Download saphanasps06whatsnewadministrationmonitoringandsecurity1638554528656

WEBINAR
What’s New in SAP HANA 2.0 SPS 06
Administration,
Monitoring, and Security
PRESENTERS
José Ramos, Ralf Czekalla, Daniel Van Leeuwen,
Srboljub Dave, Philipp Engels
PUBLIC
Disclaimer
The information in this presentation is confidential and proprietary to SAP and may not be disclosed without the permission of SAP.
Except for your obligation to protect confidential information, this presentation is not subject to your license agreement or any other service
or subscription agreement with SAP. SAP has no obligation to pursue any course of business outlined in this presentation or any related
document, or to develop or release any functionality mentioned therein.
This presentation, or any related document and SAP's strategy and possible future developments, products and or platforms directions and
functionality are all subject to change and may be changed by SAP at any time for any reason without notice. The information in this
presentation is not a commitment, promise or legal obligation to deliver any material, code or functionality. This presentation is provided
without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a
particular purpose, or non-infringement. This presentation is for informational purposes and may not be incorporated into a contract. SAP
assumes no responsibility for errors or omissions in this presentation, except if such damages were caused by SAP’s intentional or gross
negligence.
All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from
expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates,
and they should not be relied upon in making purchasing decisions.
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
2
Agenda
SAP HANA Administration Tooling
New Features Overview
▪ Administration and Monitoring
▪ SAP HANA Database Explorer
▪ High Availability and Disaster Recovery
▪ Backup and Recovery
▪ Multi Tenancy
▪ Security
Additional Resources
Q&A
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
3
Presenters
José Ramos
Ralf Czekalla
Daniel van Leeuwen
Srboljub Dave
Philipp Engels
SAP HANA Product Manager
SAP SE
SAP HANA Product Manager
SAP SE
SAP HANA Product Manager
SAP SE
SAP HANA Product Manager
SAP SE
SAP HANA Product Manager
SAP SE
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
4
SAP HANA Administration Tooling
SAP HANA cockpit on premise release strategy
▪ SAP HANA cockpit on premise initially delivered with SAP HANA 2.0 SPS 00 in November 2016
▪ The cockpit periodically releases Support Packages (SP) delivering new functionality as well as fixes and
security patches. Each SP includes all the features of the previous SP
▪ The cockpit also provides patches for the most recently released SP for fixes and security patches. Once a
new SP is released, SAP provides no patches for earlier SPs
▪ When an SAP HANA 2.0 SPS is released, cockpit also releases an SP (i.e. synchronizes with SAP HANA)
SAP
HANA
Cockpit
SP 00
SP 01 SP 02
SP 03
SP 04
SP 05
SP 06
SP 07 SP 08
SP 09 SP 10
SP 11
SP 12
SP 13
SP 14
SP ??
Patches
SAP
HANA
2.0
SPS 00
Nov
2016
SPS 01
Feb Apr
2017 2017
SPS 02
Jul
2017
SPS 03
Oct
2017
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
Jan
2018
Apr
2018
SPS 04
Aug Oct
2018 2018
Feb Apr
2019 2019
SPS 05
Oct
2019
Apr
Jun
2020
SPS 06
Jun
2021
Dec
2021
6
Recent SAP HANA cockpit innovations (SP 12 and SP 13)
Cockpit SP 12 (Jun 2020)
Administration and Monitoring
• Database Directory: memory/CPU/disk usage & threshold indicators, show usage type label &
number of expensive statements and enhanced navigation to other applications
• Database Overview: optimized header bar & views and new admission control card
• Additional refresh intervals and switch to any database or application
• Configuration editor for the NSE buffer cache and persistence memory (PMEM) monitor
• Apply alert definitions across multiple databases
• Configure database restart when changing parameters
• Activate/deactivate an SAP HANA cockpit user
• Test EWA connection and set S-user for individual databases
• Display in-memory & PMEM values per table or group in table distribution
Performance Management Tools
• Capture & Replay: transactional replay for SELECT FOR UPDATE
Database Explorer
