app sense management center administrator guide

| Management Center

Administrator Guide

The information contained in this document ("the Material") is believed to be accurate at the time of printing, but no representation or warranty is given (express or implied) as to its accuracy, completeness or correctness. AppSense Limited, its associated companies and the publisher accept no liability whatsoever for any direct, indirect or consequential loss or damage arising in any way from any use of or reliance placed on this Material for any purpose.

Copyright in the whole and every part of this manual belongs to AppSense Limited ("the Owner") and may not be used, sold, transferred, copied or reproduced in whole or in part in any manner or form or in or on any media to any person other than in accordance with the terms of the Owner's Agreement or otherwise without the prior written consent of the Owner.

Trademarks

AppSense and the AppSense logo are registered trademarks of AppSense Holdings Ltd. Microsoft, Windows and SQL Server are trademarks or registered trademarks of Microsoft Corporation. Novell, Novell eDirectory, and Novell Netware are trademarks or registered trademarks of Novell Corporation. Other brand or product names are trademarks or registered trademarks of their respective holders.

Document Information

Publication: 1

Document Version: APMS70-12-110107-1

AppSense Management Center Administrator Guide page 2© 1999-2007 AppSense Ltd. All Rights Reserved.

Contents

About this Guide .......................................................................................................................................... 6Terms and Conventions .......................................................................................................................... 6Documentation ....................................................................................................................................... 7

Management Center Architecture................................................................................................................ 8Components .......................................................................................................................................... 8

The Management Console..................................................................................................................... 9The Management Server ....................................................................................................................... 9The Database....................................................................................................................................... 9The Product Consoles ......................................................................................................................... 10The Managed Computers .................................................................................................................... 10

System Requirements ............................................................................................................................... 11Connectivity and Accounts .................................................................................................................... 11Database ............................................................................................................................................. 11Management Server ............................................................................................................................. 12Management Console ........................................................................................................................... 13Client Communications Agent ................................................................................................................ 13

Security Model ........................................................................................................................................... 14Security Challenges .............................................................................................................................. 15Authentication and Authorization ............................................................................................................ 15Securing Communications using SSL ..................................................................................................... 15

Management Center Workflow .................................................................................................................. 16Workflow ............................................................................................................................................. 17

Troubleshooting ......................................................................................................................................... 21Product Consoles Fail to Connect to a Secure Management Server .......................................................... 21CCA Fails to Connect to a Management Server ...................................................................................... 22CCA Fails to Connect to a Management Server when SSL State Changes ................................................ 22CCA Fails to Connect to a Non-secure Management Server ..................................................................... 23

Reference .................................................................................................................................................. 25Console Overview ................................................................................................................................ 25

Console Layout................................................................................................................................... 25Home View .......................................................................................................................................... 26Deployment Groups View ...................................................................................................................... 32

Overview............................................................................................................................................ 33Unassigned Computers ....................................................................................................................... 34Directory Groups and Computer Groups ............................................................................................... 36Configuring Groups ............................................................................................................................. 37


Move Computers ................................................................................................................................ 47Alerts View ........................................................................................................................................... 48

All...................................................................................................................................................... 49Alert Rules ......................................................................................................................................... 50Delete Events ..................................................................................................................................... 54

User Rights View .................................................................................................................................. 55Packages View .................................................................................................................................... 57

All Packages ...................................................................................................................................... 58Agents ............................................................................................................................................... 59Configurations .................................................................................................................................... 60Package Installer ................................................................................................................................ 61

Event details ........................................................................................................................................ 62Events........................................................................................................................................................ 63

Application Manager Events .................................................................................................................. 63Environment Manager Events ................................................................................................................ 64Performance Manager Events ............................................................................................................... 66Management Center Events .................................................................................................................. 68



Figure 1 Management Center Architecture 8Figure 2 AppSense Management Center Security Model 14Figure 3 Management Center Workflow 16Figure 4 Connecting to the Management Server 17Figure 5 Setting up user accounts 17Figure 6 Setting up packages 18Figure 7 Setting up deployment groups 19Figure 8 Setting up alert rules 20Figure 9 Management Console: Home View 26Figure 10 Connect to Server dialog box 31Figure 11 Management Console: Deployment Groups 32Figure 12 Move Computers dialog box 47Figure 13 Management Console: Alerts View 48Figure 14 Delete Events dialog box 54Figure 15 Management Console: User Rights 55Figure 16 Management Console: Packages View 57Figure 17 Package Installer dialog box 61Figure 18 Event Details dialog box 62

Figures

About this GuideTerms and Conventions

About this Guide

This guide includes information about the AppSense Management Center which provides a system for managing and deploying AppSense security and performance software to managed computers on the corporate network. The Management Center includes mechanisms for centralized alert and event monitoring and policy configuration.

This guide includes details about the setup of Management Center components and provides a model of the recommended security framework. The guide also provides a comprehensive reference to the Management Console.

For more information about the installation and set up of the AppSense Management Center, see the AppSense Management Center Installation Guide.

Terms and Conventions

Table 1 shows the textual and formatting conventions used in this document:

Table 1 Document Conventions

Convention Use

Bold Highlights items you can select in Windows and the product interface, including nodes, menus items, dialog boxes and features.

Code Used for scripting samples and code strings.

Italic Highlights values you can enter in console text boxes and titles for other guides and Helps in the documentation set.

> Indicates the path of a menu option. For example, “Select File > Open" means "click the File menu, and then click Open."

Note — Highlights important points of the main text or provides supplementary information.

Tip — Offers additional techniques and help for users, to demonstrate the advantages and capabilities of the product.

Caution/Warning — Provides critical information relating to specific tasks or indicates important considerations or risks.

Procedure — Indicates a series of steps for performing a task.


About this GuideDocumentation

Documentation

The AppSense documentation set includes guides for installing, configuring and evaluating AppSense products, and Helps which provide reference to the product interfaces and procedures for performing common actions.

You can access the Helps from the product consoles and download product guides in PDF format from the AppSense website at:

http://www.appsense.com


http://www.appsense.com

Management Center ArchitectureComponents

Management Center Architecture

The AppSense Management Center provides a system for managing and deploying AppSense software to managed computers on the corporate network and includes mechanisms for centralized alert and event monitoring, and policy configuration.

Figure 1 Management Center Architecture

Components

The Management Center includes the following:

The Management Console

The Management Server

The Database

The Product Consoles

The Managed Computers



The Management Console

The Management Console provides an interface to the Management Server and the other components of the Management Center allowing you to control deployment groups, users, event data and alerts, configurations and packages, and registered computers.

The Management Console includes the following views:

Home — Allows you to manage server connections, monitor authentication with a server, view deployment group status, view alerts status and monitor system events.

Deployment Groups — Allows you to manage and monitor Deployment Groups with controls for handling group membership, installation schedule, event filtering policies and package assignments, monitoring for alerts and events and computer management settings.

Alerts — Allows you to manage alerts and alert rules.

User Rights — Allows you to manage access rights to the Management Console and views within the console, as well as manage access to product consoles and configurations.

Packages — Allows you to manage AppSense software agent and configuration packages on the Management Server.

The Management Server

The Management Server manages communications with the SQL database server for data access and storage, provides security control, communications for managing network discovery services and software deployment to managed computers, resource management and system auditing.

Management Server security controls network authorization of managed computers and Management Consoles.

Communications for deployment includes download schedules, group management and file transfers, and network discovery services for integration with Active Directory.

System auditing manages event data access and storage via the Management Console alert rules which includes mechanisms for generating SNMP and SMTP alert notifications.

The Database

The Management Center relies on the availability on the network of a pre-installed SQL server for the storage and retrieval of AppSense software agents, configuration packages, license packages, and event and alert data.

The SQL database server is administered by the Management Server and can be installed locally on the Management Center computer or on a separate computer.

For information about the system requirements for any of the Management Center components, see the AppSense Management Center Installation Guide.



The Product Consoles

The consoles for each of the management products (Application Manager, Environment Manager and Performance Manager) allow you to configure and save the configurations to the Management Server database for adding to deployment groups and deploying to managed computers.

For more information about connecting product consoles to the Management Server, see the relevant product guides or the AppSense Management Center Installation Guide.

The Managed Computers

The Client Communications Agent (CCA) is installed on managed computers to manage communications between the product agent and the AppSense Management Center.

The CCA polls the Management Server to manage the download and installation of agents, configurations and software package updates, and also sends event data generated by the product agents to the Management Server.

The CCA can be downloaded and installed directly on managed computers from the Management Server web site.

The CCA can also be deployed by other methods such as Active Directory group policy objects, or third party deployment solutions such as SMS.


