pre-con ed: configuring ca workload automation ae for optimal results

World®’16

ConfiguringCAWorkloadAutomationAEforoptimalresultsMikeWoods,CATechnologies,PrincipalEngineeringServicesArchitect

MFX10E

MAINFRAMEANDWORKLOADAUTOMATION

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation


Abstract

AsCAWorkloadAutomationAE(CAWLAAE)administrators,providingarobustandefficientenvironmentiscritical.ThissessionwillcovermanagingconfigurationparametersintheschedulingengineaswellastheUItoensuresmoothoperation.ThissessionwilldiscusshowtoconfigureCAWorkloadAutomationAE(AutoSys®)toimproveefficiencyandreduceproblemsrelatedtoconfiguration.

MichaelWoodsCATechnologiesPrincipalEngineeringServicesArchitect


Agenda

WHATAREBESTPRACTICES

WORKLOADAUTOMATIONAE

WORKLOADCONTROLCENTER

EMBEDDEDENTITLEMENTSMANAGER

Q&A

1

2

3

4

5


WhatisaBestPractice?

Normallyreducesissues§ Notalwaysthesameastakingthedefaults

§ Hasagreaterusageinclientbase

§ Lesschanceforissuesgoingforward

Notalwaysbestforyou§ Youmayhaveuniquerequirements

§ Onesizedoesnotalwaysfitall


CAWorkloadAutomationAE

§ DBMAINT– Deletesolddatafromthedatabase– Defaultistorunat3:30– Shouldbesettorunatalowperiod– Highvolumeshopsmaywanttorunmorethanonceaday– ControlledbyDBMaintTime setting– Whensubmittedviaschedulerwillthrowanalarmiferrorsoccur– DBMaintCmd

§ Default$AUTOSYS/bin/DBMaint§ WillnotpickupanychangestoDBMaintscript

ConfigurationSettings



§ IPCaching– DefaultbehavioristocachetheIPaddressforagentstoimproveperformance.– ControlledwithEnableIPCaching=0|10meansthatadns lookupwilloccurforeachjobrun.Sameasolderreleases1meansthattheinitiallookupresultwillbesavedandreused.– as_server impact0meansthatadns lookupwillbeusedforoutboundcommunication1meanstousethesameIPaddressusedforinboundwillbeusedforoutboundcommunication




§ LOCALHOSTJobsdefinedwithlocalhostrunwheretheactiveschedulerislocated– Thatmachinemustbedefined.– CanbecontrolledbyLocalMachineDefinition=name

§ Ifnotdefineddefaultstothehostnameoutput




§ InstanceWideEncryption

§ UsedforanycommunicationtotheApplicationServer– WCC– CLI– SDK

§ Unrelatedtoencryptionkeyusedforagentcommunication




§ InstanceWideEncryption

§ UseEncryption=0|1|20Specifiesthatnoencryptionisused1Specifiesthatadefaultencryptionkeyisused,thedefault2Specifiesthatacustom32hexkeyor16characterpassphraseisused

§ Bestpracticeforaproductionenvironmentistouseacustomkey.




§ InstanceWideEncryption– Mustbesetto0(None)whenR11agentsareused– ClientandWCCconfigurationmustmatchinordertocommunicate– Recommendusingadifferentkeypertiertopreventaccidentaltest

jobsrunninginproduction




§ Statisticalaggregation– usedtoreportonscheduler,eventandjobstatistics– UsedbyWCCreports– Usedbyautoaggr togenerateclireports– Storesdatabyhour,daily,weeklyandmonthlyunits– SetwithAggregateStatistics=0|10Donotaggregatestatistics1statisticsareaggregated,thisisthedefaultsince11.3.6SP2




§ Securitymodes– InternalSecurity– Samemodelaslegacyreleases– ExternalSecurity– UsesEmbeddedEntitlementsManager(EEM)

§ Recommendedtoprovidegranularsecuritytomeetcompliancerequirements.

§ Workwithyoursecurityteamtocreatethebestfilterstoimproveperformance.UserandGroupfiltersareavailable.

Implementation



§ GlobalVariables– Usesamenamingconventionasjobstomakesecuringeasier– Donotassignasconditionstotoomanyjobs

§ Changestovaluedrivetheschedulertovalidateallassociatedjobs§ Canimpactperformance

– CouldaThresholdresourceworkbetter?

