Timezone mismatch across cluster members-juniper-junos

Timezone mismatch across cluster members-juniper-junos
0

Timezone mismatch across cluster members-juniper-junos

Vendor: juniper

OS: junos

Description:
Indeni will identify when two devices are part of a cluster and alert if the timezone setting is different.

Remediation Steps:
Review the settings of each device in the cluster and ensure they are the same.

How does this work?
This script logs into the Juniper JUNOS-based device using SSH and retrieves the configured time zone using the output of the “show system uptime” command. The output includes the device’s current date and time as well as configured time zone.

Why is this important?
Capture the current time zone of the device. The time zone information is useful for display purposes.

Without Indeni how would you find this?
An administrator may write a script to pull this data from cluster members and compare it.

junos-show-system-uptime

#! META
name: junos-show-system-uptime
description: Fetches system uptime
type: monitoring
monitoring_interval: 5 minute
requires:
    vendor: "juniper"
    os.name: "junos"
    high-availability:
        neq: "true"

#! COMMENTS
uptime-milliseconds:
    why: |
        Capture the uptime of the device. If the uptime is lower than the previous sample, the device must have reloaded.
    how: |
        This script logs into the Juniper JUNOS-based device using SSH and retrieves the output of the "show system uptime" command. The output includes the device's uptime as well as additional information.
    without-indeni: |
        It is possible to poll this data through SNMP or capture a syslog/trap event of a device booting up.
    can-with-snmp: true
    can-with-syslog: true

current-datetime:
    why: |
        Capture the current date and time of the device. Device current date and time should never be more than 24 hours away from date and time of the device polling the data, otherwise date and time are not correctly set on device.
    how: |
        This script logs into the Juniper JUNOS-based device using SSH and retrieves the current time using the output of the "show system uptime" command. The output includes the device's current date and time as well as configured time zone.
    without-indeni: |
        It is possible to poll this data through SNMP.
    can-with-snmp: true
    can-with-syslog: false

timezone:
    why: |
        Capture the current time zone of the device. The time zone information is useful for display purposes.
    how: |
        This script logs into the Juniper JUNOS-based device using SSH and retrieves the configured time zone using the output of the "show system uptime" command. The output includes the device's current date and time as well as configured time zone.
    without-indeni: |
        An administrator may write a script to pull this data from cluster members and compare it.
    can-with-snmp: false
    can-with-syslog: false

#! REMOTE::SSH
show system uptime | display xml

#! PARSER::XML
_vars:
    root: /rpc-reply//system-uptime-information[1]
_metrics:
    -
        _tags:
            "im.name":
                _constant: "uptime-milliseconds"
            "live-config":
                _constant: "true"
            "im.dstype.displayType":
                _constant: "duration"
            "display-name":
                _constant: "Uptime"
        _temp:
            "uptimeSeconds":
                _attribute:
                    _name: "junos:seconds"
                    _path: "${root}/uptime-information/up-time"
        _transform:
            _value.double: |
                {
                    uptime = temp("uptimeSeconds") * 1000
                    print uptime
                }
    -
        _tags:
            "im.name":
                _constant: "current-datetime"
            "live-config":
                _constant: "true"
            "im.dstype.displayType":
                _constant: "date"
            "display-name":
                _constant: "Current date/time"
        _value.double:
            _attribute:
                _name: "junos:seconds"
                _path: "${root}/uptime-information/date-time"
    -
        _tags:
            "im.name":
                _constant: "timezone"
            "live-config":
                _constant: "true"
            "display-name":
                _constant: "Time Zone"
        _temp:
            dateTime:
                _text: "${root}/current-time/date-time"
        _transform:
            _value.complex:
                value: |
                    {
                        currentTime = temp("dateTime")
                        print substr(currentTime, length(currentTime) - 3, length(currentTime))
                    }

cross_vendor_compare_timezone

package com.indeni.server.rules.library.templatebased.crossvendor

import com.indeni.server.rules.RuleContext
import com.indeni.server.rules.library.ConditionalRemediationSteps
import com.indeni.server.rules.library.templates.SnapshotComparisonTemplateRule

/**
  *
  */
case class cross_vendor_compare_timezone() extends SnapshotComparisonTemplateRule(
  ruleName = "cross_vendor_compare_timezone",
  ruleFriendlyName = "Clustered Devices: Timezone mismatch across cluster members",
  ruleDescription = "Indeni will identify when two devices are part of a cluster and alert if the timezone setting is different.",
  metricName = "timezone",
  isArray = false,
  alertDescription = "The members of a cluster of devices must have the same timezone settings.",
  baseRemediationText = """Review the settings of each device in the cluster and ensure they are the same.""")(
  ConditionalRemediationSteps.OS_NXOS ->
    """|
      |1. Execute the show clock command to check the system time for both peer switches
      |2. Review the time-zone setting of each device in the cluster and ensure they are the same.
      |3. For more information about  NX-OS timezone configuration review the next link:
      |https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_0/nx-os/fundamentals/configuration/guide2/fun_nx-os_book/fun_5sys_mgmt.html""".stripMargin
)