• Add a database connection with different credentials and editable connection name
• SQL statement history tab and help side panel
• Runtime information on record count, memory consumption, partition info and column details
• Set different behaviour when a SQL error occurs (prompt, stop or continue)
• New trace file viewer and new tile to configure performance trace
Security
• Single sign-on (SSO) with Kerberos to the SAP HANA cockpit
• Configuration wizard for user groups and audit policies
• Customer controlled encryption key for SAP HANA with SAP Data Custodian KMS
High Availability & Scalability
• System replication card and support for invisible takeover parameter
Backup and Recovery
• Flexible thresholds for multi-streamed backups through 3rd party backup tools
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
Cockpit SP 13 (Jun 2021)
Administration and Monitoring
• Database Overview: search option when switching apps, open apps in new browser tab and
customize/save default views
• CPU, memory and network details in the Database Information app
• Individual and total aggregated statement limits + new parameters for workload class global limits
• Unset parameter in configuration templates
• Display PMEM and fast restart option details in Memory Usage card and Disk Volume Monitor
• Instant feedback on the size of the buffer cache for NSE
• Dump File Viewer application
• Show only tables with group changes in the Table Group Advisor Preview screen
• Restart tenant option from Database Management application
• Remove multiple services (tenant management) and indexservers (table distribution) at same time
Performance Management Tools
• Filter redesign for the Sessions, Threads and Blocked Transaction apps
• View SQL query details with a historical chart of Abstract SQL Plans
• Display deviation metric in SQL Plan Stability app based on query execution time
Database Explorer
• Database grouping and filtering
• SQL statement resource consumption in the SQL Console
• Changes to system statements in the Statement Library and ability to multi-select
• Import spatial data using ESRI shapefiles
• Object editor for public synonyms
• Folder for SQL trace files
• Multi-selection of trace files and progressive loading
Security
• Explore role hierarchies
• Select multiple objects of same type when assigning object privileges to a user or role
• Open Role Assignment app directly from the Users app
• Specify multiple attributes to search for objects when selecting users, roles and privileges in the
7
Role Assignment and Role Management apps
Administration and Monitoring
Manage hierarchies of workload classes
▪ Establish relationship so that values for memory limits can
be inherited by other workload classes
▪ Query view WORKLOAD_CLASSES (column
PARENT_WORKLOAD_CLASS_NAME) to see relationship
▪ Workload Classes app in the cockpit organizes hierarchies
in parent-child relationship
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
9
Database Management application UX enhancements
To improve navigation and overall user experience, the
Global Allocation Limits button is replaced by two buttons:
Memory Allocation Limits and CPU Allocation Limits
Clicking on the Status column now displays
a popup dialog with status details and
navigation to other apps
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
10
SAP HANA Deployment Infrastructure (HDI)
administration (1/2)
▪ HDI provides a service to deploy database development artifacts to
containers
▪ The HDI administration process:
– The database admin creates an HDI administrators and grants
permissions required to maintain HDI
– The HDI admin sets up and maintains HDI, its containers and
container groups
– HDI container groups, managed by the HDI container-group
admin, are logical collections of the HDI containers used to store the
database objects deployed by the HDI service
– The HDI container is a design-time container (an isolated
environment for design-time files) and a run-time container used to
store the deployed objects built according to the specification stored in
the corresponding design-time artifacts
– The HDI container administrator manages the content of one or
more HDI containers that are assigned by the container-group
administrator.
