Client Server Management Pack for Altiris™ IT Analytics 8.1 from Symantec™ User Guide Client Server Management Pack for Altiris™ IT Analytics 8.1 from Symantec™ User Guide
The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Legal Notice Copyright © 2018 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo and Altiris are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq. "Commercial Computer Software and Commercial Computer Software Documentation," as applicable, and any successor regulations, whether delivered by Symantec as on premises or hosted services. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement. Symantec Corporation 350 Ellis Street Mountain View, CA 94043 http://www.symantec.com Technical Support
Symantec Technical Support maintains support centers globally. Technical Support’s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec’s support offerings include the following:
■ A range of support options that give you the flexibility to select the right amount of service for any size organization
■ Telephone and/or Web-based support that provides rapid response and up-to-the-minute information
■ Upgrade assurance that delivers software upgrades
■ Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis
■ Premium service offerings that include Account Management Services For information about Symantec’s support offerings, you can visit our website at the following URL: support.symantec.com All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Contacting Technical Support Customers with a current support agreement may access Technical Support information at the following URL: www.symantec.com/business/support/ Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available:
■ Product release level
■ Hardware information
■ Available memory, disk space, and NIC information ■ Operating system
■ Version and patch level
■ Network topology
■ Router, gateway, and IP address information
■ Problem description:
■ Error messages and log files
■ Troubleshooting that was performed before contacting Symantec
■ Recent software configuration changes and network changes
Licensing and registration If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: www.symantec.com/business/support/ Customer service Customer service information is available at the following URL: www.symantec.com/business/support/ Customer Service is available to assist with non-technical questions, such as the following types of issues:
■ Questions regarding product licensing or serialization
■ Product registration updates, such as address or name changes
■ General product information (features, language availability, local dealers)
■ Latest information about product updates and upgrades
■ Information about upgrade assurance and support contracts
■ Information about the Symantec Buying Programs
■ Advice about Symantec's technical support options
■ Nontechnical presales questions
■ Issues that are related to CD-ROMs, DVDs, or manuals Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows:
Asia-Pacific and Japan [email protected]
Europe, Middle-East, and Africa [email protected]
North America and Latin America [email protected] Contents
Technical Support ...... 4
Chapter 1 Introducing IT Analytics ...... 14 About IT Analytics ...... 14 How IT Analytics works ...... 14 About IT Analytics Client and Server Management Content Pack ...... 16
Chapter 2 Getting Started ...... 17 Installing and configuring IT Analytics Server ...... 17 Hardware prerequisites ...... 18 System requirements and supported platforms ...... 19 Ports used by IT Analytics Server ...... 20 Installing IT Analytics Server and content packs ...... 21 Configuring the content pack and IT Analytics Server ...... 21 Adding cubes ...... 24 Adding reports ...... 25 Configuring the cube processing tasks ...... 26 Verifying your installation ...... 27 Purging resource event data ...... 27 Uninstalling the content pack ...... 28 Chapter 3 Configuring external Symantec CMDB (optional) ...... 29 Adding and configuring external Symantec CMDB connections ...... 29 External Symantec CMDB connection fields ...... 30 Editing external Symantec CMDB connections ...... 31 Editing the Report Integration URLs for an external Symantec CMDB ...... 32 Excluding cubes from external CMDBs cube processing ...... 32 Deleting external Symantec CMDB connections ...... 33 Including or excluding the local Symantec CMDB ...... 34 Editing the Report Integration URLs for the local Symantec CMDB ...... 34 Updating the solution dependencies ...... 35 Contents 8
Chapter 4 Implementing IT Analytics Client Server Management Content Pack ...... 36 Ways to access IT Analytics reports ...... 37 About cubes ...... 37 About Key Performance Indicators (KPIs) ...... 38 Viewing a cube ...... 38 Cube Browser Behavior ...... 39 Cube Browser Behavior - Cube fields ...... 39 Cube Browser Behavior - Cube view toolbar functions ...... 40 Saving a cube view ...... 42 Loading a cube view ...... 43 Modifying a cube view ...... 43 Deleting a cube view ...... 44 Exporting cube results ...... 44 Creating Key Performance Indicators (KPIs) ...... 45 Setting the status of a KPI (advanced) ...... 46 OWC Behavior ...... 47 Cube prerequisites (OWC behavior only) ...... 48 OWC Behavior - Cube fields ...... 48 OWC Behavior - Top cube toolbar functions ...... 49 OWC Behavior - Cube toolbar functions ...... 49 OWC Behavior - Charts toolbar functions ...... 50 OWC behavior - Saving a cube view ...... 51 OWC behavior - Loading a cube view ...... 51 OWC behavior - Modifying a cube view ...... 52 OWC behavior - Deleting a cube view ...... 53 OWC behavior - Exporting cube results ...... 53 Creating Key Performance Indicators (KPIs) ...... 54 Setting the status of a KPI (advanced) ...... 55 Viewing a Dashboard report ...... 56 Viewing a detailed report ...... 57 Creating a new report ...... 57 Displaying cube data results in a chart or table ...... 62 Removing warning messages ...... 63 Creating a table using the Computer cube example ...... 65 Managing resources from the built-in cube browser ...... 66 Integrating custom inventory data in IT Analytics ...... 67 Integrating data from two cubes in IT Analytics ...... 73
Chapter 5 Granting access to IT Analytics Server ...... 78 About security ...... 79 About the SQL Server Database Engine ...... 79 Contents 9
