After you implement the Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution, monitor the components that are newly-added to your VMware Cloud Foundation system.

For validated monitoring solutions, see the VMware Validated Solutions landing page.

Integration with VMware Aria Operations

If your environment is running VMware Aria Operations, you can connect VMware Aria Operations to each Site Recovery Manager instance by using a VMware Site Recovery Manager adapter. You can connect VMware Aria Operations to each vSphere Replication instance by using a VMware vSphere Replication adapter.

VMware Aria Operations Management Packs for Site Protection and Disaster Recovery

If Site Recovery Manager and vSphere Replication are integrated into your VMware Cloud Foundation system, you install and activate additional non-native management packs for VMware Aria Operations to ensure collecting data from or sending data to the target system.

Table 1. Non-Native Management Packs for Site Protection and Disaster Recovery

Management Pack

Description

Site Recovery Manager

Provides metrics for Site Recovery Manager.

vSphere Replication

Provides metrics for vSphere Replication.

Table 2. Design Decisions on Management Packs for VMware Aria Operations with Site Protection and Disaster Recovery

Design Decision ID

Design Decision

Design Justification

Design Implication

SPR-VROPS-CFG-001

Install the Site Recovery Manager management pack for VMware Aria Operations.

Establishes the communication between VMware Aria Operations and VMware Site Recovery Manager endpoints.

You must install the management pack manually.

SPR-VROPS-CFG-002

Install the vSphere Replication management pack for VMware Aria Operations.

Establishes the communication between VMware Aria Operations and VMware vSphere Replication endpoints.

You must install the management pack manually.

SPR-VROPS-CFG-003

Configure the following endpoints to use the remote collector group:

  • Site Recovery Manager

  • vSphere Replication

Local-instance components are configured to use the remote collector group. This offloads data collection for local management components from the analytics cluster.

None.

VMware Aria Operations Metrics

VMware Aria Operations collects data from objects in your environment. Each piece of collected data is called a metric observation or value. VMware Aria Operations uses adapters and management packs to collect raw metrics. In addition to the metrics it collects, VMware Aria Operations calculates capacity metrics, badge metrics, and metrics to monitor the health of your system.

Table 3. VMware Cloud Foundation Metrics

Type

Description

Site Recovery Manager

Collects metrics for Site Recovery Manager, licensing, recovery plan status, and placeholder virtual machines.

vSphere Replication

Collects metrics from vSphere Replication, such as VM replication details, direction of replication, replication status, RPO violation, transferred bytes, last instance sync point, last sync duration and last sync size. Provides visibility on replication settings such as RPO, MPIT, quiescing, network compression and encryption.

Service Accounts for the Management Packs for Site Protection and Disaster Recovery

You add and configure accounts associated with Site Recovery Manager and vSphere Replication for activating the corresponding VMware Aria Operations management packs.

Table 4. Design Decisions on Service Accounts for VMware Aria Operations Management Packs for Site Protection and Disaster Recovery

Design Decision ID

Design Decision

Design Justification

Design Implication

SPR-SRM-SEC-003

Configure a service account in vCenter Server with global permissions, for application-to-application communication from the Site Recovery Manager adapters in VMware Aria Operations to vSphere and Site Recovery Manager, and assign the Read Only role.

Provides the following access control features:

  • The adapters in VMware Aria Operations access vSphere and Site Recovery Manager with the minimum set of permissions that are required to collect metrics.

  • In the event of a compromised account, the accessibility in the destination application remains restricted.

  • You can introduce improved accountability in tracking request-response interactions between the components of the SDDC.

You must maintain the life cycle and availability of the service account outside of the SDDC stack.

SPR-VR-SEC-003

Configure a service account in vCenter Server with global permissions, for application-to-application communication from the vSphere Replication adapters in VMware Aria Operations to vSphere and vSphere Replication, and assign the VRM replication viewer role.

Provides the following access control features:

  • The adapters in VMware Aria Operations access vSphere and vSphere Replication with the minimum set of permissions that are required to collect metrics.

  • In the event of a compromised account, the accessibility in the destination application remains restricted.

  • You can introduce improved accountability in tracking request-response interactions between the components of the SDDC.

You must maintain the life cycle and availability of the service account outside of the SDDC stack.