▪ The database process diserver must be enabled
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
11
SAP HANA Deployment Infrastructure (HDI) administration (2/2)
Summary of the
HDI instance you
are logged into and
want to maintain
Select HDI
component to
examine and
change perspective
(HDI groups &
containers and HDI
users & roles)
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
Display detailed
information about
selected HDI
component
12
Unset parameter in configuration templates
▪ Previously, you could only set parameter values in a configuration template
▪ Now, you can also unset a parameter or restore it to its default value (SAP HANA 2.0 SPS 03 or later only)
▪ Expands use case for configuration templates
▪ Available actions to apply:
– Set: Set a configuration parameter value in the target database for the specified layer
– Unset: Unset the configuration parameter value in the target database for the specified layer
– Restore All to Default: Unset all the override value in the target database
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
13
Miscellaneous new features
▪ Configuration Templates app provides new Preview
button in the Select Databases window, allowing you
to view the differences between your selected database
and the current template
▪ Database Overview page and Database Information card display warning when registered SAP HANA
database goes out of maintenance
▪ Configure SAP HANA database to use temporary file storage (TMPFS) to speed up SAP HANA restarts
▪ New TMPFS Monitor app allows you to monitor your tables and columns in TMPFS
▪ New “My Links” section in Home page for custom tiles
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
14
SAP HANA Database Explorer
Recent Innovations in the SAP HANA Database Explorer
Database grouping and filtering
Databases can be organized now by groups
New filter provides a way to quickly locate a database
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
16
Recent Innovations in the SAP HANA Database Explorer
New layout in the Add Database dialog
The Add Database dialog now shows
information relating to cockpit and HDI
databases in a new layout
The new Show all Database Types and Sort by
Name filters simplify sorting
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
17
Recent Innovations in the SAP HANA Database Explorer
Statement library updates
Ability to multi-select statements for export and deletion
Statements from SAP Note 1969700 are no longer included as system statements
making it easier to update and include a subset of these statements
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
18
Recent Innovations in the SAP HANA Database Explorer
SQL statement resource consumption metrics
Provides details on:
▪ Client elapsed time
▪ Statement prepare time (elapsed & CPU)
▪ Statement execute time (elapsed & CPU)
▪ Peak memory consumed
Enables recognition of query impacts on
peak memory and CPU use
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
19
Recent Innovations in the SAP HANA Database Explorer
SQL warnings
SQL warnings are now be shown in the
SQL Console
Warning details are displayed after
statement execution
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
20
Recent Innovations in the SAP HANA Database Explorer
Import spatial data using ESRI Shapefiles
▪ ESRI shapefiles are a popular format for
representing spatial data
▪ They can now be imported using the Import
Data wizard
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
21
Recent Innovations in the SAP HANA Database Explorer
New configuration options when copying, downloading, or importing data
When copying results to the clipboard a new dialog provides additional configuration options
When downloading results, additional field enclosure, and use column name as first row options
Additional options trim whitespace and field delimiter in the import data wizard
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
22
Recent Innovations in the SAP HANA Database Explorer
What’s new help link
Version can be seen by choosing About
What’s new link opens to show details about
all new features in 2.14 or previous versions
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
23
Recent Innovations in the SAP HANA Database Explorer
What’s new help link
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
24
Persistence
High Availability & Disaster Recovery
Roadmap Items for SAP HANA 2.0 SPS06 – Persistence
Reclaim Data with HANA-internal snapshots pages existing in Data Volume
With SPS06, datavolume reclaim will become an integral part of
HANA datavolume management and runs as a permanent,
incremental housekeeping job in the background.
▪ Corresponding pages will be moved from the end of the datavolume to fill up
the free space in starting areas
HANA
Data
Data
Log
Log
▪ After each savepoint a truncation of the datavolume is attempted
▪ Snapshots pages can postpone the effect until they are dropped
▪ First during pilot phase de-activated, later: Active by default
Reclaim scans HANA’s
data volumes
▪ Default thresholds: Start at 150% overhead, Stop at 120%
▪ Running on primary and secondary installations of system replication
The continuous reclaim is throttled to assure that the datavolume will
not increase significantly by the reclaim in case snapshots exist which
keep pages pinned w.r.t. datavolume reclaim.
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
26
Roadmap Items for SAP HANA 2.0 SPS06 – Persistence
Configurable File IO Management
SAP HANA’s File IO layer tries to use the full bandwidth of the underlying IO
device/channel to guarantee maximum database performance
▪ However, many components using the same IO device or channel compete for IO bandwidth
▪ Administrators may be able to optimize throughput by setting values for the following
configuration parameters in section [fileio]:
– max_throughput - limitation applied to total throughput for the service as a whole
– max_read_throughput - limitation applied to read requests
– max_write_throughput - limitation applied to write requests
(The parameters define an upper limit for IO throughput in MB/s)
Each IO request observes the limitations defined and the file IO layer balances
requests within those limits.
