Nutanix Prism Central

Nutanix Prism Central is a centralized management and monitoring platform that provides a unified interface to manage multiple Nutanix clusters and virtual machines from a single pane of glass. For more detailed information, refer to Nutanix's official website.

Integration Method:  Data Collector (API Ingest)

Tables: Device Inventory Info (5001), Detection Finding (2004), Cloud Resources Inventory Info (5023)

This integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user should have access to the Nutanix Prism Central console with administrator privileges.

• The user should have a compatible version of the system in which we can configure the data collector.

• The user should have access to the DataBee console.

• Nutanix Prism Central must be running AOS version 7.x or later with API v4.0 support enabled.

Configuration Overview

1. Data Collector Configuration and Installation.

2. Create the Service Account in Nutanix Prism Central.

3. Create the Role in Nutanix Prism Central.

4. Create Nutanix Prism Central Data Feed in the DataBee console.

   DataBee Parameter	Nutanix Prism Central Parameter
   Base URL	Base URL
   Access Key	API Key

Data Collector Configuration and Installation

To receive events from Nutanix Prism Central, a Data Collector must be installed and configured. The data collector is used to call Nutanix Prism Central APIs and send data to DataBee securely.

Follow the steps provided in DataBee's official documentation to complete the configuration. Additionally, refer to this guide for detailed instructions on installing the Data Collector on your machine.

Nutanix Prism Central Configuration

Create Service Account

1. Log in to the Nutanix Prism Central UI using Administrator credentials. Copy the Base URL highlighted in the image below for later use.
    

2. Select the Admin Center.
    

3. From the navigation bar, click on IAM.
    

4. Under the Identities tab, click on the Service Accounts.
    

5. Click on + Add New Service Account button.
    

6. On Create Service account page,

   1. Enter the Service Account Name.

   2. (Optional) Enter the Service Account Email and Description.

   3. Click on the Save and Create Keys button.
       

7. Click on + Add New Key.
    

8. Under New Key,

   1. Select the Key Type as API Key.
       

   2. Enter the Key Name and select the Key Expiry Date or enable the Key never expires.

   3. Click on the Generate Key button.
       

9. Copy the API key for later use and close the window.
    

10. Click on the Done button.
     

Create Role

1. Navigate to Admin Center > IAM. Under the Roles tab, click on the Create Role > New Role.
    

2. Enter the Role Name and Description(optional) and select the Operation.
    

3. Select the required operations for API access.

   1. Search for the View Cluster operation, select it, and click the “+” button to grant access.

      

   2. Similarly, search for the following operations one by one, select each operation, and click the “+” button to grant access:

      1. View Host
          

      2. View Alert
          

      3. View Existing Virtual Machine.
          

4. Verify the operations and click on Save & Create Authorization Policy button.
    

5. Click on the Next button.
    

6. Select the entity types and instances as Full access: all entity types & instances. Click on the Next button.
    

7. Select the Service Account to assign this role.

    

8. Search for the Service Account that was created in earlier steps. Click on the Save button.
    

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for Nutanix Prism Central and click on it as shown below.
    

3. Click on the Data Collector option for collection method.
    

4. Click on the API Ingest option as the polling mechanism.
    

5. Enter the feed contact information, select the collector that you have created from the drop down, and scroll down.
    

6. In the configuration page, confirm the following, then scroll down:

   • Base URL: Paste the Base URL which would be the IP address/instance of the Nutanix Prism Central. Ensure that you add port 9440. for example https://10.55.1.13:9440

   • Request Count: Set to 2

   • Interval: Set to 1 second

   • Event Types: Preselected for all the event types that integration pulls.

     Note:

     The rate limit is set to 2 requests/1 second based on the minimum rate limit across all Nutanix API

     endpoints (Alerts endpoint: 2 req/s). Do not exceed this value to avoid API throttling.

     

7. In the configure authentication page, confirm the following, then click Next.

   • Authorization Method: Custom API Key

   • Access Key: Paste the API Key

   • Enable TLS: Check the Enable TLS option

   • Skip Server-side Certificate Verification: Check it to disable the server-side certificate verification

   • Root CAS File Path: Enter the path where the CA certificate file is located on your machine.
      

8. Click Submit.
    

Troubleshooting Tips

• Ensure that the Nutanix Prism Central server is reachable by opening the terminal on the data collector machine and running ping <server_ip> command.

  

• Verify that port 9440 is open and accessible from the data collector machine.

• Ensure the user credentials have sufficient permissions to access the Prism Central v4.0 APIs.

• If you receive HTTP 429 (Too Many Requests) errors, reduce the request count in the rate limit configuration.

• If you encounter TLS/SSL certificate errors, ensure the "Skip Server-side Certificate Verification" option is enabled, or provide the correct CA certificate path.

• If you encounter any issues regarding log forwarding, refer to the DataBee troubleshooting document for detailed guidance.