Purpose
There are several general OMK settings as well as application specific settings in opCommon.nmis that customers should consider changing to suit their environment.
Exercise caution while editing /usr/local/omk/conf/opCommon.nmis; if a syntax error is induced all OMK applications will cease to function.
OMK Settings
Authentication
Authentication should be integrated into the enterprise infrastructure to maintain security and scalability.
'authentication' => { 'auth_crowd_password' => '', 'auth_crowd_server' => '', 'auth_crowd_user' => '', 'auth_expire_seconds' => '3600', 'auth_htpasswd_encrypt' => 'crypt', 'auth_htpasswd_file' => '<omk_conf>/users.dat', 'auth_lockout_after' => 0, 'auth_login_motd' => 'Authentication required: default credentials are nmis/nm1888', 'auth_method_1' => 'htpasswd', 'auth_method_2' => 'openaudit', 'auth_method_3' => 'openaudit', 'auth_sso_domain' => '' },
The email section should be configured for the customers environment.
'email' => { 'mail_domain' => 'yourdomain.com', 'mail_from' => 'yourmailname@yourdomain.com', # auth is attempted if both user and password are set 'mail_user' => 'your_user_account@your_domain.com', 'mail_password' => 'your_password', 'mail_server' => 'smtp.yourdomain.com', 'mail_server_port' => 25, 'mail_use_tls' => 'true', # new: do STARTTLS # 'mail_subject_prefix' => '[automatic] ', },
Database
There are several database settings that can be customized as seen below. The most popular attribute we seen changed the the 'db_query_timeout' value.
'database' => { 'db_server' => 'localhost', 'db_port' => '27017', 'db_name' => 'nmis', 'db_admin_port' => '28017', 'db_username' => 'opUserRW', 'db_password' => 'op42flow42', 'db_connection_timeout' => 20000, 'db_query_timeout' => 5000, 'db_ping_timeout' => 2000, 'db_write_concern' => 1, 'db_use_v26_features' => 1, },
NMIS
NMIS is the engine that OMK applications leverage. The NMIS engine can be on the local server or on a remote server. Be sure to configure the 'nmis_host_base' attribute.
'nmis' => { '<nmis_dir>' => '/usr/local/nmis8', '<nmis_logs>' => '/usr/local/nmis8/logs', 'nmisConf' => 'Config', 'nmis_cgi_url_base' => '/cgi-nmis8', 'nmis_dir' => '/usr/local/nmis8', 'nmis_host_base' => 'http://localhost', 'nmis_icon_small' => '<omk_url_base>/icons/nmis_sml.png', 'nmis_max_filtered_table_cache_size' => 100, 'nmis_sensitive_property' => [ 'community', 'privkey', 'privpassword', 'authkey', 'authpassword', 'wmiusername', 'wmipassword', 'username' ], 'prefer_local_nmis' => 'false' },
OMK Daemon
omkd is the web server daemon for OMK applications. There are several attributes that can be changed in this section but be sure to change the 'omkd_secrets' attribute.
'omkd' => { 'omkd_secrets' => [ 'CHANGE_ME_u3207bhcjq1vcpv43e4b' ], 'omkd_workers' => 5 },
opEvents
opEvents has many configuration attributes that may be helpful. The following are a few that we suggest reviewing.
'opevents_reports_purge_older_than' => undef, # covers summary reports 'opevents_events_purge_older_than' => undef, # covers events and actions 'opevents_rawlogs_purge_older_than' => undef, # covers raw logs 'opevents_archivelogs_purge_older_than' => undef, # covers archive logs 'opevents_url_base' => 'http://yourserver.yourdomain', 'opeventsd_max_processes' => 10, 'opeventsd_update_rate' => 10,
opCharts
opCharts has many configuration attributes that may be helpful. The following are a few that we suggest reviewing.
'opcharts_url_base' => "http://yourserver.yourdomain/",
opConfig
opConfig has many configuration attributes that may be helpful. The following are a few that we suggest reviewing.
'opconfig_url_base' => "http://yourserver.yourdomain/",
opFlow
opFlow has many configuration attributes that may be helpful. The following are a few that we suggest reviewing.
'opflow_display_dns' => 'true', 'opflow_raw_files_age_days' => 10, 'opflow_resolve_endpoint_dns' => 'false', 'opflow_url_base' => 'http://yourserver.yourdomain/', 'opflow_use_aggregation' => 'false',
opReports
opReports has many configuration attributes that may be helpful. The following are a few that we suggest reviewing.
'opreports_url_base' => 'http://yourserver.yourdomain/', 'default_report_timezone' => 'UTC',
opTrend
opTrend has many configuration attributes that may be helpful. The following are a few that we suggest reviewing.
'optrend_maxthreads' => 10, 'optrend_process_condition_in_nmis' => 'true', 'optrend_seds_control_mutliplier' => 3,