56

Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

  • Upload
    others

  • View
    10

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance
Page 2: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Cloud: Tips to Maximize Oracle Enterprise Manager Performance and Scalability CON6990

Akshai Duggal Werner De Gruyter Enterprise Manager SCP September 2016

Confidential – Oracle Internal/Restricted/Highly Restricted

Page 3: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Safe Harbor Statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

Confidential – Oracle Internal/Restricted/Highly Restricted 3

Page 4: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

• Werner De Gruyter

• aka "Yoda"

– Architect, Oracle Corp USA

– Worked with Enterprise Manager 1.0a and all subsequent versions

– +20 Years Enterprise and Cloud Management experience

Confidential – Oracle Internal/Restricted/Highly Restricted 4

Page 5: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

• Akshai Duggal

– Director, Oracle

Confidential – Oracle Internal/Restricted/Highly Restricted 5

IT, Cloud Management – Built, designed, developed management solutions and architected deployments

Vision: Secure Cloud-Cloud Connections

Page 6: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Program Agenda

Cloud IT Management Challenges

Deployment Tips to Manage Cloud Scale

Operational Tips to Architect Cloud Services Management

Summary

1

2

3

Confidential – Oracle Internal/Restricted/Highly Restricted 6

4

Page 7: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Cloud IT Management Challenges

Confidential – Oracle Internal/Restricted/Highly Restricted 7

Management and Administration in the Bimodal IT landscape

Page 8: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Bimodal IT

Confidential – Oracle Internal/Restricted/Highly Restricted 8

Buzzwords for building IT Services

Predictable Lifecycle Fixed cadence Well-Known Architectures System Oriented Focus: • Integration • Compliance

Dynamic Lifecycle Continuous delivery Flexible Applications Service Oriented Focus: • Security • Standardization • Automation

IT Organizations

Emergent Systems : Cloud IT

Traditional Systems :

Traditional IT

Page 9: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

The IT landscape today

Confidential – Oracle Internal/Restricted/Highly Restricted 9

1 Most enterprises are adopting a pragmatic,

phased, co-existing approach towards hybrid cloud

and Bi-Modal IT

2 Cloud Services are growing at a rapid pace

3 Efficient Management is key to Cloud

Computing Success in today’s age of digital business

Cloud Services Market Projected to grow 16.5% in 2016

Gartner, 2016

75% of IT Organizations will have Bimodal IT by 2017 Gartner 2014

55% CIOs indicated that by

2020 they will structure > 50%

of their applications as

SaaS Gartner survey, 2015

Page 10: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

(any) Cloud Management Challenges

Confidential – Oracle Internal/Restricted/Highly Restricted 10

Automation for ITOps, DevOps

Security & Compliance Based on industry and

Oracle IT standards

Monitoring & SLM With 24x7 coverage

persona-specific dashboards

Analytics & Reporting for Ongoing planning

and optimization

Page 11: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Total Cloud Control

Confidential – Oracle Internal/Restricted/Highly Restricted 11

Optimized, Efficient | |

Integrated Cloud Stack Management

Agile, Automated

Complete Cloud Lifecycle Management

Scalable, Secure

Secure Enterprise-Grade Management

Page 12: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

“The Communication Hub of Oracle”

• Single pane of glass for hardware and software management across cloud and on-premise

• Centralized communication and co-operation for diagnostics and troubleshooting

• Designed to share critical information while maintaining sandboxes

• Integrated named credentials & auditing

12

Page 13: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 13

Cloud Services Organization

GLOBAL NERVE CENTER

TIER I

ENTERPRISE MANAGER

SERVICE ENGINEERING

GLOBAL NERVE CENTER

TIER II SERVICE DEVOPS

CLOUD INFRASTRUCTURE

CLOUD SUPPORT

Support, CloudOps and DevOps teams use Enterprise Manager to complement each other managing all Oracle Cloud Services, delivering an integrated single-pane-of-glass view of the managed assets

Page 14: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Cloud Services Organization

