Professional Documents
Culture Documents
BASE24-eps 2.1.6 - Application Management User Guide PDF
BASE24-eps 2.1.6 - Application Management User Guide PDF
BASE24-eps 2.1.6 - Application Management User Guide PDF
Management User
Guide
BASE24-eps®
2.1.6
12 May 2017
ACI Worldwide
Offices in principal cities throughout the world
www.aciworldwide.com
BASE24-eps® 2.1.6 3
Application Management User Guide — May 2017
WMQQueue (WebSphere Message Queue).......................................................... 56
ProcessManager.............................................................................................. 58
UnixProcess.................................................................................................... 60
JSFUnixProcess............................................................................................... 62
SISUnixProcess............................................................................................... 64
JSFZProcess....................................................................................................66
SISZProcess................................................................................................... 69
ZProcess........................................................................................................ 71
WndProcess.................................................................................................... 73
JSFWndProcess............................................................................................... 75
ScriptManager.................................................................................................77
CounterMonitor............................................................................................... 80
GaugeMonitor................................................................................................. 84
StringMonitor..................................................................................................87
TopologyManager............................................................................................ 90
RemoteAgentProxy.......................................................................................... 91
XPNETSystemManager..................................................................................... 92
XPNETSystem................................................................................................. 94
XPNETNode.................................................................................................... 95
XPNETStation..................................................................................................98
XPNETQueue................................................................................................. 101
XPNETProcess............................................................................................... 105
Component................................................................................................... 108
Service.........................................................................................................109
ProcessControl (BASE24-eps).......................................................................... 114
BASE24-eps business services................................................................................. 115
SBA Metrics Component..................................................................................116
SBA Metrics Service....................................................................................... 118
Foundation Metrics Component........................................................................ 119
Foundation Metrics Service..............................................................................120
SBA Service Management Service.................................................................... 122
BASE24-eps® 2.1.6 4
Application Management User Guide — May 2017
Authorization................................................................................................ 128
Auditing....................................................................................................... 130
Master/client agent security............................................................................ 131
Application management security settings......................................................... 131
Audit records................................................................................................ 154
BASE24-eps® 2.1.6 5
Application Management User Guide — May 2017
Start and stop multiple processes.................................................................... 186
Kill individual processes.................................................................................. 186
Setting up processes to restart automatically............................................................. 187
BASE24-eps® 2.1.6 6
Application Management User Guide — May 2017
Permanent and temporary management in ICE-XS..................................................... 203
Managing ICE-XS stations....................................................................................... 204
List all ICE-XS stations defined to a running ICE-XS process from the ACI desktop. 204
List all ICE-XS stations defined to a running ICE-XS process from the APF admin browser
............................................................................................................... 204
Add an ICE-XS station for permanent management from the ACI desktop............. 205
Add an ICE-XS station for permanent management from the APF admin browser....205
Remove an ICE-XS station from permanent management from the ACI desktop..... 205
Remove an ICE-XS station from permanent management from the APF admin browser
............................................................................................................... 206
Add an ICE-XS station for temporary management.............................................206
View ICE-XS station attributes......................................................................... 206
Start and stop ICE-XS stations........................................................................ 206
Managing ICE-XS stationpools................................................................................. 207
List all stationpools defined to the ICE-XS process from the ACI desktop............... 207
List all stationpools defined to the ICE-XS process from the APF admin browser..... 207
Add an ICE-XS stationpool for permanent management from the ACI desktop........208
Add an ICE-XS stationpool for permanent management from the APF admin browser
............................................................................................................... 208
Remove an ICE-XS stationpool from permanent management from the ACI desktop
............................................................................................................... 208
Remove an ICE-XS stationpool from permanent management from the APF admin browser
............................................................................................................... 209
Add an ICE-XS stationpool for temporary management from the ACI desktop........ 209
Add an ICE-XS stationpool for temporary management from the APF admin browser
............................................................................................................... 209
View ICE-XS stationpool attributes................................................................... 210
Start and stop ICE-XS stationpools...................................................................210
Managing ICE-XS msgrouters.................................................................................. 210
List all msgrouters defined to the ICE-XS process from the ACI desktop................ 210
List all msgrouters defined to the ICE-XS process from the APF admin browser...... 211
Add an ICE-XS msgrouter for permanent management from the ACI desktop.........211
Add an ICE-XS msgrouter for permanent management from the APF admin browser
............................................................................................................... 211
Remove an ICE-XS msgrouter from permanent management from the ACI desktop
............................................................................................................... 212
Remove an ICE-XS msgrouter from permanent management from the APF admin browser
............................................................................................................... 212
Add an ICE-XS msgrouter for temporary management from the ACI dekstop......... 212
BASE24-eps® 2.1.6 7
Application Management User Guide — May 2017
Add an ICE-XS msgrouter for temporary management from the APF admin browser
............................................................................................................... 213
View ICE-XS msgrouter attributes.................................................................... 213
Start and stop ICE-XS msgrouter (not supported).............................................. 213
BASE24-eps® 2.1.6 8
Application Management User Guide — May 2017
Add an XPNET queue for temporary management.............................................. 225
View XPNET queue attributes...........................................................................225
Suspend routing to an XPNET queue.................................................................225
Manage messages in an XPNET queue.............................................................. 226
Reset XPNET queue statistics...........................................................................226
BASE24-eps® 2.1.6 9
Application Management User Guide — May 2017
Section 13: Script execution using ScriptManager....................................................... 243
Executing scripts on demand................................................................................... 244
Execute scripts on demand from the ACI desktop............................................... 244
Execute scripts on demand from the APF admin browser..................................... 244
Scheduling script execution..................................................................................... 244
Add scheduled scripts from the ACI desktop...................................................... 245
Add scheduled scripts from the APF admin browser............................................ 246
Remove scheduled scripts from the ACI desktop................................................ 246
Remove scheduled scripts from the APF admin browser...................................... 246
Triggering script execution with notifications..............................................................247
Set up automated script execution based on notifications from the ACI desktop..... 247
Set up automated script execution based on notifications from the APF admin browser
............................................................................................................... 249
Guidelines for writing ACIJMX scripts........................................................................ 251
Section 14:
Script and command execution using the ACIJMX command interpreter interface.. 253
ACIJMX command interpreter interface..................................................................... 254
Start the ACIJMX command interpreter interface................................................ 255
Stop the ACIJMX command interpreter interface................................................ 255
Entering ACIJMXCI commands................................................................................. 256
ACIJMXCI commands..............................................................................................258
ASSUME command.........................................................................................258
ENV command...............................................................................................259
EXEC command............................................................................................. 260
EXIT command.............................................................................................. 261
RUN Command.............................................................................................. 261
SELECT command..........................................................................................262
SET command............................................................................................... 264
UPDATE command......................................................................................... 264
Executing scripts using runscript.............................................................................. 265
Start Runscript.............................................................................................. 265
Runscript syntax............................................................................................266
Setting up a security file................................................................................. 267
Example ACIJMXCI process control Jython run scripts......................................... 267
Configure a TLS 1.2 connection between ESWEB and ACIJMXCI....................................268
BASE24-eps® 2.1.6 10
Application Management User Guide — May 2017
Section 15: Multiple agent management (master and client agents)........................... 272
Multiple agent management.................................................................................... 273
Master/client agent requirements............................................................................. 273
Configure the client agent....................................................................................... 275
Configure the master/client relationship.................................................................... 276
BASE24-eps® 2.1.6 11
Application Management User Guide — May 2017
Configure a TLS 1.2 connection between ESWEB and the ACIJMX agent using Apache Tomcat
....................................................................................................................... 324
Configure a TLS 1.2 connection between ESWEB and the ACIJMX agent using IBM WAS.. 325
Section 19:
Modifying the display hierarchy of the Application Detail window/Management Console page
................................................................................................................................ 335
Detail window and Management Console page display hierarchy................................... 336
Changing the descriptor files................................................................................... 336
Grouping by attribute values................................................................................... 338
Extending the hierarchical display for dynamically registered resources......................... 342
Visibility level for components and services................................................................345
BASE24-eps® 2.1.6 12
Application Management User Guide — May 2017
About this user guide
The ACI Java Infrastructure Application Management User Guide describes ACI Application
Management and the use of the Application Management (ACIJMX) agent for managing system
resources. The manual includes high-level information for a general understanding of Application
Management as well as the detailed information needed for setting up and managing different
types of resources.
Application Management functionality is available through the ACI desktop or APF Admin browser,
but can also be exposed and made accessible to third-party management systems such as IBM
Tivoli Monitoring, or through a command line interface from your platform shell environment. In
these different cases, the available resource-level management functionality is the same;
however, the implementation will vary. The information in this guide is intended to provide the
necessary detail to be useful for all of these situations.
Audience
The intended audience consists of system operators who need to set up and use the Application
Management functions to manage resources in their system—using either the ACI desktop or APF
Admin browser, or a third-party management system. As such, the information is provided so that
it can be referenced for either purpose.
BASE24-eps® 2.1.6 13
Application Management User Guide — May 2017
Conventions used in this guide
BASE24-eps® 2.1.6 14
Application Management User Guide — May 2017
What's new in this publication
Here is what’s new in this publication.
Configure a TLS 1.2 connection between ESWEB and the ACIJMX agent on an HP
NonStop platform
Adds procedures for enabling a TLS 1.2 connection between ESWEB and an ACIJMX agent on an
HP NonStop platform.
BASE24-eps® 2.1.6 15
Application Management User Guide — May 2017
What's new in this publication
Configure a TLS 1.2 connection between ESWEB and the ACIJMX agent using Apache
Tomcat
Adds procedures for enabling a TLS 1.2 connection between ESWEB and an ACIJMX agent using
Apache Tomcat.
Configure a TLS 1.2 connection between ESWEB and the ACIJMX agent using IBM WAS
Adds procedures for enabling a TLS 1.2 connection between ESWEB and an ACIJMX agent using
IBM WebSphere Application Server (WAS).
BASE24-eps® 2.1.6 16
Application Management User Guide — May 2017
Section 1: Getting started
This section provides an introduction to ACI Application Management and the ACIJMX agent.
In this section:
BASE24-eps® 2.1.6 17
Application Management User Guide — May 2017
Getting started
ACIJMX agents
ACI Application Management is implemented using JMX-based agents, called ACIJMX agents,
specifically designed to manage ACI product applications. An ACIJMX agent acts as a flexible and
configurable broker of management information. It gathers information from the various managed
resources and makes that data available to the outside world—for example, to the ACI desktop or
APF Admin browser, to third-party management applications, and through a command interpreter
interface. It also provides the external interface for initiating remote operations on one or more
managed resources.
BASE24-eps® 2.1.6 18
Application Management User Guide — May 2017
Getting started
BASE24-eps® 2.1.6 19
Application Management User Guide — May 2017
Getting started
BASE24-eps® 2.1.6 20
Application Management User Guide — May 2017
Getting started
There are different hierarchical levels of MBeans. Those at the lowest level of the hierarchy
interact directly with the system resources they manage; those at higher levels of the hierarchy
interact with other MBeans and allow for grouping similar types of MBeans.
BASE24-eps® 2.1.6 21
Application Management User Guide — May 2017
Getting started
Note: Certain MBeans are specific to the platforms they run on, although most function
across multiple platforms.
Defining MBeans
Top-level MBeans are defined to the ACIJMX agent in the <ACIJMX_BASE>\config\acijmx.mlet file
and are loaded at agent initialization.
MBeans nested under the top level can then be added as a group from a Python script built for
your system (e.g. esconfig.py) or individually using operations exposed by the top-level MBeans.
Note: The Python script used to add groups of resources is built from an XML input file by
the runmbeanscriptbuilder script. Refer to section 16, “ACIJMX directory information”, for
information about the XML input file and the runmbeanscriptbuilder script.
MBean server
The MBean server is the core component of the JMX agent. It discovers and executes those
operations exposed by its registered MBeans. To be managed, resources must be registered to the
server through their corresponding MBeans. Once a resource is registered, it becomes visible to
the management applications to which the agent is connected. The MBeans server component
manages those MBeans that are registered to it, performing the following basic operations:
• Discovering, or determining, the management interface of each MBean.
• Querying MBeans.
• Reading and writing the attribute values exposed by the MBean.
• Performing operations exposed by the MBean.
• Receiving notifications emitted by the MBean.
BASE24-eps® 2.1.6 22
Application Management User Guide — May 2017
Getting started
The ACI Application Management ScriptManager MBean is a listener. It can listen for a notification
from a specific MBean and execute a specific script if it receives the notification.
Note: Listeners in this context are JMX constructs. They are not the same as listeners
defined within the ACI Java Server Framework.
Monitor MBeans
Monitor MBeans can be instantiated and configured to periodically observe other MBeans. Monitor
MBeans emit notifications only if a specific MBean attribute has changed beyond a specific
threshold.
ACI Application Management supplies three monitor MBeans: CounterMonitor, GaugeMonitor, and
StringMonitor.
Connectors
A connector makes a Java Management Extensions (JMX) MBean server accessible to remote Java
technology-based clients. This kind of communication involves a connector server in the agent and
a connector client in the manager—the client accessing the JMX agent as a remote representation
of the MBean server. In this case, the client and server convey management operations
transparently point-to-point over a specific protocol.
BASE24-eps® 2.1.6 23
Application Management User Guide — May 2017
Getting started
ACI Application Management supports RMI and JMXMP connectors. Either type of connector can be
used to connect ACIJMX agents to other ACIJMX agents or to third-party monitoring applications.
Currently, the IBM Tivoli Monitoring system can only use RMI connectors.
Remote adaptors
Remote adaptors are similar to connectors except they provide protocol translations (e,.g., HTML,
SNMP). They provide a management view of the JMX agent through a given protocol by adapting
the agent operations into corresponding representations in the given protocol. Management
applications that connect to the JMX agent through remote adaptors are usually specific to the
given protocol. They access the agent not through a remote representation of the MBean server
(as is the case for connectors), but through operations that are mapped to and from those of the
MBean server.
ACI supports two HTTPS remote adaptors: one for the ESWEB server (which handles the ACI
desktop or APF Admin browser) to connect to the ACIJMX agent; one for ACIJMX Command
Interpreter Interface to connect to the ACIJMX agent.
Managed resources
The generic term for a system entity that can be managed is resource. The types of resources
that can be managed through ACI Application management are described in the following table.
What can be managed for each resource is controlled by the attributes and operations exposed by
the MBean used to instrument the resource.
BASE24-eps® 2.1.6 24
Application Management User Guide — May 2017
Getting started
BASE24-eps® 2.1.6 25
Application Management User Guide — May 2017
Getting started
On the IBM System z platform, at least one ACIJMX agent must be running in an LPAR in order to
manage resources within the LPAR. Multiple agents can be established within an LPAR, although
that typically involves setting up a master ACIJMX agent.
BASE24-eps® 2.1.6 26
Application Management User Guide — May 2017
Getting started
\store
SISUnixProcess_T052.CMCP.xml
SISUnixProcess_T052.CMCP.xml.save
SISUnixProcess_T052.IS1.xml
SISUnixProcess_T052.EOPP.xml.save
SISUnixProcess_T052.IS2.xml
SISUnixProcess_T052.IS2.xml.save
...
When an attribute changes, the agent always renames the existing XML file with a .save suffix and
writes a new XML file.
The XML store file contains the most current information available for the managed resource; the
save version contains the next most recent view of the resource. The save files can be used for
recovery should a primary XML store file become corrupt.
The structure of each file is based on the corresponding resource descriptor file under the
<ACIJMX_BASE>\config directory.
The location of the <ACIJMX_BASE>\store directory is defined when installing the ACIJMX agent.
It is specified in the fifth parameter of acijmx.mlet file, created at installation in the
<ACIJMX_BASE>\config directory.
Maintenance considerations
System administrators need to consider how long to leave old files for purposes of restores and
whether to retain backups of old \store files.
When a resource MBean is deleted, the XML file remains unless it is specifically deleted. As long as
the XML file remains, you can use it to restore the resource for management. Restore operations
recreate MBeans using the previous settings in the XML file.
If they have been backed up and removed, the XML configuration files for deleted resources can
be restored to the <ACIJMX_BASE>\store directory in order to facilitate a restore.
BASE24-eps® 2.1.6 27
Application Management User Guide — May 2017
Getting started
Security Note: The management functionality you have access to is controlled by the roles and
permissions you have been given. Certain capabilities described here may not be available to you.
Monitoring attributes
ACIJMX agents can be set up to watch the values of attributes for exception conditions or out-of-
bound values and log warning/threshold events. This functionality is implemented using monitor
MBeans which are responsible for watching the values of specified attributes and issuing JMX
notifications when the monitored condition are met.
There are three types of monitor MBeans supported by the ACIJMX agent:
BASE24-eps® 2.1.6 28
Application Management User Guide — May 2017
Getting started
Monitors operate by executing on a predetermined interval and checking the configured attribute
value against its threshold values. The predetermined interval for monitor evaluation defaults to
10 seconds, but the evaluation interval can be modified once the monitor is added.
Notifications as a result of a monitor evaluation are mapped directly to standard events within the
ACIJMX environment.
Initiating operations
The ACIJMX agent provides access to those operations exposed by its managed resources. The
operations exposed for each resource are defined by the MBean instrumenting the resource.
Lower-level MBeans responsible for managing the resource directly typically support start, stop,
initialize, and kill operations.
Higher level management MBeans that manage other MBeans are typically instrumented to
support operations such as adding and deleting resources.
Delete/restore operations
Where an MBean for a resource is deleted, the XML file carrying all of its information is retained in
the persistent store (<ACIJMX_BASE>\store) directory. As long as the XML file is not deleted
manually or as a part of maintenance, it can be used to restore the MBean. Several MBeans
support restore operations.
BASE24-eps® 2.1.6 29
Application Management User Guide — May 2017
Getting started
Executing scripts
The ACIJMX agent supports the capability to execute user-written Jython (Python with Java
bindings) scripts, either on demand or based on triggers you set up.
Scripts can be written for a multitude of purposes, from starting and stopping resources to
warmbooting all of the ACIJMX agent’s managed resources. Several Jython script samples are
provided in the <ACIJMX_BASE>\scripts directory.
BASE24-eps® 2.1.6 30
Application Management User Guide — May 2017
Getting started
Enabling notifications
In order for notifications to function they must be enabled through the ServerManager MBean—
using the startNotifier operation. If they are not enabled, no notifications are generated or
processed.
BASE24-eps® 2.1.6 31
Application Management User Guide — May 2017
Getting started
STDERR 6010 4
Error logged to console of Process <symbolic-
name>:<actual message text>
This functionality consolidates the output from multiple locations, so that all process-related
events can be monitored in one event location, rather than several.
Note: The ACIJMX agent itself can write to its STDOUT and STDERR locations when
necessary, so you need to be aware of any messages being written to these locations. The
STDOUT and STDERR locations reside in the <ACIJMX_BASE>
\logs directory. Refer to the BASE24-eps Java Server Reference Guide for information about
configuring event message handling for AJI server processes.
BASE24-eps® 2.1.6 32
Application Management User Guide — May 2017
Getting started
The MDS component is registered as a component. The ACIJMX agent instantiates a Component
MBean to manage it.
The Interface components are registered as services. The ACIJMX agent instantiates Service
MBeans to manage these components.
BASE24-eps® 2.1.6 33
Application Management User Guide — May 2017
Getting started
BASE24-eps® 2.1.6 34
Application Management User Guide — May 2017
Getting started
BASE24-eps® 2.1.6 35
Application Management User Guide — May 2017
ACI application management MBeans
In this section:
ACI MBeans................................................................................................................. 37
BASE24-eps business services.....................................................................................115
BASE24-eps® 2.1.6 36
Application Management User Guide — May 2017
ACI application management MBeans
ACI MBeans
ACI Application Management provides a specialized set of MBeans that are responsible for
managing ACI recources.
MBean hierarchy
There are different hierarchical levels of MBeans. Those at the lowest level of the hierarchy
interact directly with the system resources they manage; those at higher levels of the hierarchy
interact with other MBeans and allow for grouping and managing similar types of MBeans.
Platform differences
Certain ACI MBeans are specific to the platforms they run on, although most function across
multiple platforms.
MBean summary
The following is a summary of ACI MBeans, indicating the platforms they can be used on and the
descriptor files used to instantiate them. The MBeans are provided in roughly the same
hierarchical order and structure as they appear on the ACI desktop or APF Admin browser.
BASE24-eps® 2.1.6 37
Application Management User Guide — May 2017
ACI application management MBeans
BASE24-eps® 2.1.6 38
Application Management User Guide — May 2017
ACI application management MBeans
BASE24-eps® 2.1.6 39
Application Management User Guide — May 2017
ACI application management MBeans
List operations
The following list operations list (i.e. return for display) all resources of a given type that are
available for management. Resources are listed regardless of whether or not they are currently
managed by the ACIJMX agent.
BASE24-eps® 2.1.6 40
Application Management User Guide — May 2017
ACI application management MBeans
BASE24-eps® 2.1.6 41
Application Management User Guide — May 2017
ACI application management MBeans
Hide operation
The hide operations remove a specific resource from management. These operations delete the
resource MBean for the resource being removed, effectively eliminating it from management by
the ACIJMX agent. The operations do not have any affect on the underlying resource.
Identifier Description
<domain> The domain of the ACIJMX agent. The domain is defined by the following
attribute in the config.properties files used by the ACIJMX agent. It will be the
same for all of an ACIJMX agent’s MBeans.
acijmx.jmx.server.domain=<domain_name>
name= Symbolic name of the MBean (object). This value is the Symname attribute
value from the MBean.
type= Type of MBean (object). Valid values are provided in a separate table below.
BASE24-eps® 2.1.6 42
Application Management User Guide — May 2017
ACI application management MBeans
Identifier Description
subtype= Subtype of the MBean (object). Only included for certain MBeans. Valid values
are provided in a separate table below.
agent= Used with remote MBeans (objects) only—those being managed through a
RemoteAgentProxy MBean. This is the symbolic name of the remote (client)
agent under which the object is instantiated. This value is the Symname
attribute value from the RemoteAgentProxy MBean for the object.
BASE24-eps® 2.1.6 43
Application Management User Guide — May 2017
ACI application management MBeans
CommsManager
The CommsManager is a top-level MBean that manages CommsHandler MBeans on an IBM
System z or other UNIX platform.
Currently, the only CommsHandler MBean supported by the ACIJMX agent is the ICEXS MBean.
Note: Communications components on an HP NonStop platform are managed by the
XPNETSystemManager MBean.
