Configure the Hardware Sentry Agent

HTTP

Use the parameters below to configure the HTTP protocol:

Example

hosts:

  - host:
      hostname: myhost-01
      type: storage
    http:
      https: true
      port: 443
      username: myusername
      password: mypwd

IPMI

Use the parameters below to configure the IPMI protocol:

Example

hosts:

- host:
    hostname: myhost-01
    type: oob
  ipmi:
    username: myusername
    password: mypwd

OS commands

Use the parameters below to configure OS Commands that are executed locally:

Example

hosts:
  - host:
      hostname: myhost-01
      type: linux
    osCommand:
      timeout: 120
      useSudo: true
      useSudoCommands: [ cmd1, cmd2 ]
      sudoCommand: sudo

SSH

Use the parameters below to configure the SSH protocol:

Example

hosts:
  - host:
      hostname: myhost-01
      type: linux
    ssh:
      timeout: 120
      useSudo: true
      useSudoCommands: [ cmd1, cmd2 ]
      sudoCommand: sudo
      username: myusername
      password: mypwd
      privateKey: /tmp/ssh-key.txt

SNMP

Use the parameters below to configure the SNMP protocol:

Example

hosts:

- host:
    hostname: myhost-01
    type: linux
  snmp:
    version: v1
    community: public
    port: 161
    timeout: 120s

- host:
    hostname: myhost-01
    type: linux
  snmp:
    version: v2c
    community: public
    port: 161
    timeout: 120s

- host:
    hostname: myhost-01
    type: linux
  snmp:
    version: v3-md5
    community: public
    port: 161
    timeout: 120s
    privacy: des
    privacyPassword: myprivacypwd
    username: myusername
    password: mypwd

WBEM

Use the parameters below to configure the WBEM protocol:

Example

hosts:

  - host:
      hostname: myhost-01
      type: storage
    wbem:
      protocol: https
      port: 5989
      timeout: 120s
      username: myusername
      password: mypwd

WMI

Use the parameters below to configure the WMI protocol:

Example

hosts:

  - host:
      hostname: myhost-01
      type: win
    wmi:
      timeout: 120s
      username: myusername
      password: mypwd

WinRM

Use the parameters below to configure the WinRM protocol:

Example

hosts:

  - host:
      hostname: server-11
      type: win
    winrm:
      protocol: http
      port: 5985
      username: myusername
      password: mypwd
      timeout: 120s
      authentications: [ntml]

Disabling Alerts (Not Recommended)

To disable Hardware Sentry OpenTelemetry Collector's alerts:

• for all your hosts, set the disableAlerts parameter to true just before the hosts section:

  disableAlerts: true
  
  hosts: # ...
  

• for a specific host, set the disableAlerts parameter to true in the relevant host section:

  hosts:
  
  - host:
      hostname: myhost
      type: linux
    snmp:
      version: v1
      community: public
      port: 161
      timeout: 120s
    disableAlerts: true
  

Hardware Problem template

When detecting a hardware problem, Hardware Sentry OpenTelemetry Collector triggers an alert as OpenTelemetry log. The alert body is built from the following template:

Hardware problem on ${FQDN} with ${MONITOR_NAME}.${NEWLINE}${NEWLINE}${ALERT_DETAILS}${NEWLINE}${NEWLINE}${FULLREPORT}

To change this default hardware problem template:

• for all your hosts, configure the hardwareProblemTemplate parameter just before the hosts section:

  hardwareProblemTemplate: Custom hardware problem on ${FQDN} with ${MONITOR_NAME}.
  
  hosts: # ...
  

• for a specific host, configure the hardwareProblemTemplate parameter in the relevant host section:

  hosts:
  
  - host:
      hostname: myhost
      type: linux
    snmp:
      version: v1
      community: public
      port: 161
      timeout: 120s
    hardwareProblemTemplate: Custom hardware problem on myhost with ${MONITOR_NAME}.
  

and indicate the template to use when building alert messages.

For more information about the alert mechanism and the macros to use, refer to the Alerts page.

Basic authentication header

The Hardware Sentry OpenTelemetry Collector's internal OTLP Exporter authenticates itself with the OTLP gRPC Receiver by including the HTTP Authorization request header with the credentials. A predefined Basic Authentication Header value is stored internally and included in each request when sending telemetry data.

To override the default value of the Basic Authentication Header, add a new Authorization header under the exporter:otlp:headers section:

exporter:
  otlp:
    headers:
      Authorization: Basic <credentials>

hosts: # ...

where <credentials> are built by first joining your username and password with a colon (myUsername:myPassword) and then encoding the value in base64.

For more security, encrypt the Basic <credentials> value. See Encrypting Passwords for more details.

Warning: If you update the Basic Authentication Header, you must generate a new .htpasswd file for the OpenTelemetry Collector Basic Authenticator.

Collect period

By default, Hardware Sentry OpenTelemetry Collector collects metrics from the monitored hosts every minute. To change the default collect period:

• for all your hosts, add the collectPeriod parameter just before the hosts section:

  collectPeriod: 2m
  
  hosts: # ...
  

