Managing Credentials

Version 4
    Share This:

    Links to Other Chapters:  ADDM Support Guide

    Chapter Contents:  ADDM Support Guide - Chapter 5 - Configuring Discovery

     

    Credentials Usage

    On the page used to manage credentials, ADDM used to have statistics that showed how often a credential had been used successfully.

    This feature was removed in BMC Discovery v11 because the queries performed slowly.  This makes it difficult to manage credentials because you have no visibility of which credentials are being used.

     

    Solution

    I have developed a number of Queries below which can be used to determine credential usage.  I current use these queries to determine the usage of each credential and then maintain the results in a spreadsheet.

     

    Credential Label and Description

    When I have found out the UUID for the credential, I put the UUID into the Label field in the credential definition.  This allows me to keep track of which credential is which.  I use the credential description field to contain all other useful information.  See example below.

     

    Label:   ab001537ae0126fa3c6a007

    Description:   SNMPv2 Community String, Used for Datapower Devices, string = datapower1

     

    Successful Credential Report

    search Host
    traverse InferredElement:Inference:Associate:DiscoveryAccess
    where _last_marker
    traverse DiscoveryAccess:Metadata:Detail:SessionResult
    where message =  "Success"
    SHOW session_type,credential,slave,slave_pool
    PROCESSWITH countUnique(0)

     

    Session Results Report

    search Host
    traverse InferredElement:Inference:Associate:DiscoveryAccess
    where _last_marker
    traverse DiscoveryAccess:Metadata:Detail:SessionResult
    where session_type <> "vSphere"
    SHOW message,session_type,credential,slave,slave_pool
    PROCESSWITH countUnique(0)

    Session Results Report (VMware)

    search Host

    WHERE  os_type = "VMware ESXi"

    traverse InferredElement:Inference:Associate:DiscoveryAccess

    where _last_marker

    traverse DiscoveryAccess:Metadata:Detail:SessionResult

    SHOW message,session_type,credential,slave,slave_pool

    PROCESSWITH countUnique(0)

     

    Credential Usage Report

    SEARCH DiscoveryAccess where _last_marker
    traverse DiscoveryAccess:Metadata:Detail:SessionResult
    where credential
    SHOW credential,session_type
    PROCESSWITH countUnique(0)

     

    Query to List Results for a Particular Credential

    SEARCH DiscoveryAccess where _last_marker
    traverse DiscoveryAccess:Metadata:Detail:SessionResult
    where credential = "b00ce533b5d68e4b6e980a2ea632616c"
    SHOW message,session_type,credential,slave,slave_pool

     

    Query to List Results for a Particular Proxy Pool

    SEARCH DiscoveryAccess where _last_marker
    traverse DiscoveryAccess:Metadata:Detail:SessionResult
    where slave_pool = "USA-Detroit"
    SHOW message,session_type,credential,slave,slave_pool