This section guides you through setting up, configuring, and managing the MS SQL integration.

Prerequisites

On Gateway

  • OpsRamp Classic Gateway 15.0.0 and above.
  • OpsRamp NextGen Gateway 15.0.0 and above.
  • It is recommended to use the latest Gateway version for full coverage of recent bug fixes, enhancements, and improvements.

On Target Cluster Nodes / Standalone Nodes

The following prerequisites are required for a non-admin user

Add Windows Domain Permissions

  • The Windows domain user should be added to the Performance Monitor Users group to fetch performance counter metrics.
net localgroup "Performance Monitor Users" /add <user>

Grant Remote WMI Rights

  1. Click Start and select Run.
  2. Enter wmimgmt.msc and click OK.
  3. Right-click WMI Control (Local) and select Properties.
  4. Click the Security tab.
  5. Select Root and click Security.
  6. Add the user and select the following permissions:
    • Execute methods
    • Enable account
    • Enable remoting
    • Read security
  7. Click Advanced, select the added non-admin domain user and click Edit.
  8. Select This namespace and subnamespaces from the dropdown in the field Applies to.
  9. Click OK three times.

Add user to Performance Monitor Users Group

  1. Click Start and select Run.
  2. Enter lusrmgr.msc and click OK.
  3. In the Groups folder, right-click Performance Monitor Users and select Properties.
  4. Click the Members tab and click Add.
  5. Add the required users.

SQL authorization permissions

  • SQL DB instance should accept connections on the DB port. Ensure the firewall is allowing traffic over the DB instance port.
  • OpsRamp supports mixed authentication (both NTLM and SQL Server authentication).
  • To monitor DB metrics, you should have the following minimum privileges:
    • Server Role: public - This server role is available by default
    • Securables: Enable the following securables for connecting to SQL instances and underlying databases, along with required read-only permissions:
CONNECT ANY DATABASE
GRANT CONNECT ANY DATABASE TO <user>
CONNECT SQL
GRANT CONNECT SQL TO <user>
SELECT ALL USER SECURABLES
GRANT SELECT ALL USER SECURABLES TO <user>
VIEW ANY DATABASE
GRANT VIEW ANY DATABASE TO <user>
VIEW ANY DEFINITION
GRANT VIEW ANY DEFINITION TO <user>
VIEW SERVER STATE
GRANT VIEW SERVER STATE TO <user>

Connection Modes

Starting from MS SQL Cluster version 6.3.0, you can select the connection mode. The options available are:

  1. PowerShell (existing)
  2. OpenSSH (new)

If PowerShell is selected as ConnectionMode:

The windows domain user should have following permissions and configurations to establish a successful connection between the Gateway and the target machine using PowerShell remoting.

  • Enable PowerShell Remoting on the target machine using the following command:
    Enable-PSRemoting -Force
    
  • Add the user to the **Remote Management Users** group to allow remote management of the target machine.
    net localgroup "Remote Management Users" /add <user>
    
  • Add OpsRampGatewayIp to the TrustedHosts list on the target machine to allow the PowerShell connection from the Gateway to the target machine.
    • To add TrustedHosts, use the following command:
      • To allow any host:
        Set-Item WSMan:\localhost\Client\TrustedHosts -Force -Value *
        
      • To allow a specific host:
        Set-Item WSMan:\localhost\Client\TrustedHosts -Force -Concatenate -Value <OpsRampGatewayIp>
        
    • Set up and restart the WinRM service for the changes to take effect.
      • To set up:
        Set-Service WinRM -StartMode Automatic
        
      • To restart:
        Restart-Service -Force WinRM
        
  • Ports 5985 and 5986 must be opened on all nodes and clusters for PowerShell remoting.
    • Verify connectivity from the Gateway to the target machine using the following command:
      telnet <cluster or node ip> 5985/5986
      
  • The user should be added on all nodes and clusters.
  • Ensure that the provided IP address/host name and credentials are valid and accessible for successful integration. Verify connectivity from the Gateway using the following steps:
    • Launch PowerShell using the following command:
      pwsh
      
    • Run the following commands to establish the connection using the details of your end device:
      $pw = ConvertTo-SecureString -AsPlainText -Force -String "<password>"
      
      $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList "<username>", $pw
      
      $session = New-PSSession -ComputerName "<ipAddress>" -Credential $cred -Authentication Negotiate -ErrorAction Stop
      
    • Check the session state:
      $session.State
      
    • If the session is not established, verify that all Prerequisites are met on all servers and clusters.