Confidential – Oracle Internal/Restricted/Highly Restricted 14

2 - Incoming Customer Call Or EM monitoring alert

1 - Monitoring Setup

3 - Triage with SOP, resolve using runbook

4- Escalate to Tier-2 if > SLA

5 - Diagnose & Resolve

8 – Educate/Train on updated run-book 7 - Update SOP, run-book

Long-Term IT analytics & Capacity Planning

Monitoring Instrumentation and Analysis

Architecture & Design for New & Updated Services

Re-Active Pro-Active

Glo

ba

l Ner

ve C

ente

r

Tier-2 Ops

Tier-1 Ops Service Engineering

6 - RCA, Problem Analysis

Page 15: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Public Cloud

Confidential – Oracle Internal/Restricted/Highly Restricted 15

Devices Tier 4 Data Centers

Users on the Oracle Cloud

Every Day

Transactions on the Oracle Cloud

Every Day

122K+ 19 70M+ 33B+

Unprecedented scale warrants unmatched management

Page 16: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Deployment Tips to Manage at Scale

Confidential – Oracle Internal/Restricted/Highly Restricted 16

From planning and preparation to rollout of the Enterprise Manager product suite

Page 17: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 17

Repository

Database Management

Server

EM Users: EMCLI

Console / Reports

Agent

Agent

(Hybrid)

Agent

Firewall

Notifications

Connectors

Internet

Repository: • Heart • Data storage, rollup and purging

Management Server (OMS): • Brains • Handles management data from Agents • Handles administration requests from

UI • Sends out notifications

Agents: • Worker Bees • Gather management information • Perform administration task

Agent Plug-ins Targets

Enterprise Manager Architecture A very quick overview

Page 18: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

What to prepare for...

• Start with one

– Begin your planning with one Cloud Control install in mind

– Centralize your monitoring and administration standards (Single pane of glass of the enterprise)

– Prevent the operational cost of multiple infrastructures (Additional hardware, administration, synchronization, …)

• A separate EM is the exception

– Legal restrictions

– Security

– Specific business requirements

– Other technical or network restrictions

Confidential – Oracle Internal/Restricted/Highly Restricted 18

“Enterprise” monitoring – Single Pane of Glass

Page 19: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

What to prepare for

• Software stack – Certification (repository DB 12c, supported OS, JAVA requirements…)

https://mosemp.us.oracle.com/epmos/faces/CertifyHome

– Install / Upgrade run-book, validated on test site first – Indentify patches and CPU’s needed, and stage them with the install software

• Hardware stack – Follow sizing recommendations

http://docs.oracle.com/cd/E63000_01/EMADV/sizing.htm#EMADV11829

• Security

Install and Upgrade

JAVA Updates in EM 13cR2 Impacts HTTPS certificates

– MD5 no longer supported – RC4 getting deprecated

See MOS note 2179909.1

TLS 1.2 support in EM 13cR2 Support for TLS 1.0, 1.1 and 1.2 for OMR,

OMS, Agent and target monitoring

Page 20: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

What to prepare for...

• Standardized setup

– Consistent patch and CPU rollout for OMS and Agents

– Configuration consistency checks for EM infrastructure targets

Confidential – Oracle Internal/Restricted/Highly Restricted 20

Create once, use many times

Agent Gold Image Standardized Agent software rollouts Bulk operations (UI and EMCLI) that can be used for:

– Deploying new Agents – Upgrading / Patching Agents

Multi-Proxy support Define different proxy servers for Agents

in different networks Alternate proxy for High-Availability

$ emcli create_gold_agent_image -source_agent=<source_agent>:<port> -config_properties="MaxThreads;MaxInComingConnections;_trustedOperationMessageTimeout;propComputeParallelization" -series_name=<imageseries> -gold_image_name="<GI name>" -gold_image_description=<desc> -working_directory=<path>

Page 21: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

What to prepare for...

