SCOM (BETA)
Collect topology, health state and alerts from SCOM
This page describes StackState version 4.1.
The StackState 4.1 version range is End of Life (EOL) and no longer supported. We encourage customers still running the 4.1 version range to upgrade to a more recent release.
SCOM (BETA)
Overview
The SCOM integration is in BETA.
The SCOM StackPack is used to create a near real time synchronisation with your SCOM instance. The SCOM integration can be configured to run as either an API integration or PowerShell integration, these are described in the tabs below the diagram.
API integration
The StackState SCOM API integration sends requests to the SCOM API to retrieve topology data and events.
Agent V2 connects to the configured SCOM API.
Topology data and events for the configured criteria are retrieved from SCOM.
Agent V2 pushes retrieved data to StackState.
StackState translates incoming SCOM topology data into components and relations. Incoming events are used to determine component health state and publish SCOM alerts in StackState.
When to choose API integration
The SCOM API integration produces a clean topology in StackState by allowing you to specify the topology to collect. You can run the SCOM check from any StackState Agent V2 as long as it can connect to both the SCOM API and StackState.
Retrieving a large topology can require a high number of API requests, this can take time and may place some stress on your SCOM system. The size of topology you can retrieve may also be limited by the number of requests possible. To avoid this, use the SCOM PowerShell integration.
Setup
Prerequisites
To set up the StackState SCOM API integration, you need to have:
StackState Agent V2 must be installed on any machine that can connect to both SCOM and StackState.
A running SCOM instance (version 1806 or 2019).
A SCOM user with the role Operations Manager Read-Only Operators.
Install
Install the SCOM StackPack from the StackState UI StackPacks > Integrations screen. You will need to provide the following parameters:
SCOM Instance URL: the SCOM instance URL from which topology need to be collected.
Configure
To enable the SCOM check and begin collecting data from SCOM, add the following configuration to StackState Agent V2:
Edit the Agent integration configuration file
/etc/sts-agent/conf.d/scom.d/conf.yaml
to include details of your SCOM instance:hostip - SCOM IP.
domain - active directory domain where the SCOM is located.
username
password - use secrets management to store passwords outside of the configuration file.
auth_mode - Network or Windows (Default is Network).
integration mode - to use the API integration, set to
api
.max_number_of_requests - The maximum number of requests that should be sent to the SCOM API. See how to determine the required number of API requests, default 10000.
criteria - A query to specify the components to retrieve data for.
Restart the StackState Agent(s) to apply the configuration changes.
Specify the components to retrieve data for
The components to retrieve data for can be defined using an Operations Manager Data Query (docs.microsoft.com). For example, to retrieve data for all Microsoft Windows computers:
Errors in the configured criteria query will be reported in the StackState Agent log file.
Determine the required number of API requests
Use the script below to determine the number of components that match a criteria query and the number of dependencies. Add these numbers together and multiply by 2 to find the required number of API requests to retrieve topology data from SCOM. Two API requests are required to retrieve data for each component and each dependency.
As two API requests are required to retrieve data for each component and each dependency, the configured max_number_of_requests
must be higher than the returned total number of components that match criteria
AND total number of dependencies
multiplied by 2.
Status
Integration status
To check the status of the SCOM integration, run the status subcommand and look for SCOM under Running Checks
:
API connectivity (API integration only)
To check connectivity between StackState Agent V2 and the SCOM API, open the StackState Agent log file and search for the SCOM Connection Status Code
. Connection status is reported as an HTTP status code - 200
is a good connection, other codes show a problem with connectivity.
Integration details
REST API endpoints
Retrieving topology data from SCOM requires 2 API requests per component.
API endpoint | Description |
| Get type of component. |
| Get component information and relations. |
| Get alerts. |
Data retrieved
Events
Alerts and Health state from SCOM are available in StackState as events.
Data | Description |
Alerts | The following alert fields are retrieved: |
Health state | The component health state retrieved from SCOM is used to determine component health in StackState: |
Metrics
The SCOM check does not retrieve any metrics data.
Topology
Retrieved topology data is visible in the StackState UI SCOM view, named SCOM.\ .
Components
Relations
Traces
The SCOM check does not retrieve any traces data.
Open source
The code for the StackState SCOM check is open source and available on GitHub at: https://github.com/StackVista/stackstate-agent-integrations/tree/master/scom
Troubleshooting
Troubleshooting steps for any known issues can be found in the StackState support Knowledge base.
Uninstall
To uninstall the SCOM StackPack and disable the SCOM check:
Go to the StackState UI StackPacks > Integrations > SCOM screen and click UNINSTALL.
All SCOM specific configuration will be removed from StackState.
Remove or rename the Agent integration configuration file, for example:
Restart the StackState Agent(s) to apply the configuration changes.
See also
Last updated