Auto update of sensor configuration
Systems, methods, and computer-readable media for updating configurations in sensors deployed in multi-layer virtualized environments. In some examples, a system can track information of sensors and collectors in the network. In response to determining that a specific collector becomes unavailable (e.g., the specific collector is down, offline or becomes unsupported), the system can determine affected sensors corresponding to the specific collector, determine a new collector among active collectors of the network for each of the affected sensors, and dynamically update configuration and settings of the affected sensors to maintain proper collector-to-sensor mappings and other settings on the affected sensors.
1. A method comprising:
first receiving sensor information from a plurality of sensors of a network at a collector of a plurality of collectors, the sensors including a virtual machine (VM) sensor for a VM, a hypervisor sensor for a hypervisor, at least one server sensor in a server different from a virtual machine sensor or a hypervisor sensor, the first receiving comprising:
information from the VM sensor to the collector flows through the VM, the hypervisor, the server, and a leaf router;
information from hypervisor sensor to the collector flows through the hypervisor, the server, and the leaf router;
information from the at least one server sensor to the collector flows through the server and the leaf router;
identifying, in response to the collector becoming unavailable, the sensors of the plurality of sensors that corresponds to an the unavailable collector of a the plurality of collectors from the sensor information;
reassigning, in response to the identifying, the sensors to another collector from the plurality of collectors; and
causing the sensors to update a configuration of the sensors based on collector information associated with the another collector{circumflex over ( )}
second receiving, in response to the causing, sensor information from the plurality of sensors at the another collector, the second receiving comprising:
information from the VM sensor to the another collector flows through the VM, the hypervisor, the server, and a leaf router;
information from hypervisor sensor to the another collector flows through the hypervisor, the server, and the leaf router; and
information from the at least one server sensor to the another collector flows through the server and the leaf router.
2. The method of claim 1 , further comprising:
determining loads on the plurality of collectors operating in the network based on network data for the plurality of collectors; and
the reassigning the sensors to the another collector of the plurality of collectors is based on the loads on the plurality of collectors.
3. The method of claim 1 , further comprising:
identifying a health of the collector with respect to operation of the collector in the network; and
determining that the collector is unavailable based on a comparison of the health of the collector to one or more threshold levels of collector health.
4. The method of claim 1 , further comprising:
identifying that a communication error exists between the collector and one or more sensors associated with the collector; and
determining that the collector is unavailable based on existence of the communication error.
5. The method of claim 1 , wherein the sensor information is received as part of sensor reports generated by the plurality of sensors.
6. The method of claim 1 , wherein the sensor information of the plurality of sensors comprises location information, characteristic information, and context information of the plurality of sensors.
7. The method of claim 1 , further comprising: determining that a new collector is added to the network; accessing collector information of the new collector;
determining that the new collector is active based on the collector information; and
reassigning the sensors to the new collector based on the new collector being active.
8. A system comprising:
one or more processors; and
a non-transitory computer-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the system to perform operations comprising:
first receive sensor information from a plurality of sensors of a network at a collector of a plurality of collectors, the sensors including a virtual machine (VM) sensor for a VM, a hypervisor sensor for a hypervisor, at least one server sensor in a server different from a virtual machine sensor or a hypervisor sensor, the first receiving comprising:
information from the VM sensor to the collector flows through the VM, the hypervisor, the server, and a leaf router;
information from hypervisor sensor to the collector flows through the hypervisor, the server, and the leaf router;
information from the at least one server sensor to the collector flows through the server and the leaf router;
identify, in response to the collector becoming unavailable, the sensors of the plurality of sensors that corresponds to an the unavailable collector of a the plurality of collectors from the sensor information;
reassign, in response to the identify, the sensor to another collector from the plurality of collectors; and
cause the sensors to update a configuration of the sensor based on collector information associated with the another collector{circumflex over ( )}
second receive, in response to the causing, sensor information from the plurality of sensors at the another collector, the second receiving comprising:
information from the VM sensor to the another collector flows through the VM, the hypervisor, the server, and a leaf router;
information from hypervisor sensor to the another collector flows through the hypervisor, the server, and the leaf router; and
information from the at least one server sensor to the another collector flows through the server and the leaf router.
