Extreme Networks Purview Application Analytics Integration with VMware vrealize Log Insight Application Note Abstract: This document describes the integration of Extreme Networks Purview Application Analytics engine with the VMware vrealize Log Insight real-time log management dashboard solution. Published: May 2015 Extreme Networks, Inc. 145 Rio Robles San Jose, California 95134 Phone / +1 408.579.2800 Toll-free / +1 888.257.3000 www.extremenetworks.com 2012 2015 Extreme Networks, Inc. All Rights Reserved. AccessAdapt, Alpine, Altitude, BlackDiamond, Direct Attach, EPICenter, ExtremeWorks Essentials, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ExtremeXOS ScreenPlay, ReachNXT, Ridgeline, Sentriant, ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack, XNV, the Extreme Networks logo, the Alpinelogo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, and the Powered by ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other countries. sflow is the property of InMon Corporation. Specifications are subject to change without notice. All other registered trademarks, trademarks, and service marks are property of their respective owners. For additional information on Extreme Networks trademarks, see www.extremenetworks.com/company/legal/trademarks.
Overview Integration between Extreme Networks Purview Application Analytics and the VMware vrealize Log Insight platform provides real-time analytics and visiblity into application performance, usage, and capacity across the network. Extreme Networks Purview solution receives a combination of application traffic and Netflow information from the network infrastructure to provide visibility into the applications utilized within the corporate network, and provide information related to application performance. Application information is forwarded into the VMware Log Insight utility via a Syslog feed enabling IT departments to identify trends, resource use, and operational effectiveness of traffic traversing the VMware environment. IT administrators can easily drill down into details such as overall applications use, clients, flows, network performance, and business specific dashboards. Purview leverages an open and customizable library of application fingerprints (including upwards of 9,000 fingerprints for over 7,000 applications and protocols out of the box) to provide detailed application usage and performance information by application, user, device type, location, and more. By providing pervasive application monitoring across the entire network from edge to datacenter to core to internet, the integration of Purview and vrealize Log Insight unifies the viewing of network and application performance, as well as resource and asset utilization well beyond the virtual infrastructure. Extreme Networks, Inc. All rights reserved. 2
Components Software Requirements Extreme Networks NetSight Advanced 6.2 or above Extreme Networks Purview Application Analytics Engine VMware vrealize Log Insight Appliance VMware vsphere infrastructure Hardware Requirements Extreme Networks CoreFlow 2-enabled Standalone S-Series Appliance (SSA) or Application Sensor PV-FC-180 Figure 1: Solution Components Extreme Networks, Inc. All rights reserved. 3
Custom Dashboards Dashboard displays for Purview within Log Insight are categorized into three separate sections: Purview Application Usage The Application Usage dashboard provides a series of dashboard widgets categorized by application group that display within a time series chart the number of users accessing applications within each particular application group. Data detailing the L7 applications can be used in order to verify compliance to company policy or perform troubleshooting of the infrastructure. Application groups categorized in the dashboard include: Cloud Storage Cloud Computing Storage Business Applications Streaming Applications Social Networking Extreme Networks, Inc. All rights reserved. 4
Purview Analytics The Purview Analytics dashboard provides a collection of time series charts displaying the average network and application response times for critical networking applications, including business and storage applications as well as DNS response time. Comparing and contrasting TCP and application response times allows administrators to quickly determine the source of issues within the network. Entering interactive analysis from the dashboard allows the user to quickly focus on specific clients and compare results with those of the network as a whole. Purview Client Information The Client Information dashboard provides operating system details as well as client counts on the network. Retaining visibility regarding the number of IPs connected to the network provides the ability to consider thresholds in order to prevent sprawl. Extreme Networks, Inc. All rights reserved. 5
Custom Search Queries Extreme Networks Purview Content Pack for Log Insight includes a small set of custom queries that can be used to quickly check the TCP and network response times for specific clients and servers, as well as for specific layer 7 applications. In addition, a query to display all applications used by a single client is included. For more information regarding other Extreme Networks and VMware integrations, please visit www.extremenetworks.com/partners/tsp/data-center-cloud or www.extremenetworks.com/product/purview Extreme Networks, Inc. All rights reserved. 6