entuity allows administrators to set up utilization and traffic events
against this data.
Log Files
Entuity process messages are written to their individual log files, in entuity_home/log. For
example, applicationMonitor writes to applicationMonitor.log. When the log file
becomes full, it automatically wraps to another file with up to four versions, e.g.
applicationMonitor.log.1, applicationMonitor.log.2,
applicationMonitor.log.3.
Management Level
Every device under Entuity management is managed according to its management level,
which is set when the device is added to Entuity but can be subsequently amended. Each
managed device costs one license object.
These are the management levels:
Full Management (all interfaces), Entuity manages all interfaces on the device.
Full Management (management interfaces only), Entuity only manages the management
interface.
Full Management (no interfaces)
Basic Management Entuity collects only basic system information and the full IP address
table via SNMP. This management level is used when Entuity does not have the
appropriate device support dataset (vendor file), cannot generate an appropriate dataset
or you only want the device placed under basic management. Entuity does not manage
any ports or modules on the device.
Ping Only, devices only under ping management, SNMP data is not collected for these
devices.
Managing Agent
Handles requests for information or action from the management station on a node. A
protocol links the management station and the Managing Agent; for Entuity users this must
be SNMP.
Mobility Controller
An SNMP manageable hardware device, manufactured by Aruba, that controls and
coordinates the operation of a group of Aruba Wireless Access Points. In an Aruba wireless
network deployment all wireless equipment discovery and real-time monitoring is performed
via the Mobility Controllers rather than via SNMP/ping monitoring of the individual Access
Points.
Multicast
Network communication between a single sender and multiple receivers.
My Network
Supplied view that contains the entire set of managed object’s the user is permitted to view.
Different users may have different devices in their My Network view, reflecting their different
access permissions.
Node
An SNMP managed device attached to a network, from which data can be retrieved. For
example, node devices such as hubs, routers, bridges, or network printers.
OID
An Object Identifier is a sequence of integers that represent the position of an object in the
hierarchical structure of objects in a MIB.
OSI Model
A model for networks developed by International Standards Organization (ISO). The network
is divided into seven layers, each layer building on the services provided below it.
Packet
Any logical block of data sent over a network; it contains a header consisting of control
information such as sender, receiver, and error-control data, as well as the message itself.
May be fixed or variable length.
Percentile Utilization
Percentile Utilization indicates that for a defined percent of the time, e.g. 95, port utilization is
below this value. It is useful for monitoring the sustained utilization of the port.
The 95th percentile is derived by ordering the utilization data by value, from highest to
lowest. Application of a least square fit method removes spikes that would distort the
analysis. The top 5% values are discarded, leaving the 95th percentile. This value is
calculated for both inbound and outbound utilization.
Policy Group
Entuity licensing is enabled by grouping related types of managed objects into groups.
These Policy Groups are then assigned a license credit quota. Before Entuity manages an
object it first checks whether the license allows its management and then whether a credit is
required. When a license credit is required, Entuity checks that the policy group to which the
object’s type is associated has available credits. For example, before Entuity manages a
device it checks the device licensing policy group for available credits.
Polling
Devices on the network are accessed by the system at regular, pre-defined, intervals in order
to retrieve required data. This is referred to as polling the devices.
Polling Engine
The Polling Engine (or Core Management Engine) is the set of processes within an
Entuity server responsible for all general network management tasks excluding flow
collection (e.g. network discovery, inventory, monitoring, event management).
Administrators can enable/disable an Entuity server’s Polling Engine through configure, a
decision which should be made according to the role the administrator wants the server to
perform in the management of the network.
Port
Entuity considers ports as interfaces on network devices, e.g. routers, and as endpoints in
communications systems. In IP an upper-layer process that receives information from lower
layers. Ports are numbered, and each numbered port is associated with a specific process.
For example, SMTP is associated with port 25.
