Demonstrating Value With BMC Server Automation (Bladelogic)
Demonstrating Value With BMC Server Automation (Bladelogic)
Demonstrating Value With BMC Server Automation (Bladelogic)
Housekeeping
Please ask questions in the Q&A section, not in Chat:
-
Many Q&A questions can be addressed during the session by our experts, while
Chat is not seen by the Presenter until the very end of the session
https://communities.bmc.com/communities/docs/DOC-21692
Disclaimers
First Level Training
Best Practice vs. How To
Covers Most Common Tasks
Does not address every scenario
Assumes prior knowledge of BSA
components and terms
Agenda
Language, Terms and Concepts
Dollars and Hours
Objects and Scripts
Reporting & Metrics
Application
Easy Value Realization / Packaging Knowledge
Fully Realized Use Cases (CLC, OIC, FSP)
Reliable, Repeatable
Where to Start
Questions & Feedback
Goals
Be able to:
Talk about your server automation environment in dollars and cents: how much
money does good reporting or compliance save your company every
day/week/month/year?
Identify the major use cases in your BSA environment, and how they add value
-
faster provisioning,
faster reaction to issues,
faster mean time to repair (MTTR),
lower cost of management,
faster customer response
Identify the next use cases you want your group to take on, and start building a
business case for rolling it out
Speak to the costs of automation, and where it makes sense (macros vs. AI)
Speak to the percentage of project (revenue-impacting) vs. maintenance
(overhead) work
Copyright 1/10/2013 BMC Software, Inc
It doesnt need to be pretty or shiny, it just needs to get the job done.
What does an outage cost your company in dollars per hour?
- Do you have a check for everything thats ever caused an outage in
your environment? Is it built into your build policy? You have a build
policy, right?
Introduction
Artifacts in the Best Practices franchise
-
https://docs.bmc.com/docs/display/bsa82/Large-scale+installations
https://docs.bmc.com/docs/display/bsa82/High+availability+and+disaster+recovery
https://docs.bmc.com/docs/display/bsa82/Sizing+and+scalability+factors
https://docs.bmc.com/docs/display/bsa82/Deployment+architecture
https://docs.bmc.com/docs/display/bsa82/Home
Deployment Architecture:
https://communities.bmc.com/communities/docs/DOC-21692
https://docs.bmc.com/docs/display/NP/BSA+Database+Cleanup
Agent Cleanup
blcli Delete cleanup* spaces
10
How long would it have taken for an individual to execute this task by hand
Including staging time
Including identifying the correct servers
Including verifying availability
Could a level one or level two resource have done this task?
How long does it take to run the job once?
How long does it take to schedule the job once?
Vs:
-
12
13
15
16
Objects (continued)
Whats the difference? (continued)
- The intelligence about how to talk to different operating systems, parse
configuration files, and deploy/rollback software is already either built or
templated in. You get to start two steps ahead. (process development gets
cheaper)
- Since the Objects and Jobs are supported by someone else, youre not stuck
supporting your scripts forever, unable to get promoted because youre too
critical to take on new responsibilities.
17
18
How long would it have taken for an individual to execute this task by hand
Including staging time
Including identifying the correct server
Including verifying availability
How long does it take to run the job once?
How long does it take to schedule the job once?
How much upkeep is required to maintain the job going forward?
Including updating smartgroups (should be 0)
Were you only running it occasionally because the overhead of the process was too
high to run more often?
Biannual or quarterly compliance audits vs. weekly or even daily visibility into
compliance
Cost of being out of compliance
Cost of getting back to a compliant state
20
21
Executive Perspective
-
Business analytics
Key Performance Indicators
Decision Support
-
Operations reporting
Continuous improvement
State of Compliance
-
Self-certification reports
Full template for each standard
22
Server Automation
Comprehensive Visibility
Audit results
Trends
Self-Certification Compliance
Reports
-
PCI
HIPPA
ITIL v3
Ad-hoc queries
Customize formats, branding and
calculations
23
24
26
27
28
29
30
31
32
33
Data
Applications
OS Configuration
App Configuration
Required Capabilities
Application Provisioning
Simple and Complex Applications
Required Capabilities
Environment-Aware Packaging
Model-Based Configuration Management
Granular, Surgical Configuration Control
OS Provisioning
Install Operating System
Operating System
(OS)
Required Capabilities
Bare-Metal Provisioning
Virtualization Template Deployment
Setup Hardware
Copyright 1/10/2013 BMC Software, Inc
34
Server Lifecycle
35
Provisioning
Virtualization (on all platforms: VMware, Hyper-V, Solaris Zones, IBM LPARs, etc.)