About SQL Server Analysis Services ...... 80 Granting access to cubes using the Symantec Management Console ...... 81 Adding a user to a default role ...... 82 Modifying role privileges ...... 82 Creating a role ...... 83 Deleting a role ...... 84 Granting access to cubes using SQL Server Management Studio ...... 85 About SQL Server Reporting Services ...... 86 Granting access to reports using the Symantec Management Console ...... 86 Granting access to reports using the Report Manager Web site ...... 88 Granting access to the dashboards, cubes, and reports ...... 89 Symantec Management Platform role-based privileges ...... 89 Granting access to save and load views and create new reports ...... 90 Filtering role-based cubes (advanced) ...... 91 About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes ...... 92 Reconfiguring the Reporting Services data sources to access the Analysis Services cubes ...... 93 Configuring Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers ...... 94 Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection ...... 96
Appendix A Dashboard reference ...... 99 Symantec Management Agent Dashboard ...... 99 Asset Control Dashboard ...... 99 Computer Inventory Dashboard ...... 100 Event Console Alerts Dashboard ...... 100 IT Analytics Usage Dashboard ...... 100 Monitor Alerts Dashboard ...... 100 Patch Management Dashboard ...... 100 Software Delivery Dashboard ...... 100 Software Installs Dashboard ...... 100
Appendix B Report reference ...... 101 Add Remove Programs by Name report ...... 103 Add Remove Programs Search report ...... 103 Advertisement Execution Event Summary report ...... 103 Contents 10
Application Metering by File Name report ...... 103 Application Metering Search report ...... 104 Asset Search report ...... 104 Assets by Asset Type report ...... 104 Assets by Cost Center report ...... 104 Assets by Department report ...... 104 Assets by Location report ...... 104 Assets by Model report ...... 105 Computer Search report ...... 105 Computers by CPU report ...... 105 Computers by Domain report ...... 105 Computers by Manufacturer report ...... 105 Computers by Memory report ...... 105 Computers by Operating System report ...... 105 Computers by System Type report ...... 105 Event Console Alert Details report ...... 106 Event Console Alerts Trend report ...... 106 Installed Files by File Name report ...... 106 Installed Files Search report ...... 106 iOS Device Details report ...... 106 Microsoft Server Applications report ...... 106 Microsoft Software Installs report ...... 106 Mobile Device Details report ...... 107 Monitor Alert Details report ...... 107 Monitor Metrics CPU Utilization Trend report ...... 107 Monitor Metrics Disk Utilization Trend report ...... 107 Monitor Metrics Network Utilization Trend report ...... 107 Monitor Metrics Trend report ...... 107 Monitored Processes CPU Utilization Trend report ...... 107 Package Download Event Summary report ...... 108 Package Server Availability - Monthly report ...... 108 Package Server Availability - Daily report ...... 108 Patch Management Bulletin Summary report ...... 108 Patch Management Details report ...... 109 Patch Vulnerability report ...... 109 Patch Vulnerability Search report ...... 109 Servers by Type and Version report ...... 109 Software Delivery Search report ...... 109 Software License Compliance by Cost Center report ...... 109 Software License Compliance by Department report ...... 110 Software License Compliance by Location report ...... 110 Software License Trend report ...... 110 Top 10 Applications Consuming CPU report ...... 110 Contents 11
Top 10 Applications Consuming Memory report ...... 110 Top 10 Users Consuming CPU report ...... 111 Windows 8 Readiness Details report ...... 111
Appendix C Dimension attribute reference ...... 112 Add Remove Programs ...... 116 Asset ...... 116 Asset Status ...... 116 Asset Type ...... 116 Computer ...... 116 Cost Center ...... 117 Created Date ...... 117 Date ...... 118 Department ...... 118 EAS Managed Device ...... 118 ESX Storage Volume ...... 119 ESX Virtual Machine ...... 120 Event Console Alert ...... 120 Event Console Alert Action Audit Type ...... 120 Event Console Alert Category ...... 120 Event Console Alert Severity ...... 121 Event Console Monitor Rule ...... 121 File ...... 121 File Modified Date ...... 121 Filter ...... 121 IIS FTP Site ...... 122 IIS Server ...... 122 IIS Virtual Directory ...... 122 IIS Web Site ...... 123 iOS Device ...... 124 iOS Global Restrictions ...... 126 iOS Phone ...... 127 iOS Program ...... 127 iOS Security Info ...... 128 Last Basic Inventory Date ...... 128 Location ...... 128 Logical Disk ...... 128 Mobile Access Point ...... 129 Mobile Device ...... 129 Mobile Device Created Date ...... 130 Mobile Device Last Updated Date ...... 130 Mobile Device Site Server ...... 130 Contents 12
Mobile Display ...... 130 Mobile Network Wifi Adapter ...... 130 Mobile Phone ...... 131 Mobile Power ...... 132 Mobile Processor ...... 133 Mobile Program ...... 133 Monitor Metric ...... 133 Monitor Metric Detail Level ...... 133 Monitor Metric Instance ...... 134 Monitor Metric Source ...... 134 Monitor NT Event Category ...... 134 Monitor NT Event Description ...... 134 Monitor NT Event ID ...... 134 Monitor NT Event Log File ...... 134 Monitor NT Event Message DLL ...... 134 Monitor NT Event Rule Triggered ...... 135 Monitor NT Event Source ...... 135 Monitor NT Event Type ...... 135 Monitor NT Event User ...... 135 Monitor Process Name ...... 135 Monitor Process Owner ...... 135 Monitor Task ...... 135 Organizational Group ...... 136 Package ...... 136 Package Distribution Event Status ...... 136 Package Download Method ...... 136 Package Download Source ...... 136 Package Download URL ...... 136 Package Server ...... 136 Package Status ...... 137 Parent Task ...... 137 Processor ...... 137 Software Component ...... 137 Software Delivery Advertisement ...... 138 Software Delivery Execution Event Command Line ...... 138 Software Delivery Execution Event Status ...... 138 Software Delivery Package Event Status ...... 138 Software Delivery Status Event Status ...... 138 Software Delivery Status Event Type ...... 138 Software License ...... 138 Software Management Compliance Package ...... 139 Software Management Compliance Policy ...... 139 Software Management Compliance Created Date ...... 139 Contents 13