TCP and UDP transport layer protocols used on Ethernet use port numbers to distinguish
between (demultiplex) different logical channels on the same network interface on the same
computer.
Protocol
A set of formal rules detailing how to transmit data across a network. Example protocols
include TCP, UDP and IP.
Reachability
Availability Monitor sends an ICMP ping to the management IP address of managed devices,
by default every two minutes. Devices that respond are considered reachable, those that do
not respond, after the set number of retries, are considered unreachable. When Availability
Monitor (applicationMonitor) is not running, then the reachability of the device is
Unknown for that period, although Entuity maintains the last known state of the device.
Reboot
Entuity uses the device sysuptime to calculate when the device was last rebooted, or more
accurately when the device last came up after being rebooted.
Reconciliation Rules
Within BMC Atrium reconciliation rules are applied by the reconciliation engine to improve
accuracy and efficiency of maintaining IT environment data in the CMDB. Reconciliation is
used to identify and merge CI information and relationship form imported dataset with
production dataset.
Remote Server
A remote server is an Entuity server configured to trust another central Entuity server. A user
logged into the central Entuity server is able to view information collected by the remote
Entuity server(s), according to their user account access rights. A remote Entuity server
responds to requests from a trusted central Entuity server, and freely shares information with
it.
An Entuity server can be configured to perform both roles, be both a remote and central
Entuity Server, allowing administrators to create both hub-n-spoke and fully meshed
deployments.
Configuration of central and remote servers is through the Multi-Server Administration area of
the Entuity web UI.
Router
A device that routes data between networks. Routers connect multiple LAN segments to
each other or to a WAN.
Routers may be equipped to provide frame relay support to the LAN devices they serve.
These routers can:
encapsulate LAN frames in frame relay frames and send those frames to a frame relay
switch for transmission across the WAN.
receive frame relay frames from the WAN, strip the frame relay frame off each frame
producing the original LAN frame, and forward it to the end device.
Running-config
The configuration controlling the current operation of a piece of Cisco hardware. This may be
different to the start-up config if changes have been made since start-up and the changes
have not been saved. The running-config can be saved as the startup-config replacing any
previous start-up config. The running config is held in DRAM. If the machine is restarted
without the running-config being saved, all changes are lost.
Sample Interval
In Entuity the period between two data samples. This may be between two pollings of a port,
or between two rolled up data samples.
Server
Any computer whose function in a network is to provide user access to files, printing,
communications, and other services. Servers usually have more memory, more disk storage,
and a more advanced processor than a single-user desktop PC.
Where Entuity manages an application, Entuity can manage the application server as a
device.
Services
Services is a method of grouping together collections of ports that provide a service and
associating with them other ports which use that service. For example, a service maybe e-
mail, with one port designated as the provider of the service and all others in the group
defined as consumers.
SLA
A Service Level Agreement (SLA) is a set of rules and metrics which can be used to measure
the efficiency and performance of an object. That object may be a department, a server, a
SNMP
Standardized method of managing and monitoring network devices on TCP/IP based
internets. SNMP defines the formats of a set of network management messages, and the
rules by which those messages are exchanged. The network management messages are
used to make requests for performing network management functions and to report on
events that occur in the network. Also, SNMP defines the allowable data types for MIBs, they
way in which MIBs can be structured, and a set of standard objects that can be used in
implementing a MIB.
Spanning Tree
Spanning tree provides a vendor neutral technology for visibility into your network. When
correctly implemented Entuity discovers bridge links, switch to switch relationships, through
polling the Bridge MIB. Complete spanning tree connectivity relies on a contiguous set of
Entuity managed devices.
Spare Ports
By default Entuity spare port calculations include ports that have been unused for forty days
or more, include ports that have system uptime of less than forty days and are currently
unused and exclude ports that have been unused for less than forty days but have a system
uptime of forty days or more.
By default Entuity spare port calculations:
Include ports that have been unused for forty days or more.
Include ports that have system uptime of less than forty days and are currently unused.