• Architecture – Beacons

– RUEI & Business Apps

• Service Modeling

• Start with Inventory of your apps

• Design Each Service by Defining Members

Performance criteria (metric)

Availability criteria: metric, key component

SLA: Unplanned Outages inclusion/exclusion. Service High Availability to improve SLA

SLA: Planned Outages inclusion/exclusion. Components rolling patches

Confidential – Oracle Internal/Restricted/Highly Restricted 21

Bringing the Service Level Monitoring into the picture

Topology Viewer

Page 22: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Gaining insight with RUEI

• Listen to incoming traffic from applications

• All users, 24x7

• Detection of Outliers

• Application Context Aware

• Real User Experience Insight

Performance

Issues/Failures (network/app)

45.5M pageviews/day (US SaaS)

Confidential – Oracle Internal/Restricted/Highly Restricted 22

Analyzing the user and application interactions

Tenant User Geo Mapping

Rapid functional issue isolation

Page 23: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Evolution of an EM deployment

• EM implementations often start small and need to grow, sometimes rapidly An installation never considered to need HA/DR may grow to need it

• Follow installation best practices to prepare for future HA/DR transitions: Database: Prepare with ASM and CRS (if possible) to allow to transition to RAC and Data Guard

OMS: Separate (isolate) the software in such a way that it can get easily replicated if needed

Agent: Point to a ‘global OMS name’ (virtual EM name) that will never change, regardless of how many OMS’s are configured in the environment

Confidential – Oracle Internal/Restricted/Highly Restricted 23

Start small - prepare to grow over time

Storage Replication for WebLogic HA Upgrade enhancements for 13c R2

– Logical / Physical hostname distinction for rollout – Integrated migration from standby domain (old) to storage replication (new)

Page 24: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Making it robust, resilient, reliable, ...

• Secure light weight agent communications

• Built on Industry and Open Standards

• EMCLI, REST API for scripting and integrations

• Public Database views for Extraction and Reporting

• Deployed with Growth & High Availability in mind

Confidential – Oracle Internal/Restricted/Highly Restricted 24

Level-4 EM deployment with HA (4 node RAC, 6 node OMS) and DR site

EM 12cR5 RDBMS 11.2.0.4 Exadata: X4-2 (2*16) 32 CPU thread, 240Gb EM Repository: 6.5Tb, FRA 11Tb (3way redundancy) OMS : SUN FIRE X4170 M2 (2*12) 24 Core, 140Gb, 700Gb disk

White Paper: Managing Oracle Cloud with Enterprise Manager Executive Summary | Operational Management

Primary Secondary

Page 25: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Making it robust, resilient, reliable, ...

• 24 x 7 x 365 Alerting – Always-On Monitoring - Additional J2EE Application to deploy

CON6986 - Never Miss a Beat: Always-On Monitoring with Oracle Enterprise Manager

• Self-monitoring : – Out-Of-Band notifications for Agents and OMS

Confidential – Oracle Internal/Restricted/Highly Restricted 25

Continuation of Alerting

Continuous Monitoring Always On Monitoring

– Subscribe to receive notifications – Continue getting notifications during planned EM maintenance

Page 26: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

• Repository Backups Following MAA Best Practices – RMAN. daily incremental and level0 (fullbackup) Sunday. Plus archlog backups every 2 hrs to

free up space in Flash (reco DG)

– **Guaranteed Restore points (GRP) used during Upgrades, Maintenance

• OMS Backups – Binary Install, Software Library, EMKey $ORACLE_HOME/sysman/config/emkey.ora

– OMS Configuration from all OMSes ** Before and After every maintenance $ORACLE_HOME/bin/emctl exportconfig oms

• Agent Backups – Recoverable from the OMS, except for emd.properties changes, backup

EM Configuration, Backups and more…

MOS Note 1605609.1 – List of Available Patch Set Updates (PSU)

EM Repository

Cloud Archive (30days)

NFS (1 wk)

RMAN

COPY

Page 27: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Operational Tips to Architect Cloud Services Management

Confidential – Oracle Internal/Restricted/Highly Restricted 27

Making the Paradigm shift to Service Management

Page 28: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

24x7 Monitoring and Service Level Management

• Operational as well as Service level dashboards for monitoring 14M assets grouped into 7000 groups

• Monitoring of end user interactions business KPIs and IT metrics

• Integrated with Support (for Ticketing)

• 15M synthetic tests/day (20/hr per Service)

• 7.2M events processed/day

Page 29: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Service Modelling

• System

– Member: Targets 100s to 1000s of targets

– Create Incidents rules at System level (aggregation of incidents)