If OpenSSH is selected as ConnectionMode:

  • OpenSSH must be installed and configured on the target Windows machine.

  • Password authentication must be enabled in SSH config: PasswordAuthentication yes

    • Edit sshd_config (run PowerShell as Administrator)
    • notepad C:\ProgramData\ssh\sshd_config (Note: If not at this location, locate the correct path for sshd_config and perform the following step)
      • Find the line #PasswordAuthentication yes (or PasswordAuthentication no), uncomment it and set it to yes, then click Save.
      • Find the line AllowUsers (or add it if missing) and set it to - AllowUsers <ssh-username>
      • Save the file.
    Restart-Service sshd`
    
  • Ensure the sshd service startup type is Automatic

    Set-Service -Name sshd -StartupType Automatic`
    
  • Set the OpenSSH default shell to powershell.exe using the following command on all the nodes

Set-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShell -Value "$PSHOME\powershell.exe"; Restart-Service sshd
  • Open default SSH port 22 on all the nodes and clusters for OpenSSH connection.
  • The user should be added in all the target nodes & cluster

Configure and Install the MS SQL Cluster Integration

  1. From All Clients, select a client.
  2. Go to Setup > Account.
  3. Select the Integrations and Apps tab.
  4. The INSTALLED INTEGRATIONS page, where all the installed applications are displayed.
    Note: If there are no installed applications, it will navigate to the Available Integrations and Apps page.
  5. Click + ADD on the INSTALLED INTEGRATIONS page. The AVAILABLE INTEGRATIONS AND APPS page displays all the available applications along with the newly created application with the version.
    Note: You can even search for the application using the search option available. Also you can use the All Categories option to search.
  6. Click ADD in the MS SQL Cluster application.
  7. In the Configurations page, click + ADD. The Add Configuration page appears.
  8. Enter the following BASIC INFORMATION:
Field NameField TypeField DependencyDescription
NameStringNAEnter the name for the integration.
MSSQL Type*DropdownN/ASelect the type of Microsoft SQL Server instance you are integrating. The options availble are:
  • Standalone: A single SQL Server instance that operates independently.
  • Cluster: A clustered SQL Server instance that runs across multiple nodes for high availability.
  • Veritas Cluster: A clustered SQL Server instance that runs across multiple nodes for high availability managed by Veritas clustering software.
    Note: The support to Veritas Cluster persona will be deprecated soon. For more information see, Deprecation of Veritas Cluster person in MS SQL Cluster Monitoring Integration 2.0.
IpAddress/HostName*TextN/AIf the MSSQL Type is set to CLUSTER, enter the IP address or hostname of the Windows cluster. If set to STANDALONE, enter the IP address or hostname of the individual node instead.
MSSQL Cluster TypeDropdownAppears only when Cluster is selected in the MSSQL Type field.Select the type of SQL Server cluster configuration being integrated. The options available are:
  • Failover Cluster Instance: A clustered SQL Server instance where only one node is active at a time, and failover occurs automatically in case of a failure.
  • AvailabilityGroup: A high-availability solution where multiple SQL Server instances host a synchronized set of databases, allowing seamless failover and load balancing.
Note: By default FailoverClusterInstance is selected.
MSSQL Cluster / Node Credentials*DropdownN/AProvide the Windows authentication credentials required to connect to the Windows cluster hosting the SQL Server cluster, or to the individual nodes in the case of a standalone SQL Server deployment.
You can either select from the dropdown if the credentials are existing. Else click +ADD to create credentials.
In the ADD CREDENTIAL window enter the following:
  • Name: Enter the name of the credential.
  • Description: Enter the brief description of the credential.
  • User Name: Enter the User name of the credential.
  • Password: Enter the Password of the credential.
  • Confirm Password: Enter the password to confirm.
SQL Server Authentication ModeCheckboxN/AEnable this option to provide SQL Server credentials if the specified Windows credentials do not have sufficient SQL Server access rights.
  • If checked, OpsRamp will use SQL Server Authentication, requiring a username and password for access.
  • If unchecked, OpsRamp will use Windows Authentication, which relies on the system’s configured Windows credentials to authenticate.
SQL Server CredentialsDropdownThis field is displayed only when the SQL Server Authentication Mode checkbox is selected.Select the SQL Server credentials from the dropdown. You can either select from the dropdown if the credentials are existing. Else click +ADD to create credentials.
In the ADD CREDENTIAL window enter the following:
  • Name: Enter the name of the credential.
  • Description: Enter the brief description of the credential.
  • User Name: Enter the User name of the credential.
  • Password: Enter the Password of the credential.
  • Confirm Password: Enter the password to confirm.
Connection ModeDropdownN/AChoose PowerShell or Open SSH based on the connection type with target device.
Note: PowerShell-based communication is planned for removal in upcoming releases due to security vulnerabilities. Migration to OpenSSH is recommended for continued support and improved security.
App Failure NotificationsCheckboxN/AThis checkbox is used to confirm whether a notification should be sent in the event of an app failure due to authentication or connection-related exceptions.
  • If selected, notifications will be triggered for such failures.
  • If not selected, no notifications will be sent in these cases.
Request TimeoutsCheckboxN/ASelecting this checkbox enables you to configure the timeout settings for NativeBridge connections and script execution requests made by the integration to the end device.
Connection TimeOut In MinsDropdownThis field appears only if the Request Timeouts checkbox is selected.Select the maximum time, in minutes, that the integration should wait while establishing a connection with the nativeBridge.
Default value: 10 minutes.
Connection Request TimeOut In MinDropdownThis field appears only if the Request Timeouts checkbox is selected.Select the maximum time, in minutes, required to process a NativeBridge HTTP call, from sending the request to receiving the response.
Default value: 10 minutes.
Socket Timeout In MinsDropdownThis field appears only if the Request Timeouts checkbox is selected.Select the maximum allowable time of inactivity between two data packets during data exchange with the server.
Default value: 10 minutes.
Script Execution TimeOut In MinsDropdownThis field appears only if the Request Timeouts checkbox is selected.Select the maximum time, in minutes, that the integration should wait while establishing a connection with the nativeBridge.
Default value: 10 minutes.
  1. Select the below mentioned Custom Attribute:
Field NameField TypeField DependencyDescription
Custom AttributeDropdownN/ASelect the custom attribute from the dropdown.
ValueDropdownN/ASelect the value from the dropdown.