Exclude ports that have been unused for less than forty days but have a system uptime of
forty days or more.
The forty day threshold is configurable through the reporting section of entuity.cfg. Entuity
distinguishes between physical and virtual ports using interface type. If required System
Administrators can amend the virtual port identifier.
SNMP Agent
Management code that resides in the device, controls the operation of the device, and
responds to SNMP requests.
SSL
An SSL Certificate consists of a public key and a private key. The public key is used to
encrypt information and the private key is used to decipher it. When a browser points to a
secured domain, an SSL handshake authenticates the server and the client and establishes
an encryption method and a unique session key. They can begin a secure session that
guarantees message privacy and message integrity.
Startup-config
The initial configuration when a piece of Cisco hardware starts-up. If there have been no
changes to the configuration since start-up, this will be the same as the running-config. The
startup-config is also referred to as the saved config. The startup-config is held in NVRAM.
Static Thresholds
Static threshold settings allow you to configure the trigger points which when crossed cause
Entuity to raise events. You can set thresholds against an individual event, a managed
object, view or all objects on an Entuity server.
StormWorks
Entuity Configurable Framework is the internal Entuity engine, also known as the Data
Management Kernel (DMK). It runs as the DsKernelStatic process.Entuity Configurable
Framework enables the delivery of functionality through a highly configurable set of core
services. The configuration files, found in entuity_home\etc, prefixed with sw_ define and
configure Entuity Configurable Framework services.
Entuity assigns all of the objects it manages their own Entuity Configurable Framework
identifier. Entuity Configurable Framework identifiers are sequentially assigned, do not
consider the object type and are unique within each Entuity server. StormWorks ID is visible
from the object’s web UI Advanced tab, and is used in creating dashboards to the user, for
example during Data Export, Map Export, running of Flex Reports.
Stream Attributes
Information Entuity collects from your network is stored within Entuity as an attribute of the
managed object, for example a port’s name, a port’s utilization are stored as attributes.
Stream attributes are to maintain a history of a metric, for example Entuity maintains a history
of port utilization.
SVG
Scalable Vector Graphics (SVG) is a graphics file format and Web development language
based on XML. SVG is used by Entuity’s reports to dynamically generate, high-quality
graphics from real-time data.
Switch
A switch is a network device that selects a path or circuit for sending a unit of data to its next
destination. It is usually simpler and faster than a router, which requires knowledge about the
network to determine the route.
A switch may also include the function of the router, a device or program that can determine
the route and specifically what adjacent network point the data should be sent to.
System Capabilities
Entuity determines the switching capability of a device by checking the group dot1dtp,
specifically the mandatory scalar value dot1dTpLearnedEntryDiscards. dot1dtp is only
present when the device supports transparent bridging, which implies it has Ethernet
switching capability.
Entuity determines the routing capability of a device by checking for the ip-forwarding
variable from the ip group in the MIB of the device. When ip-forwarding has a value of 1, this
implies the device is acting as a gateway and so has routing capability.
Entuity determines whether the device type is hub by comparing its type to device types
detailed in the vendor files.
TCP
Connection-oriented protocol that provides a reliable byte stream over IP. A reliable
connection means that each end of the session is guaranteed to receive all of the data
transmitted by the other end of the connection, in the same order that it was originally
transmitted without receiving duplicates.
TCP/IP
Combination of TCP and IP protocols common to many different computer systems and so
often used for communication between them.
TFTP
Trivial File Transfer Protocol (TFTP) is a very simple file transfer protocol, with the
functionality of a very basic form of FTP. It uses UDP as its transport protocol and has no
authentication or encryption mechanisms.
Ticker
Ticker allows you to view real time output at the device and port level, viewing data changes
as they occur. You can select to view data activity for one or more client devices or ports.
For monitored:
Ports you can select from a list of MIB variables the particular variable(s) you want to use
to monitor the port. Entuity is supplied with a default number of MIB variables for use with
ports and you can also add your own MIB variables to this list.