– Availability based on key members

• Services

– Member: Targets, Systems

– Availability based on system and service validation tests (https, ftps, telnet etc)

– Multiple systems in a service (example DB system, FA system in FA Service)

Confidential – Oracle Internal/Restricted/Highly Restricted 29

Managing related Infrastructure, Application components as One

END USER EXPERIENCE

APPLICATION

MIDDLE TIER

DATA TIER

VIRTUALIZATION TIER

INFRASTRUCTURE TIER

VM

Page 30: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 30

Key Members for System Availability

Service Dependent on this system

System Details KPI Monitoring for System and Services

Page 31: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 31

KPI Monitoring for System and Services

URL Monitoring, App flow tests by Beacons

Page 32: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Hierarchical Target Organization

Confidential – Oracle Internal/Restricted/Highly Restricted 32

Aggregating and layering system, services and groups

Management Tasks Oracle Cloud “EM Groups” Strategy

Monitoring, Notification Apply monitoring templates to groups based on target type, Or groups based on target type and a Service

Problem Analysis

Dynamic groups Ex : Target type=pod and Group=PaaS Target type=PBCS Service, lifecycle status=prod

Compliance Group of databases of SaaS Service

Reporting Group of groups for executive reports

Dashboards Group of all targets of a particular service

Service Maintenance Maintenance window patching of multiple services and blackouts, Patching selective group of hosts, Patching selective group of Agents

Jobs Selective group of hosts, group of databases

• Aggregate systems and services per tenant, location, geography, …

Ability to dill-down for root-cause analysis

Rollup (aggregate) information for dashboards

• Use Dynamic Groups to have an up-to-date representation of a deployed application / service

Application / Service

Tenant / Customer

Division / LOB

Location / Geography Company / IT level

Example:

Page 33: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Target Organization

• Add custom properties for environment specific data $ emcli add_target_property -target_type="..name.." -property="..name.."

• Define a fixed set of values for a property $ emcli use_target_properties_master_list -enable -property_name="..internal name.."

Confidential – Oracle Internal/Restricted/Highly Restricted 33

Adding custom target properties

Custom Properties Enhancements Can be used for Dynamic groups and Admin Groups Property values can be a controlled set

– Define a list of predefined values for a property – Only those values can be used for the property

Page 34: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

• Standardize Metrics (Iterative!) • Limited alerts (metrics with thresholds)

to actionable metrics

• Used reports for non-urgent metrics and trending

• Frequency of metric check

• Occurrences to reduce noise

• Templates Used • Oracle certified templates edited

• Metric Extensions • Custom metrics added to templates

• Apply templates after version rev-up

Cloud Standardization: Monitoring Templates

Metrics

Template

Metric Extension

Change Management Committee

Only collect what you need

Page 35: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Cloud Standardization: Incident Rules, Notifications

• Rules for creating IncidentRulesets and IncidentRules

Define on Groups and/or Systems

New RuleSets for a)Different set of targets/services b) Different mailing list

New Rules for a)Additional metric for alerting b) Different Notification method

• Change Management Committee

Confidential – Oracle Internal/Restricted/Highly Restricted 35

Tricks to fewer rulesets

Incident Rule Enhancements ‘What-if’ analysis of an Incident Rule (run simulation) Compression of availability incidents

– Only 1 incident for a ‘down’ container target – Used for system, services and clustered targets

Page 36: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Cloud Standardization: Incident Rules, Notifications

Confidential – Oracle Internal/Restricted/Highly Restricted 36

Incidents Dashboard

Page 37: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Cloud Standardization: Security, Single Sign On

• LDAP, Single Sign on, Active directory support for authentication

• Roles for different personas ; External Roles

• Roles based on fine grain privileges

• Named Credentials for target credentials (host, db, wls, app etc)

• Auditing

Confidential – Oracle Internal/Restricted/Highly Restricted 37

One less password to remember

Persona Based Roles DBA App Developer SLA Compliance Officer Devops

Page 38: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Achieving Cloud Agility EM Extensibility to the Rescue Cloud Management Requirements EM Extensibility

