PipeDisco

Overview

The Unified Assurance Metric Pipe Instance Discovery runs a local application against a device or set of devices. Each line of the output is then processed via rules to create metric instances.

A default job has been configured to scan ports 1 through 1000, 3306, 3307, 6443, 6446 and 8080. The default rules will create instances for ports 22 (SSH), 23 (Telnet), 80 (HTTP), 8080 (Alternate HTTP), 443 (HTTPS), 389 (LDAP), 902 (VMWare), and 6443 (Unified Assurance Broker), along with a display instance for a more readable name. Both the ports that are scanned and ports that are used for instance creation can be customized.

IPv6 Considerations

The default NMAP TCP Port Discovery Agent job has not been updated to support IPv6. The underlying Pipe Instance Discovery job does support IPv6, and nmap can be configured to scan IPv6, but doing so introduces some issues that have not yet been addressed:

• To force nmap to scan IPv6, add -6 to the Command configuration option. nmap cannot be configured to scan IPv4 and IPv6 at the same time, so the best course is to clone the default Metric NMAP TCP Port Discovery job and changing the configuration to only scan IPv6:

  • Add -6 to the Command.

  • Set PreferIPv4 to Disabled.

  This can then be run in conjunction with IPv4.

• Even if two jobs are created, a process listening on port tcp/8080 on IPv4 may not be the same process listening to tcp/8080 on IPv6, even if both are running on the same device. As this is possible, Instances should be tracked and marked independently for IPv4 and IPv6. One method of doing this is by naming IPv6 instances ipv6-tcp-, then adjusting any rules that act on those instances to understand the difference between them. For instance, when measuring transaction times against tcp-8080, IPv4 would always be used, while IPv6 would be forced for ipv6-tcp-8080.

Pipe Instance Discovery Setup

1. Devices must exist in the Device Catalog for this application to be able to function. Devices can be created in several different ways:

   1. Using the Core Device Auto Discovery application.

   2. Using the Manual Discovery UI:

      Configuration -> Device Discovery -> Manual Discovery

   3. Manually entering all values using the Devices UI:

      Configuration -> Device Catalog -> Devices

2. Review the logic in the rules files referenced in the configuration to see the processing that will be done on the data returned by the command that is run:

   • LoadRules will be run during application startup to load data that might be needed during processing.

   • IncludeRules will be read during application startup to load additional files that might be called during processing.

   • BaseRules will be run for each device that is selected based on the configuration.

   Update the logic as needed.

3. Enable the default Job, unless a specific configuration option is needed.

   Configuration -> Broker Control -> Jobs

Default Scheduled Job

Default Configuration

Best Practices

The following list shows the best practices for working with this application:

• The default job configuration is to run at 12:59am every Sunday.

Rules

This poller uses the Unified Assurance standard rules architecture in Perl syntax. For information about creating rules, see the following in Unified Assurance Developer's Guide:

• Core for information about core rules functions.

• Metrics for information about metric rules functions.

• Application Logging

Tokens

The agent exposes the following tokens for rules processing.

Example Integrations

Customizing Ports That are Scanned

1. Go to the Jobs UI:

   Configuration -> Broker Control -> Jobs

2. Find and select the Metric NMAP TCP Port Discovery job, or the custom one that was created for the environment.

3. In the Configuration section, find and select the Value field for the Command option. While the entry ../../usr/bin/nmap -p must remain, nmap will accept any values between 1 and 65,535 as a list of comma separated values. These values can be either single ports (8080) or a range of ports (1-1000).

4. Click Submit when you are done making changes.

5. Select the job again, then click Start. Verify the additional ports are being scanned.

Customizing Ports That are Used for Instance Creation

1. Go to the Jobs UI:

   Configuration -> Broker Control -> Jobs

2. Find and select the Metric NMAP TCP Port Discovery job, or the custom one that was created for the environment. In the Configuration section, make note of the rules files that are used by the application.

3. Go to the Rules UI:

   Configuration -> Rules

4. Expand the path that is set in the job configuration, then open the base.load file.

5. In the PortNames hash, add additional PORT => DISPLAY-NAME mappings as needed.

6. Save the changes.

7. Back on the Jobs UI, select the job again, then click Start. Verify the instances are created.

Administration Details

The following list shows the technical details you will need for advanced administration of the application:

• Package - coreCollection-app

• Synopsis - ./PipeDisco [OPTIONS]

• Options:

   -c, --AppConfigID N   Application Config ID (Service, Job, or Request ID)
   -d, --DeviceID N      DeviceID (Optional)
   -?, -h, --Help        Print usage and exit
  

• Threaded - Multithreaded