Devices you can create your own list of MIB variables on which to monitor the device.
traceroute
Entuity includes two types of traceroute functionality, identified in the Entuity client as
TraceRoute from Client and TraceRoute from Server.
TraceRoute from Entuity Client, calls the traceroute utility installed on the Entuity client
machine and performs a live traceroute from the Entuity client to the target IP address.
TraceRoute from Entuity Server, uses data collected by applicationMonitor. This
traceroute information is updated every two minutes, so calling TraceRoute from Server does
not initiate a live traceroute but instead interrogates the data returned from the last
applicationMonitor traceroute.
Traps
Traps can be used by network components to signal abnormal conditions. Entuity can both
receive and forward SNMP traps.
Entuity can be configured to:
Generate events in Event Viewer then traps are received.
Forward traps to up to six concurrent recipients.
h
Entuity also supply a more advanced SNMP trap forwarding integration module. Contact
your Entuity sales representative for details.
Trivial Change
A difference between a current-configuration file and a previously archived one that is not
considered important by the system because it matches a set of rules codified as patterns in
an “ignore file”. Trivial changes may include comments such as timestamps in a
configuration file.
state changes (where each object state change is a vector), differencing the dependency
chain state vectors enables Entuity to determine the true cause of the event. Entuity can then
raise the appropriate event.
For example, if an application becomes unavailable because a switch has failed then Entuity
raises an event relating to the switch failure in Event Viewer. Entuity does not raise events for
the application being unavailable as changes in state in the dependency chain are attributed
to the switch failure.
Trunk Ports
Trunk ports, i.e. ports connecting switches together.
Entuity identifies a trunk port by:
reading the MIB.
macman identifying the switch port as having more than ten MAC addresses and also
having associated VLANs.
using CDP Trunk Port Discovery, a CISCO proprietary method.
When one or more of these methods identifies a trunk port, Entuity also considers it as a
trunk port.
Unclassified Devices
Entuity managed devices for which Entuity does not have a device support dataset, provided
through individual vendor, bin.vendor or newbin.vendor files, are included to Entuity as
Unclassified devices under Full Management, or Unclassified devices under Ping-only and
Basic Management.
Unclassified generically managed devices use an Uncertified device type, created by Entuity
and held in newbin.vendor. These are Entuity managed devices and do incur a license
charge. System Administrators should contact their Entuity support representative for a
vendor file which would ensure Entuity fully manages these devices.
Unicast
Unicast is network communication between a single sender and a single receiver.
Uplink Detection
Entuity considers an uplink as trunking on a connection to a router or layer 3 switch, which is
visible through spanning tree. This technology attempts to link layer 3 with layer 2.
Where links between switches and routers are not done using VLAN trunking and spanning
tree then the spanning tree technology will not detect them. This is typically at smaller
satellite offices, which do not need the greater port density and much greater speed available
from router on a stick and even greater speed available from layer 3 switching.
Uplinks
Ports connecting routers with switches.
Uptime
By default Entuity polls devices every five minutes, retrieving device sysuptime. Entuity checks
as to whether the device has been continually up since the last poll, and modifies the
device’s uptime value accordingly.
When sysuptime indicates the device has been down during the polling interval but is now up,
from sysuptime alone Entuity cannot identify for how long the device was down. Entuity takes
this unknown time, and adds fifty percent of it to the known uptime value, with the remaining
fifty percent considered UNKNOWN. For example where sysuptime has a value of two
minutes. Entuity cannot determine the state of the device over the first three minutes of the
polling interval. Entuity adds ninety seconds to the sysuptime value, giving an uptime value of
two hundred and ten seconds and records the device state as UNKNOWN for ninety
seconds.
Device uptime is visible through Component Viewer, and is used in many reports, e.g.
Routing Summary, Switching Summary.