Software Management Compliance Modified Date ...... 139 Software Product ...... 140 Software Purchase ...... 140 Software Update ...... 140 Software Update Release Date ...... 140 SQL Cluster ...... 141 SQL Cluster Resource ...... 141 SQL Database ...... 141 SQL Database Creation Date ...... 142 SQL Database System ...... 142 SQL Storage Area ...... 142 SQL User ...... 143 Task ...... 143 Task Server ...... 143 Time ...... 143 User ...... 143
Index ...... 145 Chapter 1
Introducing IT Analytics
This chapter includes the following topics:
■ About IT Analytics
■ How IT Analytics works
■ About IT Analytics Client and Server Management Content Pack
About IT Analytics IT Analytics complements and expands upon the reporting and analytics that is offered by Client Server Management. The capabilities that are provided within the IT Analytics Client and Server Management Content Pack allow customers to extract maximum value from the data that is contained within their Symantec CMDB database(s). By implementing the IT Analytics Client and Server Management Content Pack, you attain the following benefits:
■ Unified view of data from multiple Symantec CMDB databases.
■ Powerful on-the-fly forensic analysis through ad-hoc reports and charts, with pivot tables.
■ Out-of-the-box visually informative KPI scorecards, dashboards, and reports.
■ Replace time-consuming & complex custom reporting. See “How IT Analytics works” on page 14. See “About IT Analytics Client and Server Management Content Pack” on page 16.
How IT Analytics works IT Analytics is very easy to deploy and use. It is easily installed from the web as a content pack into the Symantec Management Platform (SMP), which is also downloadable from the Symantec public site on the web and is free for this purpose. Introducing IT Analytics 15 How IT Analytics works
The IT Analytics platform is an ecosystem comprised of multiple architectural components that work together to provide robust reporting and analytics. These components are structured across two central foundational layers which encompass the core of the IT Analytics product:
Table 1-1 Foundational layers of IT Analytics
Layers Description
IT Analytics Server The IT Analytics Server is built on a portable, redistributable, extendable and commercially supported infrastructure. The server is the underlying technology that serves as a foundation for the data sources. The server also provides for installation, configuration, security, and maintenance of the content in a consistent manner across diverse customer environments.
IT Analytics content packs IT Analytics content packs represent the enterprise-ready analytics and reporting solutions that provide product-specific content. The content packs include the actual definition of the cubes, plus the out-of-the-box KPIs, reports, and dashboards.
The architecture diagram details how the different components of IT Analytics are arranged and interact with one another. Brief descriptions of these components are also provided in Table 1-2
Table 1-2 Components of IT Analytics Pack
Component Description
Symantec Management Platform The primary component that interacts and accesses the functionality that IT Analytics provides.
Symantec Management Platform The primary database that includes all IT Analytics configurations. CMDB
Microsoft SQL Server Analysis Used as the primary data layer for the dashboards, pivot tables, Services and reports.
Microsoft SQL Server Reporting Used as the presentation layer for the reports and dashboards. Services
Microsoft Office Web Components Used as one of the presentation layers to provide raw access to 11 browse the cubes through pivot tables.
OLAP Cubes The primary component that contains all data attributes and measures for reporting purposes.
Symantec databases The primary database(s) that contain all information specific to the various Symantec products.
See “About IT Analytics Client and Server Management Content Pack” on page 16. Introducing IT Analytics 16 About IT Analytics Client and Server Management Content Pack
About IT Analytics Client and Server Management Content Pack The IT Analytics Client and Server Management Content Pack provides the underlying definitions for the cubes, reports, dashboards, and KPIs to be used within IT Analytics. This content pack integrates with the Symantec CMDB database through connections. Once the connections are established, the content pack populates the predefined IT Analytics cubes with the relevant Client and Server Management product data. The IT Analytics Server then processes these cubes on a given schedule, allowing the data to come together into the meaningful views that the end users can easily interact with, analyze, and share across the organization. For a list of cubes, reports, dashboards, and KPIs included with the IT Analytics Client and Server Management Content Pack, please see User Guide Appendix. In addition to IT Analytics Client and Server Management Content Pack, Symantec also offers IT Analytics ServiceDesk Content Pack. See “About IT Analytics” on page 14. See “Installing and configuring IT Analytics Server” on page 17. Chapter 2
Getting Started
This chapter includes the following topics:
■ Installing and configuring IT Analytics Server
■ Hardware prerequisites
■ System requirements and supported platforms
■ Ports used by IT Analytics Server
■ Installing IT Analytics Server and content packs
■ Configuring the content pack and IT Analytics Server
■ Adding cubes
■ Adding reports
■ Configuring the cube processing tasks
■ Verifying your installation
■ Purging resource event data
■ Uninstalling the content pack
Installing and configuring IT Analytics Server You can install IT Analytics Server from the Symantec Installation Manager. From the Symantec Management Console, you can configure and set up your version of IT Analytics Server. Getting Started 18 Hardware prerequisites
Table 2-1 Process for installing and configuring IT Analytics Server and content packs
Step Action Description
Step 1 Verify that your computer meets the You must ensure that your computer meets the hardware and the software hardware prerequisites and install specific software prerequisites. before you install IT Analytics Server. See “Hardware prerequisites” on page 18. See “System requirements and supported platforms” on page 19.
