vROPs Telegraf Agent install

Telegraf Agents

As you know from VMware vRealize Operations Manager 7.5 the application monitoring agent has been changed from End Point Operations Agent to Telegraf. Earlier admins needs to deploy End Point Operations Agents manual or use some central / remote deploy solutions. Upgrade was a nightmare becouse in versions 6.x have no manage upgrade process. Some versions later VMware created a solution pack wich are able to upgrade all End Point Agents and shows to you some feedback about upgrade status. You can manage it only on Admin UI and was not a perfect solution.

So they decided to change agent to Telegraf. vROPs able to manage all agent centrally so Day1 and Day2 operations now became a dream. Just select VM or VMs where you want to deploy agent and type user/pass (or import from a CSV) and hit install button. Easy, isn’t it? Most of us could says Yes, Finally!

But in the real World things works different way as in books and guides. I think many of us have similar experience. Finally I reach that point where I will tell you the content of this article. In this blog post I will describe how you can troubleshoot your failed Telegraf agent deploy.

Deploy in quick steps

First of all we need to deploy an ARC (reactor 🙂 – Application Remote Collector ) becouse it is the heart of Telegraf like as Tony Stark.
https://docs.vmware.com/en/vRealize-Operations-Manager/8.1/com.vmware.vcom.config.doc/GUID-7F1F910F-AFB9-493C-9CBF-DEFFF5E9BB69.html

When you install OVF successfully you have to add ARC to vROPs. For deatels pls. check my VMUG presentation about “vRealize Operation Manager 7.5 – What’s new” from slide 12.


Usefully informations and links

I will try to explain how work installation process. When you select VM where you want to deploy agent and added username and password binaries start to copy here (base on Windows OS): “C:\Users\Install_User\AppData\Local\VMware-UCP_Bootstrap_Scriptsvmware”

If you don’t see the installation files check your collection user permissions. You can find what you need below.

Among lots of files and folder you can see wget.exe and uaf-bootstrap-launcher.bat files. uaf-bootstrap-launcher.bat file will start the installation process behalf of your admin user that you type in vROPs during Telegraf installation wizzard.
Wget.exe call ARC Proxy server and try to download other necessery files and configurations. It use 4505 and 4506 ports (Control-plane) to this process.

Basic troubleshooting checks:

  • VMware Tools insalled on VM
  • Microsoft Visual C++ Redistributable 14+ insalled on VM
  • vCenter (where your VM is located) and ARC mapped
  • Service user part of local administrators group (Windows base VMs)
  • If you can, switch off UAC or install Telegraf manually
  • Universal C Runtime installed (only on Windows 2012)
  • All Ports open (most of case this is the problem)

Ports and Communication

The draw below visualise control and data path and dependency of components. I like similar diagrams because I can imagine better the flow.

ComponentPort
Data Plane (Emqtt)8883 (TCP/SSL)
Ucpapi9000 (HTTPS)
Control-plane4505 (TCP/SSL), 4506 (TCP/SSL)
Nginx8999 (HTTPS)
Virtual Appliance (Deployed as an OVF)NA
EndpointNA
VMware Appliance Management Interface (VAMI)5480

Source: https://docs.vmware.com/en/vRealize-Operations-Manager/8.0/com.vmware.vcom.core.doc/GUID-C8E3FFBA-6297-4009-ADE3-83C5A8B6359D.html

https://docs.vmware.com/en/vRealize-Operations-Manager/8.0/com.vmware.vcom.core.doc/GUID-85EC81E1-A40B-4FA3-A105-24A2137D1870.html

Collection user permissions

Collection user same as the user that you configured on vCenter adapter in vRealize Operations Manager. Check your service user permissions in vCenter.

  • Guest Operation alias modification
  • Guest Operation alias query
  • Guest Operation modifications
  • Guest Operation program execution
  • Guest Operation queries

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html

Log files and locations

You can check log files direct on Appliance or create a log boundle. Just login by VAMI interface.

Create Support Bundles: https://docs.vmware.com/en/vRealize-Operations-Manager/8.1/com.vmware.vcom.config.doc/GUID-D91B32BF-D7E4-4340-85E4-457E1AC954C8.html

uaf-bootstrap-result file conatin useful information about your deployment status and show your current error message.

{
  "status":"FAILED",
  "data":[
     {
        "status":"FAILED",
        "message":"  Install user 'INSTALL-USER' should be a member of the local 'Administrators' group",
        "stage":"0"
     }
  ],
  "action":"install",
  "job":"install",
  "currentstage":"0",
  "totalstages":"-1"
}

vmware-vmscv.log file shows details information. You can find it under %tmp% folder.

[2020-06-15T13:29:42.914Z] [ message] [vix] VixTools_ProcessVixCommand: command 84
[2020-06-15T13:29:42.961Z] [ warning] [VCGA] [function VGAuthLoadUserProfile, file d:/build/ob/bora-10402285/bora-vmsoft/vgauth/lib/impersonateWin32.c, line 114], NetUserGetInfo() failed with error 2221 for user 'INSTALL-USER'
ComponentPath
Data Plane (Emqtt)/data1/ucp-emqtt-logs/error <#>.log/data1/ucp-emqtt-logs/crash <#>.log
Ucpapi/data1/ucpapis/ucpapi.log
Control-plane/data1/ucp-salt/master /data1/ucp-salt/api
Nginx/data1/ucp-nginx/access.log
Virtual Appliance (Deployed as an OVF)/ucp/support-bundle/Logs
Endpoint/tmp/vmware-root/VMwareUCP_Bootstrap_Scriptsvmware*/uaf_bootstrap.log
/tmp/*/VMware-UCP_Bootstrap_Scripts*/
/tmp/vmware-root/VMware-UCP_Bootstrap_Scriptsvmware*/uaf_bootstrap.log
C:\Windows\Temp\VMware-UCP_Bootstrap_Scriptsvmware*/uaf_bootstrap.log

Source: https://docs.vmware.com/en/vRealize-Operations-Manager/7.5/com.vmware.vcom.core.doc/GUID-2FEF06B4-A56C-44B6-8A24-AACE35AC7986.html

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.