New Measurements (infra or business) New Errors

Metric Extensions

New Services Custom Plug-ins

Outside-in testing Service level measurement

Beacons

Reporting (Ops, Development, LOB, Executive)

BI Publisher Reports

Detecting issues, avoiding configuration drift Compliance Rules

Global Nerve Center Runbook Automation Jobs, Deployment Procedures, EMCLI

Page 39: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Business Value Dashboards

Confidential – Oracle Internal/Restricted/Highly Restricted 39

Page 40: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Service Operations Reports

Confidential – Oracle Internal/Restricted/Highly Restricted 40

Problem Analysis

Page 41: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Ongoing Compliance Reporting

Confidential – Oracle Internal/Restricted/Highly Restricted 41

• Ongoing configuration drift checks across Tenant Services

• Vigilance on security best practices for the entire stack

STIG Standards DoD Security Technical Implementation Guide STIG for FMW STIG for DB

Page 42: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

• Execution of scripts on fleet of SaaS Exadata Servers

• Validations of Application level Certificate (Expiry/Renewal)

• Centralized scheduling of jobs Example: purge jobs for all Service Pods scheduled/monitored from a single location

• Identify and fix anomalies in services Custom script deployment through Enterprise Manager for auto corrective actions Examples: Identify read-only filesystem, Agent process monitoring, auto corrective actions for /tmp cleanup etc.

Cloud Services: Operational Management

Page 43: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Ongoing EM Maintenance for high performance

• Operational verification (see white paper)

• MTM (Monitor the Manager) Console

• Operational run-book

Confidential – Oracle Internal/Restricted/Highly Restricted 43

Keep everything running smoothly…

White Papers and MOS notes Diagnostics with EMDIAG (See MOS note 421053.1) Operational Considerations and Troubleshooting Oracle Enterprise Manager 12c

MTM Analytics EMDIAG Tool

Page 44: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

EM Configuration , Backups and more… for Scale*

Configuration Oracle Cloud Site Tuning

Load Balancer for High Availability Reference Enterprise Manager Cloud Control Advance Installation guide

LDAP with SSO for EM Users access External Roles with LDAP setup; Automated employee account creation

Secure OMS with wallet with custom certificate

Remember to Secure all agents. New Agents secured at Service Provisioning. Secure EM CLI Enterprise Manager Cloud Control Advance Installation guide

Increased JAVA Heap Size Recommend 4gb, Currently tuned to 16G

OMS properties - Console timeout Internal Message timeout value

Job Thread Worker DB Connections **

oracle.sysman.eml.maxInactiveTime -value 240

oracle.sysman.emdrep.adminmsg.Adminmsglistener.healthmonitor_timeout 1800

oracle.sysman.core.conn.maxConnforJobwWorkers 200

OHS tuning MaxClients 1024 MinSpareThreads 128 MaxSpareThreads 256 KeepAliveTimeout 16 StartServers 8

WLS Socket Timeouts WLSocketTimeoutSecs 10, WLIOTimeoutSecs 2700

*The above tuning of parameters were done by OPC to scale for site growth. It is recommended that before making changes to your site contact Oracle Support

**See chapter 11 of the Advanced Installation and Configuration guide for details on how to tune the Enterprise Manager Job system

Page 45: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Summary

Confidential – Oracle Internal/Restricted/Highly Restricted 45

Cloud IT Management Using Enterprise Manager

Page 46: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Summary

Confidential – Oracle Internal/Restricted/Highly Restricted 46

9 Key takeaways Setup your EM site for High Availability, Disaster Recovery and Growth Use Agent Gold image strategy for Local, Hybrid Agents Take note of the EM13c features Start by modeling Services Management Setup users with appropriate access roles (with LDAP and Single Sign on ) Standardize Incident Rules, Monitoring templates, Notification methods Use Dashboards, Reports Use EM Jobs and emcli to automate tasks Keep EM patched and oiled

Page 47: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

AOM Always On Monitoring API Application Program Interface ASM Automatic Storage Management BI Business Intelligence BIP BI Publisher CIO Chief Information Officer CLI Command-Line Interface CPU Central Processing Unit CPU Critical Patch Update CRS Cluster Ready Services DB Database DBCS Database Cloud Services DG Data Guard DoD Department Of Defense DR Disaster Recovery EM Enterprise Manager FA Fusion Application FMW Fusion Middleware FRA Flash Recovery Area FTP File Transfer Protocol GNC Global Nerve Center GRP Guaranteed Restore Point