System RequirementsConnectivity and Accounts

System Requirements

This section provides details of system specifications, supported operating systems, database servers and additional requirements for each of the AppSense Management Center components and managed computers, including the following:

Connectivity and Accounts

Database

Management Server

Management Console

Client Communications Agent

Connectivity and Accounts

The Management Server must be able to access Active Directory for authentication in order to authorize incoming connections.

The Management Console must be used with a domain user account which has the correct permissions for accessing the computer hosting the Management Server.

The Computer hosting the Management Console requires outgoing access for HTTPS or HTTP.

Database

The SQL database can be installed on the same computer hosting the Management Server, or separately.

When installing a Microsoft MSDE 2000 or Microsoft SQL Server 2000 database server, start the SQL database service manually in the Start > Programs menu before proceeding with the AppSense Management Server installation. There is no need to reboot the server machine.

Supported Database Servers

Microsoft SQL Server 2005

Microsoft SQL Server 2005 Express Edition

Microsoft SQL Server 2000 SP3 or later

Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)

If the SQL database server is located on a different computer than the AppSense Management Server, ensure that TCP/IP is enabled to allow a remote connection to the database server.


System RequirementsManagement Server

Management Server

The computer hosting the Management Server requires the following:

Microsoft Windows Server 2003.

Microsoft Windows Installer 3.1 (included in Microsoft Windows Server 2003 Service Pack 1).

Microsoft .NET Framework 2.0.

Internet Information Services (IIS) 6.0.

Ensure that the Management Server default web site includes anonymous access enabled with valid credentials for the default user.

For more information, see Troubleshooting: CCA Fails to Connect to a Non-secure Management Server.

Ensure that Background Intelligent Transfer Service (BITS) Server Extensions in IIS 6.0 are installed and ready, as follows:

Enable BITS.

Add/Remove Windows Components > Windows Components Wizard > Application Server > Internet Information Services (IIS) > Background Intelligent Transfer Service (BITS) Server Extensions.

Allow BITS.

Start > Programs > Administrative Tools > Internet Information Service (IIS) Manager > Web Service Extensions > BITS Server Extensions > Allow

Microsoft Windows Installer 3.1.

Requirements for SSL Communications

The Management server and managed computers are members of an Active Directory domain.

You can download and install Microsoft Windows Installer 3.1 from the following link:http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=889482fc-5f56-4a38-b838-de776fd4138c


http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=889482fc-5f56-4a38-b838-de776fd4138c

System RequirementsManagement Console

Management Console

The computer hosting the Management Console requires the following:

Microsoft .NET Framework 2.0.

A computer account under the same Domain as the Management Server.

Microsoft Windows Installer 3.1 (included in Microsoft Windows Server 2003 Service Pack 1).


The computer hosting the Client Communications Agent (CCA) requires the following:

Supported Operating Systems

Microsoft Windows XP Professional SP2

Microsoft Windows Server 2003

Microsoft Windows 2000 SP4

Required Components

WinHTTP 5.1 (including BITS 2.0).

Windows Installer 3.1 (included in Microsoft Windows Server 2003 Service Pack 1).

Microsoft Internet Explorer 6.0


Before proceeding with the installation, check in system Services to ensure that the Background Intelligent Transfer Service (BITS) service is installed and the startup type is set to Manual or Automatic. Otherwise, the installation of the CCA cannot proceed.





Security Model

Security Model

The AppSense Management Center can be implemented in a secure distributed environment with Active Directory integration, Secure Socket Layers (SSL) for encrypted communications, authenticated Management Server and database connections.

Figure 2 AppSense Management Center Security Model


Security ModelSecurity Challenges

Security Challenges

The security model shown in Figure 2 for implementing an AppSense Management Center installation addresses the following types of security threats which may pose a challenge to the system:

System integrity — Attempts to tamper with configuration and agent packages distributed to managed machines through the introduction of malware or modifications to software packages undermine the security policies which the management software is required to implement.

Data confidentiality — Event and alert data is continuously relayed to the SQL database via the Management Server and could be vulnerable to the threat of access by unauthorized users.

Authentication and Authorization

Authentication using Active Directory integration ensures that AppSense Management and product software is only accessed or modified by authorized administrative users.

Connections from the Management Server to the database are Windows authenticated.

An appropriate certificate issued by a Certification Authority, following enterprise policy and procedure and installed on the Management Server, ensures the server can be validated before client connections are established. Client connections are from managed computers and computers hosting the Management console, product consoles and Licensing console.

Securing Communications using SSL

SSL provides confidentiality and integrity of communications to ensure sensitive data is accessible only by authorized users, including:

Event data

Agents and agent configuration data

For information about setting up a self-signed SSL certificate on Windows Server 2003 with SQL Server 2005 Express Edition, see the AppSense Management Center Installation Guide.

If you are setting up SSL certificates on web servers using other supported operating systems and Microsoft SQL Servers, see the following for further information:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/secnetht16.asp


http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/secnetht16.asp

Management Center Workflow

Management Center Workflow

This section provides an overview of the steps for setting up the AppSense Management Center and managed computers ready for deploying product Agents and configuration packages.

Figure 3 Management Center Workflow


Management Center WorkflowWorkflow

Workflow

Configure and set up the Management Center according to the following steps, as shown in Figure 3:

Step 1 Connect to the Server

After launching the Management Console for the first time, in Start > Programs > AppSense, connect to the Server by clicking the link in the Overview panel or selecting Connect in the Actions menu.

Figure 4 Connecting to the Management Server

The server supports only one Management Console connection at a time.

Ensure that you provide a valid Management Server URL and prefix the address appropriately with HTTPS or HTTP depending on whether you are implementing the Management Center in a secure Active Directory domain with SSL encryption and a valid certificate or in a workgroup environment.

In the Connect to Server dialog box, select Automatically connect on startup to ensure the console connects automatically whenever launched.

Step 2 Set Up User Accounts

The Management Console installs with an Administrator account assigned to the local user performing the installation. You may wish to assign additional user accounts with full administrative rights or partial rights for viewing alerts and events.

Figure 5 Setting up user accounts



The User Rights view allows you to add users and groups. Select the Add Users or Add Groups option in the Actions menu to launch the Select Users or Groups dialog box to create a user policy. Click Refresh to update the view.

Check the required policies to apply to the new account. You can display a detailed list of the policies and the rights they each entitle the user or group by selecting the new user or group in the tree view in the left-hand panel.

Step 3 Install Packages

Check the availability of packages in the Packages view and, where appropriate, load and install existing packages on the network.

Figure 6 Setting up packages

The Management Server installation automatically saves AppSense product agents to the Management Server database. Software configuration and license packages are also automatically saved to the database when configured in the product and licensing consoles operating in Deployment mode. Consoles operate in Deployment mode when the Management console is installed on the same computer.

You can load additional packages, such as software and license configurations, which have already been saved to MSI packages on the local computer or network using consoles installed in standalone mode.

For more information about installing product consoles on the management computer without installing the product agents, see the AppSense Management Center Installation Guide.



Step 4 Create Deployment Groups

Set up deployment groups to specify client computer poll periods, group membership, installation schedules, event filters and package assignments, alert and events, and monitoring for specific computers in the group.

Figure 7 Setting up deployment groups

Polling periods and local event logging

The default polling period is 5 minutes for client machines to check for changes to the deployment group settings and assigned packages. The default poll period for uploading events is set to 5 minutes.

Client computer events can be set to log locally to the Application Event log and to locally held files in XML format, for monitoring purposes.

Membership

Group membership is assigned by supplying Active Directory root OU paths using the LDAP protocol in directory groups or using computer names in computer groups.

Directory group paths can be validated and exceptions can also be added to exclude specific groups of computers within an OU directory.

Installation Schedule

Configure the software download installation schedule times for the deployment groups. Configurations are installed immediately upon download.

Event Filtering

Select events to generate for product software and the Management Center. You may wish to avoid selecting high volume alerts except for specific monitoring purposes over limited periods of time to avoid inundating the system. The selected events can be used for setting up alert rules to generate notifications.



Step 5 Set Up Alert Rules

Create Alert rules in the Alerts view specifying combinations of the event ID, computer name and user name and configure alert rule notifications using mail server details for e-mail and SNMP messages about critical events you wish to monitor.

Figure 8 Setting up alert rules

Step 6 Install the CCA on Managed Computers

The Client Communications Agent (CCA) can be downloaded from the Management Server website and installed manually or using a command line prompt to install silently. For more information about the CCA installation methods, see Installing the Client Communications Agent. The CCA can also be distributed and installed via third-party deployment mechanisms.

Once the CCA is installed, the service registers with the Management Server at the website address you supplied during installation. Once the CCA has downloaded the deployment group settings, the service implements the policies to install software, generate events and poll the server for further changes and package updates. The CCA regularly polls the server for updates and changes to the deployment policy.