Attributes
The following are the attributes exposed by the CommsManager MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 44
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the CommsManager MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
Notifications
The CommsManager MBean emits no notifications.
BASE24-eps® 2.1.6 45
Application Management User Guide — May 2017
ACI application management MBeans
ICEXS (CommsHandler)
ICEXS (CommsHandler) MBeans interact with and manage a running ICE-XS process. It also
creates and manages the following MBeans:
• ICEMsgrouter
• ICEStation
• ICEStationPool
One ICEXS MBean manages a single ICE-XS process, and one ICEXS MBean must be created for
each ICE-XS process to be managed.
ICEXS MBeans are created and managed by the CommManager MBean.
Note: ICE-XS is set up and configured externally to the ACIJMX agent and must be
configured prior to setting up the ACIJMX agent for the product. The ACIJMX agent cannot
create or delete ICE-XS resources. It can only expose and manage those resources already
configured.
Note: ICE-XS processes can be managed and stopped and started using the ZProcess or
UNIXProcess MBean. Refer to those MBeans for information on that attributes and
operations they expose.
Attributes
The following are the attributes exposed by the ICEXS (CommsManager) MBean. The right-most
column indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 46
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the ICEXS (CommsManager) MBean. The left-most
column indicates the button on the ACI desktop or APF Admin browser used to initiate the
operation. The right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 47
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The ICEXS CommsHandler MBean emits no notifications.
ICEMsgrouter
ICEMsgrouter MBeans interact with and manage ICE-XS message routers.
One ICEMsgrouter MBean manages a single message router and one ICEMsgrouter MBean must
be created for each message router to be managed.
ICEMsgrouter MBeans are created and managed by the ICEXS MBean.
Attributes
The following are the attributes exposed by an ICEMsgrouter MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 48
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by an ICEMsgrouter MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The ICEMsgRouter MBean emits no notifications.
BASE24-eps® 2.1.6 49
Application Management User Guide — May 2017
ACI application management MBeans
ICEStation
ICEStation MBeans interact with and manage ICE-XS stations.
One ICEStation MBean manages a single station and one ICEStation MBean must be created for
each station to be managed.
ICEStation MBeans are created and managed by the ICEXS MBean.
Attributes
The following are the attributes exposed by an ICEStation MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
The following are the operations exposed by an ICEStation MBean. The left-most column indicates
the button on the ACI desktop or APF Admin browser used to initiate the operation.
BASE24-eps® 2.1.6 50
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The ICEStation MBean emits no notifications.
ICEStationpool
ICEStationpool MBeans interact with and manage ICE-XS stationpools.
One ICEStationpool MBean manages a single stationpool, and one ICEStationpool MBean must be
created for each stationpool to be managed.
ICEStationpool MBeans are created and managed by the ICEXS MBean.
Attributes
The following are the attributes exposed by an ICEStationpool MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 51
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by an ICEStationpool MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The ICEStationpool MBean emits no notifications.
MessagingManager
The MessagingManager is a top-level MBean that manages queue manager MBeans on an IBM
System z or other UNIX platform.
Currently, the only queue manager MBean supported by the ACIJMX agent is the WMQ
(WebSphere Queue Manager) MBean.
Note: Messaging components on an HP NonStop platform are managed by the
XPNETSystemManager MBean.
Attributes
The following are the attributes exposed by the MessagingManager MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 52
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by an MessagingManager MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 53
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The MessagingManager MBean emits no notifications.
Attributes
The following are the attributes exposed by a WMQ (WebSphere QueueManager) MBean. The
right-most column indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 54
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the WMQ (WebSphere Queue Manager) MBean. The
left-most column indicates the button on the ACI desktop or APF Admin browser used to initiate
the operation. The right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 55
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The WMQ (WebSphere Queue Manager) MBean emits no notifications.
Attributes
The following are the attributes exposed by a WMQQueue (WebSphere Message Queue) MBean.
The right-most column indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 56
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the WMQQueue (WebSphere Message Queue) MBean.
The left-most column indicates the button on the ACI desktop or APF Admin browser used to
initiate the operation. The right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 57
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The WMQQueue (WebSphere Message Queue) MBean emits no notifications.
ProcessManager
The ProcessManager is a top-level MBean. It manages other MBeans that manage processes
directly on the IBM System z, UNIX, and Windows platforms.
The ProcessManager can create the following types of MBeans:
• ZProcess and UnixProcess MBeans. These MBeans can be used to manage any type of
executable UNIX process.
• WndProcess MBeans. These MBeans can be used to manage any type of executable Windows
process.
• SISZProcess and SISUnixProcess MBeans. These MBeans expose a specialized set of attributes
and operations used to manage BASE24-eps C++ processes.
• JSFZProcess, JSFUnixProcess, and JSFWndProcess MBeans. These MBeans expose a specialized
set of attributes and operations used to manage Java processes built on the ACI Java Server
Framework (AJSF).
Note: Process management on the HP NonStop platform is handled by the
XPNETSystemManager and XPNETProcess MBeans.
Attributes
The following are the attributes exposed by the ProcessManager MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 58
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the ProcessManager MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
Notifications
The ProcessManager MBean emits no notifications.
BASE24-eps® 2.1.6 59
Application Management User Guide — May 2017
ACI application management MBeans
UnixProcess
UnixProcess MBeans interact with and manage unspecialized UNIX processes running on a UNIX
platform.
One UnixProcess MBean manages a single process, and one UnixProcess MBean must be created
for each process of this type to be managed.
UnixProcess MBeans are created and managed by the ProcessManager MBean.
Note: Specialized processes—System Interface Services (SIS) and ACI Java Server
Framework (AJSF) processes—require their own specialized MBeans, SISUnixProcess and
JSFUnixProcess, respectively.
Attributes
The following are the attributes exposed by a UnixProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 60
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a UnixProcess MBean. The left-most column indicates
the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The UnixProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 61
Application Management User Guide — May 2017
ACI application management MBeans
JSFUnixProcess
JSFUnixProcess MBeans interact with and manage ACI Java Server Framework processes running
on a UNIX platform. ACI Java Server Framework processes are Java processes built using the ACI
Java Server Framework (AJSF). These processes have attributes unique to the AJSF and thus
require a specialized MBean.
One JSFUnixProcess MBean manages a single process, and one JSFUnixProcess MBean must be
created for each AJSF process to be managed.
JSFUnixProcess MBeans are created and managed by the ProcessManager MBean.
Attributes
The following are the attributes exposed by a JSFUnixProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 62
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a JSFUnixProcess MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The JSFUnixProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 63
Application Management User Guide — May 2017
ACI application management MBeans
SISUnixProcess
SISUnixProcess MBeans interact with and manage C++ processes, implemented with System
Interface Services (SIS), running on a UNIX platform. Processes implemented with SIS have
unique attributes that require specialized MBeans.
One SISUnixProcess MBean manages a single process, and one SISUnixProcess MBean must be
created for each process of this type to be managed.
SISUnixProcess MBeans are created and managed by the ProcessManager MBean.
Attributes
The following are the attributes exposed by a SISUnixProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 64
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a SISUnixProcess MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
BASE24-eps® 2.1.6 65
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The SISUnixProcess MBean emits the following notifications.
JSFZProcess
JSFZProcess MBeans interact with and manage ACI Java Server Framework processes running on
an IBM System z platform. ACI Java Server Framework processes are Java processes built using
the ACI Java Server Framework (AJSF). These processes have attributes unique to the AJSF and
thus require a specialized MBean.
One JSFZProcess MBean manages a single process, and one JSFZProcess MBean must be created
for each AJSF process to be managed.
JSFZProcess MBeans are created and managed by the ProcessManager MBean.
Attributes
The following are the attributes exposed by a JSFZProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 66
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a JSFZProcess MBean. The left-most column indicates
the button on the ACI desktop or APF Admin browser used to initiate the operation.
BASE24-eps® 2.1.6 67
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The JSFZProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 68
Application Management User Guide — May 2017
ACI application management MBeans
SISZProcess
SISZProcess MBeans interact with and manage C++ processes implemented with System
Interface Services (SIS) and running on an IBM System z platform. Processes implemented with
SIS have unique attributes that require specialized MBeans.
One SISZProcess MBean manages a single process, and one SISZProcess MBean must be created
for each process of this type to be managed.
SISZProcess MBeans are created and managed by the ProcessManager MBean.
Attributes
The following are the attributes exposed by a SISZProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 69
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a SISZProcess MBean. The left-most column indicates
the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The SISZProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 70
Application Management User Guide — May 2017
ACI application management MBeans
ZProcess
ZProcess MBeans interact with and manage unspecialized processes running on an IBM System z
platform.
One ZProcess MBean manages a single process, and one ZProcess MBean must be created for
each process of this type to be managed.
ZProcess MBeans are created and managed by the ProcessManager MBean.
Note: Specialized processes—System Interface Services (SIS) and ACI Java Server
Framework (AJSF) processes—require their own specialized MBeans, SISZProcess and
JSFZProcess, respectively.
Attributes
The following are the attributes exposed by a ZProcess MBean. The right-most column indicates
whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 71
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a ZProcess MBean. The left-most column indicates
the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The ZProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 72
Application Management User Guide — May 2017
ACI application management MBeans
WndProcess
WndProcess MBeans interact with and manage unspecialized Windows processes running on a
Windows platform.
One WndProcess MBean manages a single process, and one WndProcess MBean must be created
for each process of this type to be managed.
WndProcess MBeans are created and managed by the ProcessManager MBean.
Note: Specialized processes—ACI Java Server Framework (AJSF) processes—require their
own specialized JSFWndProcess MBeans.
Attributes
The following are the attributes exposed by a WndProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 73
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a WndProcess MBean. The left-most column indicates
the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The WndProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 74
Application Management User Guide — May 2017
ACI application management MBeans
JSFWndProcess
JSFWndProcess MBeans interact with and manage ACI Java Server Framework processes running
on a Windows platform. ACI Java Server Framework processes are Java processes built using the
ACI Java Server Framework (AJSF). These processes have attributes unique to the AJSF and thus
require a specialized MBean.
One JSFWndProcess MBean manages a single process, and one JSFWndProcess MBean must be
created for each AJSF process to be managed.
JSFWndProcess MBeans are created and managed by the ProcessManager MBean.
Attributes
The following are the attributes exposed by a JSFWndProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 75
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a JSFWndProcess MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The JSFWndProcess MBean emits the following notifications.
BASE24-eps® 2.1.6 76
Application Management User Guide — May 2017
ACI application management MBeans
ScriptManager
The ScriptManager MBean provides the capability to run Jython (Python with Java bindings)
scripts on demand, based on a schedule, or based on the receipt of notifications. For information
on using ScriptManager, refer to the “Script execution using ScriptManager” section.
Scripts are typically stored in the <ACIJMX_BASE>\scripts directory, but the ScriptManager
MBean allows you to configure a path to the script location using the ScriptPath attribute.
Attributes
The following are the attributes exposed by the ScriptManager MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 77
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the ScriptManager MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 78
Application Management User Guide — May 2017
ACI application management MBeans
BASE24-eps® 2.1.6 79
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The ScriptManager MBean emits the following notifications.
CounterMonitor
The CounterMonitor MBean compares an attribute value to a single threshold and emits a
notification if the threshold is exceeded. CounterMonitors are intended to monitor attributes
whose values increase linearly with time, such as message counts.
You can configure a CounterMonitor MBean to compare the threshold to an actual attribute value
(called the raw value) or to the difference between the current and previous readings of an
attribute. The latter is called difference mode and is a more typical use of a CounterMonitor
MBean because it allows you to identify spikes in steadily increasing attribute values.
In the first case, when monitoring a raw value, a notification is emitted when the attribute
exceeds a predetermined threshold value. In difference mode, a notification is only emitted when
the difference between the current attribute reading and the last preceding attribute reading
exceeds the predetermined threshold value.
When monitoring a raw value, the Offset attribute can be used to continually reset the raw
threshold to a new, higher value, to allow the monitoring to continue. For example if an initial
BASE24-eps® 2.1.6 80
Application Management User Guide — May 2017
ACI application management MBeans
threshold is 1,500 and the Offset attribute is 1,000, once the initial threshold of 1,500 is passed, a
new theshold is set for 2,500. When the threshold of 2,500 is passed, the threshold is reset to
3,500, and so on. The Modulus attribute sets the maximum value for the threshold. Once the
threshold reaches this maximum value, the threshold is reset to the InitThreshold value.
CounterMonitor MBeans are created and managed by the ServerManager MBean.
Attributes
The following are the attributes exposed by the CounterMonitor MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 81
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the CounterMonitor MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation (in
this case the button text matches the operation name). The right-most column identifies
parameters required for the operation.
BASE24-eps® 2.1.6 82
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The CounterMonitor MBean emits the following notifications.
BASE24-eps® 2.1.6 83
Application Management User Guide — May 2017
ACI application management MBeans
GaugeMonitor
A GaugeMonitor MBean compares an attribute value to two thresholds—a high threshold and low
threshold—and can be configured to emit a notification if the attribute value exceeds the high
threshold or falls below the low threshold. Gaugemonitors are used most often for attributes
whose values increase and decrease over time, such as the depth of messages on a queue.
You can configure a GaugeMonitor MBean to compare the high and low thresholds to an actual
attribute value (called the raw value) or to the difference between the current and previous
readings of an attribute. The latter is called difference mode. In the first case, when monitoring a
raw value, a notification can be emitted when the attribute is higher or lower than the
predetermined threshold value. In difference mode, a notification would only be emitted when the
difference between the current attribute reading and the last preceding attribute reading is higher
or lowere than the predetermined threshold value.
GaugeMonitor MBeans are created and managed by the ServerManager MBean.
Attributes
The following are the attributes exposed by the GaugeMonitor MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 84
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the GaugeMonitor MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation (in
this case the button text matches the operation name). The right-most column identifies
parameters required for the operation.
setThresholds Sets the values of high and low <High threshold value>
thresholds.
<Low threshold value>
BASE24-eps® 2.1.6 85
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The GaugeMonitor MBean emits the following notifications.
BASE24-eps® 2.1.6 86
Application Management User Guide — May 2017
ACI application management MBeans
StringMonitor
A StringMonitor MBean compares an attribute value to a specific string value and can be
configured to emit a notification if the attribute value matches, or does not match, the specific
string value. A typical use of this type of monitor MBean might be watching for changes in the
state of specific resources.
StringMonitor MBean are created and managed by the ServerManager MBean.
Attributes
The following are the attributes exposed by the StringMonitor MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 87
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the StringMonitor MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation (in
this case the button text matches the operation name). The right-most column identifies
parameters required for the operation.
BASE24-eps® 2.1.6 88
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The StringMonitor MBean emits the following notifications.
BASE24-eps® 2.1.6 89
Application Management User Guide — May 2017
ACI application management MBeans
TopologyManager
The TopologyManager is a top-level MBean that creates and manages RemoteAgent Proxy
MBeans.
Together, the TopologyManage and RemoteAgent Proxy provide capability to manage multiple
agents (and their resources) from the single Application agent.
Attributes
The following are the attributes exposed by the TopologyManager MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
The following are the operations exposed by the TopologyManager MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 90
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The TopologyManager MBean emits no notifications.
RemoteAgentProxy
RemoteAgentProxy MBeans interact with and manage other ACIJMX agents.
RemoteAgentProxy MBeans assume responsibility for those attributes that the agent can view and
change and the operations that the agent can perform.
One RemoteAgentProxy MBean manages a single agent, and one RemoteAgentProxy MBean must
be created for each agent to be managed.
RemoteAgentProxy MBeans are created and managed by the TopologyManager MBean.
Attributes
The following are the attributes exposed by a RemoteAgentProxy MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 91
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by a RemoteAgentProxy MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The RemoteAgentProxy MBean emits no notifications.
XPNETSystemManager
The XPNETSystemManager MBean is a top-level MBean that creates and manages the following
subordinate MBeans on an HP NonStop platform:
• XPNETSystem
• XPNETStation
• XPNETQueue
• XPNETProcess
• XPNETNode
Note: Together, these MBeans replicate many of the network control command functions
available through Online Network Control Facility (ONCF).
Note: XPNET systems are set up and configured externally to the ACIJMX agent and must
be configured prior to setting up the ACIJMX agent. The ACIJMX agent cannot create or
delete actual XPNET resources (i.e., nodes, stations, queues, and processes). It can only
expose and manage those resources already configured.
Attributes
The following are the attributes exposed by the XPNETSystemManager MBean. The right-most
column indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 92
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by the XPNETSystemManager MBean. The left-most
column indicates the button on the ACI desktop or APF Admin browser used to initiate the
operation. The right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 93
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The XPNETSystemManager MBean emits no notifications.
XPNETSystem
XPNETSystem MBeans interact with and manage XPNET systems running on an HP NonStop
platform. XPNET systems have characteristics and attributes unique to XPNET and thus require a
specialized MBean.
One XPNETSystem MBean manages a single XPNET process, and one XPNETSystem MBean must
be created for each XPNET process to be managed.
XPNETSystem MBeans are created and managed by the XPNETSystemManager.
Note: XPNET systems are set up and configured externally to the ACIJMX agent and must
be configured prior to setting up the ACIJMX agent. The ACIJMX agent cannot create or
delete actual XPNET resources (i.e., nodes, stations, queues, and processes). It can only
expose and manage those resources already configured.
Attributes
The following are the attributes exposed by an XPNETSystem MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
The following are the operations exposed by an XPNETSystem MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 94
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The XPNETSystem MBean emits no notifications.
XPNETNode
XPNETNode MBeans interact with and manage XPNET nodes running on an HP NonStop platform.
XPNET nodes have characteristics and attributes unique to XPNET and thus require a specialized
MBean.
One XPNETNode MBean manages a single XPNET node and one XPNETNode MBean must be
created for each XPNET node to be managed.
XPNETNode MBeans are created and managed by the XPNETSystem MBean.
Note: XPNET systems are set up and configured externally to the ACIJMX agent and must
be configured prior to setting up the ACIJMX agent. The ACIJMX agent cannot create or
delete actual XPNET resources (i.e., nodes, stations, queues, and processes). It can only
expose and manage those resources already configured.
Attributes
The following are the attributes exposed by an XPNETNode MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 95
Application Management User Guide — May 2017
ACI application management MBeans
BASE24-eps® 2.1.6 96
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by an XPNETNode MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
BASE24-eps® 2.1.6 97
Application Management User Guide — May 2017
ACI application management MBeans
Notifications
The XPNETNode MBean emits no notifications.
XPNETStation
XPNETStation MBeans interact with and manage XPNET stations running on an HP NonStop
platform. XPNET stations have characteristics and attributes unique to XPNET and thus require a
specialized MBean.
One XPNETStation MBean manages a single station and one XPNETStation MBean must be created
for each XPNET station to be managed.
XPNETStation MBeans are created and managed by the XPNETNode MBean.
BASE24-eps® 2.1.6 98
Application Management User Guide — May 2017
ACI application management MBeans
Attributes
The following are the attributes exposed by an XPNETStation MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
BASE24-eps® 2.1.6 99
Application Management User Guide — May 2017
ACI application management MBeans
Operations
The following are the operations exposed by an XPNETStation MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The XPNETStation MBean emits no notifications.
XPNETQueue
XPNETQueue MBeans interact with and manage XPNET queues running on an HP NonStop
platform. XPNET queues have characteristics and attributes unique to XPNET and thus require a
specialized MBean.
One XPNETQueue MBean manages a single queue and one XPNETQueue MBean must be created
for each XPNET queue to be managed.
XPNETQueue MBeans are created and managed by the XPNETNode MBean.
Attributes
The following are the attributes exposed by an XPNETQueue MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
The following are the operations exposed by an XPNETQueue MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
Notifications
The XPNETQueue MBean emits no notifications.
XPNETProcess
XPNETProcess MBeans interact with and manage XPNET processes running on an HP NonStop
platform. XPNET processes have characteristics and attributes unique to XPNET and thus require a
specialized MBean.
One XPNETProcess MBean manages a single process, and one XPNETProcess MBean must be
created for each XPNET process to be managed.
XPNETProcess MBeans are created and managed by the XPNETNode MBean.
Attributes
The following are the attributes exposed by an XPNETProcess MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
The following are the operations exposed by an XPNETProcess MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation.
Notifications
The XPNETProcess MBean emits the following notifications.
Component
Component MBeans interact with and manage components that have been registered to the agent
by an application process.
One Component MBean manages a single component and one Component MBean is created for
each component registered to be managed.
Component MBeans are created and managed by the MBean Server.
Note: Typically, internal process resources that expose attributes and operations for a
single process are registered as components, whereas internal process resources that
expose global system attributes and operations (representing information that crosses
multiple process boundaries) are registered as services. Another way to think of it is that
components are used when exposed attribute information is available from memory and
services are used when the exposed attribute information must be retrieved from a data
source on disk.
Basic Attributes
The following are the basic attributes exposed by a Component MBean for all registered
components. The right-most column indicates whether the attributes can be modified by the
MBean.
Operations
The Component MBean exposes no standard operations. Any operations need to be defined by the
process registering the component.
Notifications
The Component MBean emits no notifications.
Service
Service MBeans interact with and manage services that have been registered to the agent by an
application process.
One Service MBean manages a single service and one Service MBean is created for each service
registered to be managed.
Service MBeans are created and managed by the MBean Server.
Note: Typically, internal process resources that expose attributes and operations for a
single process are registered as components, whereas internal process resources that
expose global system attributes and operations (representing information that crosses
multiple process boundaries) are registered as services. Another way to think of it is that
components are used when exposed attribute information is available from memory and
services are used when the exposed attribute information must be retrieved from a data
source on disk.
Basic Attributes
The following are the basic attributes exposed by a Service MBean for all services. The right-most
column indicates whether the attributes can be modified by the MBean.
Logged on as Both
Logged on as Acquirer only
Logged on as Issuer only
Logged off
Basic operations
The Service MBean exposes no standard operations. Any operations need to be defined by the
process registering the service.
Notifications
The Service MBean emits no notifications.
ProcessControl (BASE24-eps)
The ProcessControl MBean provides the capability to execute BASE24-eps process control
commands through the ACIJMX agent. For information on using ProcessControl, refer to section 7,
“BASE24-eps process control commands”.
BASE24-eps process control commands are documented in the BASE24-eps Process Control User
Guide. That manual provides the following reference information you will need for entering each
command.
Value Description
Destination An identifier for the application server to which the command is sent. This
value is used as the first parameter for the operation.