GTM Global Traffic Manager HA High Availability HTTP Hyper-Text Transfer Protocol IAAS Infrastructure As A Service IDM Identity Management IT Information Technology J2EE Java 2 Enterprise Edition JCS JAVA Cloud Services KPI Key Performance Indicator LDAP Lightweight Directory Access Protocol LOB Line Of Business LTM Local Traffic manager MD5 Message Digest 5 ME Metric Extension MOS My Oracle Support MAA Maximum Availability Architecture MTM Monitor The Monitor NFS Network File Storage NOC Network Operations Center OHS Oracle HTTP Server OMS Oracle Management Server OS Operating System

Confidential – Oracle Internal/Restricted/Highly Restricted 47

PAAS Platform As A Service RAC Real Application Cluster RC4 Rivest Cipher 4 RCA Root Cause Analysis REST Representational State Transfer RMAN Recovery Manager RUEI Real User Experience Insight SAAS Software-As-A-Service SLA Service Level Agreement SLB Service Load Balancer SLM Service Level Monitoring SOA Service Oriented Architecture SOP Statement Of Operation SQL Structured Query Language SSL Secure Sockets Layer STIG Security Technical Implementation Guide SUN Stanford University Network TLS Transport Layer Security UI User Interface URL Uniform Resource Locator ZFS Zettabyte File System

TLA Library

Page 48: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 48

Page 49: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Demos

ID Title Product Focus Location

SDB-043 End-to-End Database Performance Management DB Manageability Database

SDB-044 Database Lifecycle Management, Database as a Service and Snap Cloning with Enterprise Manager 13c

DBLM, DBaaS, Snap Clone

Database

SDB-045 Hybrid Cloud with Enterprise Manager 13c: IT Automation for DevOps Across Private and Oracle Cloud

Hybrid Database

SMI-6 Oracle Enterprise Manager 13c - WebLogic, SOA, & Middleware Management On-premise & in the Cloud

MW mgmt + Hybrid

Middleware

SHD-034 Oracle SPARC/x86 Systems and Virtualization Management with Oracle Enterprise Manager

Hardware Mgmt Systems-Servers-Storage

49

During Conference Hours

Page 50: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Sessions & Hands On Labs

ID Title Time Location

CON6992 Take Control of Your On-Premises and Cloud-Based WebLogic Domains

11:00 AM – 12:00 PM

Moscone West 3003

CON6984 Hybrid Cloud Management with Full Workload Portability for WebLogic and Java

12:30 PM – 01:30 PM

Moscone West 3003

HOL7630 Prevent Outages Using Early Detection with Oracle Management Cloud

12:45 PM – 01:45 PM

Hotel Nikko - Peninsula (25th Floor)

CON6987 Get Proactive: Strategies for hardening security with Oracle Enterprise Manager

01:45 PM – 02:45 PM

Moscone South 306

CON6976 Maximizing database performance: A practical approach to performance diagnostics and tuning

01:45 PM – 02:45 PM

Moscone West 3003

CON6979 Suffering from Chronic Patching Pain? Get Relief with Fleet Maintenance

03:00 PM – 04:00 PM

Moscone South 306

50

Monday, September 19th

Page 51: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Sessions & Hands On Labs

ID Title Time Location

CAS2348 (CFP) Maersk: Oracle Enterprise Manager 13c – Unifying Self-Service PaaS Across Multivendor Cloud

03:00 PM – 04:00 PM

Moscone West 3003

CON6582 Future of Database Management in the Era of Cloud and Big Data

03:00 PM – 04:00 PM

Moscone South - 102

CON6981 Database as a Service 3.0 with Enterprise Manager: The DBA's Best Friend

03:00 PM – 04:00 PM

Moscone South - 306

CON6975 Eliminating guesswork from SQL Tuning 04:15 PM – 05:15 PM

Moscone South - 306

CAS1595 (CFP) Comcast: Manage and Self-service with Excellence Using Enterprise Manager