Ensure that you provide a valid Management Server URL and prefix the address appropriately with HTTPS or HTTP depending on whether you are implementing the Management Center in a secure Active Directory domain with SSL encryption and a valid certificate or in a workgroup environment.


TroubleshootingProduct Consoles Fail to Connect to a Secure Management Server

Troubleshooting

This section provides procedures for troubleshooting issues you may encounter with your Management Center implementation.

Product Consoles Fail to Connect to a Secure Management Server

CCA Fails to Connect to a Management Server

CCA Fails to Connect to a Management Server when SSL State Changes

CCA Fails to Connect to a Non-secure Management Server

Product Consoles Fail to Connect to a Secure Management Server

A certificate error occurs when connecting to a self-signed secure server from an AppSense product console using the Connect to server option in the Action menu.

The following error message is displayed: "A problem occurred while trying to connect to the Management Server"

The connection fails unless the self-signed certificate located on the server is manually copied from the Management Server to the computer hosting the console.

Perform the following steps to copy a self-signed certificate from a Management Server:

1. Launch the web browser and enter the Management Server URL:

https://<Server Name>/ManagementServer

A security warning message displays notifying you that there is a problem with the certificate.

2. Click View Certificate to display the Certificate dialog box and select the Certification Path tab.

3. Highlight the certificate with the exclamation mark, and select View Certificate.

4. In the Details tab, click Copy to File to launch the Certificate Export Wizard.

5. Click Next to select a format for the certificate and click Next to proceed.

6. Browse to a location for temporarily storing the file and supply a file name.

7. Click Next to view the summary details and click Finish to complete the wizard.

8. In Control Panel, launch Internet Options and select the Content tab.

9. Click Certificates and select the Trusted Root Certification Authorities tab.

10. Click Import to launch the Certificate Import Wizard and follow the steps to select the file you saved and complete the Wizard to install the certificate.

The computer hosting the product consoles on which you are installing the certificate must be in the same Active Directory domain as the Management Server from which the certificate is imported.


TroubleshootingCCA Fails to Connect to a Management Server

CCA Fails to Connect to a Management Server

When a computer hosting the CCA fails to connect to the server, check the Windows Event Log for event 9750 which indicates there has been a connection failure with the Management Server.

A connection failure can occur for the following reasons and you are recommended to check the these items and take the suggested actions:

Incorrect URL

Uninstall the CCA and reinstall ensuring that you enter the correct URL to the Management Server using HTTP for non-secure servers and HTTPS for secure servers.

<https>://<Management Server Name>

SSL State change to the Management Server

For more information, see CCA Fails to Connect to a Management Server when SSL State Changes.

Management Server untrusted certificate is not installed on client computer.

For more information, see CCA Fails to Connect to a Non-secure Management Server.

CCA Fails to Connect to a Management Server when SSL State Changes

When the state of the web site Secure Socket Layers (SSL) configuration is changed, either from the enabled or the disabled state, the web site must be restarted to allow the CCA to connect to the correct URLs for downloading packages or uploading events to the Management Server.

Restart the web site as follows:

1. On the Management server launch Internet information Services (IIS) Manager.2. In the left hand navigation panel, expand the server node and highlight the Default Web Site

node.

3. Select Stop in the Action menu or toolbar and click Start to restart the web site.


TroubleshootingCCA Fails to Connect to a Non-secure Management Server

CCA Fails to Connect to a Non-secure Management Server

The CCA does not register with a non-secure Management Server after the CCA service starts.

Perform the following steps to test whether the CCA is able to connect to the Management Server and, if necessary reconfigure Management Server default website with anonymous access enabled and a valid password for the default anonymous account.

To test the connection to the Management ServerLaunch the web browser on the computer hosting the CCA and enter the following URL to check connectivity with the Management Server:

http://<Server Name>/ManagementServer/Deployment/Manifest.aspx

The check returns an HTTP 401 error if the anonymous user account is configured incorrectly.

The default anonymous account must have a valid password.

Anonymous access on the Management Server must be enabled.

To reset the default anonymous user account password1. Launch the Computer Management Console in Start > Programs > Administrative Tools >

Computer Management.2. In the left hand navigation panel, expand System tools > Local Users and Groups > Users.

3. Highlight the default anonymous user account and right-click to select Set Password.

4. A warning message displays with a prompt to proceed or cancel the action.

Select Proceed to display the Set new password for IUSR_<Computer Name> dialog box.

5. Enter and confirm the new password and click OK.

To enable anonymous logging1. Launch the IIS Manager console in Start > Programs > Administrative Tools > Internet

Information Services (IIS) Manager.2. In the left hand navigation panel, expand the following nodes:

Web Sites > Default Web Site > ManagementServer > Deployment 3. Highlight the Deployment node and select Properties in the right-click or Action menus.

4. Select the Directory Security tab and click Edit under Authentication and access control to launch the Authentication Methods dialog box.

5. Ensure Enable anonymous logging is selected and enter the new password for the default anonymous user account.

The default anonymous user account is called the Internet Guest Account and the default name format is IUSR_<Computer Name>.


TroubleshootingCCA Fails to Connect to a Non-secure Management Server

6. Click OK to confirm the new password settings and close the IIS Manager dialog box.

7. On the computer hosting the CCA, retest the connection to the Management Server in To test the connection to the Management Server.

A successful connection returns the following XML code in the browser:<?xml version="1.0" encoding="utf-16" ?>

<reply>OK</reply>


ReferenceConsole Overview

Reference

This section provides a complete reference to the AppSense Management Console for managing the settings, configurations, packages and computers registered with the AppSense Management Server, and includes:

Console Overview

Home View

Deployment Groups View

Alerts View

User Rights View

Packages View

Event details

Console Overview

The AppSense Management Console allows you to manage AppSense software deployment groups, alerts and alert rules, users and software packages. Deployment groups include settings for group membership, installation schedules, event filtering, packages, alerts, events and computers.

Console Layout

The Management Console includes the following areas:

Navigation Pane

The navigation pane provides centralized navigation for accessing the tree view list of components in the selected view.

View Selection Bar

The View Selection Bar is located in the lower half of the Navigation Pane and allows you to select panes for managing the following system views:

Home — Manages the server connection and provides connection status information, quick links and status of user authentication, deployment groups and alerts.

Deployment Groups — Manages deployment groups including group membership, installation schedules, event filtering, package control, alerts, events and computer management.

Alerts — Manages alerts and alert rules for AppSense software events sent to the server from client computers.

User Rights — Manages user rights policies for the Management Console.

Packages — Manages agent and configuration software packages.


ReferenceHome View

Breadcrumb Bar

The breadcrumb bar displays across the main View Area and indicates the path of the current view.

View Area

The View Area is the main work area and displays the settings, controls and views of the selected node in the navigation panel. The View Area also includes the Actions area in the right-hand column which displays the available controls in the current view.

Home View

The Home view allows you manage server connections, monitor authentication with a server, view deployment group status, view alerts status and monitor system events.

Figure 9 Management Console: Home View


ReferenceHome View

The display in the navigation tree, View Area and Actions Area varies depending on whether a Management Server is connected.

The availability of views in the console depends on the rights of the currently connected user. For more information, see User Rights View.

The left-hand navigation tree expands to display the Management Server. The Management Console can only connect to one Management Server at any time.

The left-hand navigation pane includes a navigation tree view which includes the following nodes and dialog boxes:

Overview

<Connected Server>

System Events

Connect to Server

Overview

The Overview area presents a summary of the server connection according to the connection status of the Management Server.

Connection

Indicates the connection status with a Management Server:

Not Connected — No server is connected.

Click the link to launch the Connect to Server dialog box for connecting the Management Console to a Management Server.

<Server path and name> Connected — Indicates the name and path of the currently connected Management Server.

Click the link to display the following server details:

Table 2 Management Server Overview

Property Value

Groups The number of deployment groups configured on the server.

New Alerts The number of new alerts currently active on the system.

New Critical Alerts The number of new alerts marked as critical which are currently active on the system.

Database Server Name The name of the server hosting the database.

Database Name The name of the database.

Database Status The online status of the database.


ReferenceHome View

Authentication

Indicates the status of the user authentication on the connected server:

Not Authenticated — No server is connected.

Authenticated — Indicates the access rights of the currently connected user to manage deployment groups, alerts, user rights and software packages, including the following:

Database Size The current size of the database.

Database Transaction Log Size The size of the database transaction log.

Database Current Date Local time of the computer hosting the Management Server database.

Table 3 User Authentication

Access Rights Description

Administrator When selected, allocates full user rights which display all Management Console views and allow users to manage users and access rights.This option provides the following:

Deployment Groups – Provides access for managing the deployment groups view.Alerts – Provides access for managing alerts and alert rules.User Rights – Provides access to the User Rights view for managing users.Packages – Provides access to the Packages view and allows users to manage AppSense agents and configurations using the product consoles.Alerts – Provides access for managing alerts and alert rules.