Command The type of command. Types are ALTER, DELIVER, INFO, and STATUS. These
values correspond directly to the operations supported by the ProcessControl
MBean.
Component An identifier for the component to which the command is sent. This value is
used as the second parameter for the operation.
Command Text The specific text that must be entered for the command. This text can include
constants and variables. The text, in its entirety, must be entered as the third
parameter for the operation.
Attributes
The following are the attributes exposed by the ProcessControl MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
The following are the operations exposed by the ProcessControl MBean. The left-most column
indicates the button on the ACI desktop or APF Admin browser used to initiate the operation. The
right-most column identifies parameters required for the operation.
Notifications
The ProcessControl MBean emits no notifications.
Attributes
These attributes are exposed by the SBA Metrics Component MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
<service_name>_consumer_<version>
<service_name>_provider_<version>
Examples:
CreditAddRq_consumer_1
CreditAddRq_provider_1
TraceFileName Name of a trace file. When a trace is running, this is the file Yes
to which the trace information is written.
Operations
These operations are exposed by the SBA Metrics Component MBean. The left-most column
indicates the button on the Application Management user interface used to initiate the operation.
Notifications
The SBA Metrics Component MBean emits no notifications.
Attributes
These attributes are exposed by the SBA Metrics Service MBean. The right-most column indicates
whether the attributes can be modified by the MBean.
Operations
These operations are exposed by the SBA Metrics Service MBean. The left-most column indicates
the button on the Application Management user interface used to initiate the operation.
Notifications
The SBA Metrics Service MBean emits no notifications.
Attributes
These attributes are exposed by the Foundation Metrics Component MBean. The right-most
column indicates whether the attributes can be modified by the MBean.
Servicename_version
Operations
These operations are exposed by the Foundation Metrics Component MBean. The left-most column
indicates the button on the Application Management user interface used to initiate the operation.
Notifications
The Foundation Metrics Component MBean emits no notifications.
Foundation Metrics Service MBean is created and managed by the MBean Server for each service
consumer or service implementation registered.
Attributes
These attributes are exposed by the Foundation Metrics Service MBean. The right-most column
indicates whether the attributes can be modified by the MBean.
Operations
These operations are exposed by all Foundation Metrics Service MBeans. The left-most column
indicates the button on the Application Management user interface used to initiate the operation.
Notifications
The Foundation Metrics Service MBean emits no notifications.
Attributes
These attributes are exposed by the SBA Service Management Service MBean. The right-most
column indicates whether the attributes can be modified by the MBean.
Servicename_version
Operations
These operations are exposed by all SBA Service Management Service MBeans. The left-most
column indicates the button on the Application Management user interface used to initiate the
operation.
Notifications
The SBA Service Management Service MBean emits no notifications.
In this section:
Authentication
Any actions requested of the ACIJMX agent must be initiated by an authenticated user. As such,
the MBean Server Wrapper requires a valid session handle/ticket with each request from an
external entity.
Throughout the AJI security infrastructure, session handles/tickets are used to identify users and
as verification that users have been logged on and properly authenticated. Session handles/tickets
are sent with requests to enable the receiving components and processes to identify the user as
logged on and authenticated. They also enable receiving components to access the user’s
permissions through the AJI User Security and Auditing functions to authorize any subsequent
action. The MBean Server Wrapper requires the presence of a session handle/ticket and denies
requests if one is not present.
Authorization
The MBean Server Wrapper verifies that requested actions are allowed based on the privileges and
roles that have been assigned to the user requesting the action. It does this by using the session
handle/ticket to interact with AJI User Security and Auditing functions.
From the session handle/ticket, AJI security functions can authorize the intended action. If the
action is authorized, the MBean Server Wrapper sends the action to the MBean Server to be
carried out. If the action is not authorized, the MBean Server Wrapper denies the requested action
and creates an event message.
Denied actions can be audited as well if the action was set up to be audited.
Authorized actions
The following table lists the actions that the MBean Server Wrapper authorizes.
Action Description
View Attribute Users can be given privileges to view all attributes exposed by an
MBean, only specific attributes, or no attributes.
If a user does not have the privilege to view specific attributes, they will
not be returned. For additional information about this, refer to the
“Enabling and disabling authorizations on view actions” topic.
Update Attribute Users can be given privileges to update all attributes exposed by an
MBean, only specific attributes, or no attributes.
If a user does not have the privilege to update specific attributes,
attempts to update the attributes will be denied, and an event message
will be created.
Create or Register an These are scripting functions that are not associated with specific MBean
MBean operations or attributes.
Unregister an MBean When scripts are executed and parsed by the ACIJMX agent, these
script commands are either allowed or disallowed based on the user
Add a Notification executing the script.
Listener
If the user does not have the privilege to execute a particular script
Remove a Notification action, an event message will be created, and the script execution will
Listener stop without executing any further commands (the script might not stop
if it is written to handle denied actions).
Note: Scripts that are executed based on a schedule rather than
executed from a logon are not authorized (refer to the “Script
authorization” topic).
If the show.only.authorized.actions property is set to false, every attribute is still authorized, but
all operations are returned regardless of whether or not the user has permissions to execute
them. Thus, on a user interface, users would see all of the exposed operations; however, they
would still only be able to execute those for which they have permissions. Attempts to execute
operations for which they do not have permissions would be denied.
Note: At installation, the show.only.authorized.actions property is set to false by default.
Script authorization
All Jython scripts executed from a logon are parsed during execution, and each script action is
authorized individually. If a specific action is not allowed for the user, it is denied. For example, if
a script calls for starting processes and stations, and the user is granted permissions to carry out
start operations on processes but not stations, the start process actions in the script could be
executed but not the start station operations. The first unauthorized action encountered will cause
the script execution to terminate unless the script is specifically coded to deal with denied actions.
As such, scripts cannot perform actions that the user executing the script does not have the
permissions to perform.
Caution: Scripts that are executed by the ScriptManager MBean based on a schedule rather
than the result of a command are not authorized. Therefore, take particular care when
executing review scripts in this manner. You should also secure your <ACIJMX_BASE>
\scripts directory to protect it from unauthorized changes or additions.
Auditing
The MBean Server Wrapper carries out auditing for ACIJMX agent. It can send an audit record to
the AJI User Security and Auditing functions for each action that it authorizes. Whether or not a
particular action is audited depends on settings in the APPLCNFG table. Actions that can be
audited are noted in the table below. The table includes the APPLCNFG settings that control
whether or not they are audited.
The default value for all of these settings is true, meaning that the corresponding action will be
audited. Thus, if the APPLCNFG is not loaded at startup, all of the actions will be audited by
default. Note that loading the APPLCNFG at startup is controlled by the autoload.applcnfg property
in the config.properties file.
Action Description
View Attribute Attempts to view attributes are audited based on the
ajmf.audited.attrview setting in the APPLCNFG table.
Update Attribute Attempts to update attributes are audited based on the
ajmf.audited.attrsave setting in the APPLCNFG table.
Invoke an MBean Attempts to update attributes or invoke operations are audited based on
Operations the ajmf.audited.oper setting in the APPLCNFG table.
Create or Register an Attempts to execute these functions from a script are audited based on
MBean the ajmf.audited.mbs setting in the APPLCNFG table.
Unregister an MBean
Action Description
Add a Notification
Listener
Remove a Notification
Listener
Refer to the ACI Desktop User Interface Manual and APF Admin browser online help for
information about setting up and changing user roles and permissions. Other products that base
their user security on the ACI Java security infrastructure will have their own documentation.
Naming conventions
This table identifies the specific naming conventions that must be followed when adding or
modifying security settings for Application Management. Note that the MF prefix used in these
naming conventions refers to Management Framework.
Functions ViewAttr and SaveAttr are standard functions for viewing and modifying
MBean attributes. These cannot be changed and are used for all MBeans
with attributes.
Operations-based functions require the exact name of the MBean
operation (e.g., start, stop, sync, etc.)
Default roles
This table lists the default roles set up for Application Management, along with the permission
group assigned to each. You can add, change, or delete roles for Application Management as
needed.
MFFullPermGrp MFFullServerManager
(Full access to mbean operations,attributes) MFFullProcess
MFFullMonitor
MFFullScriptManager
MFFullProcessControl
MFFullComponent
MFFullTopologyManager
MFFullService
MFFullCommsHandler
MFFullRemoteAgentProxy
MFFullProcessManager
MFFullCommsManager
MFFullMsgrouter
MFFullQueue
MFFullQueueManager
MFFullStation
MFFullMessagingManager
MFFullXPNETSystemManager
MFFullXPNETSystem
MFFullXPNETNode
MFViewPermGrp MFViewServerManager
Default permissions
The following tables list the default permission set up for Application Management, along with the
tasks and functions assigned to each. You can add, change, or delete permissions for Application
Management as needed.
This single permission is for scripting actions that provide direct access to the MBean Server. As
such, it should only be given to higher level administrative users.
Most permissions are based on, and named for, the MBean type to which they relate. These
permissions are listed below.
(View access to
CommsManager MBean)
containsObservedObject
init
execScript
removeScheduledScript
scheduleScript
removeNotificationObjec
ts
removeNotificationType
init
sync
deregisterExecutable
setDynamicAttribute
hideProcess
hideQueue
hideStation
inquireProcess
inquireQueue
inquireStation
listProcesses
listQueues
listStations
showProcess
showQueue
showStation
resetStats
restoreXPNETSystem
init
shutdown
sync
Standard tasks
The following tables list the standard tasks available for Application Management. These cannot be
changed or added to.
This single task is for scripting actions that do not relate to a particular MBean. The task and its
functions provide direct access to the MBean Server.
All other tasks are based on, and named for, the MBean type to which they relate. These tasks are
listed below.
Standard Functions
This table lists the standard functions available for Application Management. For the most part,
they are based on available MBean operations.
Function Description
Register Register a new MBean in App Mgmt.
UnRegister Unregister an MBean in App Mgmt.
AddNotifListener Add a notification listener to MBean in App Mgmt.
RemoveNotifListener Remove a notif listener from MBean in App Mgmt.
addCounterMonitor Add a Counter Monitor MBean in App Mgmt.
addGaugeMonitor Add a Gauge Monitor MBean in App Mgmt.
addStringMonitor Add a String Monitor MBean in App Mgmt.
deleteMonitor Delete a Monitor MBean in App Mgmt.
Function Description
initBackup Start backup instance of MBean in App Mgmt.
resetMonitor Stop and restart individual Monitor in App Mgmt.
startMonitors Start all Monitors in App Mgmt.
shutdown Stop a resource associated with task in App Mgmt.
stopBackup Stop a backup instance of an MBean in App Mgmt.
startNotifier Start notifications in App Mgmt.
stopNotifier Stop notifications in App Mgmt.
init Init a resource associated with task in App Mgmt.
sync Sync a resource associated with task in App Mgmt.
start Start a resource associated with task in App Mgmt.
stop Stop a resource associated with task in App Mgmt.
kill Kill a resource associated with task in App Mgmt.
getDerivedGauge Get value of monitor attr for MBean in App Mgmt.
getDerivedGaugeTimeStamp Get time monitor was last updated in App Mgmt.
getThreshold Get current threshold value for MBean in App Mgmt.
addObservedObject Add MBean to monitored MBeans in App Mgmt.
removeObservedObject Remove MBean from monitored MBeans in App Mgmt.
containsObservedObject Test if object is monitored by MBean in App Mgmt.
exec Execute resource associated with task in App Mgmt.
addNotificationObjects Add MBeans monitored for script notif in App Mgmt.
addNotificationType Add type of notif for script notif in App Mgmt.
execScript Execute Jython script from a file in App Mgmt.
removeScheduledScript Delete a scheduled script in App Mgmt.
scheduleScript Schedule a script in App Mgmt.
removeNotificationObjects Remove MBeans for script notif in App Mgmt.
removeNotificationType Remove type of notif for scripts in App Mgmt.
alter Enter process control Alter commands in App Mgmt.
deliver Enter prcs cntrl Deliver commands in App Mgmt.
info Enter process control Info commands in App Mgmt.
status Enter process control Status commands in App Mgmt.
Function Description
setDynamicAttribute Set dyn attrs for cmpnts and srvcs in App Mgmt.
obey Execute a file containing JMXCI-format commands.
addRemoteAgentProxy Add a remote agent for management in App Mgmt.
removeRemoteAgentProxy Remove a remote agent from management in App Mgmt.
setThresholds Set high-low thresholds for monitors in App Mgmt.
registerExecutable Register execs that provide srvc in App Mgmt.
deregisterExecutable Deregister execs that provide srvc in App Mgmt.
showStation Add station for permanent mgmt in App Mgmt.
hideStation Remove station from permanent mgmt in App Mgmt.
inquireStation Add station for temporary mgmt in App Mgmt.
showStationpool Add stationpool for permanent mgmt in App Mgmt.
hideStationpool Remove stationpool from perm mgmt in App Mgmt.
inquireStationpool Add stationpool for temporary mgmt in App Mgmt.
showMsgrouter Add msgrouter for permanent mgmt in App Mgmt.
hideMsgrouter Remove msgrouter from permanent mgmt in App Mgmt.
inquireMsgrouter Add msgrouter for temporary mgmt in App Mgmt.
listStations List stations for ICE-XS process in App Mgmt.
listStationpools List stationpools for ICE-XS process in App Mgmt.
listMsgrouters List msgrouters for ICE-XS process in App Mgmt.
connect Connect resource associated with task in App Mgmt.
disconnect Disconnect resource assoc'd with task in App Mgmt.
addProcess Add a new process in App Mgmt.
deleteProcess Delete a process in App Mgmt.
addProcessLike Add process like existing process in App Mgmt.
restoreProcesses Restore a deleted process MBean in App Mgmt.
addCommsHandler Add an ICE-XS process MBean in App Mgmt.
deleteCommsHandler Delete an ICE-XS process MBean from App Mgmt.
addLikeCommsHandler Add ICE-XS process like existing prcs in App Mgmt.
restoreCommsHandler Restore deleted ICE-XS process MBean in App Mgmt.
getAttrSummary Get info for resource assoc'd w-task in App Mgmt.
Function Description
pop Clear specified # of msgs from queue in App Mgmt.
listQueues List q's for WMQ q mgr or XPNET node in App Mgmt.
showQueue Add a queue for permanent mgmt in App Mgmt.
inquireQueue Add a queue for temporary mgmt in App Mgmt.
hideQueue Remove a queue from permanent mgmt in App Mgmt.
addQueueManager Add a new WMQ queue manager in App Mgmt.
deleteQueueManager Delete a WMQ queue manager from App Mgmt.
addLikeQueueManager Add WMQ q mgr like existing q mgr in App Mgmt.
restoreQueueManager Restore a deleted WMQ queue manager in App Mgmt.
ViewAttr View attrs for resrce assoc'd w-task in App Mgmt.
SaveAttr Modify attrs for obj assoc'd w-task in App Mgmt.
addXPNETSystem Add an XPNET system MBean in App Mgmt.
deleteXPNETSystem Delete an XPNET system MBean from App Mgmt.
addXPNETSystemLike Add XPNET system MBean like existing in App Mgmt.
restoreXPNETSystem Restore a deleted XPNET system MBean in App Mgmt.
hideNode Remove XPNET node from permanent mgmt in App
Mgmt.
listNodes List XPNET nodes in App Mgmt.
showNode Add XPNET node for permanent mgmt in App Mgmt.
hideProcess Remove XPNET process from perm mgmt in App Mgmt.
inquireProcess Add XPNET node for temp mgmt in App Mgmt.
listProcesses List all XPNET nodes for XPNET prcss in App Mgmt.
showProcess Add XPNET process for permanent mgmt in App Mgmt.
resetStats Reset cntrs in App Mgmt for object assoc'd w-task.
freeze Suspend routing to a queue in App Mgmt.
purge Remove all messages for a queue in App Mgmt.
qread Read messages from disk to queue in App Mgmt.
qtransfer Transfer msgs from q to q of object in App Mgmt.
qwrite Write msgs from a queue to disk file in App Mgmt.
User defaults
The following table lists the Application Management default settings for the SysAdmin user and
the AppMgmtAdmin user. The SysAdmin user is a general administrative user and may have more
roles assigned; the AppMgmtAdmin is an administrative user with only Application Management
permissions. The filters are the default filters assigned to each.
Audit records
AJI-based audit records have a standard structure. The MBean Server Wrapper creates audit
records containing the following information for the various types of actions that are audited.
Ticket The session handle/ticket information associated with the action. The
session handle/ticket includes the user ID, session number, and terminal
ID.
ErrorData OK or Error, depending on whether or not there was an error.
ErrorDescription A description of the error, if an error occurred. The following are several
examples of errors:
• User is not authorized to register an mbean
EventLogger_EventLogger1 (6050.4)
• User is not authorized to unregister an mbean
EventLogger_EventLogger1 (6050.5)
• User is not authorized to add notification listener to an mbean
EventLogger_EventLogger1 (6050.6)
• User is not authorized to remove notification listener from an mbean
EventLogger_EventLogger1, listener I821_JMX-
Image:name=Notifier,type=Notifier (6050.7)
ActivityType The type of activity (action) being audited. Valid activity types are as
follows:
• ViewAttribute
• UpdateAttribute
• Operation
• RegisterMBean
• UnRegisterMBean
• AddNotifListener
• RemoveNotifListener
ActivityDetails Detailed information about the action. The following are examples for
each of the types of audited actions
• getAttribute on mbean
I821_JMX:name=I821_UIAUD,subtype=UnixProcess,type=Process,
attribute=OutPath
• setAttribute on mbean
I821_JMX:name=ScriptManager,type=ScriptManager, attribute=Type,
newvalue=aaaa
• operation on mbean
I821_JMX:name=ScriptManager,type=ScriptManager,
method=execScript, param0=a.py[java.lang.String],
param1=aa[java.lang.String], param2=null[java.lang.String],
param3=null[java.lang.String], param4=null[java.lang.String],
param5=null[java.lang.String], param6=null[java.lang.String]
• Registering mbean org.python.proxies.main$EventLogger1$1@750e30
• UnRegistering mbean
• Adding a new notification listener, mbean:I821_JMX-
Image:name=EventLogger1,type=EventLoggerlistener:I821_JMX-
Image:name=Notifier,type=Notifier
• Removing notification listener, mbean:I821_JMX-
Image:name=EventLogger1,type=EventLoggerlistener:I821_JMX-
Image:name=Notifier,type=Notifier
Service Set to AJMF, which stands for ACI Java Management Framework.
In this section:
Left pane
The left pane of the window or page provides a hierarchical display of all managed resources from
which you can select. The content of this pane is dynamic and based entirely on the MBeans you
have configured in your system. The following are examples of a detail window and page. In both
cases, no specific resource has been selected and the right pane is unpopulated.
Refer to section 2 for description of the MBeans that can be configured for your system.
Note: Certain aspects of the hierarchy and labeling in the left pane can be changed. For an
explanation of what changes can be made and how to make the changes, refer to section
19, “Modifying the display hierarchy of the Application Detail window/Management Console
page”.
Right pane
The right pane displays the operations and attributes exposed by the MBean managing the
selected resource. Here again, the content of the pane is dynamic. In this case, the content is
based on the operations and attributes exposed by the MBean of the resource you are viewing.
The following examples show a SISUnixProcess resource. In these examples, the Detail window or
Management Console page displays those operations (as functions) and attributes exposed by
corresponding SISUnixProcess MBeans.
Executing operations
The operations you can execute on a managed resource from the Detail window or Management
Console page are based on the operations exposed by the MBean managing the resource.
Function buttons are provided dynamically for each available operation. Section 2 provides a
listing of all of the operations exposed by the various ACI MBeans and their corresponding
function buttons.
To initiate an operation for the managed resource, click the corresponding Function button. If the
operation (such as Start) does not return information, then the status bar will show either a
successful submit of the operation or an error message. Some operations require parameters to
be entered. As an example, the Queue Pop operation removes the number of messages entered
by the user.
Note: Hovering the mouse pointer over a function button displays a short description of the
operation.
Additional parameters
Some operations require parameters to be entered. As an example, the ProcessManager
addProcessLike operation, which adds a new process with the same attributes as an existing
process entry, requires two parameters: the symbolic name by which the new process will be
known and the symbolic name of the process that will be used as the template.
When you select the Add Like button on the Detail window, a panel for parameter entry is
presented. You must then fill in values for the parameters.
When you select the Add Like button on the Management Console page, a popup for parameter
entry is presented. You must then fill in values for the parameters.
In some cases, a drop-down menu for selecting a parameter may be presented. For example, the
XPNETNode showQueue operation, which adds a queue for permanent management, requires two
parameters, and the type of the queue is presented as a drop-down menu.
Errors
If an error occurs on the execution of an operation on the Detail window, the status bar shows a
color-highlighted error message. For some error messages, more error information can be
obtained by hovering the mouse pointer over the status bar error text.
If an error occurs on the execution of an operation on the Management Console page, a
descriptive error message is displayed near the top of the page.
resource. Attributes are listed dynamically on the page for the managed resource being viewed.
Section 2 provides a listing of all of the attributes exposed by the various ACI MBeans and
whether or not they can be modified.
Detail window
To view an attribute on the Detail window, you can scroll through the attribute list. You can
double-click in any Description or Value cell to display the Zoom button. Clicking the Zoom button
displays a larger field that contains the description to make it easier for you to, for example, copy
the contents and paste them in another field.
To modify an attribute, click the Edit button. The window is redisplayed with appropriate edit
boxes. Only read/write attributes can be changed; these are distinguished by a white background
in the value column.
Modify the values and click the Save button. This issues update requests to the ACIJMX agent for
the affected attributes. Note that the attribute values are only checked for syntax.
If you do not want to save your changes, click Cancel/Done. This cancels the changes that you
made.
You can click in any cell of the Value column that has a white background to modify values.
Using queries
All of the summary windows and pages support a query capability. The purpose of a query is to
produce a summary view of only those resources meeting the query criteria. You might use
queries for the following purposes.
• To monitor a specific set of resources, such as to monitor all processes that have been started.
• To perform a function on a specific set of resources, such as to shut down all processes that are
in the started state.
The summary windows and pages provide predefined queries or you can create your own queries
using some basic query syntax.
Predefined queries
Summary windows. Each summary window provides a list of pre-defined query strings that can
be executed by selecting the desired query and submitting the query. If the query you want to
use is in the list, select it and click Submit.
Note: You can add a query to the list of queries in the Predefined Query field by modifying
the property file for a given summary window.
