Der Schwerpunkt des Open Source Monitorings liegt bis jetzt noch bei der technischen Überwachung der vorhandenen Konfiguration Items. Dies ist zwar gut, reicht aber aufgrund der wachsenden Bedeutung von Geschäftsprozessen im Unternehmen (ITIL) nicht mehr aus. Wir stehen heute der Herausforderung weit gefächerter Informationssystems (Virtualisierung, Cloud Computing) gegenüber, was die Umsetzung technischen Monitorings immer schwieriger gestaltet. In meinem Vortrag werde ich neue Wege und Möglichkeiten aufzeigen um Monitoring praxisnaher zu gestalten um so einen vollständigen Überblick der vorhandenen Umgebung zu erhalten. Die aufgezeigten Möglichkeiten sprechen hier gleichermaßen Administratoren als auch Team- und Abteilungsleiter an und zeigen die Erfahrungen vieler Enduser. Ausblicke in Themen wie Behaviour Driven Monitoring, Log Zentralisierung und Transations im IT Management runden den Vortrag ab.

1. Monitoring for
the next decade
M o n i t o r i n g 2 . 0 ?
© 2 0 1 1 - O l i v i e r J a n
mardi 29 novembre 11

2. About Me
Co-founder of CFSL
http://www.monitoring-fr.org
Writer of the french book « Nagios 3 au
cœur de la supervision Open Source »
Open Source monitoring solutions architect
In charge of R&D @ Capensis
Poor english accent !
mardi 29 novembre 11

3. Contents
A road trip experience between
Predictions about what you may need in the
next decade to be the king of monitoring
The nowadays trends, good ideas and tools in
Open Source monitoring
free software inside.
mardi 29 novembre 11

4. #1 Big Distributed
Architecture
Because…
1 mn intervall polling will be the standard
You have the project to monitor the whole
Internet
You finally realize that NDO doesn’t scale
well
mardi 29 novembre 11

5. Big Setup
Mod_Gearman
Gearman
Worker
+ LiveStatus + Multisite
Nagios
Daemon
Gearman
Server
mardi 29 novembre 11

6. Big Setup
IcingaMQ
Based on messages bus (ZeroMQ)
Don’t need anymore DNX or Mod_Gearman
mardi 29 novembre 11

7. Big Setup
Shinken
+ LiveStatus + Shinken UI
mardi 29 novembre 11

8. #2 End User
Experience
Because…
You want to know quickly if that service
delivered to user just works
You cannot put a monitoring agent on
Google Mail
You know that the sum of the parts
monitored is not equal to the whole
mardi 29 novembre 11

9. You know that the sum of the parts monitored
is not equal to the whole
DNS OK
HTTP OK
OS OK
NETWORK OK
≠
End User Experience
APPLICATION/USER OK
mardi 29 novembre 11

10. End User Experience
Cucumber + Watir
Behaviour Driven Monitoring
Checks functionnalities
Completes the technical
checks
mardi 29 novembre 11

11. End User Experience
Cucumber + Watir
Nagios Collector
Cucumber
Watir
Webdriver
CUCUMBER CRITICAL - Critical: 1, Warning: 0, 1 okay
| passed=1; failed=1; nosteps=0; total=2; time=0
mardi 29 novembre 11

12. Cucumber Scenarios
Abstraction layer between application
managers and technicians
Based on the expected behaviour
You write in your native language
Fonctionnalité: Achat appareil photo
Scénario: Page d'accueil
Etant donné que je suis sur la page d'accueil internationale
Quand je clique sur le lien "France"
Alors je devrais voir "En ce moment sur grosvendeur.com"
Scénario: Accès à la page photos
Etant donné que je suis sur la page d'accueil française de grosvendeur
Quand je clique sur le lien "PHOTO"
Alors je devrais voir "Le Top Ventes"
mardi 29 novembre 11

13. #3 Aggregation
Correlation
Because…
You don’t want to fill mailboxes with
notifications
You want alignement between technical and
business monitoring
You want to find root cause problem and have
impact analysis
mardi 29 novembre 11

14. Aggregation
CorrelationThe tools…
Nagios Business Process Addon
Multisite and aggregation
Shinken and its business views
Node Brain
mardi 29 novembre 11

15. #4 Better Charts
Because…
rrdgraph generated charts are not so easy to
read
You want real values
You want to choose the period you render
mardi 29 novembre 11

16. Better Graphs
HighCharts
What do you prefer ?
mardi 29 novembre 11

17. #5 Dashboards
Maps
Because…
You want to mix events, performance,
availability datas
You want top views that lead to detailed
views
You want big screens in your datacenter
mardi 29 novembre 11

18. Dashboards
Maps
The tools…
Nagvis
mardi 29 novembre 11

19. Dashboards
Maps
The tools…
Shinken
mardi 29 novembre 11

20. Dashboards
Maps
mardi 29 novembre 11

21. Mixed View
mardi 29 novembre 11

22. #6 Deliver Reports
in minutes, not days
Because…
Everyone needs SLA reports
It’s time consuming to prepare monitoring
reports
You want quickly choose the period and the
scope on which you have to report
It’s not what you prefer
mardi 29 novembre 11

23. Reports
Icinga/Jasper Reports integration
mardi 29 novembre 11

24. #7 Real Log
Management
Because…
Polling at a 5mn intervall with a check_logs
will be a bit old school
You catch too much boring events & miss
interesting ones
You know the Truth is in the logs
mardi 29 novembre 11

25. Real Log
Logstash
Logs transport
Logs sanitizing
mardi 29 novembre 11

26. Real Log
Graylog2
Logs centralisation and visual mining
mardi 29 novembre 11

27. #8 Hypervision
Because…
You certainly answered yes to one of the
previous predictions we have seen
It completes your existing monitoring
solutions and sit on top of them
You want to enlarge your monitoring
mardi 29 novembre 11

28. CanopsisFoundations…
Events @ heart… Sorry no checks
Based on AMQP (Active Message Queue
Protocol) standard with RabbitMQ
Connects to your existing monitoring solutions
Renders dashboards and reports you can build from
libraries
Engines to agregate, correlate differents types of
monitoring datas (business rules, inventory…)
mardi 29 novembre 11

29. Canopsis
Architecture…
more on http://www.canopsis.org
mardi 29 novembre 11

30. Without them…
CFSL
Romuald Fronteau
David Guénault
Jean Gabès
Capensis
Netways
mardi 29 novembre 11

31. Questions
What Else ?
Thanks for your
attention
mardi 29 novembre 11