05:30 PM – 06:30 PM

Moscone West - 3003

HOL7627 Hands On Lab: Maximizing Oracle Database 12c Performance with Oracle Enterprise Manager

06:00 PM - 07:00 PM

Hotel Nikko - Peninsula (25th Floor)

51

Monday, September 19th

Page 52: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Sessions & Hands On Labs

ID Title Time Location

CON6993 Oracle Enterprise Manager: Infrastructure Management Deep Dive

11:00 AM – 12:00 PM

Park Central - Franciscan I

HOL7632 Relief from Chronic DB Patching Pain with Enterprise Manager Fleet Maintenance

11:30 AM – 12:30 PM

Hotel Nikko - Peninsula (25th Floor)

HOL7627 Maximizing Oracle Database 12c Performance with Oracle Enterprise Manager

04:00 PM – 05:00 PM

Hotel Nikko - Peninsula (25th Floor)

CON6994 Deep Dive into Engineered Systems Management with Oracle Enterprise Manager 13c

05:15 PM = 06:15 PM

Moscone South - 305

CON6970 Simplify the Monitoring and Deployment of Oracle Identity Management

05:15 PM = 06:15 PM

Moscone West - 2020

52

Tuesday, September 20th

Page 53: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Sessions & Hands On Labs

ID Title Time Location

CON6982 Deep Dive: Snap Clone and Data Refresh solutions using Enterprise Manager

11:00 AM – 12:00 PM

Moscone South - 305

CON990 Oracle Cloud: Tips to Maximize Enterprise Manager Performance and Scalability

12:15 PM – 01:15 PM

Moscone South - 305

HOL7631 Harnessing the Value of Hybrid Cloud: Complete Management of Cloud Services

01:15 PM – 02:15 PM

Hotel Nikko - Peninsula (25th Floor)

CON6978 Harden and Standardize your Database Configurations across Clouds

01:30 PM – 02:30 PM

Moscone South - 305

53

Wednesday, September 21st

Page 54: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Sessions & Hands On Labs

ID Title Time Location

CON6980 Best Practices for Moving Databases to Oracle Cloud 9:30 AM – 10:30 AM

Moscone South - 305

CON6985 Expand DBaaS beyond Data Centers: Hybrid Cloud on-boarding by Enterprise Manager

9:30 AM – 10:30 AM

Marriott Marquis - Salon 12

CON2494 (CFP) Paypal: Pivot from Manual to Scalable with Oracle Database Lifecycle Management Pack

10:45 AM – 11:45 AM

Moscone South - 305

CON6986 Never Miss a Beat: Always-On Monitoring with Oracle Enterprise Manager

10:45 AM – 11:45 AM

Marriott Marquis - Salon 12

CON6991 Customer Panel: Continuous Service Delivery for SOA, IDM and WebCenter

10:45 AM – 11:45 AM

Marriott Marquis - Salon 13

54

Thursday, September 22nd

Page 55: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Enterprise Manager Sessions & Hands On Labs

ID Title Time Location

CON1125 (CFP) Accenture: Lift and Shift onto Oracle Database Exadata Cloud Service Using Database Consolidation Advisor

12:00 PM – 01:00 PM

Marriott Marquis - Salon 12

CON2260 (CFP) Nationwide: Database Patch at 1,000 Scale: Nationwide’s Oracle Enterprise Manager Fleet Maintenance Odyssey

12:00 PM – 01:00 PM

Moscone South - 305

CON6983 Building a WebLogic, SOA, Service Bus Cloud in your Data Center 12:00 PM – 01:00 PM

Marriott Marquis - Salon 13

CON6989 Best Practices for Upgrading to Enterprise Manager 13c: Learn from Customers

01:15 PM – 02:15 PM

Moscone South - 305

CON6988 Tips for maximizing reliability and scalability of Oracle Enterprise Manager

02:30 PM – 03:30 PM

Moscone South - 305

55

Thursday, September 22nd

Page 56: Oracle Cloud: Tips to Maximize(any) Cloud Management Challenges Confidential – Oracle Internal/Restricted/Highly Restricted 10 Automation for ITOps, DevOps Security & Compliance