Deployment Provides access to view all configurations, deployment groups, alerts, alert rules and events and management of the deployment group settings.

Packages Provides access to the Packages view and allows the user to upload new packages and delete existing packages. Users can also edit product configurations using AppSense product consoles.

View Packages Provides access to the Packages view but users cannot make changes. Users also have read-only access to AppSense product configurations using the product consoles.

Alerts Provides access to the Alerts View for managing alerts and alerts rules.

Table 2 Management Server Overview (continued)

Property Value


ReferenceHome View

Groups

Indicates the number of deployment groups configured on the connected server:

No Groups — No server is connected.

<n> Groups — Indicates the number of Deployment Groups which currently exist on the Management Server.

Deployment Groups allow you to manage policies for specifying and scheduling software for download and installation on groups of computers.

Click the link to manage deployment groups in the Deployment Groups View.

Alerts

Indicates the number of alerts currently active on the server:

No Alerts — No server is connected.

<n> New Alerts (<n> Critical) — Indicates the number of new alerts and also the number of new critical alerts.

Alert Rules allow you to specify the event criteria to match with an incoming event to generate an alert. Alert rules allocate a severity for an alert and matches against the specified event ID. Alert rules can also match against any value for computer or user to generate more specific alerts.

Click the link to manage alerts in the Alerts View.

Actions

The Actions area on the right-hand side of the console allows you to connect to a server or disconnect the currently connected server.

Connect — Launches the Connect to Server dialog box for connecting to a Management Server.

Disconnect — Disconnects the current server connection.

<Connected Server>

The connected server is listed in the node below the top-level management server node in the left-hand panel and, when selected, displays details about the connected server.

Server details

Provides system details about the currently connected server.


ReferenceHome View

Actions

Disconnect — Disconnects the currently connected server.

System Events

The System Events node provides a view listing current events.

The system events list includes the following:

ID — Indicates the reported event ID number.

Date/Time — Time the event was received by the Management Server.

Computer — Name of the computer on which the event originated.

User — User profile for which the event was generated.

You can select to view details of an event in the Event details dialog box with scrolling options for displaying the details of other events in the list.

Actions

Refresh — Refreshes the System Events list.

Show Event Details — Launches the Event details dialog box displaying information about the currently highlighted event.

Table 4 Connected Server System Details

Property Value

Groups The number of deployment groups on the server.

New alerts The number of new alerts.

New Critical Alerts The number of new alerts showing critical status.

Database Server Name Name of the server on which the database is installed.

Database Name Name of the database.

Database Status Online status of the database: Online/Offline

Database Size Maximum capacity of the database.

Database Transaction Log Size Current size of the database transaction log.

Database Current Date Current date and time on the database host system.

Server Version Software version of the Management Server.


ReferenceHome View

Connect to Server

The Connect to Server dialog box displays when you select the link to connect to a Management Server in the Home View of the Management console.

Figure 10 Connect to Server dialog box

The dialog box displays the details of the last connected server and includes the following settings:

Settings

URL — Drop-down list displaying the list of recently used Management Servers. You can select from the list or type the URL of a server using the following syntax:

http://<server name>:<port 80>/ManagementServer

The dialog box displays the last connected server, by default.

Server Name — Text box in which you can enter the name of the server to which you wish to connect.

The server name you enter here is automatically updated in the URL field.

You can also launch the Select Computers dialog box to browse for a server and select one from the list by clicking the ellipsis button (...).

Path — Displays the path of the selected web server on the host computer.

The path you enter here is automatically updated in the URL field.

Automatically connect on startup — When selected, the console automatically connects to the Management Server to which the Console last connected on startup, unless the server is not available.


ReferenceDeployment Groups View

Deployment Groups View

The Deployment Groups view allows you to manage and monitor Deployment Groups with controls for handling settings, alerts, events and computers.

Figure 11 Management Console: Deployment Groups

The left-hand navigation pane displays a navigation tree view of the connected server.

The Deployment Groups view includes the following nodes:

Overview

Unassigned Computers

Directory Groups and Computer Groups

Configuring Groups

Move Computers



Overview

The Overview node lists details of all assigned and unassigned computers registered with the server, and includes the following:

Actions

The Actions area on the right-hand side of the console allows you to create and delete deployment groups.

New Directory Group — Creates a new group under the Directory Groups node.

New Computer Group — Creates a new group under the Computer Groups node.

Delete — Deletes the group selected in the list. Computers in the group are moved to the Unassigned Computers.

Table 5 Deployment Groups List

Detail Description

Type Deployment group type:Unassigned Group – Computers on the network installed with a Client Communications Agent (CCA) which have registered to the server but are not assigned to an existing Deployment Group. Directory Group – Group includes computers which can be browsed in Active Directory using the LDAP protocol. Computer Group – Group includes any computers on the network.

Group Group name. Groups are listed alphabetically.Double-click a group to navigate to the correct group in the tree.

Computers Number of computers in the group.

Alerts Number of alerts for computers in the group.

Click anywhere on a deployment group list item to jump to the relevant group in the tree.



Unassigned Computers

The Unassigned Computers node includes computers which are registered to the Management Server but do not match the membership criteria of existing Directory Groups or Computer Groups.

If an existing deployment group is deleted, computers within the deleted group are moved to this node.

When a Computers sub-node is selected, the View Area displays the following panels:

Overview Panel

The Overview area displays in the upper panel of the View Area and includes the following details:

Management Panel

The Management Panel area displays in the lower panel of the View Area and divides into separate tabs, and includes the following details:

Table 6 Unassigned Group Overview

Column Description

Name Name of the unassigned computer. When a computer is selected for deletion from the system, the Pending delete status is appended to the name shown in this column.

Alerts The number of current alerts.

Last Response Last time the computer contacted the server.

Table 7 Unassigned Group Management

Tab Details Description

Alerts ID Alert ID.

Rule Alert rule which the alert matches.

Severity Alert severity.

Computer Computer from which the alert originated.

Group Group to which the computer belongs.

Date/Time Time the alert is raised on the Server.

Status Current status of the alert.



Actions

The Actions area on the right-hand side of the console allows you to move computers to other groups, delete computers from the database or view event information.

Move — Allows you to move the selected computer to another group.

Select the computer you wish to move and click Move to launch the Move Computers dialog box. Select a destination group for the computer and click Move to relocate the computer to the selected deployment group.

Refresh — Refreshes the list of computers in this group.

Delete — Deletes selected computers from the system.

Deleted computers remain listed in this group until all software packages have been removed with Pending delete status displayed next to the computer name in the overview panel.

Agents and packages are deleted as follows:

Client Communications Agent (CCA) — The CCA uninstalls after product agents have uninstalled, according to the Installation Schedule.

Product Agent — The AppSense product agents uninstall according to the Installation Schedule.

Configurations — Configurations are uninstalled immediately.

Events ID Event ID.

Date/Time Time the event is raised on the client computer.

Computer Computer on which the event occurred.

User User for which the event occurred.

Packages Name Name of the package.

Version Version of the package.

Product Product with which the package is associated.

Installation Status Indicates the installation status of a package and includes the following:

InstalledPending InstallPending Uninstall

Computer Details Property Computer hardware and system properties.

Value Computer hardware and system details.

Table 7 Unassigned Group Management (continued)

Tab Details Description



Unregister — Unregisters the computer from server.

Show Event Details — Launches the Event details dialog box for viewing information about the selected event.

Directory Groups and Computer Groups

Directory Groups include path references to OU groups or computers which can be browsed in Active Directory using the LDAP protocol. Computer groups include references to any computers on the network.

The groups in the tree can be expanded to display lower level nodes for managing the deployment group settings, alerts, events and individual computers belonging to the group. For more information, see Configuring Groups.

The following details display when the Directory Groups or Computer Groups node is selected:

Actions

The Actions area on the right-hand side of the console allows you to create new groups and delete existing groups selected in the list.

New Directory Group/New Computer Group— Creates a new group.

Delete — Deletes existing groups selected in the list. Computers in deleted groups are moved to the Unassigned Computers group.

If you select this option before the packages and agents have successfully been deleted from this computer, the CCA reregisters the computer again on the next poll period.

Computer group settings apply in precedence to Directory Group settings when a computer is included in both types of groups.

Table 8 Directory and Computer Groups Lists

Details Description

Group Name of the directory or computer group. Groups are listed alphabetically. Double-click a group to navigate to a group in the tree.

Computers Number of computers in the group.

Alerts Number of alerts currently raised on the computer.



Configuring Groups

Each group in the Directory Groups node and Computer Groups node includes sub-nodes for managing group membership settings, alerts, events and packages assigned to the group. The links in each group node direct you to the relevant management nodes or you can expand the group node to select the management sub-nodes, which include:

Settings

Alerts

Events

Computers

Settings

The Settings node provides options for client computer checks, uploads and local event logging, and sub-node settings for group membership, installation schedule, event filtering and package assignments.

