For more details, please see ourCookie Policy.

SAN Health Utility

Using SAN Health - Frequently Asked Questions

by Moderator ‎05-24-2012 01:08 PM - edited ‎06-09-2016 09:19 AM (8,829 Views)

Click here for a list of topics on Using SAN Health




How do I use SAN Health?

Review the videos and sample report at Here you’ll find all the instructions necessary to run it in your environment. As a guideline, each report should contain one SAN. As a reminder, a SAN is composed of one or more related fabrics and devices (for example, a dual-fabric SAN). A fabric consists of one or more connected switches.

The report might also contain multiple fabrics or several individual switches that are used for a single business purpose. While many users of SAN Health run the capture tool on each fabric in a SAN simultaneously, it might make sense to run SAN Health sequentially on each fabric in the SAN, one at a time (for example, Fabric A first and then Fabric B). This is perfectly acceptable and in fact is recommended.


What is the best way to name my fabrics and SANs for SAN Health?

You should think carefully about the names you choose, because they are used extensively in the report and are the basis of section headings. Using logical names will help produce a report that is easier to read. You can base the names on the physical location of the switches, the logical location of the switches, or even the use of the switches (switches attached to the backup portion of the SAN, for instance).


How long can I capture performance data?

SAN Health has been tested capturing performance data from portPerfShow for a maximum of 48 hours, the maximum time currently supported. Some users have simply scheduled another SAN Health workstation to continue after the initial 48-hour period has expired. This is perfectly acceptable, but note that a second processing event must take place and a second report and Visio diagram will be generated. For long term performance capture we suggest that you investigate the MTRG-based utilities on My Brocade (  There is a 22 hour option to ensure that the performance capture stays under 24 hours as some users have requested this option.


When the performance data is captured, what are the sample intervals?

The performance data capture intervals are automatically calculated, and depend on the capture duration you choose. 500-to-700 sample brackets enable the best format for the resulting Excel graph. The sample interval is calculated to be the nearest logical interval for the sample period that fits into that 500-to-700 sample bracket. As an example, for a performance data capture time above four hours but less than eight hours, the sample period will be 60 seconds. A capture time of between eight and 12 hours will use a 90-second sample interval.


Will my SAN Health session time out if my terminal session ends?

If you are running SAN Health from a Windows terminal server and you leave a capture session running for a long period of time, don’t forget to extend the Windows terminal user session time out. Otherwise, the user session on the terminal server will end and the captured data will be lost. SAN Health does not save incremental capture data: All data is saved only on completion of the overall process.


Are the switch passwords stored anywhere?

Switch passwords are saved locally on the end user's computer in the Audit Data Set that you can choose to save if you wish to re-run the same audit again. When the passwords are saved in the audit set, they are triple encrypted using three different algorithms which the security industry refers to as cryptographically strong, and additionally a complex matrix of rolling keys is applied. It is important to note that the switch passwords are NOT included in the .BSH file and are NOT sent to the report generators.


When SAN Health is running, occasionally I see a response of "Unknown Command." Should I worry?

No, this is normal and expected. For example, when you issue the command slotshow against a non chassis-based system, newer switches respond with "command not available on this platform," whereas older switches respond with "command unknown." In addition, the older the firmware level is, the fewer commands that respond with values. For example, when you run SAN Health against a SilkWorm 1000 running Fabric OS version 1.6, at least half of the commands will generate replies of "command unknown." This will not negatively affect your report.


How do I get performance data from Brocade M-Series (McData) switches or Cisco MDS switches?

Unfortunately, the diagnostic data that can be obtained from these switches via the telnet or SSH interface does not contain reliable performance information and this information cannot be captured.


I can't remember where to submit my data file. Where do I send it?

If you open the .BSH file (using any text editor), the details are at the top of the page. You can attach the .BSH file to an e-mail message and send it to, or you can upload it via the Web to


The display has stopped, did my telnet sessions stop?

If you are running an audit against a large number of switches on a low-power workstation, in order to ensure switch session integrity, SAN Health sets the screen refresh to the lowest priority. The switch telnet sessions have not stopped, there are simply not enough spare CPU cycles to repaint the graphics in the SAN Health application. This will not negatively affect your audit. If you are interested in seeing the screen refresh in real-time, try running SAN Health again from a more powerful workstation.

If a telnet session does stop for any reason, SAN Health will time it out after 90 seconds of activity, displaying an orange warning banner as the session is timed out. SAN Health will then close the telnet socket and clean up the memory resources that were in use.


What are the custom Hyperlinks?

SAN Health will automatically create hyperlinks for the devices on the Visio diagram. For switches, it will create a Telnet and WebTools hyperlink. Additionally, any optional hyperlinks that you request when running SAN Health will be created. Optional hyperlinks can be specified in the 4th column of the CSV file, or generic hyperlinks can be created to the device/switch WWN dependant on the option setting in SAN Health > Options > Diagram Format.

Custom hyperlinks can be created for almost any task. Examples include opening a data file, launching a java LUN management utility, telnetting to a UNIX box, running a script or program, etc.

Note that if a hyperlink refers to a file resource, this file or a pointer to it must exist in the same directory as the Visio diagram or Excel file that contains the hyperlink.


When SAN Health saves the .BSH file, what type of encryption is used?

When the file is complete, SAN Health double encrypts and compresses the file.  The first encryption pass uses 256-bit AES. The second encryption pass (after the compression) is Triple DES.


I have an existing .SET file that I've been using, but now I've added or changed a switch in the fabric. How can I make sure SAN Health sees the changed fabric?
Whenever a new switch is added or a switch is swapped out of a fabric, yu’ll need to manually open the .SET file in SAN Health and click the “Test Fabric Connectivity, Get Switch Details” button so SAN Health will automatically find all the new attached fabric members. Either that or you can add in the new switches using their IP addresses on the Add Switches tab. Either way you’ll also need to input the usernames and passwords (although if they are the same credentials as existing switches in that fabric you can set them as such on the Fabric tab with one click of a button). Then, start the audit to makes sure all the switches can be logged into and successfully audited. After that, make sure you resave the .SET file before closing SAN Health. Sorry, there is no fully automatic way to do this.
I have a Brocade 4024 that has "DO NOT AUDIT" showing up after it is discovered by SAN Health. Why is that and what can I do?

There is a known uncommon defect in FOS 6.2.2d specific to the 4024 that can cause an issue with the management server daemon when running certain CLI commands under specific scenarios.
As SAN Health is designed to be non-intrusive and to avoid risk, we simply don’t allow it to run against that box on that firmware level. We would recommend that you upgrade the firmware. This is the only way to get SAN Health to audit this switch.