Step 2 Install IT Analytics Server and You can use the Symantec Installation Manager to content packs. install IT Analytics Server and content packs. See “Installing IT Analytics Server and content packs” on page 21.
Step 3 Add the cubes. You can choose the cubes that you want to include in your environment. See “Adding cubes” on page 24.
Step 4 Add the reports. You can choose the reports that you want to include in your environment. See “Adding reports” on page 25.
Step 5 Schedule the cube processing You can choose how often each installed cube is tasks. processed. Usually, each cube is processed daily. See “Configuring the cube processing tasks” on page 26.
Step 6 Verify your installation. You can check to see that your installation was successful and that your version of IT Analytics Server contains all the necessary items. See “Verifying your installation” on page 27.
For an example of configuring IT Analytics, please see the following videos: http://www.youtube.com/watch?v=AwCWJu33cs8 http://www.youtube.com/watch?v=3SOdeMUOVKU
Hardware prerequisites The computer on which you want to install IT Analytics Server must meet the specific hardware requirements that are outlined in the IT Management Suite Planning for Implementation Guide. Getting Started 19 System requirements and supported platforms
In addition to the hardware required for the Symantec Management Platform, the following hardware is recommended:
■ 2.0 GHz CPU 4 cores minimum (8 cores preferred)
■ 4 GB RAM (6+ GB preferred)
■ 40 GB of free disk space See “Installing and configuring IT Analytics Server” on page 17.
System requirements and supported platforms Before you install the content pack and IT Analytics Server, the following software must be installed and configured:
■ Symantec Management Platform The content pack and IT Analytic Server are installed on this computer.
■ ADOMD.NET 9.0 Install this software on the Notification Server computer. Install the SQLServer2005_ADOMD_x64.msi file with the default configuration. For the downloadable file, see the Microsoft MSDN Web site at the following URL: https://www.microsoft.com/en-us/download/details.aspx?id=17943.
■ Microsoft Report Viewer Install this software on all computers that access the Symantec Management Console. Supported versions: 2008 SP1, 2008 R2, 2012 and 2014. Report Viewer is installed with the default configuration. For the downloadable file, see the Microsoft MSDN Web site at the following URL: http://www.microsoft.com/download/en/details.aspx?id=3841.
■ Open XML SDK 2.0 for Microsoft Office This component is required to export cube views to xlsx format. For more information about exporting the cube views, please see the following article: TECH232459 The operating systems that are supported by the Symantec Management Platform are also supported by the content pack and IT Analytics Server. http://www.symantec.com/docs/HOWTO9965 The following components do not need to be installed on the Symantec Management Platform, but do need to be installed and available on an appropriate system:
■ Microsoft SQL Server Analysis Services This software is required for the cube database. Supported versions: 2008 SP1, 2008 R2, 2012, and 2014. Getting Started 20 Ports used by IT Analytics Server
Symantec recommends that you install SQL Server Analysis Services and SQL Server Reporting Services on the same server.
■ Microsoft SQL Server Reporting Services This software is required for the reports. Supported versions: 2008 R2, 2012, and 2014. Symantec recommends that you disable Internet Explorer Enhanced Security on the computer that hosts Microsoft SQL Server Reporting Services. Symantec recommends that you install SQL Server Reporting Services and SQL Server Analysis Services on the same server. The following components may need to be installed on all endpoints that access the console:
■ Microsoft Office Web Components 11 (2003) Install this software on all computers that access the Symantec Management Console. The owc11.exe file is installed with the default configuration. For the downloadable file, see the Microsoft MSDN Web site at the following URL: http://www.microsoft.com/en-us/download/details.aspx?id=22276. See “Cube prerequisites (OWC behavior only)” on page 48. See “Installing and configuring IT Analytics Server” on page 17.
Ports used by IT Analytics Server By default, the IT Analytics Server uses specific ports. These ports must be opened on the firewall if there is a firewall between the Symantec Management Platform and the SQL Server or between these servers and the user’s workstation. Each of these ports can be remapped. Discuss this issue with your database administrator and server administrator to determine which port each service currently uses.
Table 2-2 Ports used by IT Analytics Server
Port Access Description
1433 SQL Server Used when processing cubes.
2383 Analysis Server Used when processing cubes and to access data within reports and cubes.
Also used by workstations when accessing cubes.
80 Reporting Services Used to access reports on the report server.
443 Reporting Services Used to access reports when using SSL to access the report server.
83 Reporting Services Used to access reports via Kerberos authentication. Getting Started 21 Installing IT Analytics Server and content packs
See “Configuring the content pack and IT Analytics Server” on page 21. See “Installing and configuring IT Analytics Server” on page 17.