Implementation


WorkloadControlCenter

§ Views– Createglobalviewsthatmeettheneedsofyourdifferentusers:

Operations,Applicationteams– Restrictviewstoviews<5000– Limitwhocancreateviews– DuplicateorwildcardforALLcanhurtperformance

Implementation



§ If11.3orhigher,goto11.4fornewfeaturesandbetterperformance– RequiresEEM12.51

§ If11.3.6CAWLAAEandusingEEM,useaglobalECLIuserandrestrictaccesstotheCredentialstab

Implementation


WorkloadControlCenter Continued

§ Letusershaveself-serviceinproductiontorelieveOperationsfromgettingoverwhelmedandpotentiallylesserrorprone– Mustbeauditable– Mustbesecured

§ EEMcanauditthisactivity,yourpolicysecuresit



§ Checktuningguideforspecificinstructions– Java.Maxmemoryismajorone– Twotomcats– 32bit– shouldnotexceed1G– 64bit– canbesetlarger,checkwhatisavailableonyoursystem

PerformanceTuning


WorkloadControlCenterPerformanceTuning

§ Linuxinstall_dir/tomcat/conf/wrapper.conf#UncommentthislineiftheentropyoftheUNIXmachineislowtospeedupencryption#Thedotbetween/devand/urandomisnotamistakewrapper.java.additional.101=-Djava.security.egd=file:/dev/./urandom

Isnowthedefaultsetting


CreatingtheEnvironmentForUsers

Definetherolesyouneed:

§ Admin

§ Operations

§ Scheduler

§ Applicationdeveloper

§ Lineorbusinessuser


CreatingtheEnvironmentForUsersContinued

§ Definewhattabs(applications)eachroleshouldhave

§ Whatserversshouldtheyhaveaccessto?– Development,UAT,Production

§ Whattabsperserver?– Editfordev,butnotforprod?– Sendevent/monitoringinprod,butnoedit

§ Whatviewsshouldtheyhave?



Onesecuritymodeavailable:

§ Securityisusedtodeterminewhatwillbedisplayed– Removeunusedtabs– Reducequestions/issuesonfeaturesnotusedorwanted

§ Usesecuritytoprotectwhatneedsprotectionandalsotoreducethenoise– Showwhattheyareinterestedin

UsingSecurity



Thereare50+jobtypes.

§ Howmanyarerequired?

§ DoyouhaveOracle®EBusiness?

§ DoyouhaveSAP®?

§ DoyouhavePeopleSoft?

§ Doyouhavez/OS?

§ DoyouallowFTP?

ConfigurationOptions



§ Generalnotesforrunningcommandsforjobtypes:— User_name:EEMuser,localuserwithaccess— Password:UsersEEMpassword— Application_name: qeditorappedit

§ Commandmustberunwithauseridabletoupdatelogfiles

§ Usetheuseriddesignatedatinstallastherunasuser

§ Thedefaultisroot

BatchInterfaces



Creatingalistofdesiredjobtypes:

§ Listavailablejobtypestoseewhatiscurrentlyavailableandnotavailable:filter_jobtypes-uuser_name -ppassword -tapplication_name-l

§ Removejobtypesfrombeingdisplayed:filter_jobtypes-uuser_name-ppassword -tapplication_name–rall|jobtype1[,jobtype2,…,jobtypex]

BatchInterfaces Continued



Creatingalistofdesiredjobtypes:

§ Addjobtypestoavailablelist:filter_jobtypes-uuser_name-ppassword -tapplication_name-aall|jobtype1[,jobtype2,…,jobtypex]



CreatingtheEnvironmentForUsersCreatingviewsinbatch:

§ Exportasampleviewthathasyourstandards– wcc_monitor -uuser_name-ppassword–xexport_file–view

sampleView

§ Editexportedviewtoreplaceviewnameto‘XXXX’

§ Createscriptto‘sed’templateandreplace‘XXXX’withyourapplicationprefixusingyournamingconvention

§ Importviews:wcc_monitor-uuser_name-ppassword–iinput_file



CAWorkloadAutomationAgents

§ DefinedManagers– Donotaddunusedmanagers

§ Increasesunsentmessagesifmanagerdoesnotrecognizeagent§ Makesthemanagerdealwithunwantedmessage(Junkmail)

§ Legacysettings– Ifcomingfromapre11.3,usethemtogetthesamebehavior– Ifbrandnew,thennotasimportant,butyouneedtosetstandardson

howtheagentswillbehaveforyourendusers.Usingcommonsettingswillmakelifeeasier

Implementation


Questions?


RecommendedSessions

SESSION# TITLE DATE/TIME

MFX12ECriticalPathAnalysiswithCAWorkloadAutomation(AE)iDash– Overview

11/14/2016at10:00am

BanyanA/B

MFX20EBeyondtheCAWorkloadAutomationAECLI–LeveragingCAWLAAEWebServices

11/14/2016at5:00pm

JasmineC

MFX27EPlanningDisasterRecoveryforCAWorkloadAutomationAE

11/15/2016at9:00am

JasmineC

MFX122S VisionandRoadmap:CAWorkloadAutomationAE11/16/2016at12:45pm

BanyanA/B


MustSeeDemos

ModernWorkloadAutomation

CAWLADEMFandWorkloadAutomation

SeamlessApplicationAutomationAgents&AdvancedIntegrationsMFandWorkloadAutomation

CAConversionasaService

CAWorkloadAutomationMFandWorkloadAutomation

Innovations:CrossEnterpriseWorkloadAutomationCAWLAAE&DEMFandWorkloadAutomation


Thankyou

Stayconnectedatcommunities.ca.com

pre-con ed: configuring ca workload automation ae for optimal results

Technology