The Settings node includes the following sections:

Polling

Machine Poll Period — Sets the frequency the client computer checks the server for changes to the deployment group. When new settings, agents or configurations are detected, the client downloads the relevant components and installs them.

Configurations are installed immediately when the download is complete.

Product agents are installed according to the installation schedule. Expand the settings node to display the Installation Schedule sub-node to configure the settings for installing agents.

The default machine poll period is 1 minute.

Upload Poll Period — Sets the frequency with which client computers upload event data.

The default upload poll period is 5 minutes.

Local Events

Log events locally — When selected, client computers store events locally in the System Event Log.

Log events to the local file — When selected, client computers record events in the specified file.

The range of polling minutes includes: 1, 2, 5 or 15 minutes. The options for setting the poll period are limited to avoid overloading the demand on network bandwidth which very short poll periods would cause and the risk of missing critical updates and downloads that much longer poll periods might cause.



Settings Sub-nodes

Expand the settings node in the navigation tree to display the following sub-nodes:

Membership


Event Filtering

Packages

Membership

The Membership sub-node allows you to add computers to a Computer Group or specify the directory path for computers to add to Directory Groups.

The Membership node includes the following sections:

Directory Groups

Root OU Node — Enter the path of the Active Directory root Organization Unit (OU) node or select the ellipsis button (...) to launch a browser with the Active Directory list for selecting OU root nodes and computers.

All computers registered in this node on which the Client Communications Agent (CCA) is installed, are registered by the Management Server in this deployment group. Use the Exceptions to exclude computers or child OUs from this group policy.

Include child OUs — When selected, includes all child OUs of the root node you specified in Root OU Node.

Exceptions — Add computers or child nodes you wish to exclude from membership of the current group by selecting the Add Exception in the Actions menu.

Submit — Click to commit any changes to the database.

A notification prompts you to commit any unsaved changes if you attempt to navigate away from the page. A notification also warns you if there are any errors on the page.

Actions

Validate changes — Checks that the Root OU node path is a valid reference, root and exception paths are valid. Checks that the settings for this directory group do not overlap with other directory group settings. Also checks that Root and Exception objects specified are of the correct type, such as, Domain, OU, Computer, as appropriate for the specification.

Add Exception — Launches a browser with the Active Directory list for selecting a child node of the root OU directory to exclude from the group membership policy.

Delete Exception — Deletes the highlighted exception from the list.



Computer Groups

Computer — Add computers you wish to add to the membership of the current group.

<Click here to create a new entry> — Enter the path to a computer that you wish to add to the membership of this group. Otherwise, select the ellipsis button (...) to launch the Select Computers browser to find and select computers on the network to add to the group membership.

Actions

Add — Launches the Select Computers browser to find and select a computer on the network to add to the group.

Delete — Deletes the computer selected in the list.


The Installation Schedule sub-node allows you to set the times and frequency for installing software packages downloaded by computers belonging to this group.

The Installation Schedule node includes the following sections:


Disable (No software will be installed) — When selected, no software is installed. Configurations are installed immediately.

Immediately (Software is installed as soon as it is downloaded) — Agent software is installed immediately after the computer has completed downloading software packages.

Schedule (Software is installed on the configured schedule)— Software is installed according to the specified days and times enabled in the list:

Software agents are installed according to the installation schedule for the deployment group. Configuration and license packages are installed immediately upon download by the CCA from the Management Server.

Table 9 Installation: Schedule

Column Description

Day Day of the week on which the installation is performed. Includes Sunday to Saturday. You can specify a specific occurrence of the day in the month on which to apply this setting in Day of the Month.

Start Start time of the installation.

End End time of the installation.

Enabled When selected, the day is included in the installation schedule.



Submit — Click to commit any changes to the database.

A notification prompts you to commit any unsaved changes when you attempt to navigate away from the page.

Event Filtering

The Event Filtering sub-node allows you to specify which events client computers send to the Management Server for each product agent. You can also select to display user and computer names in events anonymously.

Events can be generated for:

Application Manager

Environment Manager

Management Center

Performance Manager

The Event Filtering node includes the following sections:

Anonymous Logging

Always use anonymous USER name in events — Events for actions by specific users are reported without recording the user name.

Always use anonymous MACHINE name in events — Events for actions performed on specific computers are reported without recording the computer name.

Event Filter

Provides expandable lists of events by product which you can select either individually or by product group to generate and send to the Management Server.

For information relating to specific events, see Events.

Table 10 Event Filter

Column Description

Product event ID Indicates the product name and the four digit event ID numbers for the events available for the selected product.

Event description Description of the event. You may wish to disable certain types of events which are generated in large quantity to avoid inundating the server.

Enabled Select to enable an event. Select this option in the top level list item to enable all events in the group.



Actions

Toggle All — Toggles the enabled status selection for all products.

Toggle For Product — Toggles the enabled status selection for a highlighted top-level list item. This action is only enabled when the top level list item is highlighted.

Toggle Selected — Toggles the enabled status selection of the highlighted list item.

Packages

The Packages sub-node allows you to manage the list of software packages assigned to the current group for download to the client computers and also provides the list of packages currently available on the server. Software packages include software agents and configurations for:

Application Manager

Environment Manager

Performance Manager

Management Center

License Manager

The Packages node includes the following sections:

Assigned Packages

When the installation schedule for a group is disabled, a warning is displayed in the assigned packages panel notifying you that the packages will not be installed. The warning is removed if the packages are unassigned from the group or if the installation schedule is enabled.

Table 11 Assigned Packages

Column Description

Name The assigned software package title.

Required version Version number of the assigned software package required for download. When Set To Latest is selected, the latest available version of a software package is installed.

Product The product to which the software package belongs.



Available Packages

Actions

Refresh — Refreshes the current list.

Assign — Adds the highlighted software package in the Available Packages list to the Assigned Packages list.

Unassign — Removes the highlighted package from the Assigned Packages list.

Set To Latest — Flags the software package to install the latest available version.

Alerts

The Alerts node allow you to manage the list of alerts for all the members of the current deployment group and provides a list of the events raised for the selected item in that group in a tabbed panel in the lower area of the view. Actions allow you to process alerts by flagging alerts or deleting alerts from the list.

The Alerts node includes the following sections:

Alerts

Table 12 Available Packages

Column Description

Name The software package title.

Latest Latest version number of the software package.

Product The product to which the software package belongs.

For managing alerts for all groups, see Alerts View.

Table 13 Deployment Groups: Alerts Node

Column Description

ID ID of the event for which the alert is generated.

Rule Alert rule.

Severity Severity level based on the alert rule.

Computer Computer name on which the alert originated.



Events

Actions

Refresh — Refreshes the current list of alerts.

Acknowledge Selected — Flags selected alerts as acknowledged.

Resolve Selected — Flags selected alerts as resolved.

Delete Selected — Deletes all selected alerts.

Delete All — Deletes all alerts.


Group Deployment group from which the alert originated.

Date/Time Time the alert is raised on the Server.

Status Status of the alert: Acknowledged, Resolved, New.

Table 14 Deployment Groups: Alerts Node Events

Column Description

ID Event ID.


Computer Computer on which the event occurred. This may be reported as anonymous if Always use anonymous MACHINE name in events is selected in Event Filtering.

User User action which caused the event. This may be reported as anonymous if Always use anonymous USER name in events is selected in Event Filtering.

Table 13 Deployment Groups: Alerts Node

Column Description



Events

Events lists the events raised by computers in the current deployment group according to the configuration settings in the Event Filtering node.

The Events node includes the following section:

Events

Actions

Refresh — Refreshes the current list of events.


Computers

Computers allows you to monitor the list of computers in the current deployment group. Management options include monitoring alerts, events, AppSense software agent and configuration packages and computer details for each computer in the group.

The Computers node includes the following sections:

Computers

Table 15 Deployment Groups: Events Node

Column Description

ID Event ID.


Computer Computer on which the event occurred. This may be reported as anonymous if Always use anonymous MACHINE name in events is selected in Event Filtering.

User User action which caused the event. This may be reported as anonymous if Always use anonymous USER name in events is selected in Event Filtering.

Table 16 Deployment Groups: Computers Node

Column Description

Name Computer name.

Alerts Number of active alerts.

Last Response Date and time of the last alert sent to the server.



Control Tabs

Table 17 Deployment Groups: Computers Node Control Tabs

Tab Description

Alerts The Alerts tab allows you to monitor alerts for the selected computer, and includes:ID – ID of the event for which the alert is generated. Rule – Alert rule.Severity – Severity level of the alert based on the alert rule criteria.Computer – Computer on which the alert originated.Group – Deployment group from which the alert originated.Date/Time – Time the alert is raised on the Server. Status – Status of the alert: Acknowledged or Resolved.