Summary pages. Each summary page provides a list of pre-defined query strings in the
Predefined Query field that can be executed by selecting the desired query and submitting the
query. If the query you want to use is in the list, select it and click Go.
Note: You can add a query to the list of queries in the Predefined Query field by modifying
the messages.properties file in the resource bundle for the APF Admin application (e.g.,
<config.home>/apf/resources/messages.properties).
The following are the default entries in the messages.properties file for predefined query items on
Application Management Summary pages. You add additional queries by inserting a new property
with the number incremented by 1.
apfadmin.list.appMgmtSummary.commsHandler.queryList.0=State == "Connected"
apfadmin.list.appMgmtSummary.commsHandler.queryList.1=not State == "Connected"
apfadmin.list.appMgmtSummary.msgrouter.queryList.0=InboundConns > 0
apfadmin.list.appMgmtSummary.msgrouter.queryList.1=InboundConns == 0
apfadmin.list.appMgmtSummary.msgrouter.queryList.2=OutboundConns > 0
apfadmin.list.appMgmtSummary.msgrouter.queryList.3=OutboundConns == 0
apfadmin.list.appMgmtSummary.msgrouter.queryList.4=ConnsRefused > 0
apfadmin.list.appMgmtSummary.process.queryList.0=State == "Started"
apfadmin.list.appMgmtSummary.process.queryList.1=not State == "Abnormal"
apfadmin.list.appMgmtSummary.queue.queryList.0=CurrentQueueDepth > 0
apfadmin.list.appMgmtSummary.queue.queryList.1=OpenInputCount > 1
apfadmin.list.appMgmtSummary.queue.queryList.2=not OpenInputCount > 1
apfadmin.list.appMgmtSummary.queue.queryList.3=OpenOutputCount > 1
apfadmin.list.appMgmtSummary.queue.queryList.4=not OpenOutputCount > 1
apfadmin.list.appMgmtSummary.queueManager.queryList.0=State == "Connected"
apfadmin.list.appMgmtSummary.queueManager.queryList.1=not State == "Connected"
apfadmin.list.appMgmtSummary.station.queryList.0=State == "Started"
apfadmin.list.appMgmtSummary.station.queryList.1=not State == "Started"
apfadmin.list.appMgmtSummary.station.queryList.2=CommsHandlerState == "Connected"
apfadmin.list.appMgmtSummary.station.queryList.3=not CommsHandlerState ==
"Connected"
apfadmin.list.appMgmtSummary.station.queryList.4=(MessagesReceived == 0) or
(MessagesSent == 0)
Query syntax
The following table describes the syntax variables that can be used to form queries.
Variable Definition
<attrName> Attribute name is a valid attribute—not enclosed by quotation marks.
Attribute names are case-sensitive.
<attrValue> One of the following, depending on the type of attribute specified by the
<attrName>:
<booleanAttrValue> = a boolean attribute value of true or false—not
enclosed by quotation marks and not case sensitive.
<stringAttrValue> = A string value—enclosed by quotation marks.
<intAttrValue> = An numeric value—not enclosed by quotation marks
and treated as an integer.
Variable Definition
<stringRelationOp> A string relational operator—one of the following, not enclosed with
quotation marks: “startsWith”, “endsWith”, “matches”
<binaryLogicalOp> A binary logical operator—one of the following, not enclosed with
quotation marks: “and”, “or”.
<unaryLogicalOp> A unnary logical operator—not enclosed with quotation marks: “not”
Queries that exclude attributes of resources that you want to display have use the following
format:
State == "Started"
not State == "Started"
State == "Started" and InputQueue matches "*.IS"
CurrentQueueDepth > 0
Type == "Mytype" and ( (CurrentQueueDepth > 0) or (OpenInputCount < 2) )
(MessagesSent == 0) or (MessagesReceived == 0)
Summary window
Communication handlers can be selected for actions on the Comms Handler Summary window
individually or in groups using typical selection techniques (mouse left-click for individual selection
or together with the Control or Shift key for multiple selection). You can also select all rows by
clicking the Select All button in the upper left corner of the table.
Summary page
Communication handlers can be selected for actions on the Communications Handler Summary
page individually or you can also select all rows by clicking the Select All action in the lower left
corner of the table.
Starting a Process
Select the processes you want to start and click the Start button.
Stopping a Process
Select the processes you want to stop and click the Stop button.
Connect to a queue
Select the queues to which you want to connect and click the Connect button.
Starting a station
Select the stations you want to start and click the Start button. This action starts the managed
station.
Stopping a station
Select the stations you want to stop and click the Start button. This action stops the managed
station.
Syncing a Station
Select the stations you want to sync and click the Sync button.
The sync action reinstantiates the ICEStation MBEANs for all of the selected stations using the
current version of the ICEStation-descriptor.xml file. Sync actions are used to enables changes
made to the descriptor file (such as adding or removing attributes and operations).
with the Control or Shift key for multiple selection). You can also select all rows by clicking the
Select All button in the upper left corner of the table.
An example of the BSVC Services Summary window is shown below. It displays various
aggregated statistics for each service, including counts for exceptions, invocations, responses, and
timeouts, a list of executables that provide the service, and the average response time for the
service.
SBA components represent a single service proxy or service stub within a single BASE24-eps
service-based application process. Application Management SBA windows display information
exposed from the BASE24-eps SIS layer.
SBA components can be selected for actions on the SBA Components Summary window
individually or in groups using typical selection techniques (mouse left-click for individual selection
or together with the Control or Shift key for multiple selection). You can also select all rows by
clicking the Select All button in the upper left corner of the table.
An example of the SBA Components Summary window is shown below. It displays various
individual statistics for each component, including counts for exceptions, invocations, responses,
and timeouts, a list of executables that registered the component instance, an indicator of
whether a trace is currently enabled, and if so, the name of the trace file.
In this section:
The numeric values in the left column are used in the ServerManager MBean TraceLevel attribute
for controlling the level of trace messages to be produced by the ACIJMX agent.
If tracing is enabled, the ACIJMX agent produces only trace messages of the types equal to, or
greater than, the corresponding numeric value specified in the ServerManager MBean TraceLevel
attribute.
For example, if the TraceLevel attribute is set to 30, the ACIJMX agent would write only Warning
(30), Error (40), and Fatal (50) messages to its trace log locations; in this case, it would not write
Trace (0), Debug (10), and Information (20) messages because those message types have
corresponding numeric values less than 30.
For the ACIJMX agent to produce all types of trace messages, the TraceLevel attribute must be set
to 0. In this case, all message types—Trace (0), Debug (10), Information (20), Warning (30),
Error (40), and Fatal (50)—would be produced because all message types have corresponding
numeric values equal to or greater than the attribute value 0.
1. Access the Application Management Detail window or Management Console page.
2. Select and expand the Categories entry in the left pane.
3. Select ServerManager.
4. Click the TraceLevel attribute hyperlink, and enter the numeric value specifying the lowest
level of trace messages to be produced.
5. Click Submit Request or Save.
In this section:
Process instrumentation..............................................................................................184
Managing processes....................................................................................................184
Setting up processes to restart automatically............................................................... 187
Process instrumentation
Process management is instrumented from the top-level ProcessManager MBean, which creates,
configures, and manages MBeans for the following types of processes on the indicated platforms:
SISZProcess System z Interact with and manage C++ processes, implemented with
System Interface Services (SIS). Processes implemented with
SISUnixProcess UNIX
SIS have unique attributes that require specialized MBeans.1
ZProcess System z Interact with and manage unspecialized processes running on
a IBM System z, UNIX, or Windows platform. ICE-XS
UnixProcess UNIX
processes use this type of MBean.1
WndProcess Windows
1 Currently, ICE-XS processes and SIS-based processes are not supported on the Windows
platform.
Symbolic names
Processes, like all resources in the ACIJMX agent, have symbolic names that will be used in
displaying the processes. Symbolic names, like all attribute values, are case-sensitive.
Managing processes
You can perform a number of operations for managing and controlling processes using an ACIJMX
agent. These are described below, both in terms of the exposed operations used (for third-party
management systems) and how the operations are carried out from the ACI desktop or APF Admin
browser.
What to do next:
Once the new process has been added, you can refresh the navigational pane to display the new
process entry. You can then select this entry and update it with the Edit button to reflect the
actual attributes of the new process.
To add a new SISUnixProcess in this way, the only attributes that would typically need to be
changed would be the CommandQueue, InputQueue, and perhaps ThreadCount.
Delete a process
A process is deleted using the deleteProcess operation exposed by the ProcessManager MBean.
The process symbolic name must be specified as a parameter.
Deleting a process deletes both the MBean used to manage the process and the underlying
managed process itself.
1. Access the Application Management Detail window or Management Console page.
2. Select and expand the Categories > ProcessManager entries in the left pane.
3. Click Delete.
4. Enter the symbolic name of the process to be deleted and select the appropriate Process
Style.
5. Click Submit Request or Submit.
You can use the ProcessManager MBean’s Restore operation to restore one or more process
entries as long as old process files remain in the <ACIJMX_BASE>\store directory (i.e., they have
not been cleaned up or removed by a system administrator).
To recover an individual process, supply the symbolic name as the parameter to the Restore
operation. You can restore multiple processes by supplying a pattern as the parameter value to
the Restore operation.
Restoring a process, recreates the MBean for the process and recreates the underlying managed
process as well, based on the persistent store image.
1. Access the Application Management Detail window or Management Console page.
2. Select and expand the Categories > ProcessManager entries in the left pane.
3. Click Restore.
4. Enter the symbolic name of the process to be restored or a pattern identifying a group of
process symbolic names.
5. Click Submit Request or Submit.
In this section:
Value Description
Destination An identifier for the application server to which the command is to be sent. This
value is used as the first parameter for the operation.
Command The type of command. Types are ALTER, DELIVER, INFO, and STATUS. These
values correspond directly to the operations supported by the ProcessControl
MBean.
Component An identifier for the component to which the command is to be sent. This value is
used as the second parameter for the operation.
Command The specific text that must be entered for the command. This text can include
Text constants and variables. The text, in its entirety, must be entered as the third
parameter for the operation.
Specifying the hostname and port to which process control commands are sent
The ProcessControl MBean Hostname and Port attributes define the destination to which the
ProcessControl MBean is to send commands. For BASE24-eps Processing Control commands,
these values must be set as follows:
Attribute Setting
Hostname The host name of the system on which the ICE-XS or XPNET process receiving
the command is running.
Port The host port on which the ICE-XS or XPNET process receiving the command is
listening.
4. Select ProcessControl.
5. Verify the Hostname and Port attributes are set correctly.
6. Click alter, deliver, info or status, depending on the command type you want to enter.
7. Enter the destination of the command as the first operation parameter.
8. Enter the name of the component to which the command is to be sent as the second
operation parameter.
9. Enter the command text required for the command as the first operation parameter.
10. Click Submit Request. Response information is returned from the target process.
IBM Websphere MQ
Section 8:
management
This section describes the IBM Websphere MQ management capabilities provided by the ACIJMX
agent.
In this section:
Mode Description
Bindings The ACIJMX agent communicates directly with the IBM Websphere MQ queue
manager without using a TCP/IP connection.
Client The ACIJMX agent communicates with the IBM Websphere MQ queue manager
using a TCP/IP connection.
In this case, an MQ listener process must be defined and running for the IBM
Websphere MQ queue manager. Also, a server connection channel must be
defined and started for the IBM Websphere MQ queue manager.
Note: Client mode is not supported on the IBM System z platform.
Once the WMQ MBean is added, the following attributes must be changed from their default
values, depending on the mode of connection being used, client mode or bindings mode.
Note: Client mode cannot be used in an IBM System z environment, so in this case, only
the InitialManagerState attribute need be considered.
Attributes Settings Connection Mode
ClientChannel Set to a valid server connection channel. This Client: Required
is typically the SYSTEM.DEF.SVRCONN default
server connection channel. Bindings: Not used.
• Temporary. Used when you want to add a queue for a short time only. Queues added in this
manner are removed automatically. Temporary management can be useful for investigating
errors on specific queues that you do not want to manage permanently.
Before a queue can be managed by the ACIJMX agent, it must first have been defined within the
IBM Websphere MQ environment (i.e., the ACIJMX agent cannot create new queues; it can only
manage those that are there).
Also, to define a queue for management, the ACIJMX agent must be connected to the queue
manager that manages the queue (this connection is made using the WMQ MBean).
Before a queue can be managed by the ACIJMX agent, it must first have been defined within the
IBM Websphere MQ environment (i.e., the ACIJMX agent cannot create new queues; it can only
manage those that are there).
List all queues defined to a running WebSphere queue manager from the
ACI desktop
1. Access the Application Management Detail window.
2. Select and expand the Categories > MessagingManager > WMQ entries in the left pane.
3. Select the queue manager.
4. Select the WMQ MBean.
5. Click List Queues.
6. Enter an asterisk in the Queue pattern field, or another type of selection pattern.
7. Click Submit Request.
List all queues defined to a running WebSphere queue manager from the
APF admin browser
1. Access the Application Management Management Console page.
2. Select and expand the Categories > MessagingManager > WMQ entries in the left pane.
3. Select the queue manager.
4. Click List Queues.
5. Enter an asterisk in the Name Pattern field, or another type of selection pattern.
6. Click Submit.
Note: You can select and copy one of the listed queues to the clipboard to add it for
permanent or temporary management.
In this section:
Attribute Setting
InitialCommsHandlerState By default, the ICEXS MBean does not automatically connect to
the associated ICE-XS process when the ACIJMX agent is
initialized. This is to accomodate the situation where the ICE-XS
process in not started when the ACIJMX agent is started. Setting
this attribute to “Connected” causes the ICEXS MBean to connect
to the ICE-XS process automatically at agent startup.
The following is a typical error you might receive when attemping to connect to a newly added
ICEXS MBean.
What to do next:
Note: You can select and copy one of the stationpools to the desktop clipboard to add it for
permanent or temporary management.
List all msgrouters defined to the ICE-XS process from the ACI
desktop
The ICEXS MBean supports a listMsgrouters operation to list out all msgrouters defined to the
running ICE-XS process. This operation returns all msgrouters, regardless of whether or not they
are managed by the ACIJMX agent.
1. Access the Application Management Detail window.
2. Select and expand the Categories CommsManager entries in the left pane.
3. Select the ICE-XS process.
4. Click List Msgrouters.
5. Enter an asterisk in the Msgrouter name pattern field, or another type of selection pattern.
6. Click Submit Request.
What to do next:
Note: You can select and copy one of the msgrouters to the desktop clipboard to add it for
permanent or temporary management.
List all msgrouters defined to the ICE-XS process from the APF
admin browser
1. Access the Application Management Management Console page.
2. Select and expand the Categories > CommsManager entries in the left pane.
3. Select an ICE-XS process.
4. Click List Msgrouters.
5. Enter an asterisk in the Pattern field, or another type of selection pattern.
6. Click Submit.
What to do next:
Note: You can select and copy one of the msgrouters to the clipboard to add it for
permanent or temporary management.
In this section:
Attribute Setting
NCPServerClass Set to the server class of the NCP Server process to which management
requests will be sent for this XPNET system. This attribute defaults to
“SERVER-NCP”.
PathmonPPD Set to the PPD name of the Pathway system that contains the NCP Server
process to which management requests are sent for this XPNET system. For
example, on a system where the XPNET system has been configured with a
PPD-PREFIX of $P, the PathmonPPD attribute would need to be set to
$PPMN.
• Permanent. Used when you want add a node, station, queue, or process and manage it until
you specifically remove it.
• Temporary. Used when you want to add a station, queue, or process for a short time only.
Stations, queues, and processes added in this manner are removed automatically. Temporary
management can be useful for investigating errors on specific stations, queues, and processes
that you do not want to manage permanently.
Before a node, station, queue, or process can be managed by the ACIJMX agent, it must first have
been defined within the XPNET environment (i.e., the ACIJMX agent cannot create new nodes,
stations, queues, and processes; it can only manage those that are there).
What to do next:
Note: You can select and copy one of the node names to the desktop clipboard to add it for
permanent management.
7. Refresh the screen to see the new node under the XPNET node resources.
What to do next:
Note: You can select and copy one of the processes to the desktop clipboard to add it for
permanent or temporary management.
2. Select and expand the Categories > XPNETSystemManager > XPNETSystem >
XPNETNode > XPNETProcess entries in the left pane.
3. Select the XPNET process.
4. Click Get Attr Summary.
5. Enter an asterisk in the Station name pattern field, or another type of selection pattern.
6. Click Submit Request.
What to do next:
Note: You can select and copy one of the stations to the desktop clipboard to add it for
permanent or temporary management.
What to do next:
Note: You can select and copy one of the queues to the desktop clipboard for adding it for
permanent or temporary management. Each queue is displayed on a separate line in the
response. Each line of the response starts with the queue name followed by a space
followed by the queue type. Take note of the type, because you will need it to add a queue
for management.
Operation Description
pop Removes a specified number of messages from the queue
purge Removes all messages for a specific queue
qread Reads messages from a disk file and queues them
qtransfer Transfers messages from the queue to the queue of a specified object
qwrite Writes messages from the queue to a disk file
In this section:
Service name
Service Name+“_mgmt”+“_”+version
Example: DebitAddRq_mgmt_1
When you select a service in the navigation pane to the left; its functions and attributes are
shown in the detail pane to the right. Refer to the Service Management service MBean definition
for function and attribute descriptions.
When you select a provider or consumer component in the navigation pane to the left; its
functions and attributes are shown in the detail pane to the right. Refer to the SBA Metrics
component MBean definition for function and attribute descriptions.
c. Click the Save button. This saves the new or updated file name
d. Click the Cancel/Done button.
Note: Neither the Application Management user interface or ACIJMX server
validates the file name or directory location entered for the TraceFileName.
5. Click the TraceOn button. This operation starts the trace and returns on “OK” response.
6. Click the Cancel/Done button.
Note: The Trace attribute for the component will be set to true if the operation is
successful.
When you select a service in the navigation pane to the left; its functions and attributes are
shown in the detail pane to the right. Refer to the SBA Metrics service MBean definition for
function and attribute descriptions.
When you select a service in the navigation pane to the left; its functions and attributes are
shown in the detail pane to the right. Refer to the Foundation Metrics component MBean definition
for function and attribute descriptions.
5. To reset the count attributes, click the ResetCount button. This operation resets all of the
count attributes to zero and returns an “OK” response.
In this section:
Parameters C G S
Monitor symbolic name – The name to give the monitor within the ACIJMX X X X
system.
Object type to monitor – A broad classification of MBean to be monitored. In an X X X
IBM System z and UNIX environment, types include:
ProcessManager
Process
MessagingManager
QueueManager
Queue
CommsHandler
Parameters C G S
Msgrouter
Station
Service
Component
String form of monitor high threshold – A number indicating the value that the X
monitored attribute must exceed in order to have an event issued.
String form of monitor low threshold – A number indicating the value that the X
monitored attribute must fall below in order to have an event issued.
Raw compare or difference compare – A true or false indicator. If set to true, then X
all attribute comparisons are done on the raw value of the attribute. If set to
false, then the difference between the current and previous reading is compared
to the threshold.
String form of counter monitor threshold – A number indicating the value that the X
monitored attribute must exceed in order to have an event issued.
Raw compare or difference compare – A true or false indicator. If set to true, then X
all attribute comparisons are done on the raw value of the attribute. If set to
false, then the difference between the current and previous reading is compared
to the threshold.
Compare string – the string to be used for the comparison. X
Parameters/Attributes Value
Monitor Symbolic Name ISQueueMonitor
Object type to monitor Queue
Object symname pattern TEST.IS*
Attribute to monitor CurrentQueueDepth
String form of monitor low threshold 5
String form of monitor high threshold 10
Raw compare or difference compare True sets the DifferenceMode attribute to false.
False sets the DifferenceMode attribute to true.
Without further modification, this monitor would check the CurrentQueueDepth attribute of all of
queue resources matching the TEST.IS* pattern every 10 seconds and emit a notification if the
queue exceeded 10 or dropped below 5.
Once the GaugeMonitor has been added, it can be modified by selecting it by symbolic name from
the left-hand pane of the Detail window or Management Console page and modifying attributes.
Some examples of attribute changes might be as follows:
Parameters/Attributes Value
NotifyLow Set to false to turn off notifications for dropping below
the low threshold.
GranularityPeriod Change to lengthen or shorten period at which the
thresholds are checked (e.g., from 10 seconds to 20
seconds).
Sample GaugeMonitor MBean to monitor the opens on the integrated server input
WebSphere MQ queue
Another common use of a GaugeMonitor MBean would be to monitor the status of the opens on
the Integrated Server input WebSphere MQ queue. If the number of opens for input (reading/
getting) drops below a specific value, it would indicate that a number of threads within the IS
population had terminated.
The following are examples of values you might use to add this type of GaugeMonitor MBean.
Parameters/Attributes Value
Monitor Symbolic Name ISQueueOpenMonitor
Object type to monitor Queue
Object symname pattern TEST.IS*
Attribute to monitor OpenInputCount
String form of monitor low threshold 10
String form of monitor high threshold 10
Raw compare or difference compare True sets the DifferenceMode attribute to false.
False sets the DifferenceMode attribute to true.
Without further modification, this monitor would check the OpenInputCount attribute of all of
queue resources matching the TEST.IS* pattern every 10 seconds and emit a notification if the
count moved higher or lower than 10.
For this type of situation, the user typically only wants to be notified when the value drops below
the low threshold (the high threshold is usually irrelevant here).
Once the GaugeMonitor has been added, it can be modified by selecting it by symbolic name from
the left-hand pane of the Application Management detail screen and modifying attributes. The
following attribute would typically be modified in this case.
Parameters/Attributes Value
NotifyHigh Set to false to turn off notifications for going above
the high threshold.
Parameters/Attributes Value
Monitor Symbolic Name ISOConnMonitor
Object type to monitor Msgrouter
Object symname pattern TEST_ISO*
Attribute to monitor InboundConns
String form of monitor threshold 10
Raw compare or difference compare True sets the DifferenceMode attribute to false.
False sets the DifferenceMode attribute to true.
Without further modification, this monitor would check the InboundConns attribute of all of
msgrouter resources matching the TEST_ISO* pattern every 10 seconds and emit a notification if
the count moved higher than 10.
Parameters/Attributes Value
Monitor Symbolic Name MonitorP1A^NODE
Object type to monitor XPNETNode
Object symname pattern \OMA3T03.P1A^NODE
Attribute to monitor PercentMemoryUsed
String form of monitor threshold 90
Parameters/Attributes Value
Raw compare or difference compare True sets the DifferenceMode attribute to false.
