Proposed Pull Request Change

📄 Document Links

View on GitHub View on Microsoft Learn

--- title: Enable Insights to troubleshoot SAP workload issues description: Learn to enable SAP Insights on your AMS instance to troubleshoot SAP workload issues. author: akarshprabhu ms.service: sap-on-azure ms.subservice: sap-monitor ms.topic: how-to ms.date: 08/21/2024 ms.author: akak #Customer intent: I am an SAP BASIS or cloud infrastructure team member, I want to enable SAP Insights on my Azure monitor for SAP Instance. # Customer intent: As an SAP BASIS team member, I want to enable SAP Insights on Azure Monitor for my SAP instance, so that I can effectively troubleshoot availability and performance issues with my SAP workloads. --- # Enable Insights to troubleshoot SAP workload issues (preview) [!INCLUDE [Azure Monitor for SAP solutions public preview notice](./includes/preview-sap-insights.md)] The Insights capability in Azure Monitor for SAP Solutions helps you troubleshoot Availability and Performance issues on your SAP workloads. It helps you correlate key SAP components issues with SAP logs, Azure platform metrics, and health events. In this how-to-guide, learn to enable Insights in Azure Monitor for SAP solutions. You can use SAP Insights with only the latest version of the service, *Azure Monitor for SAP solutions* and not *Azure Monitor for SAP solutions (classic)* > [!NOTE] > This section applies to only Azure Monitor for SAP solutions. ## Prerequisites - An Azure subscription. - An existing Azure Monitor for SAP solutions resource. To create an Azure Monitor for SAP solutions resource, see the [quickstart for the Azure portal](quickstart-portal.md) or the [quickstart for PowerShell](quickstart-powershell.md). - An existing NetWeaver and HANA(optional) provider. To configure a NetWeaver provider, see the How to guides for [NetWeaver provider configuration](provider-netweaver.md). - (Optional) Alerts set up for availability and/or performance issues on the NetWeaver/HANA provider. To configure a NetWeaver provider, see the How to guides for [setting up Alerts on Azure Monitor for SAP](get-alerts-portal.md) ## Steps to Enable Insights in Azure Monitor for SAP solutions To enable Insights for Azure Monitor for SAP solutions, you need to: 1. [Prerequisite - Unprotect methods](#unprotect-the-getenvironment-method) 1. [Provide required access](#provide-required-access) ### Unprotect the GetEnvironment method Follow steps to unprotect methods from the [NetWeaver provider configuration page](provider-netweaver.md#prerequisite-unprotect-methods-for-metrics). <br/>If you completed these steps during NetWeaver provider setup, you can skip this section. Ensure that you have unprotected the GetEnvironment method in particular for this capability to work. ### Provide required access In order to provide issue correlations with infrastructure, the Azure Monitor for SAP solutions(AMS) service requires Reader access over the resource groups or subscriptions that hold your SAP system infrastructure - virtual machines and virtual networks. You can assign these role assignments using one of the two methods mentioned. #### Provide access using AMS portal experience 1. Open the AMS instance of your choice and visit the insights tab under Monitoring on the left navigation pane and choose to Configure Insights. :::image type="content" source="./media/enable-sap-insights/configure-insights-button.png" alt-text="Screenshot that shows the configuration button of Insights on AMS."::: 1. Choose the 'Add role assignment' button to open the role assignment experience. :::image type="content" source="./media/enable-sap-insights/configure-insights-flyout.png" alt-text="Screenshot that shows the configuration flyout of Insights on AMS."::: 1. Choose the scope at which you would want to assign the Reader role. You can assign the reader role to multiple resource groups at a time under a subscription scope. Make sure that the scope(s) chosen encompass the SAP system's infrastructure on Azure. Save the role assignments. :::image type="content" source="./media/enable-sap-insights/add-role-assignment.png" alt-text="Screenshot that shows the 'Add role assignment' screen of Insights on AMS."::: #### Provide access using a PowerShell script This script gives your AMS instance Reader role permission over the subscriptions that hold the SAP systems. Feel free to modify the script to scope it down to a resource group or a set of virtual machines. 1. Download the onboarding script [from GitHub](https://github.com/Azure/Azure-Monitor-for-SAP-solutions-preview/blob/main/Scripts/AMS_AIOPS_SETUP.ps1) 1. Go to the Azure portal and select the Cloud Shell tab from the menu bar at the top. Refer [this guide](../../cloud-shell/quickstart.md) to get started with Cloud Shell. 1. Switch from Bash to PowerShell. :::image type="content" source="./media/enable-sap-insights/powershell-upload.png" alt-text="Screenshot that shows the upload button on Azure CLI."::: 1. Upload the script downloaded in the first step. 1. Navigate to the folder where the script is present using the command: ```PowerShell cd <script_path> ``` 6. Set the AMS Resource/ARM ID with the command: ```PowerShell $armId = "<AMS ARM ID>" ``` 7. If the virtual machines (VMs) belong to a different subscription than AMS, set the list of subscriptions in which VMs of the SAP system are present (use subscription IDs): ```PowerShell $subscriptions = "<Subscription ID 1>","<Subscription ID 2>" ``` > [!Important] > To run this script successfully, ensure you have Contributor + User Access Admin or Owner access on all subscriptions in the list. See [steps to assign Azure roles](../../role-based-access-control/role-assignments-steps.md). 8. Run the script uploaded from step 6 using the command: * If ```$subscriptions``` was set: ```PowerShell .\AMS_AIOPS_SETUP.ps1 -ArmId $armId -subscriptions $subscriptions ``` * If ```$subscriptions``` wasn't set: ```PowerShell .