Version 2021.

06

SAP IDM Monitor

SAP_IDM_Monitor.exe
Monitoring of SAP Identity Management dispatchers, job logs, provisioning queue, packages, identities

Requirements • Value Lookup Files:

itesys.sapidmmonitor.dispatcherloglevel.ovl
itesys.sapidmmonitor.dispatcherstate.ovl

Important notes
The earlier version only ran on linux systems. The new version collects it’s information from
the Identity Management database. Therefore it can be used on both platforms windows and
linux. Currently supported databases are Oracle, ASE (Adaptive Server Enterprise) and MSSQL.
Make sure that the database depending ODBC driver is installed like described in the Scansor
Installation Guide.

Parameters
Profile
Host Database host
• <hostname>
• <ip>
• <fqdn>
DBName Database name
• <dbname>
DBUsername Database user (e.g. schemaowner )
• <username>
DBPassword Password for <DBUsername>
• <password>
Sensor-specific
DBType Defines which database type is used
• Possible values: ORACLE, ASE, MSSQL
• Default: ASE
DBSchemaPrefix Schema prefix of the IDM database
Version 2021.06

• ORACLE: Usually MXMC_OPER

• ASE: Usually MXMC_db.dbo
• MSSQL: Usually MXMC_db.dbo
• Default: MXMC_db.dbo
Minutes Count of past minutes to check for job logs
• Default: 60

Channels
Dispatcher <Name> state Displays the current state of the dispatcher <Name>
Dispatcher <Name> JRE log Displays the current JRE log level of the dispatcher <Name>
level
Log errors Displays the number of errors in the job log within the past <Minutes>
Log warnings Displays the number of warnings in the job log within the past <Minutes>
Checked-out packages Displays the number of checked-out packages
Entries in provisioning queue Displays the number of entries in the provisioning queue
ID Store <Name> active Display the number of active identities per ID store
identities

Important notes
Since the channel structure changed in this version, please recreate the sensor in PRTG to
avoid channels with “No data”.
Please check the limits if they fit for your alerting.

Preparation

If you use a monitoring user which has no access to the Identity Management database schema, please use the
following SQL commands to give the necessary access:

grant select on mc_dbschema to <user>

grant select on MC_Dispatcher to <user>

grant select on MC_LOGS to <user>

grant select on MC_JOBS to <user>

grant select on mc_package to <user>

grant select on MXP_Provision to <user>

Version 2021.06

grant select on idmv_vallink_basic_active to <user>

grant select on MXI_IDStores to <user>

Changelog

2021.06
• collects information via database instead of SSH
• new channel for log errors and warnings
• new channel for checked-out packages
• new channel for count of entries in provisioning queue
• new channel for count of active identities per ID store
• new channel for dispatcher JRE trace level
1.4.1.2
First stable release