False sets the DifferenceMode attribute to true.
Without further modification, this monitor would check the PercentMemoryUsed attribute of the
\OMA3T03.P1A^NODE resource every 10 seconds and emit a notification if the percentage moved
higher than 90.
Parameters/Attributes Value
Monitor Symbolic Name IKProcessMonitor1
Object type to monitor Process
Object symname pattern IK_*
Attribute to monitor State
Compare string Abnormal
Notify on String compare or String True sets the NotifyMatch attribute to true and the
difference NotifyDiffer attribute to false.
False sets the NotifyMatch attribute to false and the
NotifyDiffer attribute to true.
Without further modification, this monitor would check the State attribute of all of process
resources matching the IK_* pattern every 10 seconds and emit a notification if the State
attribute matched Abnormal.
Start and stop individual monitors from the ACI desktop or APF
admin browser
1. Access the Application Management Detail window or Management Console page.
2. Select and expand Categories > ServerManager in the left pane.
3. Expand the monitor groupings as needed and select the monitor.
4. Click Start or Stop.
Start all monitors from the ACI desktop or APF admin browser
1. Access the Application Management Detail window or Management Console page.
2. Select and expand Categories in the left pane.
3. Select ServerManager.
4. Click Start Monitors.
Delete monitors
The ServerManager MBean can delete a monitor using its DeleteMonitor operation. This removes a
monitor by symbolic name.
1. Access the Application Management Detail window or Management Console page.
2. Select and expand Categories in the left pane.
3. Select ServerManager.
4. Click Delete Monitor.
5. Enter the symbolic name of the monitor.
6. Click Submit Request or Submit.
In this section:
Once a script is scheduled, the schedule information cannot be modified. If the schedule
information needs to be changed, the scheduled script must be removed and re-added with the
new information.
Multiple schedules can be set up for the same script as needed. For example, if scriptA is to be
executed each day at 1:15am, 6:30am, 1:15pm, and 6:30pm, and scriptB is to be executed each
day at 12:00am and 12:00pm, different schedules would be set up as follows. In this case, the
date can be the current date or the date you want the scripts to start running.
Notifications enabled
In order for notifications to function, they must be enabled through the ServerManager MBean—
using the startNotifier operation. Notifications must be enabled in order for the ScriptManager to
receive notifications to trigger script execution.
Executing scripts within the ACIJMX agent takes thoughtful planning. You must understand and
identify those notifications that you want to take action on and the MBeans that will generate
them. You must also write an appropriate Jython script to perform the actions that you want to
take for the specific resources you want to affect.
The following steps describe how to use the ACI desktop to set up the ScriptManager MBean to
execute a script upon receipt of a specific notification.
1. Access the Application Management Detail window.
2. Select and expand the Categories entry in the left pane.
3. Select ScriptManager.
4. Identify the notification you want the ScriptManager to use as a trigger. To do this, click Add
Type. This displays the Add Type window.
5. Enter the notification type of the notification you want to use as the trigger. Available types
are identified, by MBean, in section 2.
To execute a script on the open input count of an MQ queue dropping below a pre-configured
threshold, the Type value entered would be
com.aciworldwide.jmx.thresh_low_exc
6. Click Submit Request and then click Cancel/Done to return to the ScriptManager detail
window.
7. Identify the MBeans that the ScriptManager MBean is to watch for the trigger notification type
and the script to be executed.
To do this, click Add Objects (objects are the MBeans to be added). This displays the Add
Objects window, which accepts the following parameters:
Param Description
Type/classification A type of MBean that issues notifications. Values include the following:
of objects
Note: In nearly all cases, this will be a monitor MBean, because
notifications that are automatically handled are typically issued
by the monitors.
Monitor CounterMonitor
GaugeMonitor
StringMonitor
Process UnixProcess
JSFUnixProcess
SISUnixProcess
ZProcess
JSFZProcess
Param Description
SISZProcess
XPNETProcess
ServerManager ServerManager
Object name Regular-expression pattern for an object or set of objects to be
pattern monitored. This corresponds to the Symname attribute that is
supported by all ACIJMX MBeans.
Script file to The name of a Jython script file to execute. This script file must reside
execute on on the standard script path as specified in the scriptPath attribute of the
Notification ScriptManager.
Example 1: For handling current queue depth threshold events on the Integrated Server
queue, the following is an example of the values that could be supplied to the addObjects
operation:
Parameter Setting
Type/classification of objects Monitor
Object symname pattern ISCurrentQueueDepthMonitor
Script file to execute on Notification isabend.py
Example 2: For handling open input count threshold events on the Integrated Server input
queue, the following values would be supplied to the addObjects operation:
Parameter Setting
Type/classification of objects Monitor
Object symname pattern ISQueueOpenMonitor
Script file to execute on Notification isabend.py
8. Click Submit Request and then click Cancel/Done to return to the ScriptManager detail
window
The following steps describe how to use the APF Admin browser to set up the ScriptManager
MBean to execute a script upon receipt of a specific notification.
1. Access the Management Console page.
2. Select and expand the Categories entry in the left pane.
3. Select ScriptManager.
4. Identify the notification you want the ScriptManager to use as a trigger. To do this, click Add
Type.
5. Enter the notification type of the notification you want to use as the trigger. Available types
are identified, by MBean, in section 2.
To execute a script on the open input count of an MQ queue dropping below a pre-configured
threshold, the Type value entered would be
com.aciworldwide.jmx.thresh_low_exc
6. Click Submit.
7. Identify the MBeans that the ScriptManager MBean is to watch for the trigger notification type
and the script to be executed.
To do this, click Add Objects (objects are the MBeans to be added). This displays the Add
Objects popup, which accepts the following parameters:
Param Description
Type/classification A type of MBean that issues notifications. Values include the following:
of objects
Note: In nearly all cases, this will be a monitor MBean, because
notifications that are automatically handled are typically issued
by the monitors.
Monitor CounterMonitor
GaugeMonitor
StringMonitor
Process UnixProcess
JSFUnixProcess
SISUnixProcess
ZProcess
JSFZProcess
SISZProcess
JSFWndProcess
Param Description
WndProcess
XPNETProcess
ServerManager ServerManager
Object name Regular-expression pattern for an object or set of objects to be
pattern monitored. This corresponds to the Symname attribute that is
supported by all ACIJMX MBeans.
Script file to The name of a Jython script file to execute. This script file must reside
execute on on the standard script path as specified in the scriptPath attribute of the
Notification ScriptManager.
Example 1: For handling current queue depth threshold events on the Integrated Server
queue, the following is an example of the values that could be supplied to the addObjects
operation:
Parameter Setting
Type/classification of objects Monitor
Object symname pattern ISCurrentQueueDepthMonitor
Script file to execute on Notification isabend.py
Example 2: For handling open input count threshold events on the Integrated Server input
queue, the following values would be supplied to the addObjects operation:
Parameter Setting
Type/classification of objects Monitor
Object symname pattern ISQueueOpenMonitor
Script file to execute on Notification isabend.py
8. Click Submit.
Caution: Scripts can be written for any number of purposes. Because of their inherent
flexibility and power, it is very important to review any scripts carefully that you plan to
launch through the ACIJMX agent in order to protect the system from unauthorized or
unintentional actions.
Sample scripts
Scripts can be written for a multitude of purposes, from starting and stopping resources to
warmbooting all of the ACIJMX agent’s managed resources. Several script shells are provided in
the <ACIJMX_BASE>\scripts directory.
acijmx.policy file
The acijmx.policy file resides in the <ACIJMX_BASE>\config directory and is used to place basic
limitations on the script Executor jar files. Refer to the “acijmx.policy file” topic for additional
information.
In this section:
Security
The remote adaptor used to connect the Command Interpreter Interface to the ACIJMX agent
authenticates you when you start the interface.
Once you are authenticated, you can enter commands and execute scripts. As these commands
are received (and scripts are parsed), the MBean Server Wrapper verifies that you are authorized
to take the action. If you are, the action is forwarded to the MBean server; if you are not, the
action is denied and the MBean Server Wrapper generates an exception message. Refer to section
3, “ACIJMX agent security”, for more information about ACIJMX security.
$ > . acijmx_env_vars
4. Run the runacijmxci script.
$ >./runacijmxci
5. The following response is returned. Enter your user ID. This is your AJI User Security (USEC)
user ID.
login: <user-ID>
6. The following response is returned. Enter your password. This is your AJI User Security
(USEC) password. Passwords are displayed as asterisks.
Password: <password>
7. The ACIJMXCI command interpreter prompt is returned if the login is successful.
>>
If your user ID and password cannot be authenticated, an error message is returned noting
the invalid login attempt.
>>EXIT
$ >
In this case, the MBean Server Wrapper would verify that you have the security necessary to
execute the scripted start operation on a station type MBean.
Note: Refer to section 3, “ACIJMX agent security”, for more information about ACIJMX
security.
Command Description
Type Specifies the type of object (MBean) affected by the command. You must
enter an MBean type in the command unless a default MBean type has been
assumed (specified using the ASSUME command). MBean types are
documented in section 2 under the “MBean naming convention” topic.
Name Identifies the object or objects (MBean or MBeans) affected by the
command. MBean names are carried in the Symname attribute.
Name Pattern A name pattern can be used to wildcard an object name. Selection patterns
can also be used—these are described in section 2 in the “Operations
parameters – selection patterns” topic.
Query syntax
The following table describes the syntax variables that can be used to form querystrings.
Variable Definition
<attrName> Attribute name is a valid attribute—not enclosed by quotation marks.
Attribute names are case-sensitive.
<attrValue> One of the following, depending on the type of attribute specified by the
<attrName>:
<booleanAttrValue> = a boolean attribute value of true or false—not
enclosed by quotation marks and not case sensitive.
<stringAttrValue> = A string value—enclosed by quotation marks.
<intAttrValue> = An numeric value—not enclosed by quotation marks
and treated as an integer.
Querystring examples
Querystrings that include attributes of resources on which you want to take action can have one
of the following formats:
Querystrings that exclude attributes of resources on which you want to take action can have the
following format:
State == "Started"
not State == "Started"
State == "Started" and InputQueue matches "*.IS"
CurrentQueueDepth > 0
Type == "Mytype" and ( (CurrentQueueDepth > 0) or (OpenInputCount < 2) )
(MessagesSent == 0) or (MessagesReceived == 0)
ACIJMXCI commands
The ACIJMX Command Interpreter Interface supports the commands described below. Required
syntax is provided for each command.
ASSUME command
The ASSUME command specifies an MBean type and MBean name/pattern for a series of related
commands that will follow.
If there is an assumed MBean type and MBean name/pattern, these do not need to be specified on
subsequent commands (with the exception of the UPDATE command which requires an Object-
name-specifier each time it is entered).
The ENV command can be used to show the current assumed MBean type and MBean name.
Syntax
ASSUME Object-type [ Object-name-pattern ]
ASSUME — the required keyword for the command. The keyword can be entered as upper- or
lower-case.
Object-type — the type of MBean you want to specify as the default for commands that follow.
Object-name-pattern — the MBean name or pattern you want to specify as the default for
commands that follow.
Examples
Sets the assumed MBean type to Process and the assumed MBean name/pattern to
IS* (which would match any MBean name starting with IS). The following is an
example of this command used in a series:
Sets the assumed MBean type to QueueManager and the assumed MBean name/
pattern to the specific name, QM_ACIO_SUN. The following is an example of this
command used in a series:
Sets the assumed MBean type to ProcessManager and the assumed MBean name/
pattern to ProcessManager. Manager MBeans (e.g. ProcessManager,
MessagingManager) are automatically detected by the ACIJMXCI which sets the
assumed MBean name/pattern appropriately. The following is an example of this
command used in a series:
ASSUME ProcessManager
EXEC addProcessLike(IS-6, IS-1)
EXEC addProcessLike(IS-7, IS-1)
ASSUME Process
Sets the assumed MBean type to Process and does not set or reset the assumed
MBean name/pattern. This might be used to shorten subsequent entries if you are
planning to enter multiple process commands. The following is an example of this
command used in a series:
ASSUME Process
EXEC start in IS-1
EXEC start in XML
ENV command
The ENV command reports on the current assumed MBean type and MBean name/pattern, as well
as the current command interpreter in use.
The assumed MBean type and MBean name/pattern are set by the ASSUME command; the
command interpreter used is set by the SET command.
Syntax
ENV
ENV — the required keyword for the command. The keyword can be entered as upper- or lower-
case.
Response Format
Environment:
ASSUMED OBJECT TYPE: <Object-type>
ASSUMED OBJECT NAME: <Object-name-pattern>
COMMAND INTERPRETER: <JMXCI or Jython>
ASSUMED OBJECT TYPE—The MBean type used in commands if you do not enter an MBean
type. This value is set using the ASSUME command.
ASSUMED OBJECT NAME—The MBean name/pattern used in commands if you do not enter an
MBean name/pattern. This value is set using the ASSUME command. An MBean name/pattern of
an asterisk (*) indicates that the command applies to all MBeans of the specified MBean type.
COMMAND INTERPRETER—The command interpreter to which commands are passed. JMXCI
indicates the commands are sent to the ACIJMX Command Interpreter—which sends the
commands to the ACIJMX agent for execution. JYTHON indicates the commands are sent to the
Jython interpreter and executed in the local environment.
Example
ENV
Response
Environment:
ASSUMED OBJECT TYPE: PROCESS
ASSUMED OBJECT NAME: *
COMMAND INTERPRETER :JMXCI
EXEC command
The EXEC command executes an operation on an MBean, a set of MBeans, or the MBean server.
Any operation supported by an MBean can be entered, and the operations can be executed
conditionally based on the value of any of an MBean’s attributes.
Syntax
EXEC [ operation-name [ (param1, param2, ...) ] [IN Object-specifier ] [WHERE ‘QueryString ‘ ]
EXEC — the required keyword for the command. The keyword can be entered as upper- or lower-
case.
operation-name — the operation to be performed. The operation-name is case sensitive. Valid
operations depend on the object (MBean) affected by the command. All MBean operations are
documented in section 2.
[ (param1, param2, ...) ] — the params needed for the operation. Not all commands require
params. Params required for each operation are documented in section 2.
[IN Object-specifier ] — identifies the MBeans on which the operation is to be executed. Object-
specifier can be an MBean type by itself or an MBean type and name/pattern combination.
[WHERE ‘QueryString ‘ ] — an optional conditional statement specifying an attribute name and
value upon which the execution of the command is based. Refer to the “Specifying querystrings in
ACIJMXCI commands” topic for more information about using this value.
Examples
Equivalent to previous command; starts all processes whose symbolic names begin
with IS.
Starts all processes whose symbolic names begin with IS and whose State attribute
is set to “Stopped”.
Stops all processes whose symbolic names begin with IS and whose State attribute
is not set to “Stopped”.
assume CommsHandler/ICE1
exec showstation(STA_ISO1)
exec showstation(STA_USEC)
EXIT command
The EXIT command is used to stop the ACIJMX Command Interpreter Interface.
Syntax
EXIT
Example
EXIT
RUN Command
The RUN command runs a Jython script with up to six optional parameters. The output of the
script, if any, is returned to the screen.
Syntax
RUN script-name [ param1 [ param2] [ param3][ param4][ param5][ param6] ]
RUN — the required keyword for the command. The keyword can be entered as upper- or lower-
case.
script-name — the name of the script to be run. All scripts run from this command must be in the
<ACIJMX_BASE>\scripts directory.
[ param1 [ param2] [ param3][ param4][ param5][ param6] ] — Up to six optional params to be
acted upon by the script. Use of these params is entirely dependent on the script being run and
are only required if they are required by the script.
Examples
RUN mqboot.py
SELECT command
The SELECT command displays detail or summary information about individual MBeans or multiple
MBeans.
Detail information consists of all attribute and operation values for the selected MBeans. Summary
information consists of a primary subset of attributes and operations for the selected MBeans.
Specifically, the primary subset consists of those attributes and operations defined with a visibility
value of 1 in the MBean’s descriptor file (i.e., <field name=“visibility” value=“1” />
Syntax
SELECT attribute-list [FROM Object-specifier ] [DETAIL] [WHERE ‘QueryString ‘ ]
SELECT — the required keyword for the command. The keyword can be entered as upper- or
lower-case.
attribute-list — currently, the attribute-list value can only be *.
[FROM Object-specifier ] — identifies the MBeans on which the command is to be executed. Object-
specifier can be an MBean type by itself, an MBean type and name/pattern combination, or the
keyword “Server”. In the case of Server, the MBean server is queried for a list of all available
MBeans.
[DETAIL] — specifies whether detail information is to be provided. Summary information is
provided if this value is not included in the command.
[WHERE ‘QueryString ‘ ] — an optional conditional statement specifying an attribute name and
value upon which the execution of the command is based. Refer to the “Specifying querystrings in
ACIJMXCI commands” topic for more information about using this value.
Examples
Returns a list of all MBeans registered with the ACIJMX agent MBean server, with a
single line per object.
Returns summary information for all process MBeans registered with the ACIJMX
agent MBean server.
Returns detail information on all attributes and operations for process IS-1.
ASSUME Process/IS-?
SELECT *
Returns summary information on only those processes that match the IS-? pattern.
ASSUME Station/*ISO*
SELECT * DETAIL
ASSUME Station/*ATM*
SELECT * WHERE ‘MessagesSent > 0’
Returns summary information on all stations matching the *ATM* pattern and
whose MessageSent attribute value is greater than zero.
Responses
The following is an example of what a detailed response would look like for an MBean.
SET command
The SET command sets the command interpreter to be used for processing commands from the
command prompt.
Commands can either be passed to the ACIJMX Command Interpreter Interface—for sending to
the ACIJMX agent—or to a local Jython interpreter for execution in the local environment.
The ACIJMX command interpreter supports only those commands documented here. Commands
supported by the Jython interpreter depend on the capabilities of the interpreter.
From a Jython interpreter, the ENV, EXIT and SET commands will still be active. Any other text is
passed directly to the Jython interpreter.
Syntax
Examples
SET COMMANDS
UPDATE command
The UPDATE command updates an attribute or set of attributes for an MBean, a set of MBeans, or
the MBean server.
Syntax
UPDATE Object-specifier SET attribute-name = attribute-value [attribute-name = attribute-
value ] ...
UPDATE — the required keyword for the command. The keyword can be entered as upper- or
lower-case.
Object-specifier — identifies the MBeans on which the command is to be executed. Object-
specifier can be an MBean type by itself or an MBean type and name/pattern combination. This
field is required even if a previous ASSUME command has been executed.
SET — a required keyword for the command. The keyword can be entered as upper- or lower-
case.
attribute-name = attribute-value — specifies the name of an attribute and the value to which the
attribute should be set. Additional attribute names and values can be added to the command.
Valid attributes for each MBean are listed in section 2.
Examples
Sets the values of the ThreadCount and InputQueue attributes for all processes
whose MBean symbolic name begins with IS.
Start Runscript
1. Access the command prompt for your platform.
2. Change directories to the agent’s bin directory.
$ > . acijmx_env_vars
4. Run runscript.
$ >./runscript [ run-parameters ]
Runscript syntax
Runscript can be started in different ways depending on how you want to enter your user ID and
password for authentication. The following is the run syntax.
Syntax
runscript <file-name>
runscript -u <user-ID> -p <clear-password> <file-name>
runscript -s <security-file> <file-name>
<file-name> — the name of the script file to be executed. All scripts run from this command must
be in the <ACIJMX_BASE>\scripts directory.
-u <user-ID> — your user ID. This is your AJI User Security (USEC) user ID.
-p <clear-password> — your clear password. This is your AJI User Security (USEC) password.
-s <security-file> — the fully qualified name of a security file that contains your user ID and
encrypted password. The security file can be used for authentication and alleviates the need to
enter additional information at the command prompt.
Examples
runscript <file-name>
Runs the script specified by the <file-name>. Prior to running the script, you will be
prompted to enter a user ID and password for authentication. If your user ID and
password cannot be authenticated, the script will not be run.
Runs the script specified by the <file-name>. Prior to running the script, the user-
ID and password you entered are authenticated. If your user ID and password
cannot be authenticated, the script will not be run.
Caution: This method of entry is not recommended because your user ID and
password are exposed and accessible to others. It is highly recommended that you
use one of the other methods of executing runscript.
Runs the script specified by the <file-name>. Your user ID and password will be
read from the <security-file> and authenticated. If your user ID and password
cannot be authenticated, the script will not be run.
user.id=<user-ID>
##### Begin User Encrypted Values ################################
user.password=
##### End User Encrypted Values ##################################
You would run the ConfigPropertyBuilder Password Encryption utility against this file using the -
UserPropertiesOnly property to create and fill in the encrypted password. When prompted for the
key, enter the <user-ID> value. Refer to the BASE24-eps Java Server Reference Guide for
information about using this encryption utility.
#
# CLASSPATH
#
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/ThirdParty/lib/mx4j.jar
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/ThirdParty/lib/jython.jar
jdom=$JSF_BASE/webapps/lib/jdom.jar
if [ -f $jdom ]; then
CLASSPATH=$CLASSPATH:$JSF_BASE/webapps/lib/jdom.jar
else
CLASSPATH=$CLASSPATH:$JSF_BASE/webapps/lib/jdom-2.0.5.jar
fi
CLASSPATH=$CLASSPATH:$JSF_BASE/webapps/lib/bouncycastle.jar
CLASSPATH=$CLASSPATH:$JSF_BASE/lib/framework-web.jar
CLASSPATH=$CLASSPATH:$JSF_BASE/lib/framework-core.jar
CLASSPATH=$CLASSPATH:$JSF_BASE/lib/framework-ssl.jar
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/lib/esmgmtutil.jar
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/lib/esmgmt.jar
APSFLIB=$JSF_BASE/APSFLib
if [ -d $APSFLIB ]; then
CLASSPATH=$CLASSPATH:$JSF_BASE/config
CLASSPATH=$CLASSPATH:$JSF_BASE/APSFLib/*
fi
export CLASSPATH
#
# BOOTCLASSPATH
#
$JAVA_HOME/bin/java -Duser.region=US -Duser.language=en -
Dhttps.protocols=TLSv1.2
-Dconfig.filename=$ACIJMX_BASE/config/ci.properties
com.aciworldwide.es.mgmt.utils.JMXCI
Example runscript
# CLASSPATH
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/ThirdParty/lib/mx4j.jar
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/ThirdParty/lib/jython.jar
jdom=$JSF_BASE/webapps/lib/jdom.jar
if [ -f $jdom ]; then
CLASSPATH=$CLASSPATH:$JSF_BASE/webapps/lib/jdom.jar
else
CLASSPATH=$CLASSPATH:$JSF_BASE/webapps/lib/jdom-2.0.5.jar
fi
CLASSPATH=$CLASSPATH:$JSF_BASE/webapps/lib/bouncycastle.jar
CLASSPATH=$CLASSPATH:$JSF_BASE/lib/framework-web.jar
CLASSPATH=$CLASSPATH:$JSF_BASE/lib/framework-core.jar
CLASSPATH=$CLASSPATH:$JSF_BASE/lib/framework-ssl.jar
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/lib/esmgmtutil.jar
CLASSPATH=$CLASSPATH:$ACIJMX_BASE/lib/esmgmt.jar
APSFLIB=$JSF_BASE/APSFLib
if [ -d $APSFLIB ]; then
CLASSPATH=$CLASSPATH:$JSF_BASE/config
CLASSPATH=$CLASSPATH:$JSF_BASE/APSFLib/*
fi
export CLASSPATH
# BOOTCLASSPATH
login: <user-ID>
Password: <password>
If the ACIJMXCI command interpreter prompt is returned successfully, the TLS 1.2
configuration is correct. If it does not open successfully, verify the configuration in the steps
above.