• for a specific host, add the collectPeriod parameter in the relevant host section:

  hosts:
  
  - host:
      hostname: myhost
      type: linux
    snmp:
      version: v1
      community: public
      port: 161
      timeout: 120s
    collectPeriod: 1m30s # Customized
  

Warning: Collecting metrics too frequently can cause CPU-intensive workloads.

Connectors

The Hardware Sentry OpenTelemetry Collector comes with the Hardware Connector Library, a library that consists of hundreds of hardware connectors that describe how to discover hardware components and detect failures. When running Hardware Sentry OpenTelemetry Collector, the connectors are automatically selected based on the device type provided and the enabled protocols. You can however indicate to Hardware Sentry OpenTelemetry Collector which connectors should be used or excluded.

Use the parameters below to select or exclude connectors:

Connector names must be comma-separated, as shown in the example below:

hosts:

  - host:
      hostname: myhost-01
      type: win
    wmi:
      timeout: 120s
      username: myusername
      password: mypwd
    selectedConnectors: [ VMwareESX4i, VMwareESXi ]
    excludedConnectors: [ VMwareESXiDisksStorage ]

Note: Any mispelled connector will be ignored.

To know which connectors are available, refer to Monitored Systems or run the below command:

$ hws -l

For more information about the hws command, refer to Hardware Sentry CLI (hws)

Discovery cycle

Hardware Sentry OpenTelemetry Collector periodically performs discoveries to detect new components in your monitored environment. By default, Hardware Sentry OpenTelemetry Collector runs a discovery after 30 collects. To change this default discovery cycle:

• for all your hosts, add the discoveryCycle just before the hosts section:

  discoveryCycle: 15
  
  hosts: # ...
  

• for a specific host, add the discoveryCycle parameter in the relevant host section:

  hosts:
  
  - host:
      hostname: myhost
      type: linux
    snmp:
      version: v1
      community: public
      port: 161
      timeout: 120s
    discoveryCycle: 5 # Customized
  

and indicate the number of collects after which a discovery will be performed.

Warning: Running discoveries too frequently can cause CPU-intensive workloads.

Extra labels

Add labels in the extraLabels section to override the data collected by the Hardware Sentry Agent or add additional attributes to the Host Resource. These attributes are added to each metric of that Resource when exported to time series platforms like Prometheus.

In the example below, we override the host.name attribute resolved by Hardware Sentry OpenTelemetry Collector with host01.internal.domain.net and indicate that it is the Jenkins app:

hosts:

- host:
    hostname: host01
    type: Linux
  snmp:
    version: v1
    port: 161
    timeout: 120
  extraLabels:
    host.name: host01.internal.domain.net
    app: Jenkins

Hostname resolution

By default, Hardware Sentry OpenTelemetry Collector resolves the hostname of the host to a Fully Qualified Domain Name (FQDN) and displays this value in the Host Resource attribute host.name. To display the configured hostname instead, set resolveHostnameToFqdn to false:

resolveHostnameToFqdn: false

hosts:

- host:
    hostname: host01
    type: Linux

Job pool size

By default, Hardware Sentry OpenTelemetry Collector runs up to 20 discovery and collect jobs in parallel. To increase or decrease the number of jobs Hardware Sentry OpenTelemetry Collector can run simultaneously, add the jobPoolSize parameter just before the hosts section:

jobPoolSize: 20

hosts: # ...

and indicate a number of jobs.

Warning: Running too many jobs in parallel can lead to an OutOfMemory error.

Sequential mode

By default, Hardware Sentry OpenTelemetry Collector sends the queries to the host in parallel. Although the parallel mode is faster than the sequential one, too many requests at the same time can lead to the failure of the targeted system.

To force all the network calls to be executed in sequential order:

• for all your hosts, enable the sequential option just before the hosts section (NOT RECOMMENDED):

  sequential: true
  
  hosts: # ...
  

• for a specific host, enable the sequential option in the relevant host section:

  hosts:
  
  - host:
      hostname: myhost
      type: linux
    snmp:
      version: v1
      community: public
      port: 161
      timeout: 120s
    sequential: true # Customized
  

Warning: Sending requests in sequential mode slows down the monitoring significantly. Instead of using the sequential mode, you could increase the maximum number of allowed concurrent requests in the monitored system, if the manufacturer allows it.

Timeout, Duration and Period Format

Timeouts, durations and periods are specified with the below format:

Trusted certificates file

A TLS handshake takes place when the Hardware Sentry Agent's OTLP Exporter instantiates a communication with the OTLP gRPC Receiver. By default, the internal OTLP Exporter client is configured to trust the OTLP gRPC Receiver's certificate security/otel.crt.

If you generate a new server's certificate for the OTLP gRPC Receiver, you must configure the trustedCertificatesFile parameter under the exporter:otlp section:

exporter:
  otlp:
    trustedCertificatesFile: security/new-server-cert.crt

hosts: # ...

The file should be stored in the security folder and should contain one or more X.509 certificates in PEM format.