Accordingly these parameters can be indexed (itemized) per subcomponent, like
[BACKUP] or [LOG] for log writing.
By default, no throttling is applied for each parameter (the default value for all
parameters is zero), but limits applied by other matching parameters are respected.
System table M_VOLUME_IO_TOTAL_STATISTICS can be used to monitor
physical and effective throughput
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
For example, with the following
configuration, read requests would be
throttled to 80 MB/s while write
requests would be throttled to 100
MB/s (=megabytes per seconds):
▪ max_throughput=100
▪ max_read_throughput=80
More examples:
▪ max_throughput[BACKUP]=50
would throttle only Backup I/O to 50
MB/s whereas
▪ max_throughput[/tmp]=100
would throttle all I/O on this (exact)
path to 100 MB/s
27
Roadmap Item for SAP HANA 2.0 SPS06 – HA & DR
Optimizing auto reconnects of Multi-Target Replication
DC2
In SPS06: Optimizing Multi-Target Replication auto reconnects
▪ Avoiding instance restarts during automatic reconnects of secondary sites
▪ Depends on comparison of redo log positions between site instances
▪ If Secondary log position more actual than new primary, still a restart is
necessary to clean up situation (possibly caused by ASYNC replication)
Secondary
Primary
HANA
DC1
Secondary
HANA
To configure “automatic re-register” in HSR after a takeover or in case
of a missing source site shall be possible
▪ Unavailable source site:
After a source site is unavailable for a certain amount of time, it shall be possible
to automatically register a secondary site to a different source site (if available)
No reconfiguring of secondary instances in DC2
Documentation: Automatic re-register of secondary sites
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
HANA
HANA
Released with SPS04:
Automatic re-register of secondary sites
▪ Takeover:
After a takeover all secondaries attached to the old primary shall be
automatically re-attached to the new primary site
Secondary
DC2
Secondary
Primary
Secondary
HANA
HANA
HANA
DC1
Primary
HANA
Avoiding restarts
while re-registering
automatically
28
Roadmap Item for SAP HANA 2.0 SPS06 – HA & DR
SAP HANA System Replication & Scale-out & Cluster Manager
Better consolidated status info for cluster
managers in case of multiple failures in a
Scale-Out cluster.
Earlier e.g. if all active parts of a scale-out
failed, but the standby server, no HSR-takeover was often triggered by external cluster
managers because of an incomplete status
transfer to them.
Cluster managers needed an own approach to
determine this unusable status of such a
Scale-out cluster to react accordingly.
Scale-Out Setup Primary
Status
Coord.
Cluster
Manager
Worker
Standby
Takeover
Scale-Out Setup Secondary
Coord.
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
Worker
Worker
Worker
Standby
29
Roadmap Item for SAP HANA 2.0 SPS06 – Memory Management
Speedup SAP HANA crash behavior by parallel freeing memory
Speedup HANA crash behavior by freeing all memory
before entering kernel
Beneficial for takeover or failover scenarios
▪ With primary not responding properly a clean shutdown is
necessary
▪ Takeovers need to wait for this to finish for fencing purposes
Crash or shutdown operations of 24TB SAP HANA
instances could be shortened from 12 down to 2 minutes
by heavily parallelizing its execution
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
30
Backup and Recovery
SAP HANA 2.0 SPS06 – SAP HANA Backup & Recovery
Compression for data, log, and backup catalog backups
Feature
Backup compression to reduce the amount of disk space consumed locally and on external storage media. Create compressed backups
either manually or scheduled. Compression information can be viewed via HANA Cockpit for created and scheduled backups.
Benefits
▪
Backups can consume a lot of space and compressing them helps reduce costs for storage space.
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
32
SAP HANA 2.0 SPS06 – SAP HANA Backup & Recovery
Backup and recovery of configuration parameters
Feature
Ability to back up and recover customer-specific changes to parameters for SAP HANA stored in INI configuration files.