>>
4. Execute a Jython script using runscript.
If the Jython script is successfully executed, the TLS 1.2 configuration is correct. If it does not
run successfully, verify the configuration in the steps above.
In this section:
Note: Application Management agents support both RMI and JMXMP connectors.
resources) from a single agent, one of the ACIJMX agents must be configured as the master agent
and all other ACIJMX agents as the client agents.
Or a master agent can be set up separately, offboard from the systems being managed.
Connector files are created automatically using the runconnectorconfigbuilder script located in
the <ACIJMX_BASE>\bin directory. For information about creating connector files, refer to
the “Connector definition file” topic in section 17.
2. Restart the client ACIJMX agent.
When restarted, the ACIJMX agent (client) creates the JMX server side connector and is ready
to be managed by the master ACIJMX agent.
1. From the master agent, use the AddRemoteAgent operation exposed by the TopologyManager
MBean to create a RemoteAgentProxy MBean. The RemoteAgentProxy MBean serves as the
proxy for the client agent.
2. Once the RemoteAgentProxy MBean is added, set the following attributes as described for the
newly added RemoteAgentProxy MBean:
• Hostname. Set to the DNS hostname to contact for accessing this agent.
• ClientPort. Set to the integer value that the remote agent connector uses.
• Protocol. Set to a valid remote agent connector protocol.
3. After the remote agent connector connection attributes are all specified, the connection to the
remote agent can be started using the Start operation for the RemoteAgentProxy MBean.
What to do next:
Once started and connected, the RemoteAgentProxy MBean queries all the MBeans registered by
the client agent and registers them as proxy MBeans with the master agent.
These proxy MBeans act as proxies to the actual remote MBeans, and the master agent can
perform management functions just as if the MBeans were directly registered with it.
In this section:
Resource Description
\bin Contains environment variable definitions and run files. The ACIJMX
installation adds files to the <ACIJMX_BASE>\bin directory.
\config Contains the basic configuration files, including all of the descriptor files
used to define the attributes, operations, and notifications for the
supported MBeans.
The ACIJMX installation adds files to the <ACIJMX_BASE>
\config directory.
\lib Contains the Jar files and native library code for the ACIJMX software.
\store Created at Startup. Contains the current XML store files and backups for all
managed resources.
\logs Contains the stdout and sterr files to which the agent logs events when
other logging options are not available.
\scripts Contains a basic set of scripts.
The ACIJMX installation adds files to the <ACIJMX_BASE>
\scripts directory.
Directory location
The ACIJMX directory is typically installed under the home directory of the product for which it is
being used. For example, for a BASE24-eps installation, the directory would typically be in the
following location.
\ESHOME
\ESJMX
File Description
ACIJMXboot.mlet Used in coldstarts. A coldstart rebuilds the agent using only those
resources defined in the mlet file. Typically, this file is used at installation
only.
ACIJMX.mlet Used in warmstarts. A warmstart rebuilds the agent using current
information and all current resources from the agent’s <ACIJMX_BASE>
\store directory. Typically, this file is used once an agent has been started
and additional resources have been defined (beyond those specified in the
file).
:
<JSFUnixprocess name="IK52.SOMECLASS">
<ProcessId>ES</ProcessId>
<Args>-config /home/xxxx/config.xml</Args>
<ExecutablePath>/home/java/bin/java</ExecutablePath>
<Restartable>true</Restartable>
<EnvPath>/home/xxxx/IK52/JMX/pro_env_vars</EnvPath>
<ConfigFile>/home/xxxx/IK52/JMX/test</ConfigFile>
<VMArgs>-D DEBUG=TRUE</VMArgs>
</JSFUnixprocess>
:
:
<WndProcess name="IK52.SOMECLASS">
<Args>-param /home/xxxx/someclass.params -startup warm -foreground</Args>
<ExecutablePath>/home/xxxx/IK52/someclass</ExecutablePath>
<Restartable>true</Restartable>
</WndProcess >
:
:
<JSFWndprocess name="IK52.SOMECLASS">
<ProcessId>ES</ProcessId>
<Args>-config /home/xxxx/config.xml</Args>
<ExecutablePath>/home/java/bin/java</ExecutablePath>
<Restartable>true</Restartable>
<EnvPath>/home/xxxx/IK52/JMX/pro_env_vars</EnvPath>
<ConfigFile>/home/xxxx/IK52/JMX/test</ConfigFile>
<VMArgs>-D DEBUG=TRUE</VMArgs>
</JSFWndprocess>
:
:
<WMQ name="IK52.MANAGER">
<ClientChannel>SYSTEM.DEF.SVRCONN</ClientChannel>
<ClientHostname>localhost</ClientHostname>
<ClientPort>23640</ClientPort>
<Queue name="IK52.IS" />
<Queue name="IK52.XML" />
<Queue name="IK52.EOPP" />
<Queue name="IK52.SITIMR" />
:
:
</WMQ>
:
:
<ICEXS name="ICE_GUI">
<msgrouter name="ICE_GUI_RTR1"/>
<msgrouter name="ICE_GUI_RTR2"/>
:
:
<station name="ICE_GUI_STN1"/>
<station name="ICE_GUI_STN2"/>
<station name="ICE_GUI_STN3"/>
:
:
<stationpool name="ICE_GUI_STNPL1"/>
<stationpool name="ICE_GUI_STNPL2"/>
:
:
</ICEXS>
<XPNETSystem name="ES82">
<NCPServerClass>SERVER-NCP</NCPServerClass>
<PathmonPPD>$RPMN</PathmonPPD>
<XPNETNode name="\OMA3T02.P1B^NODE">
<XPNETProcess name="P1B^EOPP" />
<XPNETProcess name="P1B^IS" />
<XPNETProcess name="P1B^XML" />
:
:
<XPNETQueue name="QueueName"
Type="Process|Station|Service|Dest|Internal|Unknown|External" />
:
:
<XPNETStation name="S1B^GUI1" />
<XPNETStation name="S1B^GUI2" />
<XPNETStation name="S1B^GUI3" />
:
:
</XPNETNode>
:
:
</XPNETSystem>
</configuration>
Required/optional elements
The following describes those elements that can or must be included in the template file for each
type of process. If an element is marked as optional, it can be included; if an element is not
marked as optional, it must be included.
Note: All other (nonprocess) MBeans require all of the elements in their respective
templates.
SISZProcess and SISUnixProcess
<CommandQueue>IK74.IS1</CommandQueue>
<DataPath>/aci/config/</DataPath>
<ConfigPath>/aci/config/</ConfigPath>
<MetadataType>mt</MetadataType>
<EnvPath>/aci/ESJMX/bin/pro_env_vars</EnvPath>
<ExecutablePath>/aci/lib/is.exe</ExecutablePath>
<InputQueue>IK74.IS</InputQueue>
<QueueManager>IK74.MANAGER</QueueManager>
<ModelQueueStub>IK74.IS1.SYNC</ModelQueueStub>
<Restartable>true</Restartable>
<ThreadCount>5</ThreadCount>
<TimerQueue>IK74.SITIMR</TimerQueue>
<ManageProcess>true</ManageProcess>
</SISUnixProcess >
.
.
.
<SISUnixProcess name="SITIMR">
<ApplicationId>ES</ApplicationId>
<CommandQueue>IK74.SITIMR1</CommandQueue>
<DataPath>/aci/config/</DataPath>
<ConfigPath>/aci/config/</ConfigPath>
<MetadataType>mt</MetadataType>
<EnvPath>/aci/ESJMX/bin/pro_env_vars</EnvPath>
<ExecutablePath>/aci/lib/sislib/sitimrp</ExecutablePath>
<InputQueue>IK74.SITIMR</InputQueue>
<QueueManager>IK74.MANAGER</QueueManager>
<ModelQueueStub>IK74.TIMR.SYNC</ModelQueueStub>
<Restartable>true</Restartable>
<ThreadCount>10</ThreadCount>
<TimerQueue>IK74.SITIMR</TimerQueue>
<ManageProcess>true</ManageProcess>
</SISUnixProcess >
<WMQ name="IK74.MANAGER">
<ClientChannel>SYSTEM.DEF.SVRCONN</ClientChannel>
<ClientHostname>localhost</ClientHostname>
<ClientPort>9932</ClientPort>
<Queue name="IK74.BOX1" />
<Queue name="IK74.BOX2" />
<Queue name="IK74.CMCP" />
<Queue name="IK74.CMCP1" />
<Queue name="IK74.EOPP" />
<Queue name="IK74.EOPP1" />
<Queue name="IK74.EVTINITQ" />
<Queue name="IK74.EVTLOG" />
<Queue name="IK74.GUI" />
<Queue name="IK74.IS" />
<Queue name="IK74.IS1" />
<Queue name="IK74.IS1.SYNC1" />
<Restartable>true</Restartable>
<Type>ICE-XS</Type>
</UnixProcess >
<ICEXS name="IK74_TSEC">
<msgrouter name="IK74_TSEC"/>
<station name="JDH1_TSEC"/>
</ICEXS>
</configuration>
In this section:
acijmx.jmx.server.domain
The domain name for the ACIJMX agent.
Required: Yes
Example Entry: acijmx.jmx.server.domain=JMK1_JMX
Example Entry: acijmx.jmx.server.domain=SIS1
Example Entry: acijmx.jmx.server.domain=JK92_JMX
acijmx.jmx.server.port
The ACIJMX agent backup server port number.
Required: Yes
Example Entry: acijmx.jmx.server.port=16029
Example Entry: acijmx.jmx.server.port=27087
Example Entry: acijmx.jmx.server.port=16012
acijmx.jmx.management.port
The ACIJMX agent management server port number to which processes must connect for
instrumenting components. Refer to “Configuring processes to instrument their own components
and services” for information about how processes are provided with this port number.
Required: Yes
Example Entry: acijmx.jmx.management.port=16029
Example Entry: acijmx.jmx.management.port=27087
Example Entry: acijmx.jmx.management.port=16012
acijmx.jmx.server.host
The server host name for the ACIJMX agent.
Required: Yes
Example Entry: acijmx.jmx.server.host=MFZ900ACWA.AM.TSACORP.COM (IBM System z)
Example Entry: acijmx.jmx.server.host=172.21.200.20 (HP NonStop)
Example Entry: acijmx.jmx.server.host=oma3s016 (UNIX)
Example Entry: acijmx.jmx.server.host=bol2iadweb (Windows)
acijmx.jmx.server.bootstrap
The fully qualified name of the mlet file used to bootstrap the ACIJMX agent.
Required: Yes
Example Entry: acijmx.jmx.server.bootstrap=file:/aci/ESJMX/config/acijmx.mlet
acijmx.jmx.install.path
The fully qualified directory in which the ACIJMX agent is installed.
Required: Yes
Example Entry: acijmx.jmx.install.path=/aci/ESJMX
appmgmt.mgmtsrv.port
The ACIJMX agent management server port number to which unmonitored AJI-based processes
must connect for instrumenting components. Alternatively, this port number can be provided in
the -Dmanagementport=nnnnn startup argument for an unmonitored AJI-based Java process.
Refer to “Configuring processes to instrument their own components and services” for information
about how unmonitored AJI-based Java processes are provided with this port number.
Required: No
Example Entry: appmgmt.mgmtsrv.port=16029
Example Entry: appmgmt.mgmtsrv.port=27087
Example Entry: appmgmt.mgmtsrv.port=16012
jmx.install.path
The fully qualified directory in which the JMX Jar files are installed (e.g., mx4j-jmx.jar, mx4j-
remote.jar, mx4j.jar, etc.).
Required: Yes
Example Entry: jmx.install.path=/aci/ESJMX/ThirdParty/lib
acijmx.jmx.store.path
The fully qualified directory in which the configuration for all resources managed by the ACIJMX
agent are stored.
Required: Yes
Example Entry: acijmx.jmx.store.path=/aci/ESJMX/store
acijmx.jmx.adaptor.config.url
The fully qualified URL to the adaptor definition file for the ACIJMX agent.
Required: Yes
Example Entry: acijmx.jmx.adaptor.config.url=file:/aci/ESJMX/config/adaptor.xml
acijmx.jmx.connector.config.url
The fully qualified URL to the connector definition file for the ACIJMX agent.
Required: No
Example Entry: acijmx.jmx.connector.config.url=file:/aci/ESJMX/config/connector.xml
acijmx.oncf.xpnet.system.xxxx.user.id
The Open Network Control Facility (ONCF) user ID to be used for an XPNET system, where xxxx is
the XPNET system name in all lower case. This property is only required when the agent is
installed on an HP NonStop platform.
To specify the ONCF user ID for your first XPNET system, edit the config.properties file as follows:
• Uncomment the line #acijmx.oncf.xpnet.system.xxxx.user.id=SUPER/SUPER and change the
user ID (on the right of the equals sign) to the appropriate value.
• Change the characters xxxx in the property name to the name of your XPNET system (4
characters). This must be specified in lower case.
For subsequent XPNET systems, add a new line to the file, specifying a property using the format
described above.
Required: No
Example Entry: acijmx.oncf.xpnet.system.pro1.user.id=PRO1/JOEUSER
acijmx.oncf.xpnet.system.xxxx.user.password
The Open Network Control Facility (ONCF) user ID password to be used for an XPNET system,
where xxxx is the XPNET system name in all lower case. This property is only required when the
agent is installed on an HP NonStop platform.
To specify the ONCF user ID password for your first XPNET system, edit the config.properties file
as follows:
• Uncomment the line #acijmx.oncf.xpnet.system.xxxx.password=placeholder and change the
password (on the right of the equals sign) to the appropriate value.
• Change the characters xxxx in the property name to the name of your XPNET system (4
characters). This must be specified in lower case.
For subsequent XPNET systems, add a new line to the file, specifying a property using the format
described above.
After editing the config.properties file, you need to run the ConfigPropertyBuilder password
encryption utility to encrypt the user password. All user password properties must be
encapsulated within start and end markers within the config.properties file. The start marker for
the block of user password properties to be encrypted is a comment line (comment lines start with
the “#” character) containing the text “Begin User Encrypted Values”. The end marker is another
comment line containing the text “End User Encrypted Values”. Examples of these comment lines
are shown below.
Refer to the BASE24-eps Java Server Reference Guide for information about using this encryption
utility.
Required: No
Example Entry: acijmx.oncf.xpnet.system.pro1.user.password=5b839e109f7ee03e (encrypted)
autoload.applcnfg
A true or false value determining whether the ACIJMX agent automatically loads the APPLCNFG
table at startup. If this value is set to true, the ACIJMX agent loads the APPLCNFG table at
startup. If this value is set to false, the ACIJMX agent does not load the APPLCNFG table at
startup.
Required: Yes
Example Entry: autoload.applcnfg=true
commshandler.list
The list of communications handlers supported by the ACIJMX agent. Currently, only the ICE-XS
process is supported on an IBM System z or UNIX platform. This property is not used when the
agent is installed on an HP NonStop or Windows platform.
Required: No
Example Entry: commshandler.list=com.aciworldwide.es.mgmt.comm.ice.ICECommsHandler
context.type
The type of context management the Context Manager performs. This property is always set to
DISK-WITH-CACHE for the ACIJMX agent. For additional information about this property, refer to
the BASE24-eps Java Server Reference Guide.
Required: Yes
Example Entry: context.type=DISK-WITH-CACHE
db.connection.wait.time
The number of milliseconds the Database Connection Manager waits for another thread to free a
database connection. This property value is used when the maximum number of connections has
been reached as specified in the db.max.connections property.
Required: Yes
Example Entry: db.connection.wait.time=1000
db.datasource
The data source URI specification that allows the JDBC driver to access the correct database. You
can typically find the configuration requirements for this property in the vendor documentation for
the JDBC driver. JDBC driver requirements may include information such as the host or IP address
where the database resides, the port to connect to for the database, the name of database on the
host, and other JDBC driver settings.
Required: Yes
db.driver
The class name of the JDBC driver to use for all database connections. Enter the entire package
name as it is found in the JAR containing the driver. Refer to the vendor documentation for the
JDBC driver for supporting information.
Required: Yes
Example Entry: db.driver=COM.ibm.db2.jdbc.app.DB2Driver
db.max.connections
The maximum number of concurrent database connections that the Database Connection Manager
(DBConnectionManager) can have open at one time.
Required: Yes
Example Entry: db.max.connections=10
db.sqlmp
A flag indicating whether the database used in the current JVM executing environment is NonStop
SQL/MP. Valid values are as follows:
true = Yes, the database is NonStop SQL/MP.
false = No, the database is not NonStop SQL/MP.
Required: No
Example Entry: db.sqlmp=false
db.static.connections
The number of connections the Database Connection Manager acquires when the Java server
process is started. These connections remain active throughout the life of the process.
Required: Yes
Example Entry: db.static.connections=1
db.type
The type of database being used in the current JVM executing environment. Valid values are as
follows:
Required: Yes
Example Entry: db.type=DB2
db.useisolationlevel
Indicates that the database services will automatically manipulate connection transaction isolation
levels. This should be set to true for Microsoft SQL Server and IBM’s DB2 databases. It should be
set to false for Oracle and HP NonStop SML/MP databases. When set to true, database access will
automatically be set to reduce database contention on queries where reading through locks is
valid.
Required: Yes
Example Entry: db.useisolationlevel=true
db.user.id
The JDBC user ID needed to authenticate a connection to the database. This user ID is used to
securely access the underlying database and is typically established by a database or system
administrator. ACI applications use this user ID to access the database.
Required: Yes
Example Entry: db.user.id=myuser
db.user.password
The JDBC password needed to authenticate a connection to the database. This user ID is used to
securely access the underlying database and is typically established by a database or system
administrator. For security, the password value stored in the config.properties file must be
encrypted using the password encryption utility provided by ACI.
Important: Cross-industry best practices recommends that you do not use vendor-supplied
default passwords, that you use passwords containing both numeric and alphabetic
characters with a minimum password length of at least seven characters, that you change
passwords at least every 90 days, and that a new password is not the same as any of the
last four passwords used.
Required: Yes
Example Entry: db.user.password=657e1f6fecea9ea8
enabled.cipher.suites
A comma delimited list of the cipher suites that should be enabled. You can obtain the list of valid
cipher suite names by executing the java class com.aciworldwide.framework.SSLUtils (sample list
output is provided below). The following is example syntax to invoke that class:
After you have configured the enabled.cipher.suites property with the list from the above
command, you can validate it by entering a command similar to the following:
The following is returned from the validate command if the configured cipher suites are
successfully validated:
TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
event.log4j.config.url
The fully qualified URI location of the log4j configuration file (EventConfig.xml) for logging event
messages For addition information about this property, refer to the BASE24-eps Java Server
Reference Guide.
Required: Yes
Example Entry: event.log4j.config.url=file:/aci/ESJMX/config/EventConfig.xml
process.id
The symbolic name assigned to a Java server process.
Required: Yes
Example Entry: process.id=PRD1^JMX
process.list
The list of the types of processes supported by the ACIJMX agent. This property is only used on an
IBM System z, UNIX, or Windows platform.
Required: No
Example Entry:
process.list=com.aciworldwide.es.mgmt.process.zos.ZProcess:com.aciworldwide.es.mgmt.process
.zos.SISZProcess:com.aciworldwide.es.mgmt.process.zos.JSFZProcess (IBM System z platform)
Example Entry:
process.list=com.aciworldwide.es.mgmt.process.unix.UnixProcess:com.aciworldwide.es.mgmt.pro
cess.unix.SISUnixProcess:com.aciworldwide.es.mgmt.process.unix.JSFUnixProcess (UNIX
platform)
Example Entry:
process.list=com.aciworldwide.es.mgmt.process.wnd.WndProcess:com.aciworldwide.es.mgmt.pro
cess.wnd.JSFWndProcess (Windows platform)
queuemanager.list
The list of queue managers supported by the ACIJMX agent. Currently, only the IBM Websphere
MQ Queue Manager is supported on an IBM System z or UNIX platform. This property is not used
when the agent is installed on an HP NonStop or Windows platform.
Required: No
Example Entry:
queuemanager.list=com.aciworldwide.es.mgmt.messaging.mq.WMQQueueManager
show.only.authorized.actions
A true or false value controlling authorization processing for user actions that require large-scale
lookups of MBean operations and attributes. This value controls the information returned to users
in an inital view of the operations and attributes to which they have access. Values are as follows:
true = Every operation and attribute for every MBean is authorized prior to returning the
operation or attribute. If a user is not authorized to execute an exposed operation,
that operation will not be returned. If a user is not authorized to view an exposed
attribute, the attribute value will be replaced with an “unauthorized view” message.
false = Every attribute is authorized, but all operations are returned regardless of whether
or not the user has permissions to execute them. Thus, on a user interface, users
would see all of the exposed operationseven if they did not have the necessary
permissions to perform them. This value can speed up the initial lookups, but it can
also display more operations than a user will have the necessary permissions to
perform.
SSL.debug
A flag indicating whether to log trace messages for Secure Sockets Layer (SSL) processing to the
standard out location (STDOUT). Valid values are as follows:
Note: The Trace facility was designed as a diagnostic tool for development and test
environments and not for general use in a production environment. ACI strongly
recommends that it not be used in a production environment due to the overhead and
impacts on performance.
