SAP HANA System

Configure SAP HANA System for Monitoring

1. Navigate to Dashboards → Administrator.

2. In the Administrator dashboard, locate the "HANA Systems" panel and click to start adding a system to be monitored.

Figure 1: Adding a New SAP HANA System

3. In the "Create New HANA System" wizard, fill out all the necessary information. Once completed, click to add the system.

Note:

• The port will default to 3<System Number>15, override it if different, such as in a Multi-tenant Database Container.

• For the "Tenant Database" field, please provide the HANA Tenant SID of the HANA Database.

• If the HANA Database is to be connected as SYSTEMDB, enter "SYSTEMDB" in the Tenant Database field.

Figure 2: HANA System Details

4. A pop-up message will confirm that the SAP HANA DB has been successfully added. Click OK to dismiss and configure the SAP HANA user account for monitoring.

Figure 3: SAP HANA Monitoring Created Successfully

5. Provide the account information in the wizard and click to complete the configuration.

Note: Please take note of the SAP HANA Authorization requirements.

Figure 4: SAP HANA User Account Information

6. A pop-up message will confirm that the HANA account has been created successfully. Click OK to complete the process.

Figure 5: SAP HANA Account Confirmation

7. The newly added system will appear in the "SAP HANA System" panel.

Figure 6: SAP HANA Systems

Note: It may take a few minutes for the status to change to "In Progress." Refresh the panel if needed. If there are configuration issues, such as incorrect connection parameters or an invalid account, the status will remain "Ready". Troubleshoot by displaying the log. Click for the new record, or click the object icon and select Log from the pop-up menu.

8. The system will show up in the service grid within 5-15 minutes.

Figure 9: S/4HANA in IT-Conductor Service Grid

IT-Conductor SAP HANA Authorizations Requirements

For each HANA database, including the SYSTEMDB that will be monitored, create a monitoring user with the following SQL:

create user <Monitoring user> <Monitoring User Password> no force_first_password_change;
alter user <Monitoring user> DISABLE PASSWORD LIFETIME;
grant MONITORING to <Monitoring user>

Figure 10: Sample Monitoring User

Note:

• Option "no force_first_password_change" - the password does not need to be changed on the first time login.

• Option "DISABLE PASSWORD LIFETIME" is considered a technical user. Thus, it is exempted from changing the password as specified in the parameter "maximum_password_lifetime".

ALTER USER <user> DISABLE PASSWORD LIFETIME

To verify it has a lifetime password:

SELECT USER_NAME, PASSWORD_CHANGE_TIME FROM USERS WHERE USER_NAME = '<user>';

It should have an empty "PASSWORD_CHANGE_TIME" value.

Figure 11: Sample NULL Result

Monitoring Role (extract from Security Guide) - This role contains privileges for full read-only access to all metadata, the current system status in the system monitoring views, and the data collected by the statistics server.

Note: For MDC (multi-tenant), the user should be created in the SYSTEMDB, and each tenant database will be registered in IT-Conductor.

To list (SQL) port numbers for SYSTEMDB and Tenant DBs used in registering.

 select * from sys_databases.m_services
 where sql_port <> 0;

Figure 12: Sample Port Number List