9. The system of claim 8 , the operations further comprising:
determine loads on the plurality of collectors operating in the network based on network data for the plurality of collectors; and
the reassign the sensors to the another collector of the plurality of collectors is based on the loads on the plurality of collectors.
10. The system of claim 8 , the operations further comprising:
identify a health of the collector with respect to operation of the collector in the network; and
determine that the collector is unavailable based on a comparison of the health of the collector to one or more threshold levels of collector health.
11. The system of claim 8 , the operations further comprising:
identify that a communication error exists between the collector and one or more sensors associated with the collector; and
determine that the collector is unavailable based on existence of the communication error.
12. The system of claim 8 , wherein the sensor information is received as part of sensor reports generated by the plurality of sensors.
13. The system of claim 8 , wherein collectors of the plurality of collectors are configured to collect flows travelling through corresponding sensors of the plurality of sensors.
14. The system of claim 8 , the operations further comprising:
determine that a new collector is added to the network;
access collector information of the new collector;
determine that the new collector is active based on the collector information; and reassign the sensors to the new collector based on the new collector being active.
15. A non-transitory computer-readable storage medium comprising instructions stored therein, which when executed by one or more processors, cause the one or more processors to perform operations comprising:
first receive sensor information from a plurality of sensors of a network at a collector of a plurality of collectors, the sensors including a virtual machine (VM) sensor for a VM, a hypervisor sensor for a hypervisor, at least one server sensor in a server different from a virtual machine sensor or a hypervisor sensor, the first receiving comprising:
information from the VM sensor to the collector flows through the VM, the hypervisor, the server, and a leaf router;
information from hypervisor sensor to the collector flows through the hypervisor, the server, and the leaf router;
information from the at least one server sensor to the collector flows through the server and the leaf router;
identify, in response to the collector becoming unavailable, the sensors of the plurality of sensors that corresponds to an the unavailable collector of a the plurality of collectors from the sensor information;
reassign, in response to the identify, the sensor to another collector from the plurality of collectors; and
cause the sensors to update a configuration of the sensor based on collector information associated with the another collector{circumflex over ( )}
second receive, in response to the causing, sensor information from the plurality of sensors at the another collector, the second receiving comprising:
information from the VM sensor to the another collector flows through the VM, the hypervisor, the server, and a leaf router;
information from hypervisor sensor to the another collector flows through the hypervisor, the server, and the leaf router; and
information from the at least one server sensor to the another collector flows through the server and the leaf router.
16. The non-transitory computer-readable storage medium of claim 15 , the operations further comprising:
determine loads on the plurality of collectors operating in the network based on network data for the plurality of collectors; and
the reassign the sensors to the another collector of the plurality of collectors is based on the loads on the plurality of collectors.
17. The non-transitory computer-readable storage medium of claim 16 , the operations further comprising:
identify a health of the collector with respect to operation of the collector in the network;
and
determine that the collector is unavailable based on a comparison of the health of the collector to one or more threshold levels of collector health.
18. The non-transitory computer-readable storage medium of claim 16 , the operations further comprising:
identify that a communication error exists between the collector and one or more sensors associated with the collector; and
determine that the collector is unavailable based on existence of the communication error.
19. The non-transitory computer-readable storage medium of claim 15 , wherein the sensor information is received as part of sensor reports generated by the plurality of sensors.
20. The non-transitory computer-readable storage medium of claim 15 , wherein the instructions, which when executed by the one or more processors, further cause the one or more processors to:
determine that a new collector is added to the network;
access collector information of the new collector;
determine that the new collector is active based on the collector information; and reassign the sensors to the new collector based on the new collector being active.