This post is more than 5 years old

1 Rookie

 • 

107 Posts

4278

June 27th, 2017 11:00

Isilon Search -- Anyone use/test it yet? I have...

Ok I have deployed a test Isilon Search VM on a test Isilon cluster.  Really easy to set up and use.  I've found a couple small bugs and a few feature enhancements.  I was wondering if anyone has used this solution yet and what you thought.


So far I have found:

1.  A/D issues if a user account is similar, it rejects it.

2.  In production our users would not want /ifs/data in the path but the full SMB/NFS share path and a direct link to that path.

3.  CEE is an issue when we have other application using CEE, you have to turn off Isilon CEE and use manual search.

4.  You can only schedule manual searches, it does not yet allow you to scan automatically.  I've tried crontab settings but I haven't been able to get it to work.

If you've found any issues I have not listed, I would be interested in hearing that and any success stories. Overall I LOVE the product and I have found many use cases for it.  I know EMC has my feedback which I am hoping those enhancements get into the product before I present it to our internal customers.

What I don't have yet is pricing which kind of scares me

1 Rookie

 • 

107 Posts

June 29th, 2017 04:00

Hi James,


Let me answer your questions, then post a few more.


>>That should not be the case - we'd like to follow up with up with you to find out more info.  Would you be able to open a support ticket?

I'm working with EMC directly on this issue and they think it's duplicate accounts. I will try your option as well with different avenues to add users as well.  EMC has logs from our test Isilon Search VM server.

>>Currently we show the full path in the main search results, but a user logged on as an end-user (rather than an administrator) will see the share paths in the "Detail" view:


Was this new?  If not, great! I'm logged in as ADMIN -- but I cannot add my domain account due to issue #1 above.


>>It is possible to configure a CEE server used for another product (such as Varonis) to also forward the events to Isilon Search.  We can provide details of this.  The other options is to disable CEE and use scheduled rescans instead.


Data Insight is used here for auditing on another Isilon cluster used for NAS/File Shares.  When I read through the documentation for Isilon Search it mentioned this explicitly:

          Consider disabling the Protocol Audit Monitoring feature for the following reasons:

               CEE forwarding is already configured for another third-party application.

               The extra load on the Isilon of Protocol Audit Monitoring is not desirable.

               An updated index is not required after a system change occurs.

>> We include scripts on the VM for setting up scheduled rescans.  Our education course (https://education.emc.com/index_login.htm?id=859992587) has details of how to do this.  I can also send you the specific slides that cover this.


Scheduled scans should be a feature from the GUI or CLI, not a script.  Trying to avoid scripts because 1/2 the time during upgrades, scripts or file changes made to the system are overwritten. .  Long story on that but the old search application we're trying to replace was broken every time we upgraded Isilon and needed to modify Isilon config files manually to fix it.


NOTES:

1.  One of the feature enhancements we need for our internal customers is the ability during the search that the LINK displayed (where I mentioned /ifs/data) can be clicked on and take them right to the share/folder.

2.  I haven't been able to test this but I can assume with integration to A/D that users logged into Isilon Search will only be able to search/find/access files *if* they have permissions to do so.  If I could add my account, I could test this which is why I am asking the question.
3.  Since this is designed for Isilon, I think this product should be a part of the product licensing feature for Isilon.  In other words, like SyncIQ or DeDupe licensing, we should be able to buy a license to deploy Isilon Search instead of viewing this a separate application.

4.  I haven't been able to test Isilon Search and cloudpools with ECS yet so I have no idea what the impact is.  I assume anytime the database is scanned AFTER the first scan it would skip files it knows about, but what happens to files on ECS?  Just metadata correct?

I have a million questions, it's early, just getting through my first cup of coffee.  You know how to reach me if you want to take this offline and/or webex to take a look at my test environment.

1 Rookie

 • 

107 Posts

June 29th, 2017 12:00

Thank you, James, that was an excellent explanation. I have to be aware of the issues with stubs and ECS but I am hoping there will be a way to address that the the very minor issues I brought up.


Looking forward to being able to deploy this soon as I have an immediately need for a customer internally.

Oh -- and the licensing thing -- I've been working on sales for about two weeks waiting for an answer   If they are anything, patient they are!

CHEERS!

Top