Installing IT Analytics Server and content packs You can install IT Analytics Server and content packs from the Symantec Installation Manager (SIM). You can download the installation files directly to your server or you can create offline installation packages. Within SIM, available products are referred to as suites or individual solutions. For IT Analytics, the solution name for installation within SIM (Altiris IT Analytics) includes the required IT Analytics Server itself as the underlying foundation. Additionally, each IT Analytics content pack displays its own individual product for install, to be used with IT Analytics Server. To install IT Analytics Server and content packs 1 Launch the Symantec Installation Manager. 2 On the Installed Products page, click Install new products. 3 On the Install New Products page, in the Filter drop-down list click Solutions. 4 In the Available products area, locate and check IT Analytics 8.1 and the content packs that you want to install. IT Analytics supports the following packs:
■ IT Analytics Client Server Management Pack
■ IT Analytics ServiceDesk Pack
5 Click Next. 6 Follow the rest of the installation instructions. 7 Configure IT Analytics Server. After you install IT Analytics and the content packs, you must configure IT Analytics Server. See the following topic for the configuration steps: See “Configuring the content pack and IT Analytics Server” on page 21. See “Installing and configuring IT Analytics Server” on page 17.
Configuring the content pack and IT Analytics Server After you install the content pack, you must configure the IT Analytics Server to meet the needs of your environment. Before you can successfully configure it, specific software prerequisites and considerations must be met. See “System requirements and supported platforms” on page 19. Getting Started 22 Configuring the content pack and IT Analytics Server
See “Ports used by IT Analytics Server” on page 20. To configure the content pack and IT Analytics Server 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings, and then click Configuration. 3 In the right pane, under Analysis Server, in the Analysis Server Name box, type the host name of the Microsoft SQL Server Analysis Services. If you did not install SQL Server as the default instance, use the following format for the host name: servername\instancename. Symantec recommends that you type the host name of the server on which Analysis Services reside. If you use localhost as a host name, you restrict the access from the Symantec Management Console to the computer where Analysis Services resides. Note that this connection uses the Symantec Management Platform application ID credentials. 4 Click Verify Connection, and confirm that the Analysis Server name has been verified and saved. 5 Next to Analysis Server Database, create, or select an Analysis Server Database as follows:
For a new standard configuration, create a new ■ Click Create new database. Analysis Server database. ■ In the Create new database box, use the default IT Analytics name.
Select an existing Analysis Server database. ■ Click Use existing database. Warning: If you select an existing database, the ■ In the Use existing database drop-down list, existing data sources are overwritten with the click an Analysis Server database. current Symantec Management Platform database settings.
6 Click Save Database Settings. Getting Started 23 Configuring the content pack and IT Analytics Server
7 Under Reporting Server, in the Reporting Server Virtual Directory URL box, type the full URL of the Reporting Services ReportServer virtual directory. If you did not install SQL Server as the default instance, use the following format for the virtual directory:
http://servername/ReportServer_InstanceName/ for SQL Server 2008. Symantec recommends that you type the host name of the server on which Reporting Services reside. If you use localhost as a host name, you restrict the access from the Symantec Management Console to the computer where Reporting Services reside. 8 Click Verify Connection and confirm that the Reporting Server name has been verified and saved. 9 Next to Report Folder Name, create, or select a report folder as follows:
For a new standard configuration, create a new ■ Click Create new report folder. IT Analytics report folder. ■ In the Create new report folder box, use the default IT Analytics report folder name.
Select an existing folder to use for your IT ■ Click Use existing report folder. Analytics report folder. ■ In the Use existing report folder drop-down Warning: If you select an existing folder, the list, click a folder. existing data sources are overwritten with the current Analysis Server Database settings.
10 Click Save Folder Settings. 11 Next to Authentication Type, click the Edit symbol (pencil), and then select one of the following options for accessing Reporting Services:
■ Stored Credentials Explicitly defines the user credentials. It also automatically manages authentication across all application tiers because access to Reporting Services is always authenticated with the same rights for all users. However, Stored Credentials limits the granular control that you have over the information within the reports to which users have access.
■ Windows Integrated Authentication Lets the user's Windows credentials pass through to the Reporting Server. This method is recommended for restricting access to Reporting Services on a per-user basis. Windows Integrated Authentication allows a more granular control over the information in the reports to which you grant users access. However, additional configuration might be necessary to ensure that authentication is appropriately managed across all application tiers. Getting Started 24 Adding cubes
See “About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes” on page 92. 12 (Optional) If you selected Stored Credentials, type the user name and password. 13 Click Save Security Settings and confirm that the Report Folder name is verified and saved. 14 (Optional) To adjust the Default Open Cube Behavior, click the Edit symbol, select Open with Cube Browser (to view the cubes in the IT Analytics browser) or Open with OWC (to view the cubes with Microsoft Office Web Components), and then clickSave. To use the Open with OWC you may have to install the Microsoft Office Web Components. 15 To adjust the Number of members to display, click the Edit symbol and specify a numeric value, and then click Save. This setting limits the number of rows that are displayed when browsing a cube using the IT Analytics Cube Browser (the default number is 40). 16 (Optional) To adjust the Number of rows per export to Excel, click the Edit symbol and specify a numeric value, and then click Save. This setting limits the number of rows that are displayed once the cube view has been exported to Excel (the default number is 1048576). 17 After you configure the content pack and IT Analytics Server, you need to install cubes and reports. See “Adding cubes” on page 24. See “Adding reports” on page 25. See “About SQL Server Analysis Services” on page 80. See “About SQL Server Reporting Services” on page 86. See “Purging resource event data” on page 27. See “Installing and configuring IT Analytics Server” on page 17.