Note: The custom attribute that you add here will be assigned to all the resources that are created by the integration. You can add a maximum of five custom attributes (key and value pair).

  1. In the RESOURCE TYPE section, select:
    • ALL: All the existing and future resources will be discovered.
    • SELECT: You can select one or multiple resources to be discovered.
  2. In the DISCOVERY SCHEDULE section, select Recurrence Pattern to add one of the following patterns:
    • Minutes
    • Hourly
    • Daily
    • Weekly
    • Monthly
  3. Click ADD.


Now the configuration is saved and displayed on the configurations page after you save it.
Note: From the same page, you may Edit and Remove the created configuration.

  1. Click Next.
  2. Below are the optional steps you can perform on the Installation page.
  • Under the ADVANCED SETTINGS, Select the Bypass Resource Reconciliation option, if you wish to bypass resource reconciliation when encountering the same resources discovered by multiple applications.

    Note: If two different applications provide identical discovery attributes, two separate resources will be generated with those respective attributes from the individual discoveries.

Cisco FirePower
  • Click +ADD to create a new collector by providing a name or use the pre-populated name.
  1. Select an existing registered profile.
Aruba Airwave Integrations
  1. Click FINISH.

The application is now installed and displayed on the INSTALLED INTEGRATION page. Use the search field to find the installed application.

Modify the Configuration

View the MS SQL Cluster Details

  1. Navigate to Infrastructure > Search > DATABASES > MS SQL Cluster.
  2. Select the application on the MS SQL Cluster page.
  3. The RESOURCE page appears from the right.
  4. Click the ellipsis (…) on the top right and select View Details.


View resource metrics

To confirm MS SQL Cluster monitoring, review the following:

  • Metric graphs: A graph is plotted for each metric that is enabled in the configuration.
  • Alerts: Alerts are generated for metrics that are configured as defined for integration.
MS SQL Configure