Discovery Troubleshooting

Appliance CLI: nmap -F -O <ip range> ssh <ADDM credential user>@<ip endpoint> telnet <ip endpoint> rlogin <ip endpoint> -l <ADDM credential user> snmpwalk -On -v2c -c <community string> <ip

endpoint> .1.3.6.1.2.1.1.1.0 Windows Proxy (WMI):

Start > Run > wbemtest Click “Connect” Insert into dialog: \\<target-machine>\root\cimv2 Enter ADDM credentials Click “Connect” Select “Open Class” Insert: “Win32_ComputerSystem” Select “Query” Insert custom WMI query

Windows Proxy (PSTools):

1) net use \\<ip endpoint>\Admin$ /user:<Administrator> 2) dir \\<ip endpoint>\Admin$ 3) net use \\<ip endpoint>\Admin$ /delete (disconnects – does

not delete anything)

Search Query Syntax

Search Syntax: SEARCH <Kind> WHERE <condition> [TRAVERSE :::<Kind>] [SHOW <attr>] [PROCESSWITH <function>]

Relationships: Node Kind (originating) : Role : Relationship : Role : Node Kind (related) Host : Host : HostedSoftware : RunningSoftware : SoftwareInstance Key Expression (include an attribute from related node):

#Role:Relationship:Role:Node.attribute Traversals (drop original nodeset and display results of related node):

TRAVERSE Role:Relationship:Role:Node Nodecount (count number of related node kinds):

NODECOUNT(traverse Role:Relationship:Role:Node [where <condition>]) API Search:

http://<appliance>/ui/api/CsvApi?query=<search_string>&username=<username>&password=<password>

CLI Search:

tw_query -u <username> -p <password> "<search query>"

Taxonomy Changes

Add taxonomy extension to custom directory: /usr/tideway/data/custom/taxonomy

Run tw_tax_import –clear –user system –password <password>

Restart services: sudo /sbin/service tideway restart Debug log: /usr/tideway/log/ tw_tax_import.log

Default User Accounts

Appliance CLI tideway (default password: tidewayuser) root (default password: tidewayroot) netadmin (default password: tidewaynetadmin) upload (no password)

Appliance UI system admin discovery appmodel

Directories and Files

Administration Commands: /usr/tideway/bin Usage: <tw_command> --help

Customer Files:

/usr/tideway/data/customer Taxonomy Files:

/usr/tideway/data/installed/taxonomy /usr/tideway/data/custom/taxonomy

Tripwire Reports:

/usr/tideway/var/tripwire/report Visualisations:

/usr/tideway/data/default/graph-definition.txt /usr/tideway/data/custom/visualizations/graph-definition.txt

Datastore:

/usr/tideway/var/tideway.db Proxy Configuration File:

C:\Program Files\BMC Software\ADDM Proxy\etc\winproxy.conf Custom Reports (Dashboards/Channels):

/usr/tideway/data/installed/reports /usr/tideway/data/custom/reports

Pool and Record Data:

/usr/tideway/var/record /usr/tideway/var/pool

Backups/Snapshots:

/usr/tideway/var/backup Log Files:

/usr/tideway/log

Special Taxonomy Attributes

age_count (any node kind) The number of consecutive successful (positive) or failed (negative) accesses, from any endpoint. By default, when the count reaches -7 and 10 days have passed, the node will be removed.

_last_marker (DiscoveryAccess)

This will be set to true if this is the last DiscoveryAccess for an endpoint. key (any node kind)

A globally unique hashed string representing this unique node in the Datastore.

count (SoftwareInstance)

The number of instances (from primary inference) grouped together of this software. Directly determined by uniqueness of the ‘key’ attribute.

Tideway Services

sudo /sbin/service tideway status Shutdown Order:

1. sudo /sbin/service tideway stop 2. sudo /sbin/service omniNames stop 3. sudo /sbin/service appliance stop

Startup Order:

1. sudo /sbin/service appliance start 2. sudo /sbin/service omniNames start 3. sudo /sbin/service tideway start

Version 1.0 http://www.cssdelivers.com

BMC ADDM CHEAT SHEET Useful tips for Administrators