\AMS_AIOPS_SETUP.ps1 -ArmId $armId ``` > [!Important] > You might have to wait for up to 30 minutes for your AMS to start receiving metadata of the infrastructure that it needs to monitor. ## Using Insights on Azure Monitor for SAP Solutions(AMS) We have two categories of issues we help you get insights for. * [Availability issues](#availability-insights) * [Performance degradations](#performance-insights) > [!Important] > As a user of the Insights capability, you will require reader access on all virtual machines on which the SAP systems are hosted that you're trying to monitor using AMS. This is to make sure that you're able to view Azure monitor metrics and Resource health events of these virtual machines in context of SAP issues. See [steps to assign Azure roles](../../role-based-access-control/role-assignments-steps.md). ### Availability Insights This capability helps you get an overview regarding availability of your SAP system in one place. You can also correlate SAP availability with Azure platform VM availability and its health events easing the overall root-causing process. #### Steps to use availability insights 1. Open the AMS instance of your choice and visit the insights tab under Monitoring on the left navigation pane. :::image type="content" source="./media/enable-sap-insights/visit-insights-tab.png" alt-text="Screenshot that shows the landing page of Insights on AMS."::: 1. If you completed all [the steps mentioned](#steps-to-enable-insights-in-azure-monitor-for-sap-solutions), you should see the screen shown in step 1 asking for context to be set up. You can set the Time range, SID, and the provider (optional, All selected by default). 1. On the top, you're able to see all the fired alerts related to SAP system and instance availability on this screen. :::image type="content" source="./media/enable-sap-insights/availability-overview.png" alt-text="Screenshot of the overview page of availability insights."::: 1. If you're able to see SAP system availability trend, categorized by VM - SAP process list. If you selected a fired alert in the previous step, you're able to see these trends in context with the fired alert. If not, these trends respect the time range you set on the main Time range filter. :::image type="content" source="./media/enable-sap-insights/availability-trends.png" alt-text="Screenshot of the availability trends of availability insights."::: 1. You can see the Azure virtual machine on which the process is hosted and the corresponding availability trends for the combination. To view detailed insights, select the 'Investigate' link. 1. It opens a context pane that shows you availability insights on the corresponding virtual machine and the SAP application. It has two categories of insights: * Azure platform: VM health events filtered by the time range set, either by the workbook filter or the selected alert. This pane also consists of VM availability metric trend for the chosen VM. :::image type="content" source="./media/enable-sap-insights/availability-vm-health.png" alt-text="Screenshot of the VM health events of availability insights."::: * SAP Application: Process availability and contextual insights on the process like error messages (SM21), Lock entries (SM12), and Canceled jobs (SM37) which can help you find issues that might exist in parallel in the system, at the point in time. ### Performance Insights This capability helps you get an overview regarding performance of your SAP system in one place. You can also correlate key SAP performance issues with related SAP application logs alongside Azure platform utilization metrics and SAP workload configuration drifts easing the overall root-causing process. #### Steps to use performance insights 1. Open the AMS instance of your choice and visit the insights tab under Monitoring on the left navigation pane. 1. On the top, you're able to see all the fired alerts related to SAP application performance degradations. :::image type="content" source="./media/enable-sap-insights/performance-overview.png" alt-text="Screenshot of the overview page of performance insights."::: 1. Next you're able to see key metrics related to performance issues and its trend during the timerange you chose. 1. To view detailed insights issues, you can either choose to investigate a fired alert or view insights for a key metric. 1. On investigating, you see a context pane, which shows you four categories of metrics in context of the issue/key metric chosen. * Issue/Key metric details - Detailed visualizations of the key metric that defines the problem. :::image type="content" source="./media/enable-sap-insights/performance-detail-pane.png" alt-text="Screenshot of the context pane of performance insights."::: * SAP application - Visualizations of the key SAP logs that pertain the issue type. :::image type="content" source="./media/enable-sap-insights/performance-sap-platform-pane.png" alt-text="Screenshot of the SAP pane of performance insights."::: * Azure platform - Key Azure platform metrics that present an overview of the virtual machine of the SAP system. :::image type="content" source="./media/enable-sap-insights/performance-azure-pane.png" alt-text="Screenshot of the infrastructure pane of performance insights."::: * Configuration drift - [Quality checks](../center-sap-solutions/get-quality-checks-insights.md) violations on the SAP system. 1. This capability with the set of metrics in context of the issue, helps you visually correlate trends of key metrics. This experience eases the root-causing process of performance degradations observed in SAP workloads on Azure. #### Scope of the preview We have insights only for a limited set of issues as part of the preview. We extend this capability to most of the issues supported by AMS alerts before this capability is Generally Available(GA). * Availability insights let you detect and troubleshoot unavailability of Netweaver system, instance, and HANA DB. * Performance insights are provided for NetWeaver metrics - High response time(ST03) and Long running batch jobs. ## Next steps - For information on providers available for Azure Monitor for SAP solutions, see [Azure Monitor for SAP solutions providers](providers.md).