Adding cubes To view IT Analytics cubes in the Symantec Management Console, you must add the cubes from the content pack. See “About cubes” on page 37. Getting Started 25 Adding reports
To add cubes 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, click Cubes. 3 In the right pane, on the Cubes page, on the Available tab, select the cubes that you want to install. To install all of the available cubes, in the header row of the table, check Install Cube Name. 4 Click Save Changes. 5 In the Message from webpage dialog box, click OK to proceed with the installation. 6 The IT Analytics Event Viewer displays the installation progress of each cube that you selected. Click Close when the process is complete. 7 To verify that the cubes were successfully installed, on the Installed tab, review the list of cubes. Next, you need to process the cubes. This task is essential for the content pack to function properly because the cubes do not contain any data until the cube processing is complete. See “Configuring the cube processing tasks” on page 26. See “Installing and configuring IT Analytics Server” on page 17.
Adding reports You can add reports to your environment that match your needs. To add reports 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, click Reports. 3 In the right pane, on the Reports page, on the Available tab, select the reports that you want to install. To install all of the available reports, in the header row of the table, check Install Report Name. 4 Click Save Changes. 5 In the Message from webpage dialog box, click OK to proceed with the installation. Getting Started 26 Configuring the cube processing tasks
6 The IT Analytics Event Viewer displays the installation progress of each report that you selected. Click Close when the process is complete. 7 To verify that the reports were successfully installed, on the Installed tab, review the list of reports. See “Installing and configuring IT Analytics Server” on page 17. See “Creating a new report” on page 57.
Configuring the cube processing tasks This task is essential for the content pack to function properly because the cubes do not contain any data until the cube processing is complete. You can create and assign processing schedules for all installed cubes. Your business needs should dictate how often the cubes are processed. For a typical configuration, all cubes should be processed daily. Multiple processing tasks can be used for more granular control of cube processing. More than one cube can share a dimension. In this case, the last processed date of all cubes that uses that dimension updates to the last processed date of the shared dimensions. However, the actual data in the cubes is not processed until a processing task is run that is configured to process that specific cube. To configure the cube processing tasks 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings, and then click Processing. 3 Set up your schedule for the default processing tasks, and then check Enabled. Symantec recommends that you process cubes no more than once a day, depending on the number of cubes and amount of data in your environment. 4 Select the cubes that you want to be processed on the current schedule. For a typical configuration, select all cubes. 5 Click Save Changes and confirm that the Default Processing Task is saved. 6 Click Run Now. The selected processing tasks start asynchronously, which means that the task does not finish by the time that the page refreshes. This task can take several minutes to execute. The execution time depends on the number of the cubes that are selected and the size of data within the database. To monitor its progress, you can view the events in the IT Analytics Event Viewer while the manual processing task executes. See “Adding cubes” on page 24. Getting Started 27 Verifying your installation
See “Installing and configuring IT Analytics Server” on page 17.
Verifying your installation You can verify your installation and ensure that all of your configuration steps are completed successfully. To verify your installation 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics. The following items should appear:
■ Cubes
■ Dashboards
■ Reports
■ Key Performance Indicators If the pop-up dialog boxes appear while your cubes load, you need to remove the warning messages. See “Removing warning messages” on page 63. See “Installing and configuring IT Analytics Server” on page 17.
Purging resource event data Certain tasks that the content pack performs are logged to event tables. Configuration tasks, processing tasks, and report access information are logged to these event tables. As a result, these tables can grow over time. By default, the data is stored for six months or a mix table row count of 1000000. To purge resource event data 1 In the Symantec Management Console, on the Settings menu, click Notification Server > Purging Maintenance. 2 In the left pane, click Purging Maintenance. 3 In the right pane, on the Purging Maintenance page, on the Resource Event Data Purging Settings tab, verify that Resource event data purging is Enabled. 4 Under Custom, click Add. 5 In the Select DataClasses dialog box, under Available items, in the Group drop-down list, expand Data Classes > Inventory, and then click Notification Server Events. Getting Started 28 Uninstalling the content pack
6 In the Available items list, select IT Analytics Configuration and IT Analytics Usage, and then click >. These selections now appear in the Selected Items list. 7 Click OK. 8 On the Resource Event Data Purge Settings tab, click Save Changes. IT Analytics Configuration and IT Analytics Usage now appear in the Event Data Class list. See “Configuring the content pack and IT Analytics Server” on page 21.