Benefits
▪
Increase the efficiency of backup and recovery for SAP HANA
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
33
SAP HANA 2.0 SPS06 – SAP HANA Backup & Recovery
Parking of log backups in a staging area for third-party backup tools in maintenance
Feature
Temporary writing of BACKINT log backups for SAP HANA to a staging area when the external backup tool is unavailable due to
maintenance or a failure
Benefits
▪
Increase backup continuity through failover of BACKINT-based log backups into a staging area when the external backup tool is
unavailable
Host
HANA
Unavailable destination
Write to staging
Backup
Catalog
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
Staging
3rd party
backup
server
(Backint)
34
SAP HANA 2.0 SPS06 – SAP HANA Backup & Recovery
Automatically continue log backups after a disk full
Feature
In a disk full situation, the log backups stop operating. In the past, Administrators needed to restart HANA after resolving the disk full
situation. Now the log backups start automatically after the disk full situation has been resolved.
Benefits
▪
Increased backup continuity by automating the start process of the log backups
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
35
Multi Tenancy
SAP HANA 2.0 SPS06 – SAP HANA MDC
System-wide SAP HANA scheduler that can execute any SQL statements
Feature
Use the system-wide scheduler to execute both scheduled backups and any defined SQL statement
Benefits
▪
Automate routine database administration tasks, including scheduled backups
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
37
SAP HANA 2.0 SPS06 – SAP HANA MDC
Other new MDC features
Near-zero downtime for tenant copy
Feature
Reduction of downtime to near-zero in tenant copy scenarios by speeding up the root key renewal process
Benefits
▪
Increase business continuity by reducing the downtime during tenant copies
New M_Database intermediate database states
Feature
The Column ACTIVE_STATUS_DETAILS has been enhanced to show the database states in between starting and stopping the
database
Benefits
▪
Helps better understand the current database detailed status
▪
Cockpit uses it to offer context sensitive functionalities considering the detailed database state
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
38
Security
Roadmap Items for SAP HANA 2.0 SPS06 - Security
JWT provider configuration with public keys
-
-
You can now add public keys to certificate collections, to support scenarios where JWT (JSON Web Token) is managed via
public/private key pairs.
Support of multiple user mappings for JWT and SAML authentications
-
-
In the past SAP HANA only allowed one single mapping between the user in the SAML or JWT and the database user. Now
there can be an arbitrary number of mappings.
Automatic TLS and SSL setup
-
-
On installation of a new SAP HANA database system TLS/SSL certificates will be automatically generated, allowing TLS/SSLsecured connections directly without any additional configuration on the SAP HANA side.
Enhanced Data Masking semantics
-
-
Provide an additional option for how masking authorization behave that is different from the DEFINER behavior we currently
have.
Provide an option to have masking authorizations behave like analytic privileges, i.e. no matter where in the hierarchy a mask
is defined, SAP HANA will always check whether the session user, i.e the user who is logged in to the database, has the
UNMASK privilege.
The advantage is that there is no need to define an invoker mode hierarchy down to the level you want to protect using masks
and therefore don't need to grant end users privileges on lower level objects.
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
40
Find out more
Learn about SAP HANA
Get involved in the discussion
Check out the sap.com/hana website, which has valuable
resources for fast-tracking your knowledge of SAP HANA and
a rich support section designed to help you get the highest
quality answers quickly and easily from SAP experts
Engage with community experts on the SAP Community
program to accelerate the development of SAP HANApowered solutions
Check out the community
https://community.sap.com/topics/hana
Free trial
sap.com/hanacloud
Influence the future
influence.sap.com
Spread the word
twitter.com/SAPInMemory
Customers
https://www.sap.com/products/hana/customerfinder.html
Roadmap
https://roadmaps.sap.com
© 2021 SAP SE or an SAP affiliate company. All rights reserved. ǀ EXTERNAL
SAP is here to help.
Contact your local SAP representative
sap.com/corporate/en/company/office-locations.html
41