SAP IDM Monitor

Monitoring of SAP Identity Management dispatchers, job logs, provisioning queue, packages, identities

General

Executable	SAP_IDM_Monitor.exe
Connection method	ODBC
Ports	5000 (ASE) 1521 (Oracle) 1433 (MSSQL)
Lookup files	itesys.sapidmmonitor.dispatcherloglevel.ovl itesys.sapidmmonitor.dispatcherstate.ovl itesys.sapidmmonitor.housekeepingstate.ovl

Default parameters

Parameter name	Possible values	Default	Description
Host	<ip> | <hostname>	empty	Hostname or IP of the target system. If you use a virtual hostname on your SAP servers, please use also the virtual host to connect.
DBName	string	empty	Name of the database
DBUsername	string	empty	Database user
DBPassword	string	empty	Password of the database user

Sensor-specific parameters

Parameter name	Possible values	Default	Description
DBType	ASE | ORACLE | MSSQL	ASE	Defines which database type is used
DBSchemaPrefix	string	MXMC_db.dbo	Schema prefix of the IDM database ASE: Usually MXMC_db.dbo ORACLE: Usually MXMC_OPER MSSQL: Usually MXMC_db.dbo
Minutes	number	60	Count of past minutes to check for job logs
AdditionalQueries	<file1>,<file2>,<file3>,…	NONE	Additional queries to create custom channels. The queries have to be specified as .sql files in the folder SAP_IDM_Monitor. File syntax: The channel will be named after the filename without .sql The unit of the returned value can be defined in the first line of the sql file as follows: Unit=<Unit>[:f] (:f is optional to define if the value is a float value) Example: Unit=Percent:f (Unit is defined as Percent and the value is handled as float)
CustomOnly	false | true	false	Defines wether only the queries from the AdditionalQueries parameter should be used.

Channels

Channel name	Description	Lookup file
Dispatcher <Name> state	Current state of the dispatcher <Name>. The state of a dispatchers where the LAST_VISITED timestamp is older than two minutes will be recognized as UNKNOWN.	itesys.sapidmmonitor.dispatcherstate.ovl
Dispatcher <Name> JRE log level	Current JRE log level of the dispatcher <Name>	itesys.sapidmmonitor.dispatcherloglevel.ovl
Log errors	Number of errors in the job log within the past <Minutes>
Log warnings	Number of warnings in the job log within the past <Minutes>
Checked-out packages	Number of checked-out packages. (The checked-out packages and the current developer are also shown in the sensor message.)
Entries in provisioning queue	Number of entries in the provisioning queue
ID Store <Name> active identities	Number of active identities per ID store
Inactive Repositories	Number of inactive repositories
Housekeeping status	Displays the status of enabled housekeeping jobs. A job with an empty schedule time will be recognized as failed.
Jobs/Tasks in error state	Displays the count of jobs and tasks in status error.
<AdditionalQuery>	Result of additional query defined in a .sql file for the parameter <AdditionalQueries>

Preparation

If you use a monitoring user which has no access to the Identity Management database schema, please use the following SQL commands to give the necessary access:

grant select on mc_dbschema to <user>
grant select on MC_Dispatcher to <user>
grant select on MC_LOGS to <user>
grant select on mc_jobs to <user>
grant select on mc_package to <user>
grant select on MXP_Provision to <user>
grant select on idmv_vallink_basic_active to <user>
grant select on MXI_IDStores to <user>
grant select on mc_proc to <user>
grant select on MC_REPOSITORY to <user>

warning

Also check permissions for additional queries you defined in the parameter <AdditionalQueries>.

Important notes

warning

Please check the limits if they fit for your alerting.

Changelog

Version	Changes
2024.04	Fixed bug during check of dispatcher state by LAST_VISITED date
2024.01	Added possibility to define additional queries Added parameter CustomOnly to use the sensor with custom queries only
2023.03	Corrected selection of logs when using Oracle database.
2022.08	Added channel for number of inactive repositories Added channel for housekeeping status Improved dispatcher status check regarding the LAST_VISITED flag in the database
2021.06	Collecting information via database instead of SSH New channel for log errors and warnings New channel for checked-out packages New channel for count of entries in provisioning queue New channel for count of active identities per ID store New channel for dispatcher JRE trace level
1.4.1.2	First stable release.