Uninstalling the content pack You can uninstall the content pack with the Symantec Installation Manager. To uninstall the content pack 1 Launch Symantec Installation Manager. 2 On the Installed Products page, in the Installed products window, scroll down and click IT Analytics 8.1. 3 In the Symantec Installation Manager dialog box, select all the content packs that you want to uninstall and click Next. 4 In the Symantec Installation Manager dialog box, click Begin uninstall to confirm your uninstall selection. 5 (Optional) If a second Symantec Installation Manager dialog box opens, click OK to confirm your uninstall selection. If you opted to install the language packs, this dialog box message lets you know that the language packs are also uninstalled. 6 On the Uninstallation Complete page, click Finish. Chapter 3
Configuring external Symantec CMDB (optional)
This chapter includes the following topics:
■ Adding and configuring external Symantec CMDB connections
■ External Symantec CMDB connection fields
■ Editing external Symantec CMDB connections
■ Editing the Report Integration URLs for an external Symantec CMDB
■ Excluding cubes from external CMDBs cube processing
■ Deleting external Symantec CMDB connections
■ Including or excluding the local Symantec CMDB
■ Editing the Report Integration URLs for the local Symantec CMDB
■ Updating the solution dependencies
Adding and configuring external Symantec CMDB connections By default, IT Analytics Client and Server Management Content Pack lets you view data from the local Symantec CMDB on which IT Analytics is installed. If the local Symantec CMDB already has the desired configuration, then you do not need to carry out this procedure. IT Analytics Client and Server Management Content Pack lets you view data from additional Symantec CMDBs. This feature provides global IT Analytics reporting across multiple CMDBs without the need to replicate large amounts of data Configuring external Symantec CMDB (optional) 30 External Symantec CMDB connection fields
External CMDB connections allow multiple Notification Servers to populate all existing cubes. Notification Server computers can be configured in a hierarchy or as standalone computers. To add and configure external Symantec CMDB connections 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the IT Analytics Settings > Connections, and then click Symantec CMDB. 3 In the right pane, on the Symantec CMDB page, click Add External Connection. If you have already added a connection and want to add another one under External Symantec CMDB Connections, click Add. See “External Symantec CMDB connection fields” on page 30. 4 In the Add/Edit CMDB Connection dialog box, type the information for each of the connection fields. 5 Click Create. 6 After the connection is configured, click Close. 7 Let the IT Analytics Event View dialog box open and complete updating dependencies automatically, then click Close. See “Editing the Report Integration URLs for an external Symantec CMDB” on page 32. See “Excluding cubes from external CMDBs cube processing” on page 32. See “Deleting external Symantec CMDB connections” on page 33. See “Including or excluding the local Symantec CMDB” on page 34. See “Updating the solution dependencies” on page 35.
External Symantec CMDB connection fields To add, edit, and modify Symantec CMDB connections, you need to entering the information in the following fields.
Table 3-1 Fields for external Symantec CMDB connection
Field Description
CMDB Server Name The name of the server that hosts the Symantec CMDB.
CMDB Database Name The name of the Symantec CMDB database. The default database name and schema name is Symantec_CMDB. Configuring external Symantec CMDB (optional) 31 Editing external Symantec CMDB connections
Table 3-1 Fields for external Symantec CMDB connection (continued)
Field Description
CMDB Database Username The user name for the Symantec CMDB database. Note: Windows credentials are not supported. You must enter SQL account credentials.
CMDB Database Password The password for the Symantec CMDB database.
CMDB Database Password Confirming of the password for the Symantec CMDB database. Confirmation
See “Adding and configuring external Symantec CMDB connections” on page 29. See “Editing external Symantec CMDB connections” on page 31. See “Deleting external Symantec CMDB connections” on page 33.
Editing external Symantec CMDB connections IT Analytics Server lets you edit Symantec CMDB connections so that data can be leveraged for reporting purposes. To edit Symantec CMDB connections 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and then click Symantec CMDB. 3 In the right pane, on the Symantec CMDB page, in the External Symantec CMDB Connections section, in the CMDB Connections drop-down list, select the server that you want to edit. The information appears for the server that you selected. 4 Click Change Credentials. 5 In the Add/Edit CMDB Connection dialog box, change the credentials to connect to this Symantec CMDB for any of the following fields: See “External Symantec CMDB connection fields” on page 30. Configuring external Symantec CMDB (optional) 32 Editing the Report Integration URLs for an external Symantec CMDB
6 Click Save. 7 After the IT Analytics Event Viewer updates the connection, click Close. See “Adding and configuring external Symantec CMDB connections” on page 29. See “Deleting external Symantec CMDB connections” on page 33. See “Editing the Report Integration URLs for an external Symantec CMDB” on page 32.
Editing the Report Integration URLs for an external Symantec CMDB The Report Integration URLs are used to specify the appropriate URL to the Resource Manager and Resource Edit screens. A number of reports provide the capability to open a resource in the Resource Manager or Resource Edit pages. If these URL for an external Symantec CMDB connection need to be changed, it can be done here. To edit the Report Integration URLs for an external Symantec CMDB 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and then click Symantec CMDB. 3 In the right pane, on the Symantec CMDB page, in the External Symantec CMDB Connections section, in the CMDB Connections drop-down list, select the external Symantec CMDB connection for which you want to edit the URLs. 4 Under Report Integration URLs, click Change Report Integration URLs. 5 In the Edit Report Integration URLs dialog box, edit the URLs, and then click Save. 6 After the IT Analytics Event Viewer updates the dependencies, click Close. See “Editing external Symantec CMDB connections” on page 31. See “Editing the Report Integration URLs for the local Symantec CMDB” on page 34.
Excluding cubes from external CMDBs cube processing When processing cubes, you can select the cubes to exclude from external CMDBs cube processing to avoid duplication of data or for other purposes. For example, you may have two client-facing Symantec Management Platform servers and a third server that is your Asset repository. You can connect IT Analytics to all three servers. Then, you can only process the inventory cubes for the client-facing servers and the asset cubes for the Asset server. Configuring external Symantec CMDB (optional) 33 Deleting external Symantec CMDB connections
To exclude cubes from external CMDBs cube processing 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and then click Symantec CMDB. 3 In the right pane, in Manage Cube Inclusion Settings section, click Manage Cube Inclusion Settings. 4 In the Manage Cube Inclusion Settings dialog box, in the CMDB Connection drop-down list, click the CMDB connection from which you want to exclude the cubes from processing. 5 Next to each cube that you want to exclude the CMDB from processing, click Exclude. 6 Click Save. 7 After the IT Analytics Event Viewer updates dependencies, click Close. See “Installing and configuring IT Analytics Server” on page 17. See “Adding cubes” on page 24. See “Configuring the cube processing tasks” on page 26.
