SAP HANA System

How to Configure SAP HANA System Monitoring

1. In the IT-Conductor main menu, navigate to Dashboards > Administrator.

Figure 1: IT-Conductor Dashboards Menu

2. In the Administrator dashboard, locate the HANA Systems panel and click to start adding a system to be monitored.

Figure 2: Add a New SAP HANA System

3. In the Create New HANA System wizard, fill out all the necessary information. Once completed, click to add the system.

Note:

The port will default to 3<System Number>15, override it if different, such as in Multi-tenant Database Container.

For the Tenant Database field, please provide the HANA Tenant SID of the HANA Database.

If the HANA Database is to be connected as SYSTEMDB, enter "SYSTEMDB" in the Tenant Database field.

Figure 3: HANA System Details

4. A pop-up message will confirm that the SAP HANA DB has been successfully added. Click OK to dismiss and proceed to configure the SAP HANA user account to be used for monitoring.

Figure 4: SAP HANA Monitoring Created Successfully

5. Provide the account information in the wizard and click to complete the configuration.

Note: Please take note of the SAP HANA Authorization requirements.

Figure 5: SAP HANA User Account Information

6. A pop-up message will confirm that the HANA account has been created successfully. Click OK to complete the process.

Figure 6: SAP HANA Account Confirmation

7. The newly added system will appear in the SAP HANA System panel.

Figure 7: SAP HANA Systems

Note: It may take a few minutes to change the status to "In Progress," refresh the panel if needed. If there are issues with the configuration, such as wrong connection parameters or an invalid account, etc., the status will stay as "Ready". Troubleshoot by displaying the log. Click the tool for the new record, or click the object icon and select Log from the menu popup.

8. The system will show up in the Service Grid within 5-15 minutes.

Figure 9: IT-Conductor Service Grid View

IT-Conductor SAP HANA Authorizations Requirements

For each HANA database, including the SYSTEMDB that will be monitored, create a monitoring user with the following SQL:

create user <Monitoring user> <Monitoring User Password> no force_first_password_change;
alter user <Monitoring user> DISABLE PASSWORD LIFETIME;
grant MONITORING to <Monitoring user>

Figure 10: Sample Monitoring User

Note:

Option "no force_first_password_change" - the password does not need to be changed on the first time login.

Option "DISABLE PASSWORD LIFETIME" is considered a technical user. Thus, it is exempted from changing the password as specified in the parameter "maximum_password_lifetime".

ALTER USER <user> DISABLE PASSWORD LIFETIME

To verify it has a lifetime password:

SELECT USER_NAME, PASSWORD_CHANGE_TIME FROM USERS WHERE USER_NAME = '<user>';

It should have an empty PASSWORD_CHANGE_TIME value

Figure 11: Sample NULL Result

Monitoring Role (extract from Security Guide) - This role contains privileges for full read-only access to all metadata, the current system status in the system and monitoring views, and the data collected by the statistics server.

Note: For MDC (multi-tenant), the user should be created in the SYSTEMDB, and each tenant database will be registered in IT-Conductor.

To list (SQL) port numbers for SYSTEMDB and Tenant DBs used in registering.

 select * from sys_databases.m_services
 where sql_port <> 0;

Figure 12: Sample Port Number List