Events The Events tab allows you to monitor events on the selected computer, and includes:ID – ID of the event.Date/Time – Date and time the event occurred.Computer – Computer on which the event occurred.User – User which caused the event.

Packages The Packages tab allows you to view packages on the selected computer, and includes:Name – Title of the software agent and configuration package on the currently selected computer.Version – Version number of the current software package on the selected computer.Product – The product to which the package belongs.Installation Status – Indicates the installation status of a package and includes the following:- Installed- Pending Install- Pending Uninstall

Computer details The Computer details tab displays information about the selected computer, and includes:Property – Computer hardware and system properties.Value – Computer hardware and system details.



Actions

Move — Launches the Move Computers dialog box for selecting a different group to relocate the highlighted computer.

Refresh — Refreshes the display after an action has been performed.

Delete — Deletes selected computers from the system.

Deleted computers remain listed in this group until all software packages have been removed with Pending delete status displayed next to the computer name in the overview panel.

Agents and packages are deleted as follows:

Client Communications Agent (CCA) — The CCA uninstalls after product agents have uninstalled, according to the Installation Schedule.

Product Agent — AppSense product agents uninstall according to the Installation Schedule.

Configurations — Configurations are uninstalled immediately.

Unregister — Unregisters the computer from server.

Restore — Restores a computer set to delete or unregister.


If you select this option before the packages and agents have successfully been deleted from this computer, the CCA reregisters the computer again on the next poll period.



Move Computers

This dialog box launches when you select a computer to move to a different deployment group.

Figure 12 Move Computers dialog box

You can select this option in the Computers node of any computer group.

1. Select a group from the list and click Move in the Actions menu.

The computer is relocated to the new group.

2. Check the destination group to view the computer in the new location.


ReferenceAlerts View

Alerts View

The Alerts view allows you to manage alerts and alert rules.

Figure 13 Management Console: Alerts View

Alerts are generated by the server when events are received from computers in each deployment group.

Alert rules allow you to specify the events for which alerts are generated and additionally, criteria for matching events originating on specific computers from specific users. Alert rules also define actions for generating alerts via SNMP and SMTP e-mail notifications.

The left-hand navigation pane includes a navigation tree view of the alert filters and alert rules and includes the following nodes:

All

Alert Rules

Delete Events



All

Alert filters sort and handle alerts for events generated by computers in all deployment groups, shown in Table 18, according to the rules you define in Alert Rules.

For more information about managing alerts for specific deployment groups or computers, see the Alerts section in Configuring Groups.

You can filter alerts according to a range of criteria including the acknowledged and resolved states which you apply using the available actions. You can also delete alerts from the lists of alerts or according to the acknowledged or resolved states.

Expand the top level node to display specific alert filter criteria.

Alert Filters

Table 18 Alert Filters

Filter Description

All Displays alerts from computers across all deployment groups.

New in last day Displays alerts generated by events on the current date.

Critical Alerts for critical severity events.

High Displays alerts for high severity events.

Medium Displays alerts for medium severity events.

Low Displays alerts for low severity events.

New Displays alerts for new events.

Acknowledged Displays alerts flagged as acknowledged.

Resolved Displays alerts flagged as resolved.



Actions

Delete Events — Launches the Delete Events dialog box allowing you to select events in a date and time range to delete from the database.

Refresh — Refreshes the Alerts view to display current events.

Acknowledge Selected — Flags the selected alerts as acknowledged.

Resolve Selected — Flags the selected alerts as resolved.

Delete Selected — Deletes all selected alerts.

Delete All — Deletes all alerts.

Show Event Details — Launches the Event details dialog box displaying information about the currently highlighted event.

Alert Rules

Alert Rules allow you to set up alerts for AppSense events sent from client computers to the Management Server by specifying criteria to match with incoming events to generate alerts and alert rule policies such as severity levels and SNMP and SMTP e-mail notifications.

Alert Rules

Actions

New Rule — Creates a new Rule sub-node below the Alert rules node.

Enable — Enables the highlighted rules and processes related event types to generate alerts according to rule policies.

Disable — Disables the highlighted rules.

Delete — Deletes the highlighted rules.

Alert Rules sub-nodes

After creating a rule in the Alert rules node, expand the following nodes to configure the rule:

Rule

Criteria

Actions

Table 19 Alerts: Alert Rules

Column Description

Rule Name of the current alert rule.

Enabled When selected, enables the highlighted alert rule.



Rule

The rule node allows you to specify alert rule names, descriptions, status and severity and view rule criteria and actions. The Actions area on the right-hand side of the console allows you to edit the criteria and actions for the rule in the Criteria and Actions nodes.

The Rule node includes the following sections:

Rule Settings

Rule Name — Editable text box for entering a rule name which should include the number of the event to which the rule applies for easy reference.

Rule Description — Editable text box for entering a rule description. The text box expands to allow you to enter detailed descriptions. Click OK to confirm the description you have entered.

Severity — Drop-down list for selecting a severity level to apply to the alert rule.

Status — Drop-down list from which to select options to enable or disable the current rule.

Criteria List

The Criteria list provides details of the alert rule criteria. You can edit these criteria by expanding the Rule node to display the Criteria node or by selecting the action button in the right-hand Actions panel.

The Criteria list includes:

Event ID — Events with this ID number generate alerts of this type. For event ID numbers and their descriptions, see the Event Filtering node in the console Deployment Groups.

Computer Name — Events on this computer generate alerts of this type.

User Name — Events caused by this user on the specified computer generate alerts of this type.

Actions List

The Actions display provides details of the alert rule actions to perform when an alert of this type is generated. You can edit these actions by expanding the Rule node to display the Actions node or by selecting the action button in the right-hand Actions panel.

Actions include:

SMTP — Indicates whether SMTP e-mail generation is enabled or disabled.

SNMP — Indicates whether SNMP trap generation is enabled or disabled.

User names must be entered using a double slash between the domain or computer name and the user name. For example: MyDomain\\MyUser or MyComputer\\MyUser.



Actions

Edit criteria — Switches the view to the Criteria sub-node for specifying event ID, computer name and user name criteria for generating alerts based on the current rule.

Edit Actions — Switches the view to the Actions sub-node for configuring SNMP and SMTP e-mail notifications about alerts generated by this rule.

Delete Rule — Deletes the highlighted rules.

Criteria

Criteria allow you to specify details of the events which generate this alert and filters to indicate specific computers on which the events occur and specific users causing the events. You can use any combination of these values to create the alert rule.

Criteria values support the use of regular expressions for specifying multiple values or ranges.

Delimiter characters must be used where appropriate. For example, when specifying a domain and computer name or user name, such as:

Domain\\Computer or Domain\\User.

The Criteria node includes:

Event ID — Enter the ID number of the event type for which you wish to generate this alert. Use regular expressions to specify multiple values or ranges.

Computer Name — Enter the name of the computer from which the specified event must originate to generate this alert. Use regular expressions to specify multiple values or ranges.

User Name — Enter the name of the user that causes the specified event to generate this alert. Use regular expressions to specify multiple values or ranges.

Actions

Alert rule actions allow you specify whether to generate SNMP traps and e-mail notifications when alert criteria are met.

The Actions node includes links to the SMTP and SNMP sub-nodes for configuring and enabling notifications via SMTP and enabling SNMP traps for the current alert type.

SMTP

The SMTP node allows you to enable or disable e-mail notifications and configure the user to which e-mail notifications are sent about this alert.

SMTP Enable

Enable SMTP — When selected, SMTP e-mail notifications are enabled according to the configuration settings when alert rule criteria are met.



SMTP Configuration

SMTP configuration settings allow you to specify the server to which e-mails are sent and the e-mail header details including To, From and Subject details.

Expand Server Settings and E-mail Settings to display the configuration settings.

SNMP

The SNMP node allows you to enable or disable trap generation when alert rule criteria are met.

SNMP Configuration

Enable SNMP — When selected, SNMP traps are generated when alert rule criteria are met.

Table 20 Alert Rules: SMTP Configuration

Property Configuration

Server Settings N/A

Server Enter the path to the e-mail server through which e-mail notifications are sent to the specified user.

User Name User name with which the Management system accesses the e-mail server.

Password Password for the user profile with which the Management System accesses the e-mail server.

E-mail Settings N/A

To Address to which e-mail notifications are sent about the current alert.

From Address from which e-mail notifications are sent about the current alert.

Subject Subject line displayed in e-mail notifications about the current alert.



Delete Events

The Delete Events dialog box allows you to delete events from the database within a specified date and time range, or all events.

Figure 14 Delete Events dialog box

The Delete Events dialog box includes the following settings:

Settings

Delete all events — Deletes all events in the Management Server database. Disables the date and time range selection options.