Required: No
Example Entry: SSL.debug= false
SSL.server.keystore
The fully qualified pathname of the data source containing the keystore for Secure Sockets Layer
(SSL) server security.
Required: Yes, if SSL is being used
Example Entry: SSL.server.keystore=/aci/config/security/server.keystore.key
SSL.server.keystore.password
The password required to access the SSL keystore for server security. For security, the password
value stored in the config.properties file must be encrypted using the password encryption utility
provided by ACI.
Important: Cross-industry best practices recommends that you do not use vendor-supplied
default passwords, that you use passwords containing both numeric and alphabetic
characters with a minimum password length of at least seven characters, that you change
passwords at least every 90 days, and that a new password is not the same as any of the
last four passwords used.
Required: Yes, if SSL is being used
Example Entry: SSL.server.keystore. password=512bb47f6f7206e90d0d440da775982b
SSL.server.truststore
The fully qualified pathname of the data source containing the truststore for Secure Sockets Layer
(SSL) server security.
A truststore is a keystore that is used when making decisions about who to trust. If you receive
some data from an entity that you already trust, and if you can verify that the entity is the one it
claims to be, then you can assume that the data really came from that entity.
Required: Yes, if SSL is being used
Example Entry: SSL.server.truststore=/aci/config/security/server.truststore.
SSL.server.truststore.password
The password required to access the SSL truststore for server security. For security, the password
value stored in the config.properties file must be encrypted using the password encryption utility
provided by ACI.
Important: Cross-industry best practices recommends that you do not use vendor-supplied
default passwords, that you use passwords containing both numeric and alphabetic
characters with a minimum password length of at least seven characters, that you change
passwords at least every 90 days, and that a new password is not the same as any of the
last four passwords used.
Required: Yes, if SSL is being used
Example Entry: SSL.server.truststore.password=7c84e738ea20b628fd407625f148bfb2
trace.enabled
A flag indicating whether trace messages are enabled for components or services executing in the
ACIJMX agent. Message tracing is configured in the configuration file specified by the
trace.log4j.config.url property. Valid values are as follows:
Note: The Trace facility was designed as a diagnostic tool for development and test
environments and not for general use in a production environment. ACI strongly
recommends that it not be used in a production environment due to the overhead and
impacts on performance. For addition information about this property, refer to the BASE24-
eps Java Server Reference Guide.
trace.log4j.config.url
The fully qualified URI location of the log4j configuration file for logging trace messages. For
addition information about this property, refer to the BASE24-eps Java Server Reference Guide.
Required: Yes
Example Entry: trace.log4j.config.url=file:/aci/ESJMX/config/TraceConfig.xml
process.id=IK92_JMX
event.log4j.config.url=file:/aci/ESJMX/config/EventConfig.xml
trace.log4j.config.url=file:/aci/ESJMX/config/TraceConfig.xml
trace.enabled=false
acijmx.jmx.server.domain=IK92_JMX
acijmx.jmx.server.port=24573
acijmx.jmx.management.port=24574
acijmx.jmx.server.bootstrap=file:/aci/ESJMX/config/acijmx.mlet
acijmx.jmx.server.host=oma3s031
acijmx.jmx.install.path=/aci/ESJMX
jmx.install.path=/aci/ESJMX/ThirdParty/lib
acijmx.jmx.store.path=/aci/ESJMX/store
show.only.authorized.actions=false
autoload.applcnfg=true
context.type=DISK-WITH-CACHE
acijmx.jmx.adaptor.config.url=file:/aci/ESJMX/config/adaptor.xml
#
# Database {user ID} and {password}.
# {user id} = user ID for application access to the database
# {password} = corresponding password for the user ID. If a db.user.password
# value is specified, it must be encrypted.
#
db.user.id=ADMIN
db.user.password=
HP NonStop
The following is an example config.properties file for the ACIJMX agent installed on an HP NonStop
platform.
process.id=BC91
event.log4j.config.url=file:/aci/ESJMX/config/EventConfig.xml
trace.log4j.config.url=file:/aci/ESJMX/config/TraceConfig.xml
trace.enabled=false
acijmx.jmx.server.domain=BC91
acijmx.jmx.server.port=20727
#acijmx.jmx.management.port=20729
acijmx.jmx.server.bootstrap=file:/aci/ESJMX/config/acijmx.mlet
acijmx.jmx.server.host=172.19.66.18
acijmx.jmx.install.path=/aci/ESJMX
jmx.install.path=/aci/ESJMX/ThirdParty/lib
acijmx.jmx.store.path=/aci/ESJMX/store
show.only.authorized.actions=false
autoload.applcnfg=true
context.type=DISK-WITH-CACHE
acijmx.jmx.adaptor.config.url=file:/aci/ESJMX/config/adaptor.xml
#acijmx.oncf.xpnet.system.xxxx.user.id=SUPER/SUPER
#######################################################################
#
# The following section of the file is a place holder where user
# properties to be encrypted may be placed.
#
# It is critical that the section begin with "Begin User Encrypted
# Values" and end with "End User Encrypted Values".
#
#######################################################################
##### Begin User Encrypted Values #####################################
#acijmx.oncf.xpnet.system.xxxx.user.password=placeholder
##### End User Encrypted Values #######################################
#
# Database {user ID} and {password}.
# {user id} = user ID for application access to the database
# {password} = corresponding password for the user ID. If a db.user.password
# value is specified, it must be encrypted.
#
db.user.id=pserve
db.user.password=c67834a7b2e28c4e
#
# Database JDBC driver specification. Ths should be set according to
# the JDBC driver requirements and may include information such as:
# - host or IP address where database resides
# - port to connect to for database
# - name of database on the host
# - other JDBC driver settings. Consult the JDBC driver vendor
# documentation regarding other options.
#
# Example:
# db.datasource=jdbc:JDAL:-MDBV=CSV:-AI=ES:-STRT=/G/config/ui6sdata
#
db.datasource=jdbc:JDAL://172.19.66.18:20726
#
# Database static connections. This defines the number of database
# connections to acquire when initializing.
#
db.static.connections=1
#
# Database maximum connections.
#
db.max.connections=10
#
# Database connection wait time. This defines the amount of time
# in milliseconds to wait for another thread to free a Database
# connection in the Database Connection Manager. This is used when
# the maximum number of Database connections has been acquired as
# specified in the db.max.connections property.
#
db.connection.wait.time=1000
#
# Database isolation level. This indicates if the Database services
# should automatically manipulate connection transaction isolatoin levels.
# This should be set to true for Microsoft SQL Server and IBM's DB2
# databases. It should be set to false for Oracle and Tandem SML/MP
# databases. When set to true, database access will automatically be
# set to reduce database contention on queries where reading through
# locks is valid.
#
db.useisolationlevel=true
#
# Datbase driver specification. This set of properties specifies the
# class name of the JDBC driver to use for all database connections.
# This must contain fully-qualified class name including the package
# name as supplied by the vendor.
#
db.driver=com.aciworldwide.jdbcdriver.jdal.JDALDriver
db.type=JDAL
#
# The pathname of the data source containing the key store for
# SSL server security
#
SSL.server.keystore=/aci/ESJMX/config/server.keystore.key
#
# The password(encrypted) required to access the SSL key store
#
SSL.server.keystore.password=
\u0031\u0061\u0035\u0031\u0036\u0063\u0035\u0062\u0036\u0035\u0035\u0066\u0032\u003
1\u0035\u0035
# Non-Unicode: SSL.server.keystore.password=1a516c5b655f2155
#
# The pathname of the data source containing the trust store for
# SSL server security
#
#
SSL.server.truststore=/aci/ESJMX/config/server.truststore.key
#
# The password(encrypted) required to access the SSL trust store
#
SSL.server.truststore.password=
\u0062\u0030\u0039\u0035\u0033\u0062\u0032\u0066\u0063\u0036\u0066\u0065\u0030\u003
7\u0064\u0039\u0061\u0038\u0061\u0036\u0030\u0039\u0037\u0033\u0064\u0035\u0061\u00
66\u0064\u0061\u0034\u0063
# Non-Unicode: SSL.server.truststore.password=b0953b2fc6fe07d9a8a60973d5afda4c
#
# A flag indicating whether to log messages to the stdout location
# for SSL processing. Values are:
# all = Yes, log trace messages for Sun implementations.
# true = Yes, log trace messages for IBM implementations.
# false = No, do not log trace messages.
#
SSL.debug=false
ajmf.audited.attrsave A true or false value specifying whether attribute save functions are to
be audited for the ACIJMX agent. True specifies the functions are to be
audited; false specifies the functions are not to be audited. The default
is yes.
Required: No
ajmf.audited.attrview A true or false value specifying whether attribute view functions are to
be audited for the ACIJMX agent. True specifies the functions are to be
audited; false specifies the functions are not to be audited. The default
is yes.
Required: No
ajmf.audited.mbs A true or false value specifying whether MBean Server functions are to
be audited for the ACIJMX agent. True specifies the functions are to be
audited; false specifies the functions are not to be audited. The default
is yes.
Required: No
Required: No
ci.properties file
The following properties are configured in the ci.properties file. The ci.properties file resides in the
<ACIJMX_BASE>\config directory and is read by the runscript and runacijmxci scripts to acquire
the properties they need for processing.
appmgmt.ci.adapter.host The name of the remote host (name or IP address) where the CI
adaptor is executing.
Required: Yes
Required: Yes
Required: Yes
SSL.client.keystore The fully qualified pathname of the data source containing the
keystore for Secure Sockets Layer (SSL) client security.
SSL.client.keystore.password The password required to access the SSL keystore for client
security. For security, the password value must be encrypted
using the password encryption utility provided by ACI.
Important: Cross-industry best practices recommends
that you do not use vendor-supplied default passwords,
that you use passwords containing both numeric and
alphabetic characters with a minimum password length of
at least seven characters, that you change passwords at
least every 90 days, and that a new password is not the
same as any of the last four passwords used.
Required: Yes, if two-way SSL is used.
SSL.client.truststore The fully qualified pathname of the data source containing the
truststore for Secure Sockets Layer (SSL) client security. A
truststore is a keystore that is used when making decisions about
who to trust. If you receive some data from an entity that you
already trust, and if you can verify that the entity is the one it
claims to be, then you can assume that the data really came from
that entity.
SSL.client.truststore.password The password required to access the SSL truststore for client
security. For security, the password value must be encrypted
using the password encryption utility provided by ACI.
Important: Cross-industry best practices recommends
that you do not use vendor-supplied default passwords,
that you use passwords containing both numeric and
alphabetic characters with a minimum password length of
at least seven characters, that you change passwords at
least every 90 days, and that a new password is not the
same as any of the last four passwords used.
Required: Yes, if one- or two-way SSL is used.
Example Entry:
SSL.client.truststore.password=209f4r9ahe6c12ooo4608a5
acijmx.policy file
The acijmx.policy file sets permissions for the ACIJMX jar files. It resides in the <ACIJMX_BASE>
\config directory. The acijmx.policy file grants only the permissions shown in this excerpt to script
Executor jar files. All other jar files are granted java.security.AllPermission permission.
Note: Scripts can be written to perform any number of functions, which can include actions
such as deleting files or even stopping the agent itself. The policy file places some basic
limitations on the scripting actions that can be carried out by the ACIJMX agent. Note that
even with these policy limitations in place, it is still very important to carefully review any
scripts that you plan to launch through the ACIJMX agent.
grant codeBase "file:<ESJMXHOME>/ThirdParty/lib/jython.jar" {
permission java.io.FilePermission "<<ALL FILES>>",
"read,write,execute,delete";
permission java.util.PropertyPermission "*", "read,write";
permission java.lang.RuntimePermission "createClassLoader";
permission java.lang.RuntimePermission "getClassLoader";
permission java.lang.RuntimePermission "getProtectionDomain";
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.RuntimePermission "setIO";
permission java.lang.RuntimePermission "loadLibrary.*";
permission javax.management.MBeanPermission "*", "*";
permission javax.management.MBeanTrustPermission "*";
permission java.net.SocketPermission "*", "listen, accept, connect,
resolve";
};
Sample ACI desktop or APF admin browser and command line interface adaptor
The following sample adaptor.xml file defines the connections for the ACI desktop or APF Admin
browser user interface and ACIJMX command interpreter interface.
Communication settings default to one-way SSL transport security (server authentication).
Customers can disable one-way SSL or change it to two-way SSL (mutual authentication) if they
choose—making these modifications requires changes to the highlighted portions of the file.
classname="com.aciworldwide.es.mgmt.remote.ssl.SSLAdaptorServerSocketFactory">
<arg type="boolean">false</arg>
</new>
</arg>
</call>
<call objectname="Server:name=CIHttpAdaptor" operation="start"/>
</startup>
</configuration>
<call objectname="Server:name=CUBSHttpAdaptor"
attribute="SocketFactory">
<arg type="mx4j.tools.adaptor.AdaptorServerSocketFactory">
<new
classname="com.aciworldwide.es.mgmt.remote.ssl.SSLAdaptorServerSocketFactory">
<arg type="boolean">false</arg>
</new>
</arg>
</call>
2. Make the following changes for the APPLICATION-MGMT external connection in the External
Connection table.
a. Change the protocol options setting from “.SSL.” to “.”
b. Change the protocol scheme in the URL specified for the destination IP address from
“https” to “http” (e.g., from https://.... to http://...) Note that there is no need to change
the IP address portion of the URL.
Note: From the ACI desktop user interface, these values are set in the Protocol
Options and Destination IP Address fields on the Protocol Details tab of the
External Connection Configuration window (System Operations > Server
Management > External Connection).
From the APF Admin browser, these values are set in the Protocol Options List and
Destination IP Address fields on the Edit External Connection page (Operations
Configuration > AJI Processes > External Connections).
APPLICATION-MGMT must be specified in the External Connection ID field on this
window or page.
classname="com.aciworldwide.es.mgmt.remote.ssl.SSLAdaptorServerSocketFactory">
<arg type="boolean">false</arg>
</new>
</arg>
</call>
2. Change the appmgmt.ci.adapter.protocol property in the ci.properties file from https to http.
<call objectname="Server:name=CUBSHttpAdaptor"
attribute="SocketFactory">
<arg type="mx4j.tools.adaptor.AdaptorServerSocketFactory">
<new
classname="com.aciworldwide.es.mgmt.remote.ssl.SSLAdaptorServerSocketFactory">
<arg type="boolean">true</arg>
</new>
</arg>
</call>
2. Create the client key store file ($ES_HOME/ESWeb/ESConfig/eswebclient.keystore.key) for
the ESWeb process using the Java keytool command.
3. Add the ESWeb client keystore certificate to the ACIJMX server truststore file.
4. Add the following two properties to the $ES_HOME/ESWeb/ESConfig/config.properties file for
the ESWeb process and set those properties with the ESWeb keystore file and encrypted
password.
SSL.client.keystore=
SSL.client.keystore.password=
Passwords must be encrypted using the ConfigPropertyBuilder Password Encryption utility.
Refer to the BASE24-eps Java Server Reference Guide for information about using this
encryption utility.
5. Restart the ACIJMX server and ESWeb process.
classname="com.aciworldwide.es.mgmt.remote.ssl.SSLAdaptorServerSocketFactory">
<arg type="boolean">true</arg>
</new>
</arg>
</call>
2. Create the client key store file ($ACIJMX_BASE/config/client.keystore.key) for the ACIJMX
command interpreter interface process using the Java keytool command.
3. Add the ACIJMX command interpreter interface process (CI) keystore certificate to the
ACIJMX server truststore file.
4. Uncomment the following two properties in the ci.properties file (in the
<ACIJMX_BASE>\config directory) file and set those properties with the CI keystore file and
encrypted password.
SSL.client.keystore=
SSL.client.keystore.password=
Passwords must be encrypted using the ConfigPropertyBuilder Password Encryption utility.
Refer to the BASE24-eps Java Server Reference Guide for information about using this
encryption utility.
5. Restart the ACIJMX server.
Syntax
...
Examples
Creates a new connector.xml file containing four types of connectors. The ports
used are numbered 25751, 25752, 25753, and 25754.
Creates a new connector.xml file defining an RMI connector for port 25751 and a
JMXMP connector for port 25754. The sample connector.xml file below is produced
from this example.
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">jmx.remote.rmi.server.socket.factory</arg>
</new>
</arg>
<arg type="java.lang.Object">
<new
classname="com.aciworldwide.es.mgmt.remote.ssl.SSLRMIServerSocketFactory">
<arg type="Boolean">true</arg>
</new>
</arg>
</call>
<call method="put" refobjectid="envrmi25751">
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">jmx.remote.rmi.client.socket.factory</arg>
</new>
</arg>
<arg type="java.lang.Object">
<new classname="mx4j.tools.remote.rmi.SSLRMIClientSocketFactory" />
</arg>
</call>
<object objectid="rmi25751">
<call classname="javax.management.remote.JMXConnectorServerFactory"
method="newJMXConnectorServer">
<arg type="javax.management.remote.JMXServiceURL">
<new classname="javax.management.remote.JMXServiceURL">
<arg type="string">service:jmx:rmi://localhost/jndi/rmi://localhost:
25751/appmgmt</arg>
</new>
</arg>
<arg type="java.util.Map" refobjectid="envrmi25751" />
<arg type="javax.management.MBeanServer" />
</call>
</object>
<register objectname="connectors:type=rmi,protocol=jrmp,port=25751">
<arg type="object" refobjectid="rmi25751" />
</register>
<call method="start" refobjectid="rmi25751" />
<object objectid="envjmxmp25754">
<new classname="java.util.HashMap" />
</object>
<call method="put" refobjectid="envjmxmp25754">
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">jmx.remote.profiles</arg>
</new>
</arg>
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">TLS SASL/PLAIN</arg>
</new>
</arg>
</call>
<call method="put" refobjectid="envjmxmp25754">
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">jmx.remote.tls.need.client.authentication</
arg>
</new>
</arg>
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">true</arg>
</new>
</arg>
</call>
<object objectid="authid25754">
<new classname="com.aciworldwide.es.mgmt.remote.ACIJMXAuthenticator" />
</object>
<call method="put" refobjectid="envjmxmp25754">
<arg type="java.lang.Object">
<new classname="java.lang.String">
<arg type="java.lang.String">jmx.remote.authenticator</arg>
</new>
</arg>
<arg type="java.lang.Object" refobjectid="authid25754" />
</call>
<call classname="java.security.Security" method="addProvider">
<arg type="java.security.Provider">
<new
classname="com.aciworldwide.es.mgmt.remote.sasl.PlainServerProvider" />
</arg>
</call>
<object objectid="jmxmp25754">
<call classname="javax.management.remote.JMXConnectorServerFactory"
method="newJMXConnectorServer">
<arg type="javax.management.remote.JMXServiceURL">
<new classname="javax.management.remote.JMXServiceURL">
<arg type="string">service:jmx:jmxmp://localhost:25754</arg>
</new>
</arg>
<arg type="java.util.Map" refobjectid="envjmxmp25754" />
<arg type="javax.management.MBeanServer" />
</call>
</object>
<register objectname="connectors:type=tcpip,protocol=jmxmp,port=25754">
<arg type="object" refobjectid="jmxmp25754" />
</register>
<call method="setMBeanServerForwarder" refobjectid="jmxmp25754">
<arg type="javax.management.remote.MBeanServerForwarder">
<call classname="com.aciworldwide.es.mgmt.ACIJMXMBeanServerForwarder"
method="newProxyInstance">
<arg type="com.aciworldwide.es.mgmt.remote.ACIJMXAuthenticator"
refobjectid="authid25754" />
<arg type="string">connectors:type=tcpip,protocol=jmxmp,port=25754</arg>
</call>
</arg>
</call>
<call method="start" refobjectid="jmxmp25754" />
</startup>
<shutdown>
<call method="stop" refobjectid="rmi25751" />
<call objectname="naming:type=rmiregistry,port=25751" operation="stop" />
<unregister objectname="connectors:type=rmi,protocol=jrmp,port=25751" />
<unregister objectname="naming:type=rmiregistry,port=25751" />
</shutdown>
<shutdown>
<call method="stop" refobjectid="rmi25754" />
<call objectname="naming:type=rmiregistry,port=25754" operation="stop" />
<unregister objectname="connectors:type=rmi,protocol=jrmp,port=25754" />
<unregister objectname="naming:type=rmiregistry,port=25754" />
</shutdown>
</configuration>
attribute is set to true, the ACIJMX agent automatically appends a startup argument when it starts
the process—using the port number specified in the acijmx.jmx.management.port application
property. The form of the startup argument is as follows, where nnnnn is the port number. If the
process is not monitored, you must manually enter this argument when starting the process or
you must configure the port number in the appmgmt.mgmtsrv.port property in the APPLCNFG (for
AJI-based processes only).
HP NonStop platform
To enable a BASE24-eps IS process to connect to the ACIJMX agent, the XPNET configuration for
the IS process needs to be altered to have the -MANAGEMENTPORT=nnnnn argument configured
in the PROCESS STARTOPTIONS attribute for the PROCESS object in the XPNET Network
Environment File (NEF). The port number specified should match the port number that was in the
acijmx.jmx.management.port property in the config.properties file.