BLPackager
Software Packages (incl. Custom Software Packages)
NSH Scripts & Jobs
Every system should leave the Server Factory fully secured & compliant with:
Security (CIS, DISA, custom)
Regulatory (PCI, HIPAA, GLB, SOX, custom)
Build Policies (OS platform, Middleware Platform, Data Center-specific)
Every system should leave the Server Factory fully patched to the current policy (no
big leaps to get patched to standard)
Functional Inventory/Snapshot
Copyright 1/10/2013 BMC Software, Inc
36
Packaging L3 Know-how
for L1/L2 Users
L3 know-how
Talk track
Skilled admins & subject matter experts (SMEs) usually have the privileges to
maintain any component of a server or application, however, agent maintenance
& other common tasks are not necessarily a good use of their time.
Agent install/upgrade & other common tasks can be easily packaged by SMEs
L1/L2 can then execute these tasks whenever needed, as many times as
required.
38
Value
-
39
Ad-hoc Audits
What does an outage cost your company in dollars per hour?
Insurance Company acquired resources
-
Datacenter move
-
41
42
Build Audits
One true build policy:
- Single OS -> at least a secure and standard build
Many servers in a data center -> at least a few common traits per group
Most orgs have some- kind of build standard
- scribbled notes on a sheet passed around between admins
- Under-utilized word doc
- Configurations built into bare metal provisioning system
(kickstart/jumpstart/etc.)
Most non-automated build standards arent complete, and are rarely
updated.
43
Build Standards
Drift: Standards change over time, July 2011 build
6-12 different builds over three years (times the number of different kinds
of builds)
Vs. standard RHEL 5 build that changes over time
- Evaluate all servers to that standard regularly
Builds break down into major components: a given set of vertically
aligned components is sometimes called a stack.
- SQL Server 2008 stack might be
- built on Windows 2008 R2,
- on virtual or on a standard make and model of hardware (HP DL380
G??),
- have a standard set of agents appropriate for a database server, etc.
44
Build Standards
The build standard consists of the:
- hardware (virtual or physical)
- operating system
- OS configurations & hardening
- agent stack
- middleware or applications
- middleware/application configurations
- Middleware/application content (web content, J2EE/.NET apps, etc.)
- Governing policies
Patching
Security/Regulatory
Build standard
45
Build Standards
These can all be different policies, which only need to apply to the
specific servers theyre relevant to. Even a single policy with a few rules
can deliver value, and is a great place to start.
Once built, the next time a configuration either causes a problem, or
someone remarks on a misconfiguration, create a rule for it.
46
Change Tracking
This is common any time we want to know when something has
changed, but once it's changed, we want to use that as the new
standard.
Not to be confused with a build audit, where any deviation from standard
required remediation.
Sometimes called a "rolling" audit: this gives visibility into authorized and
unauthorized change, and can be used to either verify configuration
change, or identify unauthorized change.
Auditing the entire machine (some 100,000 configurations) will generate
mostly noise,
Filter down for known, managed configuration items.
47
Reliable, Repeatable
49
Build Compliance
-
50
Where to Start
https://communities.bmc.com/communities/docs/DOC-21692
Online Documentation
- BSA Deployment Architecture Best Practices
http://docs.bmc.com/docs/display/public/bsa82/Deployment+architecture
Product Documentation
http://docs.bmc.com/docs/display/public/bsa82/Home
discussions
whitepapers
additional
information
- https://communities.bmc.com/communities/community/bmcdn/bmc_service_automation/serv
er_configuration_automation_bladelogic
52
Howto Videos
Initial Install Database Setup: On BMCdocs YouTube at http://www.youtube.com/watch?v=91FEUDVD6sE
Initial Install File Server and App Server Installs: On Communities YouTube at
http://www.youtube.com/watch?v=m7Y3SY23kuQ
Initial Install Console GUI and Appserver Config: On Communities YouTube at
http://www.youtube.com/watch?v=uwqlj60Lvo0
Compliance Content Install: On BMCdocs YouTube at http://www.youtube.com/watch?v=bXdaogDsCNc
Compliance Quick Audit: On BMCdocs YouTube at http://www.youtube.com/watch?v=i8BLi4WAWEY
BSA 8.2 Patching - Setting Up a Windows Patch Catalog: On Communities YouTube at
http://www.youtube.com/watch?v=nfpFpOuub9k.
Windows Patch Analysis: On Communities YouTube at http://www.youtube.com/watch?v=ODWhC01uEaQ.
Patching in Short Maintenance Windows with BMC BladeLogic Server Automation: On Communities YouTube at
http://www.youtube.com/watch?v=o6Lfzbb3JZg.
Basic Software Packaging: http://www.youtube.com/watch?feature=player_embedded&v=dtOWTTFqsaY
SOCKS Proxies:
https://communities.bmc.com/communities/community/bmcdn/bmc_service_automation/server_configuration_automation_bla
delogic/blog/2012/11/30/how-to-use-socks-proxies-with-bsa-to-deal-with-firewalls-and-overlapping-ip-ranges
53
56