1. IT Monitoring Service Status and Progress 1 Alberto AIMAR, IT-CM-MM

2. Outline Monitoring Data Centres Experiments Dashboards Architecture and Technologies Status and Plans 2

3. Monitoring Data Centre Monitoring Monitoring of DC at CERN and Wigner Hardware, operating system, and services Data Centres equipment (PDUs, temperature sensors, etc.) Used by service providers in IT, experiments Experiment Dashboards Sites availability, data transfers, job information, reports Used by WLCG, experiments, sites and users Both hosted by CERN IT, in different teams 3

4. Mandate Focus for 2016 Regroup monitoring activities hosted by CERN/IT (Data Centres, Experiment Dashboards, ETF, HammerCloud, etc) Continue existing services Uniform with CERN IT practices Management of services, communication, tools (e.g. GGUS and SNOW tickets) Starting with Merge Data Centres and Experiment Dashboards monitoring technologies Review existing monitoring usage and needs (DC, WLCG, etc) Investigate new technologies Unchanged support while collecting feedback and working 4

5. Data Centres Monitoring 5

6. 6

7. Experiment Dashboards 7 Analysis + Production Real time and Accounting views Data transfer Data access Site Status Board SAM3 Google Earth Dashboard 300-500 users per day Data Management Monitoring Job Monitoring Infrastructure Monitoring Outreach Sites Operation Teams Users General Public

8. Experiment Dashboards 8 Job monitoring, sites availability, data management and transfers Used by experiments operation teams, sites, users, WLCG

9. WLCG Transfer Dashboard 9

10. ATLAS Distributed Computing 10

11. Higgs Seminar 11

12. Architecture and Technologies 12

13. Unified Monitoring Architecture 13 Processing kafka Data Centres Data Sources Data Access Storage/Search WLCG Transport

14. z Metrics Manager ATLAS Rucio CRAB2 GOCDB Data Sources Flume AMQ Transport HDFS Oracle HDFS Oracle Spark Oracle PL/SQL ESPER Storage &Search Processing & Aggregation Lemon Agent XSLS FTS Servers DPM Servers XROOTD Servers Farmout Grid Control CMS Connect PANDA WMS ProdSys CRAB3 WM Agent Nagios VOFeed OIM REBUS AMQ Kafka AMQ GLED HTTP Collector SQL Collector MonaLISA Collector HTTP GET HTTP PUT ElasticSearch Oracle ElasticSearch Hadoop Jobs GNI ES Queries Oracle PL/SQL ESPER Spark Kibana Jupyter Zeppelin Dashboards (ED) Real Time (ED) Accounting (ED) API (ED) SSB (ED) SAM3 (ED) API (ED) Display Access Data mgmt and transfers Job Monitoring Infrastructure Monitoring Data Centres Monitoring Current Monitoring

15. z Metrics Manager ATLAS Rucio CRAB2 GOCDB Data Sources Flume Transport Hadoop HDFS Spark Storage &Search Processing & Aggregation Lemon Agent XSLS FTS Servers DPM Servers XROOTD Servers Farmout Grid Control CMS Connect PANDA WMS ProdSys CRAB3 WM Agent Nagios VOFeed OIM REBUS AMQ Kafka ElasticSearch Hadoop Jobs GNI Jupyter Zeppelin Grafana Data Access Other Unified Monitoring Kibana

16. Unified Data Sources 16 21/07/2016ASDF meeting FTS Data Sources Rucio XRootD Jobs … Lemon syslog app log DB HTTP feed AMQ Flume AMQ Flume DB Flume HTTP Flume Kafka sink Flume Log GW Flume Metric GW Logs Lemon metrics Transport Data is channeled via Flume, validated and modified if necessary Adding new Data Sources is documented and fairly simple

17. Unified Processing 17 Kafka cluster (buffering) * 21/07/2016ASDF meeting Processing (e.g. Enrich FTS transfer metrics with WLCG topology from AGIS/Gocdb) Transport Flume Kafka sink Flume sinks Data now 100 GB/day, at scale 500 GB/day Current retention period 12 h, at scale 24 h

18. Data Processing Stream processing Data enrichment Join information from several sources (e.g. WLCG topology) Data aggregation Over time (e.g. summary statistics for a time bin) Over other dimensions (e.g. compute a cumulative metric for a set of machines hosting the same service) Data correlation Advanced Alarming: detect anomalies and failures correlating data from multiple sources (e.g. data centre topology-aware alarms) Batch processing Reprocessing, data compression, reports Technologies: Reliable and scalable job execution (Spark), Job orchestration and scheduling (Marathon/Chronos), Lightweight and isolation deployment (Docker) 18 21/07/2016ASDF meeting

19. Unified Access 19 HDFS Elastic Search … Storage & Search Others 21/07/2016ASDF meeting Data Access Scripts CLI, API Multiple data access methods (dashboards, notebooks, CLI) Mainstream and evolving technology Flume sinks Reports Plots

20. Status and Plans 20

21. WLCG Monitoring Data Sources and Transport Moving all data via new transport (Flume, AMQ, Kafka) Storage and Search Data in ES and Hadoop Processing Doing aggregation and processing via Spark Display and reports Using only standard features of ES, Kibana, Spark, Hadoop Introduce notebooks (e.g. Zeppelin) and data discovery General Selecting technologies, learning on the job, looking for expertise Evolve interfaces (dashboards for users, shifters, experts, managers) 21

22. WLCG Monitoring 22

23. Data Centres Monitoring (metrics) Replacement of the Lemon Agents Mainstream technologies (e.g. collectd) Support legacy sensors Starting in 2016Q4 Update meter.cern.ch Kibana and Grafana dashboards Move to new central ES service Move to the Unified Monitoring 23

24. Data Centres Monitoring (logs) Currently collecting syslog plus several application logs (e.g. EOS, Squid, HC, etc.) More requests coming for storing logs (e.g. Castor, Tapes, FTS) Update the Logs Service to the Unified Monitoring For archive in HDFS For processing in Spark For visualization in ES and Kibana 24

25. Conclusions / Services Proposed Monitor, collect, visualize, process, aggregate, alarm Metrics and Logs Infrastructure operations and scale Helping and supporting Interfacing new data sources Developing custom processing, aggregations, alarms Building dashboards and reports 25

26. monit.cern.ch 26

27. Reference and Contact Dashboard Prototypes monit.cern.ch Feedback/Requests (SNOW) cern.ch/monit-support Early-Stage Documentation cern.ch/monitdocs 27 21/07/2016ASDF meeting

28. Backup Slides 28

29. 29

30. 30

31. 31

32. 32

36. 36