If the process has already been configured in the NEF, you can use the ALTER PROCESS network
control command to alter the STARTOPTIONS value for the process to include the -
MANAGEMENTPORT argument as shown below:
If the IS process has not yet been configured in the NEF, you can use the SET PROCESS network
control command to configure the STARTOPTIONS value for the process to include the -
MANAGEMENTPORT argument and the ADD PROCESS command to add it to the NEF as shown
below:
myclass.h
#ifndef MYCLASS_H
#define MYCLASS_H
#include <siint.h>
class myclass
{
public:
myclass (void);
~myclass (void);
static sis_int::int16 myint16_get (void);
static void myint16_set (const sis_int::int16 &val);
private:
static sis_int::int16 myint16_;
};
myclass.cpp
#include <myclass.h>
sis_int::int16 myclass::myint16_;
myclass::myclass (void)
{}
myclass::~myclass (void)
{}
sis_int::int16 myclass::myint16_get (void)
{return myint16_}
void myclass::myint16_set (const sis_int::int16 &val)
{myint16_ = val}
The next example shows you how this sample myclass could be converted to a managed
component. Modifications are highlighted in blue text.
myclass.h
#ifndef MYCLASS_H
#define MYCLASS_H
#include <siint.h>
6. Add the MQ prefix for your system in the mq_prefix param in the SETUPINI file. Edit the
SETUPINI file, locate the “MQ Configuration Type (single/cluster)” comment, and add
“mq_prefix=value of System_prefix param”:
Example :
==
== MQ Configuration Type (single/cluster)
==
mq_prefix=SU74
mq_conf_type=single
7. Update the JAVA_HOME and JAVABIN environment variables. JMX 8.2 uses Java 5, as
opposed to JMX 7.4, which uses Java 1.4. Therefore, the JAVA_HOME and JAVABIN
environment variables must be updated in the $BIN/env_vars file to point to the Java 5
location (e.g., /usr/java5 and /usr/java5/bin):
a. JAVA_HOME=/usr/java5
b. JAVABIN=/usr/java5/bin
c. Reload the env_vars file:
1) cd $BIN
2) . ./env_vars
3) echo $JAVA_HOME
4) echo $JAVABIN
8. Modify the SETUPINI and essetup files.
a. cd $ESHOME/install
b. Edit SETUPINI file and modify the mq_prefix value with the value of system_prefix, which
is present in the same file.
c. Edit the essetup file
From:
To:
c. echo $ACIJMX_BASE
Verify that the path is the same as $ES_HOME/ESJMX path. If the path is “/user/acijmx”,
continue with step d. Otherwise, skip to step 10.
d. cd $ESHOME/ESJMX/bin
e. . ./acijmx_env_vars
f. echo $ACIJMX_BASE and check the path is proper path of $ES_HOME/ESJMX
10. Run the ACIJMX agent from the ESJMX folder.
a. cd $ESHOME/$ESJMX
b. ./runacijmx
Verify that the “Application Management Server started” message is displayed.
The existing Application Management configuration will not be reset because runxacijmxboot is
commented out in the essetupfile.
Important: Industry security best practices dictate that you should not fall back to SSL or
an earlier version of TLS once you have implemented a TLS 1.2 connection either through
manual configuration or by running an automated installation script.
This procedure assumes that BASE24-eps 2.1.2 is installed in /user/<lgnt>/<prfx> under OSS
with NSJ7.
1. Modify the RunESWebTacl and RunESWeb files in the /user/<lgnt>oss/<prfx>/ESWeb
directory to add the TLS 1.2 configuration. The RunESWebTacl file is executed when you start
ESWeb from TACL and the RunESWeb file is executed when you start ESWeb from OSS. Add
the JVM property https.protocols in the run command near the end of each file, as depicted
with the underlined text.
set INST_DIR=$USER_INSTALL_DIR$
set "JAVA_HOME=$UI_LOC_JAVA$"
set CATALINA_HOME=%INST_DIR%\ESWeb\aci-tomcat
set CATALINA_BASE=%INST_DIR%\ESWeb\aci-tomcat
set JAVA_OPTS=-Dconfig.filename="%INST_DIR%\ESWeb\ESConfig\config.properties" -
Dfile.encoding=ISO8859-1 -Dsun.jnu.encoding=ISO8859-1 -
Dhttps.protocols=TLSv1.2 -Dprocess.id=BASE24-ESUI -Droot.config="%INST_DIR%
\ESWeb\ESConfig" -Dhttps.protocols=TLSv1.2 -Dconfig.home="%INST_DIR%\ESWeb
\ESConfig" -Dreports.home="%INST_DIR%\ESWeb\ESLogs" -DSCH=true -
DAuditService=com.aciworldwide.application.audit.UAUDManager -
DSecurityServerService=com.aciworldwide.application.security.USECManager -
DFrameworkService=com.aciworldwide.application.security.USECManager -
Djdal.trace=false -Djdal.trace.method=false -
Djava.security.auth.policy="%INST_DIR%\ESWeb\ESConfig\security
\jsf_java.policy" -Djava.security.auth.login.config="%INST_DIR%\ESWeb\ESConfig
\security\jsf_jaas.config" -Dorg.apache.el.parser.COERCE_TO_ZERO=false -
DBSICONTEXT="$USER_INSTALL_DIR$\ESWeb\ESConfig\bsicontext.xml" -
DstaticRegistryConfigFile="$USER_INSTALL_DIR$\ESWeb\ESConfig
\staticRegistryConfig.xml"
startup.bat
2. Restart the ESWEB server and ACIJMX agent applications.
3. Log on to the ACI desktop user interface and open the Application Management window
(accessed from System Operations > Application Management > Application
Management) to establish the TLS 1.2 connection between the ESWEB server and the
ACIJMX agent.
If the Application Management window opens successfully, the TLS 1.2 configuration is
correct. If it does not open successfully, verify the configuration in the steps above.
-Dhttps.protocols=TLSv1.2 -Djavax.net.debug=all
You must add them on the Control, Servant, and Adjunct displays under Process definition as
shown in the following examples. After adding them, click the Apply button and then ‘Save
directly to the master configuration’.
Note: This is the equivalent to the ‘JAVA_OPTS’ statement of the startesweb.bat file
used with Apache Tomcat.
In the following examples, "ES_QZ25" is the name of the LPAR on which WAS is deployed.
Servers > Server Types > WebSphere application servers > ES_QZ25 > Server
Infrastructure > Java and Process Management > Process definition > Control >
Additional Properties > Java Virtual Machine
Servers > Server Types > WebSphere application servers > ES_QZ25 > Server
Infrastructure > Java and Process Management > Process definition > Servant >
Additional Properties > Java Virtual Machine
Note: The "-Djavax.net.debug=all" property is only needed for tracing and should not
be included in production.
Servers > Server Types > WebSphere application servers > ES_QZ25 > Server
Infrastructure > Java and Process Management > Process definition > Adjunct >
Additional Properties > Java Virtual Machine
com.ibm.ssl.protocol=TLSv1.2
Note: ACI recommends that you transfer the ssl.client.props file as binary to your local
workstation, perform the change, and copy it back. This step is also a pre-installation
step for both UNIX and IBM System z platforms so it may already be completed for
recent installations. Refer to the BASE24-eps (R2.1) UNIX Pre-Install Checklist and
Worksheet and BASE24-eps (R2.1) zOS Pre-Install Checklist and Worksheet for more
information.
3. Restart the JMX agent, ESWEB server (Application Server instance), and WAS.
4. Log on to the ACI desktop user interface and open the Application Management window
(accessed from System Operations > Application Management > Application
Management) to establish the TLS 1.2 connection between the ESWEB server and the
ACIJMX agent.
If the Application Management window opens successfully, the TLS 1.2 configuration is
correct. If it does not open successfully, verify the configuration in the steps above.
5. Verify that TLS 1.2 handshake calls are logged in the $ESJMX/logs/ ACIJMX.stdout file.
6. Because content is added at the end of the ACIJMX.stdout file, you may want to run the
command “tail -f ACIJMX.stdout” to monitor the file before opening the Application
Management window.
In this section:
JCL job
<PDSHLQ>.<SYSTEMPRFIX>.JCL(RACIJMX)
Example: TSOJMKA.JMK4.JCL(RACIJMX)
JCL job
<PDSHLQ>.<SYSTEMPRFIX>.JCL(CACIJMX)
Example: TSOJMKA.JMK4.JCL(CACIJMX)
$ > . acijmx_env_vars
4. Run the runacijmx script.
$ >./runacijmx
5. The following response is returned if the startup is successful.
$ > . acijmx_env_vars
4. Run the stopacijmx script.
$ >./stopacijmx
$ > . acijmx_env_vars.bat
4. Run the runacijmx script.
$ >./runacijmx.bat
5. The following response is returned if the startup is successful.
Perform the following steps to start the ACIJMX agent Windows service if you have configured
the agent to run as a Windows service.
Otherwise, kill the window used to start the agent from the runacijmx script or kill the agent
from the Task Manager.
In this section:
ProcessManager
ZProcess
<Zprocess 1 sym-name>
<Zprocess 2 sym-name>
JSFZProcess
<JSFprocess 1 sym-name>
<JSFprocess 2 sym-name>
SISZProcess
<SISprocess 1 sym-name>
<SISprocess 2 sym-name>
<SISprocess 3 sym-name>
Grouping levels appear in the Detail window and Management Console browser page as a means
for organizing managed resources. In this example, the italicized red entries are simply grouping
levels shown for the purpose of organizing the managed objects—the default names used for
these grouping levels are names of the corresponding MBeans and can be changed.
The ProcessManager and individual process entries represent actual managed objects in the
system. They have corresponding MBeans that expose their own attributes and operations—which
you would be able to see if you clicked on them on the Detail window or Management Console
browser page.
...
<descriptor>
<field name="log" value="false"/>
<field name="visibility" value="2"/>
<field name="descriptortype" value="mbean"/>
<field name="displayname" value="SISZProcess"/>
<field name="export" value="F"/>
<field name="currencytimelimit" value="-1"/>
<field name="name" value="SISZProcess"/>
<field name="persistpolicy" value="OnUpdate"/>
</descriptor>
...
You need to insert a hierarchy field as shown in red in the example below. There are a number of
options you can use with the hierarchy field to tailor organization and grouping labels.
...
<descriptor>
<field name="log" value="false"/>
<field name="visibility" value="2"/>
<field name="descriptortype" value="mbean"/>
<field name="displayname" value="SISZProcess"/>
<field name="export" value="F"/>
<field name="currencytimelimit" value="-1"/>
<field name="name" value="SISZProcess"/>
<field name="persistpolicy" value="OnUpdate"/>
<field name="hierarchy" value="{[Type]}"/>
</descriptor>
...
ProcessManager
SISZProcess
<Process 1 sym-name>
<Process 2 sym-name>
<Process 3 sym-name>
<Process 4 sym-name>
<Process 5 sym-name>
<Process 6 sym-name>
<Process 7 sym-name>
<Process 8 sym-name>
<Process 9 sym-name>
To organize processes using the type attribute, you must modify the corresponding MBean
descriptor file. In this case, the SISZProcess-descriptor.xml file would be modified as follows.
...
<descriptor>
<field name="log" value="false"/>
<field name="visibility" value="2"/>
<field name="descriptortype" value="mbean"/>
<field name="displayname" value="SISZProcess"/>
<field name="export" value="F"/>
<field name="currencytimelimit" value="-1"/>
You would also need to modify the type attribute for each of the process resources. In the
following example, the type attributes for processes 1–3 would be set to Group A, the type
attributes for processes 5–6 would be set to Group B, the type attributes for processes 7–9 would
be set to Group C.
Before After
ProcessManager ProcessManager
SISZProcess Group A
<Process 1 sym-name> <Process 1 sym-name>
<Process 2 sym-name> <Process 2 sym-name>
<Process 3 sym-name> <Process 3 sym-name>
<Process 4 sym-name> Group B
<Process 5 sym-name> <Process 4 sym-name>
<Process 6 sym-name> <Process 5 sym-name>
<Process 7 sym-name> <Process 6 sym-name>
<Process 8 sym-name> Group C
<Process 9 sym-name> <Process 7 sym-name>
<Process 8 sym-name>
<Process 9 sym-name>
To modify the text used in the group level but not change the basic sorting, you would only need
to modify the corresponding MBean descriptor file. In this case, the SISZProcess-descriptor.xml
file could be modified as follows.
...
<descriptor>
<field name="log" value="false"/>
<field name="visibility" value="2"/>
<field name="descriptortype" value="mbean"/>
<field name="displayname" value="SISZProcess"/>
<field name="export" value="F"/>
<field name="currencytimelimit" value="-1"/>
<field name="name" value="SISZProcess"/>
<field name="persistpolicy" value="OnUpdate"/>
<field name="hierarchy" value="{EPS Processes}"/>
</descriptor>
...
In this case, no attribute changes would be required and the results would look similar to the
following:
Before After
ProcessManager ProcessManager
SISZProcess EPS Processes
<Process 1 sym-name> <Process 1 sym-name>
<Process 2 sym-name> <Process 2 sym-name>
<Process 3 sym-name> <Process 3 sym-name>
<Process 4 sym-name> <Process 4 sym-name>
<Process 5 sym-name> <Process 5 sym-name>
<Process 6 sym-name> <Process 6 sym-name>
<Process 7 sym-name> <Process 7 sym-name>
<Process 8 sym-name> <Process 8 sym-name>
<Process 9 sym-name> <Process 9 sym-name>
...
<descriptor>
<field name="log" value="false"/>
<field name="visibility" value="2"/>
<field name="descriptortype" value="mbean"/>
<field name="displayname" value="SISZProcess"/>
<field name="export" value="F"/>
<field name="currencytimelimit" value="-1"/>
<field name="name" value="SISZProcess"/>
<field name="persistpolicy" value="OnUpdate"/>
<field name="hierarchy" value="{EPS Processes},{[Type]}"/>
</descriptor>
...
You would also need to modify the type attribute for each of the process resources. In the
following example, the type attributes for processes 1–3 would be set to Group A, the type
attributes for processes 5–6 would be set to Group B, the type attributes for processes 7–9 would
be set to Group C.
Before After
ProcessManager ProcessManager
SISZProcess EPS Processes
<Process 1 sym-name> Group A
<Process 2 sym-name> <Process 1 sym-name>
<Process 3 sym-name> <Process 2 sym-name>
<Process 4 sym-name> <Process 3 sym-name>
<Process 5 sym-name> Group B
<Process 6 sym-name> <Process 4 sym-name>
Before After
...
<descriptor>
<field name="log" value="false"/>
<field name="visibility" value="2"/>
<field name="descriptortype" value="mbean"/>
<field name="displayname" value="SISZProcess"/>
<field name="export" value="F"/>
<field name="currencytimelimit" value="-1"/>
<field name="name" value="SISZProcess"/>
<field name="persistpolicy" value="OnUpdate"/>
<field name="hierarchy" value="{EPS Processes: [Type]}"/>
</descriptor>
...
You would also need to modify the type attribute for each of the process resources. In the
following example, the type attributes for processes 1–3 would be set to Group A, the type
attributes for processes 5–6 would be set to Group B, the type attributes for processes 7–9 would
be set to Group C.
Before After
ProcessManager ProcessManager
SISZProcess EPS Processes: Group A
<Process 1 sym-name> <Process 1 sym-name>
<Process 2 sym-name> <Process 2 sym-name>
<Process 3 sym-name> <Process 3 sym-name>
<Process 4 sym-name> EPS Processes: Group B
<Process 5 sym-name> <Process 4 sym-name>
<Process 6 sym-name> <Process 5 sym-name>
<Process 7 sym-name> <Process 6 sym-name>
<Process 8 sym-name> EPS Processes: Group C
<Process 9 sym-name> <Process 7 sym-name>
<Process 8 sym-name>
<Process 9 sym-name>
The conventions require curly brackets { }, which multiple levels separated by commas.
If the resource_hierarchy property is not included in the registration message, the hierarchy
defaults to the hierarchy defined in the generic Component or Service Template descriptor files. If
the resource_hierarchy property is included, the hierarchy in the registration message is
appended to the default hierarchy found in the generic Component or Service Template descriptor
files.
Here is an example where the resource_hierarchy property is not included. In this example, the
services are displayed under a Services folder, and the components are displayed under a
Components folder. The hierarchy is relatively flat as shown here, and components and services
that may be dynamically registering for different reasons are mixed together.
Services
Service 1 sym-name
Service 2 sym-name
Service 3 sym-name
Service 4 sym-name
Service 5 sym-name
Components
Component 1 sym-name
Component 2 sym-name
Component 3 sym-name
Component 4 sym-name
Component 5 sym-name
Service 2 sym-name
resource_hierarchy = “{Group 1},{Subgroup a}”
Service 3 sym-name
resource_hierarchy = “{Group 2},{Subgroup b}”
Service 4 sym-name
resource_hierarchy = “{Group 2},{Subgroup b}”
Service 5 sym-name
resource_hierarchy = “{Group 2},{Subgroup c}”
Service 6 sym-name
resource_hierarchy = “{Group 2},{Subgroup c}”
Component 1 sym-name
resource_hierarchy = “{Group 3},{Subgroup d}”
Component 2 sym-name
resource_hierarchy = “{Group 3},{Subgroup d}”
Component 3 sym-name
resource_hierarchy = “{Group 3},{Subgroup d}”
Component 4 sym-name
resource_hierarchy = “{Group 4},{Subgroup e}”
Component 5 sym-name
resource_hierarchy = “{Group 4},{Subgroup e}”
Services
Group 1
Subgroup a
Service 1 sym-name
Service 2 sym-name
Group 2
Subgroup b
Service 3 sym-name
Service 4 sym-name
Subgroup c
Service 5 sym-name
Service 6 sym-name
Components
Group 3
Subgroup d
Component 1 sym-name
Component 2 sym-name
Component 3 sym-name
Group 4
Subgroup e
Component 4 sym-name
Component 5 sym-name
Service
{SBA}, {____}, {____}
Service
{BSVC}, {____}, {____}
Here is an excerpt from the XML message for dynamically registering an SBA component, sent
from the SIS API to the ACIJMX Agent will be:
Here is an excerpt of the response showing the MBeanParents tag, which describes how the
resource is to be grouped and displayed in the Application Management windows.
<ApMgMbListRsEntry>
<MBeanName>DebitAddRq_Consumer</MBeanName>
<MBeanObjName>
UISK_JMX:instance=P1,name=DebitAddRq_Consumer,type=Component
</MBeanObjName>
<MBeanDescription>Model MBean that represents a Component
</MBeanDescription>
<MBeanParents>{Components},{P1},{SBA}</MBeanParents>
</ApMgMbListRsEntry>
Visibility properties
Visibility properties are set in the MBean descriptor files: one for the MBean itself and one for each
attribute and operation that is defined for the MBean.
Changing visibility
Visibility changes must be made to the descriptor files themselves. Typically, these need not be
changed, unless you want to change a value to a 4 (not visible).
In this section:
#acijmx.oncf.xpnet.system.xxxx.user.id=SUPER/SUPER
#######################################################################
#
# The following section of the file is a place holder where user
# properties to be encrypted may be placed.
#
# It is critical that the section begin with "Begin User Encrypted
# Values" and end with "End User Encrypted Values".
#
#######################################################################
##### Begin User Encrypted Values #####################################
#acijmx.oncf.xpnet.system.xxxx.user.password=placeholder
##### End User Encrypted Values #######################################
If command security has been turned on (the ONCF-SECURITY define in the N24DEFS file was set
to ON or DETAIL), you must perform the following steps:
1. Add a Network Control Security Profile (NCSP) record for the ACIJMX agent.
2. Add a Network Control Security Specification (NCSS) record for the ACIJMX agent.
3. Configure a property containing the ONCF user ID in the $ES_HOME/ESJMX/config/
config.properties file.
4. Configure a property containing the encrypted ONCF password in the $ES_HOME/ESJMX/
config/config.properties file
5. Run the encryptpasswords script that will prompt you for a password to encrypt with a
specified key.
6. Specify the encryption key that was specified when running the encryptpasswords script in
the $ES_HOME/ESJMX/config/oncf-keys.properties file.
7. If the ACIJMX agent is already running, it must be restarted for the changes to take effect.
Additional detailed information for these steps is provided in the following topics. Refer to the
“ACIJMX agent config.properties file” topic for a description of all of the properties in the
config.properties file that are specific to the ACIJMX agent.
NODE: ****************
NEW PASSWORD: COMMANDS PROFILE: JMXSERVER
**************************** USAGE RESTRICTIONS ****************************
START TIME (HH:MM): 00:00 DAYS: MO: Y TU: Y WE: Y TH: Y
END TIME (HH:MM): 23:59 FR: Y SA: Y SU: Y
INACTIVITY LIMIT FOR AUTO LOGOFF: 0 (MIN)
INACTIVITY LIMIT FOR AUTO LOCKOUT: 0 (DAYS) LOCKED OUT: N
LAST ACCOUNT ACTIVITY: 000000 (YYMMDD)
ACCOUNT EXPIRATION: 000000 (YYMMDD)
*************************** PASSWORD REQUIREMENTS **************************
MIN LENGTH: 0 MIN ALPHA CHARS: 0 MIN DAYS BEFORE CHANGE: 0
MAX LENGTH: 0 MIN NUMERIC CHARS: 0 MAX DAYS BEFORE CHANGE: 0
PASSWORD HISTORY: 0 MAX INVALID COUNT: 0 CURRENT INVALID COUNT: 0
*********************************** NET24 ************************************
F12-HELP SF7-NCS PROFILE
#acijmx.oncf.xpnet.system.xxxx.user.id=SUPER/SUPER
• Change the characters xxxx in the property name to the name of your XPNET system (4
characters). This must be specified in lower case.
For subsequent XPNET systems, add a new line to the $ES_HOME/ESJMX/config/config.properties
file, specifying a property using the format described above.
#acijmx.oncf.xpnet.system.xxxx.user.password=placeholder
• Change the characters xxxx in the property name to the name of your XPNET system (4
characters). This must be specified in lower case.
Note: Do not replace the placeholder with the password, as that will be done in the next
step when you run the encryptpasswords script.
Note: Avoid the use of backslashes and single and double quotes in the key to avoid having
to deal with special escaping rules for data in properties files in the next step, Configuring
the Encryption Key Property.
Encrypted property values are only replaced if you enter both a value and a key. If you press
Enter without entering either value, the property value is not modified.
acijmx.oncf.xpnet.system.xxxx.key=ExampleKey
Where xxxx is the XPNET system name and ExampleKey is an example of a key that was specified
when the encryptpasswords utility was executed.
Properties File Format Note: The properties file format has special rules regarding the use of the
backslash character and single and double quotes. For further information on these rules refer to
http://java.sun.com/j2se/1.4.2/docs/api/java/util/Properties.html#load(java.io.InputStream).
The $ES_HOME/ESJMX/config/oncf-keys.properties file is read by the ACIJMX agent when an
XPNETSystem MBean is initialized and the user.id and password properties (discussed in the
previous steps) are set for that XPNET system. The ACIJMX agent reads the key so that it can
decrypt the encrypted password that is contained in the $ES_HOME/ESJMX/config/
config.properties file.
The key is specified in a separate file to the $ES_HOME/ESJMX/config/config.properties file (where
the encrypted password is stored) for security reasons. The $ES_HOME/ESJMX/config/oncf-
keys.properties file should be secured so that only the system administrator and the ACIJMX
agent can read the file. Any user who can access the key could possibly decrypt the ONCF
password(s) in the $ES_HOME/ESJMX/config/config.properties file.
#acijmx.jmx.management.port=<port>
The specified <port> value must then be provided to the BASE24-eps IS processes in their
startup arguments. Refer to the “Configuring processes to instrument their own components and
services” topic on how that is done for the HP NonStop platform.