From — Allows you to specify a start date and time for events to delete from the database.

To — Allows you to specify an end date and time for events to delete from the database.

Skip events that are associated with an alert — Events associated with an alert are not deleted from the database.

You can enter date and time values or select a date from the calendar which displays when you expand the drop-down list for each setting. The time values can be adjusted either by entering values directly or using the keyboard arrow keys to scroll to the required hour, minute and second values.


ReferenceUser Rights View

User Rights View

The User Rights view allows you to manage user and group access rights to the Management Console and product agent and configuration management.

Figure 15 Management Console: User Rights


ReferenceUser Rights View

The left-hand navigation pane includes a navigation tree view for viewing the rights of all groups and users and sub-nodes for viewing the rights of specific groups and users.

You apply rights to groups or users by enabling the options in the View Area.

Access Rights

Sub-nodes

The following nodes are available in the User Rights view:

All Users and Groups — When selected, displays a list of all users and groups. See Table 21 for details about the settings available for each user or group.

Groups — When selected, displays a list of all groups registered with the server. See Table 21 for details about the settings available for each specific group.

Users — When selected, displays a list of all assigned users. See Table 21 for details about the settings available for each specific user.

By default, the user who installed the Management Server and Management Console is listed in the Users node with Administrator access rights.

Table 21 User Rights

Column Description

Groups/Users Name of the groups or users to which user rights are assigned.

Administrator When selected, allocates full user rights which display all Management Console views and allow users to manage users and access rights.This option provides the following:

Deployment Groups – Provides access for managing the deployment groups view.Alerts – Provides access for managing alerts and alert rules.User Rights – Provides access to the User Rights view for managing users.Packages – Provides access to the Packages view and allows users to manage AppSense agents and configurations using the product consoles.Alerts – Provides access for managing alerts and alert rules.

Deployment Provides access to view all configurations, deployment groups, alerts, alert rules and events and management of the deployment group settings.

Packages Provides access to the Packages view and allows the user to upload new packages and delete existing packages. Users can also edit product configurations using AppSense product consoles.

View Packages Provides access to the Packages view but users cannot make changes. Users also have read-only access to AppSense product configurations using the product consoles.

Alerts Provides access to the Alerts View for managing alerts and alerts rules.


ReferencePackages View

Actions

The following actions are available according to the node selected:

Add User/Add Group— Launches the Select Users or Groups dialog box for adding users or groups to the list.

Refresh — Updates the list.

Delete — Deletes the highlighted groups and users from the list.

Packages View

The Packages view allows you to manage AppSense software agent and configuration packages on the Management Server.

Figure 16 Management Console: Packages View

The Packages view includes the following nodes and sub-nodes:

All Packages

Agents

Configurations

Package Installer



All Packages

The All packages node displays the list of all AppSense software agents and configuration packages available on the Management Server and includes actions which allow you to add and delete software MSI packages.

The All packages node includes the following:

All Agents and Configurations

Actions

Add Package — Launches the Browse for package dialog box which allows you to navigate the network to select a package to add to the list of available packages on the server. Once you have selected an agent or configuration package, the Package Installer dialog box displays allowing you to install the agent or configuration package in the database.

Refresh — Refreshes the list of packages after making changes.

Remove — Deletes the highlighted packages from the server.

Table 22 Packages: All Agents and Configurations

Column Description

Name Name of the software package.

Type Type of package: Agent.Configuration.

Product Product to which the software package is related, including one of the following:

Application ManagerCommunications AgentEnvironment ManagerPerformance ManagerLicense Manager

Size Size of the software package MSI file.



Agents

The Agents node displays the list of AppSense software agent packages available on the Management Server and includes actions which allow you to add and delete packages.

The Agents node includes the following:

All Agents

Actions

Add Agent — Launches the Browse for package dialog box which allows you to navigate the network to select an agent package to add to the list of available packages on the server.

Once you have selected a package, the Package Installer dialog box displays for adding the agent package to the database.



Table 23 Packages: All Agents

Column Description


Type Type of package: Agent.Configuration – Not displayed in this list.

Product Product to which the software agent package is related, including one of the following:

Application ManagerCommunications AgentEnvironment ManagerPerformance Manager




Configurations

The Configurations node displays the list of all AppSense software configuration packages available on the Management Server and includes actions which allow you to add and delete software MSI packages.

The Configurations node includes the following:

All Configurations

Actions

Add Configuration — Launches the Browse for package dialog box which allows you to navigate the network to select a package to add to the list of available packages on the server.

Once you have selected a package, the Package Installer dialog box displays for adding the configuration package to the database.



Table 24 Packages: All Configurations

Column Description


Type Type of package: Agent – Not displayed in this list.Configuration.

Product Product to which the software package is related, including one of the following:

Application ManagerEnvironment ManagerPerformance ManagerLicense Manager




Package Installer

The Package Installer dialog box displays when you have selected an AppSense software agent or configuration package and allows you to add the package to the Management Server database.

Figure 17 Package Installer dialog box

The Management Server installation process automatically saves all AppSense agents to the Management Server database. Configurations created and modified in consoles operating in Deployment mode are also automatically saved to the database.

This dialog box is only usually required for loading packages to the database under the following circumstances:

Updating versions of product agent packages.

Uploading configuration packages saved to disk as MSI packages.

Configuration packages created by product management consoles operating in standalone mode.

The Package Installer dialog box includes the following:

Settings

Name — Displays the name of the Agent or configuration package and allows you to edit the name.

Manufacturer — Displays the manufacturer details.

Version — Displays the version number of the package. The agent version represents the version of the product while the configuration version represents an incremental value each time you modify an existing configuration.

Product — Drop down list allowing you to select the product type.


ReferenceEvent details

Event details

The Event details dialog box displays when you double-click an event in the System Events node of the Home View navigation pane or when you select Show Event Details in the Actions pane on the right-hand side of the View area.

Figure 18 Event Details dialog box

The Event details dialog box allows you to scroll through the list to reveal details about events, and includes:

Date

Time

Event ID

Product

User

Computer

Scroll arrows — Scroll through the events in the list to display in the dialog box.

Description — Provides additional detail about the event. The lower panel of this area includes event details by category.


EventsApplication Manager Events

Events

This section provides details about events which can be configured in the Management Center deployment group configurations and raised by deployed CCAs hosted on the same computers.

Application Manager Events

Environment Manager Events

Performance Manager Events

Management Center Events

Application Manager Events

Table 25 Application Manager Events †

Event ID Description Default Text Type

8095‡ No Configuration found AppSense Application Manager cannot find a valid configuration.

Error

8096‡ Configuration Upgraded A configuration for a previous version of AppSense Application Manager has been detected and upgraded.

Error

8099‡ Invalid license AppSense Application Manager software is not licensed.

Error

9000 Denied Execution An application was denied the request to execute according to the policies of the configuration.

Warning

9001 Allowed Execution An application was allowed to execute according to the policies of the configuration

Information

9002 Overwrite Changed Owner An allowed executable was overwritten and the ownership changed to the user performing the overwrite.

Warning

9003 Rename Changed Owner A prohibited executable was renamed and the ownership changed to the user performing the file rename.

Warning

9004 Application Limit Denial The number of allowed instances of an executable was exceeded and the executable was prohibited from running.

Warning

9005 Time Limits Denial An attempt was made to run an executable outside the time frame specified in the Time Limits rule and was prohibited from running.

Warning

9006 Self-Authorization A self-authorizing user has run an executable.The event information includes the following details about how the executable has run:

For each session, always or once.

Warning


EventsEnvironment Manager Events

Environment Manager Events

9007 Self-Authorization Allow A self-authorizing user has allowed an executable to run.

Warning

9095 No Configuration found AppSense Application Manager cannot find a valid configuration.

Error

9096 Configuration Upgraded A configuration for a previous version of AppSense Application Manager has been detected and upgraded.

Error

9099 Invalid license AppSense Application Manager software is not licensed.

Error

† Events are reported to the local Windows Event Log according to the Deployment Group Events settings and also to the Management Server by the CCA, unless otherwise indicated.

‡ System event. Reported only to the local Windows Event Log.

Table 25 Application Manager Events (continued)†


Table 26 Environment Manager Events †


8399‡ Invalid License AppSense Environment Manager software is not licensed.

Warning

9300 Self healing process started. A process being monitored for self healing stopped and has not been restarted.

Information

9301 Self healing registry replaced.

a registry key being monitored for self healing was changed and has now been reset.

Information

9302 Self healing registry removed.

A registry key being monitored for self healing was inserted and has now been removed.