Utilization
In Entuity port utilization is expressed as a percentage of actual traffic volume against the
maximum volume that can be handled by the port.
Variable Binding
A variable binding, or VarBind, refers to the pairing of the name of a MIB variable to the
variable's value. A VarBindList is a simple list of variable names and corresponding values.
Some PDUs are concerned only with the name of a variable and not its value (e.g., the
GetRequest-PDU). In this case, the value portion of the binding is ignored by the protocol
entity. However, the value portion must still have valid ASN.1 syntax and encoding. It is
recommended that the ASN.1 value NULL be used for the value portion of such bindings.
Vendor Files
Entuity identifies the device type of discovered devices by matching their sysoid to that held
against the device support datasets. Device support dataset definitions are held in, listed
here in order of precedence, individual vendor files, bin.vendor file, newbin.vendor file, and
then uncertified file.
vendinfo identifies the vendor information available to Entuity and the decisions made when
more than one vendor file is available for a particular sysoid; which vendor device definition
Entuity uses to manage that device type.
View
All network objects within Entuity are displayed through views. View filters allow you to
restrict the displayed objects in the view to the ones you are interested in. You can also use
user profiles to control access to different views.
Virtual Circuit
A Virtual Circuit is a generic term for an association established between two or more
endpoints for the purpose of user-user, user-network, or network-network information
transfer. An example would be ATM’s VCC.
Virtual Port
Entuity distinguishes between physical and virtual ports using interface type. If required
System Administrators can amend the virtual port identifier.
VLAN
A logical association that allows users to communicate as if they were physically connected
to a single LAN, independent of the actual physical configuration of the network.
VM Platforms
Entuity currently manages Oracle and VMware VMs through its VM Platform device type.
Entuity communicates with VMs and their hypervisors through the VM’s SDK. This requires
specification of different connection attributes when compared to devices of other types. It
also requires that all VMs are added to Entuity with a Ping Only management level, as this
allows the selection of the VM Platform type and its connection configuration. When adding
VMs using autoDiscovery care must be taken to ensure candidate device VMs are always
added as Ping Only.
Index
Numerics authtool 16
emergency access user 17
64 Bit Counters
group mapping 18
eyepoller 66
LDAP tree 19
user delete 18
A autodisc.cfg 20, 22, 26
Access Points 331 autodisc.txt 160
Ageing Out see also Device File
devDefunct 38, 169 autoDiscovery 27
Amazon Web Services (AWS) autodisc.cfg 20, 22, 26
connection attributes 286 automatic running 22, 165
Apache Tomcat classify unrecognized devices 165
memory usage 179 device name resolution 169
parameters 193 duplicateIpCheck 165
excludesysoids 23
Apache Web Server IP addresses 27
configuration 210 Network Unreachable 24
httpd process 71 overview 20
httpd_eye.conf 210 process 20
log file configuration 210 proliferate 21, 358
Application Monitor prune 24
process 16 stopping 20
applicationMonitor syntax 23
log files 344 threads 26
reachability 347 time parameters 25
traceroute 352 usage 20
AR System 331 Automated Administration
see autoDiscovery
ARP Cache Collection 74
see eyeclientrpc
ARP Cache Information
Automated Device Renaming
non-managed routers 73, 74
configuring 212
arp_cache_devices.cfg 74
Availability Monitor
ARs 331 see also Application Availability
Associations 323, 325 see also WAN Availability
Data Dictionary 321 Availability Monitoring
Audit Log configuration settings 165
auditLogKeepTime 163
row display limit 164
B
auth.log
Backing up the database
configure 164
backup command 28
Authentication backup process 28
ServerAccess 227 restore process 93
W
WAN
Port Interfaces 264
WAN Availability
port definition 264
Web Server
port number 164
Wireless Access Points 331
X
xml
illegal characters 196
reporting configuration 195
Y
Yellow Alert
SNMPyellowAlertSecs 184