System configuration drift and compliance management
A master profile may be created defining a plurality of values for a plurality of storage system parameters. The master profile may be stored and applied to a plurality of storage systems. In some embodiments, one or more values defined in the master profile may be changed and the resulting plurality of parameter values stored in a new master profile. Current values of storage system parameters may be monitored, for example, determined according to a predefined schedule or in response to user input, and the current values may be compared against the values defined in the master profiles. The results of these comparisons may be recorded as part of compliance information that indicates the extent of compliance of the parameter values of a storage system with the master profile parameter values. The compliance information may be included as part of a compliance report, notification or some other communication.
1. A method of managing a storage system, the method comprising:
creating a master profile for the storage system, the master profile defining a plurality of master values for a plurality of storage system parameters;
applying the master profile to the storage system;
determining a plurality of current values of the plurality of storage system parameters;
comparing the plurality of current values to the plurality of master values;
maintaining a log recording changes to the plurality of storage system parameters, wherein the log provides an audit trail of changes made over time to the plurality of storage system parameters, wherein responsive to a first change made to a first of the plurality of storage system parameters, said maintaining includes:
recording in the log a first log entry regarding the first change made to the first storage system parameter from a first of the plurality of master values to a first of the plurality of current values, wherein the first log entry identifies the first storage system parameter, the first master value, the first current value, a particular user, and a particular time and wherein the first entry denotes that the first change is made by the particular user at the particular time;
recording compliance information based on the comparison of the plurality of current values and the plurality of master values, including at least a first difference between the first master value and the first current value for the first storage system parameter, wherein the compliance information includes a link or reference associated with the first difference, wherein the link or reference references the first log entry;
communicating the compliance information to a user, wherein the user accesses the first log entry using the link or reference included in the compliance information;
determining, in accordance with a rule, whether the first difference between the first master value and the first current value for the first storage system parameter exceeds a specified threshold, wherein the rule includes the specified threshold; and
responsive to determining that the first difference exceeds the specified threshold, performing one or more remediations for the storage system, said one or more remediations including restoring the first storage system parameter from the first current value to the first master value of the master profile.
2. The method of claim 1 , wherein the determining is performed according to a predefined schedule.
3. The method of claim 1 , further comprising:
storing a plurality of default profiles for the storage system, each default profile defining a plurality of default values for the plurality of storage system parameters,
wherein creating the master profile includes selecting one of the default profiles and changing one or more of the plurality of default values to produce the plurality of master values.
4. The method of claim 1 , wherein the compliance information is communicated to the user in response to determining the first difference between the first master value and the first current value.
5. The method of claim 1 , wherein the compliance information is communicated to the user in response to an instruction initiated by the user.
6. The method of claim 1 , further comprising:
communicating the master profile to another storage system; and
applying the master profile to the other storage system.
7. A storage system comprising executable logic that implements a method including:
creating a master profile for the storage system, the master profile defining a plurality of master values for a plurality of storage system parameters;
applying the master profile to the storage system;
determining a plurality of current values of the plurality of storage system parameters;
comparing the plurality of current values to the plurality of master values;
maintaining a log recording changes to the plurality of storage system parameters, wherein the log provides an audit trail of changes made over time to the plurality of storage system parameters, wherein responsive to a first change made to a first of the plurality of storage system parameters, said maintaining includes:
recording in the log a first log entry regarding the first change made to the first storage system parameter from a first of the plurality of master values to a first of the plurality of current values, wherein the first log entry identifies the first storage system parameter, the first master value, the first current value, a particular user, and a particular time and wherein the first entry denotes that the first change is made by the particular user at the particular time;
recording compliance information based on the comparison of the plurality of current values and the plurality of master values, including at least a first difference between the first master value and the first current value for the first storage system parameter, wherein the compliance information includes a link or reference associated with the first difference, wherein the link or reference references the first log entry;
communicating the compliance information to a user, wherein the user accesses the first log entry using the link or reference included in the compliance information;
determining, in accordance with a rule, whether the first difference between the first master value and the first current value for the first storage system parameter exceeds a specified threshold, wherein the rule includes the specified threshold; and
responsive to determining that the first difference exceeds the specified threshold, performing one or more remediations for the storage system, said one or more remediations including restoring the first storage system parameter from the first current value to the first master value of the master profile.
8. The storage system of claim 7 , wherein the determining is performed according to a predefined schedule.
9. The storage system of claim 7 , wherein the method further comprises:
storing a plurality of default profiles for the storage system, each default profile defining a plurality of default values for the plurality of storage system parameters,
wherein creating the master profile includes selecting one of the default profiles and changing one or more of the plurality of default values to produce the plurality of master values.
10. The storage system of claim 7 , wherein the compliance information is communicated to the user in response to determining the first difference between the first master value and the first current value.
11. The storage system of claim 7 , wherein the compliance information is communicated to the user in response to an instruction initiated by the user.
12. The storage system of claim 7 , wherein the method further includes:
communicating the master profile to another storage system; and
applying the master profile to the other storage system.
13. One or more non-transitory computer-readable media having software stored thereon, the software comprising:
executable code that controls creating a master profile for the storage system, the master profile defining a plurality of master values for a plurality of storage system parameters;
executable code that controls applying the master profile to the storage system;
executable code that controls determining a plurality of current values of the plurality of storage system parameters;
executable code that compares the plurality of current values to the plurality of master values;
executable code that maintains a log recording changes to the plurality of storage system parameters, wherein the log provides an audit trail of changes made over time to the plurality of storage system parameters, wherein the executable code that maintains the log further includes:
executable code that, responsive to a first change made to a first of the plurality of storage system parameters, records in the log a first log entry regarding the first change made to the first storage system parameter from a first of the plurality of master values to a first of the plurality of current values, wherein the first log entry identifies the first storage system parameter, the first master value, the first current value, a particular user, and a particular time and wherein the first entry denotes that the first change is made by the particular user at the particular time;
executable code that records compliance information based on the comparison of the plurality of current values and the plurality of master values, including at least a first difference between the first master value and the first current value for the first storage system parameter, wherein the compliance information recorded includes a link or reference associated with the first difference and wherein the link or reference references the first log entry;
executable code that controls communicating the compliance information to a user, wherein the link or reference of the compliance information is used by the user to access the first log entry;
executable code that determines, in accordance with a rule, whether the first difference between the first master value and the first current value for the first storage system parameter exceeds a specified threshold, wherein the rule includes the specified threshold; and
executable code that, responsive to determining that the first difference exceeds the specified threshold, controls performing one or more remediations for the storage system, said one or more remediations including restoring the first storage system parameter from the first current value to the first master value of the master profile.
14. The one or more non-transitory computer-readable media of claim 13 , wherein the software further comprises:
executable code that stores a plurality of default profiles for the storage system, each default profile defining a plurality of default values for the plurality of storage system parameters, wherein creating the master profile includes selecting one of the default profiles and changing one or more of the plurality of default values to produce the plurality of master values.
15. The one or more non-transitory computer-readable media of claim 13 , wherein the compliance information is communicated to the user in response to determining the first difference between the first master value and the first current value.
16. The one or more non-transitory computer-readable media of claim 13 , wherein the compliance information is communicated to the user in response to an instruction initiated by the user.
17. The one or more non-transitory computer-readable media of claim 13 , wherein the software further comprises:
executable code that controls communicating the master profile to another storage system; and
executable code that controls applying the master profile to the other storage system.