Information

9303 Self healing file replaced. A file being monitored for self healing was removed and has now been replaced.

Information

9304 Self healing file removed. A file being monitored for self healing was added and has now been removed.

Information

9305 Self healing service stopped. A service being monitored for self healing started and has now been stopped.

Information

9306 Self healing service started. A service being monitored for self healing stopped and has now been restarted.

Information

9400 Lockdown edit control blocked drive.

An edit control has had a blocked drive entered into it. Information


EventsEnvironment Manager Events

9401 Lockdown edit control blocked text.

An edit control has had blocked text entered into it. Information

9402 Lockdown accelerator key(s) blocked.

An application has had accelerator key(s) blocked. Information

9403 Lockdown dialog blocked. An application has had a dialog box blocked. Information

9404 Lockdown MSAA access blocked.

An application has had access blocked for a control using MSAA detection.

Information

9405 User logon action success A user logon action completed successfully. Information

9406 User logon action fail A user logon action failed to complete successfully. Information

9407 User logoff action success. A user logoff action completed successfully. Information

9408 User logoff action fail A user logoff action failed to complete successfully. Information

9409 Computer startup action success

A computer startup action completed successfully. Information

9410 Computer startup action fail A computer startup action failed to complete successfully.

Information

9495 Environment Manager not configured

AppSense Environment Manager cannot find a valid configuration.

Warning

9496 Unsupported configuration detected

A configuration for a previous version of Environment Manager has been detected. This configuration must be upgraded using the Environment Manager Console.

Warning

9501 Removable storage device has been disabled

The user has tried to access a device which has been disabled.

Information

9502 Removable storage device has read-only access

The user has tried to access a device which has read-only access.

Information


‡ System event. Reported only to the local Windows Event Log.

Table 26 Environment Manager Events (continued)†



EventsPerformance Manager Events

Performance Manager Events

Table 27 Performance Manager Events †


9100 User Memory Usage Warning

Amount of memory consumed by a user has exceeded a warning level set in a user memory limit.

Information

9101 User memory usage warning lapsed

Amount of memory consumed by a user has fallen back to a safe (non-warning- level as defined in a User Memory Limit.

Information

9102 User memory usage blocked Amount of memory available to this user as defined in a User Memory rule has been exceeded. No more memory allocation will be allowed.

Warning

9103 User memory usage blocking lapsed

Amount of memory consumed by a user has fallen back to a safe (non-blocked) level as defined in a User memory limit.

Information

9104 Thread Throttling Clamping On

Total CPU Usage has exceeded a threshold and will be clamped.

Information

9105 Thread Throttling Clamping Off

Total CPU Usage has fallen under a threshold and clamping will stop.

Information

9106 Application CPU Usage clamping On

An Application has exceeded its CPU Usage limit. Information

9107 Per Application memory Usage Exceeded

Memory usage for a particular application has exceeded a threshold.

Information

9108 Per Application Memory Usage Reduced

Memory usage for a particular application has dropped below a threshold.

Information

9109 Per Application Memory Usage Terminated

An application has be terminated because it used too much memory.

Warning

9110 Application CPU Usage Clamping Off

An application has now fallen below its CPU Usage limit and will no longer be clamped.

Information

9111 Bandwidth Quota Usage Warning

Warning threshold has been reached for the amount of data allowed to be transmitted via a quota rule.

Information

9112 Bandwidth Quota Usage exceeded

Amount of data allowed to be transmitted according to a quota rule has been exceeded.

Information

9113 Bandwidth Throughput imposed

Information

9114 Bandwidth Throughput removed

Information

9115 Working set trimmed Working set for an application has been trimmed. Information


EventsPerformance Manager Events

9116 CPU Affinity changed CPU Affinity of an application has changed. Information

9117 Statistics upload successful PM successfully uploaded data to the statistics collation agent.

Information

9118 Statistics upload failed PM failed to upload data to the statistics collation agent.

Error

9119 Per Application Hard Memory Limit Reached

Memory usage for a particular application has reached its maximum limit

Warning

9195 Configuration not found PM cannot find a valid configuration. Error

9196 Configuration upgraded A configuration for a previous version of AppSense performance manager has been detected and upgraded.

Error

9197 Driver not found The AppSense Performance Manager driver could not be found.

Error

9198 Driver retry success Found the Appsense Performance manager driver on second, or later attempt.

Information

9199 Invalid license AppSense Performance Manager is not licensed. Error

9200 Application Analyzed Appsense Performance Manager is not licensed. Information

9201 Component Analyzed AppSense Performance Manager has analyzed an application.

Information

9202 Component Optimized AppSense Performance Manager has optimized a component.

Information

9203 Component failed to Optimize

AppSense Performance Manager has failed to optimize a component

Warning

9299 Invalid License Optimizer software is not licensed. Error


Table 27 Performance Manager Events (continued)†



EventsManagement Center Events

Management Center Events

Table 28 Management Center Events †


Alert Services

9700 Action Notification Success.-an action notification is dispatched successfully.

Alert Rule <alert rule> dispatched a <Action type> notification successfully.

Information

9701 Action Notification Failure.-an action notification fails to dispatch.

Alert Rule <alert rule> failed to dispatch a <action type> notification.

Information

Management Console and Web Service

9702 Package Modified-An agent or configuration was created or deleted.

Package <name> (<version>) of type <type> was <action>.

Information

9703 User Modified.-A user was created, modified or deleted.

User <name> was <action>. Access rights are <Access Rights>.

Information

9707 Events Purged. Events within the database were purged.

<Count> events were deleted from the database. Information

Priority Communications

9704 Priority Event Failure A priority event fails to upload to the Management Server.

Machine <Machine Name> uploaded a priority event but there was a problem.

Information


9705 Event Upload Failure-Events failed to upload to the Management Server.

Machine <Machine Name> tried to upload events but there was a problem.

Information

9710 AppSense install/uninstall successful

AppSense Agents and configurations successfully installed/uninstalled

Information

9711 AppSense install/uninstall unsuccessful

AppSense Agents and configurations unsuccessfully install/uninstall

Information

9750‡ Connection Failure The Communications Agent failed to connect to the Management Server.

Information

9751‡ Successful Registration The Communications Agent successfully registered with the Management Server.

Information

9752‡ Successfully joined a group The communications agent successfully joined its assigned group.

Information



Watchdog

8000‡ Service Started AppSense <product> Service Started Information

8001‡ Service Stopped AppSense <product> Service Stopped Information

8501‡ Watchdog service started The service <Service Name> has been restarted. Information

8502‡ Watchdog service ended unexpectedly

The service <Service Name> has ended unexpectedly. This has occurred <Restart Count> times. The watchdog will now attempt to restart the service.

Information

8503‡ Watchdog service is unrecoverable

The service <Service Name> has failed to restart. The watchdog attempted 10 restarts. No further action will be taken.

Information

8504‡ Watchdog service terminated

The service <Service Name> has been terminated. This occurred because the service entered a <Service State> state for a period of at least n seconds.

Information

9090 Service Ended Unexpectedly.-Generated when service ends unexpectedly.

The service <service name> has ended unexpectedly. This has occurred <service restart count> times. The watchdog will now attempt to restart the service.

Information

9091 Service Restarted (Application Manager). - Generated when service restarts.

Service <Service Name> restarted. Information

9092 Service Terminated (Application Manager). - Generated when service is terminated due to being in the starting or stopping state for a prolonged period.

The Service <Service Name> has been terminated. This occurred because the service entered a <Service State> state for a period of at least <Poll Time> seconds.

Information

9093 Service Unrecoverable (Application Manager). - Generated when service has exceeded restart attempts.

The service <Service Name> has not been restarted. The watchdog attempted <Restart Count> restarts. No further action will be taken.

Information

9190 Service Ended Unexpectedly (Performance Manager). - Generated when service ends unexpectedly.


Information

9191 Service Restarted (Performance Manager). - Generated when service restarts.


Table 28 Management Center Events (continued)†




9192 Service Terminated (Performance Manager) - Generated when service is terminated due to being in the starting or stopping state for a prolonged period.

The Service <Service Name> has been terminated. This occurred because the service enetered a <Service State> state for a period of at least <Poll Time> seconds.

Information

9193 Service Unrecoverable (Performance Manager). - Generated when service has exceeded restart attempts.


Information

9390 Service Ended Unexpectedly (Environment Manager).-Generated when service ends unexpectedly.


Information

9391 Service Restarted (Environment Manager). - Generated when service restarts.


9392 Service Terminated (Environment Manager). Generated when service is terminated due to being in the starting or stopping state for a prolonged period.

The Service <Service Name> has been terminated. This occurred because the service enetered a <Service State> state for a period of at least <Poll Time> seconds.

Information

9393 Service Unrecoverable (Environment Manager). Generated when service has exceeded restart attempts.


Information


‡ System events. Reported only to the local Windows Event Log.

Table 28 Management Center Events (continued)†



app sense management center administrator guide

Documents