Deleting external Symantec CMDB connections IT Analytics Server lets you delete Symantec CMDB connections to remove data from reports. To delete Symantec CMDB connections 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and then click Symantec CMDB. 3 In the right pane, on the Symantec CMDB page, in the External Symantec CMDB Connections section, in the CMDB Connection drop-down list, click the server that you want to delete. 4 Click Delete. 5 In the Message from webpage dialog box, click OK. 6 After the IT Analytics Event Viewer updates dependencies, click Close. See “Adding and configuring external Symantec CMDB connections” on page 29. See “Editing external Symantec CMDB connections” on page 31. Configuring external Symantec CMDB (optional) 34 Including or excluding the local Symantec CMDB
Including or excluding the local Symantec CMDB If you add an external Symantec CMDB connection, you can choose whether you want to include the data in the local Symantec CMDB. Depending on your environment, you may want to include this local CMDB. See “Adding and configuring external Symantec CMDB connections” on page 29. You can include the local CMDB if you have configured external Symantec CMDBs that are not part of the same hierarchy. However, if the local CMDB is part of the hierarchy for inventory replication, you may encounter some duplicate information if you include this local CMDB. To avoid duplication of data and still process the local CMDB, you must use the Manage Cube Inclusion Settings page. See “Excluding cubes from external CMDBs cube processing” on page 32. To include or exclude the local CMDB 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and then click Symantec CMDB. 3 In the right pane, on the Symantec CMDB page, in the Local Symantec CMDB Connection section, select to include or exclude the local Symantec CMDB. 4 Click Save Changes. 5 After the IT Analytics Event Viewer updates dependencies, click Close. See “Editing the Report Integration URLs for the local Symantec CMDB” on page 34.
Editing the Report Integration URLs for the local Symantec CMDB The Report Integration URLs are used to specify the appropriate URL to the Resource Manager and Resource Edit pages. A number of reports provide the capability to open a resource in the Resource Manager or Resource Edit pages. If the URL needs to be changed for any reason, follow the steps in this instruction.. To edit the Report Integration URLs for the local Symantec CMDB 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and then click Symantec CMDB. Configuring external Symantec CMDB (optional) 35 Updating the solution dependencies
3 In the right pane, on the Symantec CMDB page, in the Local Symantec CMDB Connection section, click Change Report Integration URLs. 4 In the Edit Report Integration URLs dialog box, edit the URLs, and then click Save. 5 After the IT Analytics Event Viewer updates dependencies, click Close. See “Including or excluding the local Symantec CMDB” on page 34. See “Editing the Report Integration URLs for an external Symantec CMDB” on page 32.
Updating the solution dependencies Each time an external connection to a Symantec CMDB is added or removed, IT Analytics reviews all configured connections. IT Analytics evaluates what solutions are installed that should be queried when cubes are processed. If the set of solutions using a configured connection is changed, updating the dependencies ensures that all relevant solutions are queried from each external CMDB. You ensure that this change is incorporated by updating the solution dependencies. To update the solution dependencies 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings > Connections, and the click Symantec CMDB. 3 In the right pane, on the Symantec CMDB page, in the Dependencies section, click Update Dependencies. 4 After the IT Analytics Event Viewer updates dependencies, click Close. See “Adding and configuring external Symantec CMDB connections” on page 29. Chapter 4
Implementing IT Analytics Client Server Management Content Pack
This chapter includes the following topics:
■ Ways to access IT Analytics reports
■ About cubes
■ About Key Performance Indicators (KPIs)
■ Viewing a cube
■ Cube Browser Behavior
■ OWC Behavior
■ Viewing a Dashboard report
■ Viewing a detailed report
■ Creating a new report
■ Displaying cube data results in a chart or table
■ Removing warning messages
■ Creating a table using the Computer cube example
■ Managing resources from the built-in cube browser
■ Integrating custom inventory data in IT Analytics
■ Integrating data from two cubes in IT Analytics Implementing IT Analytics Client Server Management Content Pack 37 Ways to access IT Analytics reports
Ways to access IT Analytics reports You can access IT Analytics reports in several ways.
Table 4-1 Ways to access IT Analytics reports
Method Description
Symantec Management Console - Using cubes, you can construct and save views based on Cubes predefined measures and dimensions. The cubes are configured to allow exportable, dynamic, and customized reports. You can also load previously saved views for quick access to data that you frequently need. See “Viewing a cube” on page 38.
Symantec Management Console - These reports were developed to give you a representative Dashboards/Reports view of your IT assets. You can export the reports to many different formats including HTML, Excel, and PDF. You can also create additional reports by using the SQL Reporting Services Report Builder, and then easily import your reports in the content pack. See “Viewing a Dashboard report” on page 56. See “Viewing a detailed report” on page 57.
Microsoft SQL Server Management With the built-in cube browser, you can view cube data natively Studio through the SQL Server Management Studio. This option allows an administrator to have raw access to cube data and to have direct access to Analysis Services. See “Managing resources from the built-in cube browser” on page 66.
Third-party Reporting Products You can use third-party reporting tools, such as ProClarity or Excel 2007, to report on the data that is contained in each cube. These tools provide rich cube browsing or cube reporting capabilities.
About cubes A cube is an interactive view of an IT Analytics cube. Cubes let you view, organize, and summarize data into on-demand, personalized reports. You can use it to dynamically analyze data from within the Symantec Management Console. If you have specified Open with OWC in the Default Open Cube Behavior, it uses Microsoft Office Web Components that are embedded within Microsoft Office products or that are freely available to download. Implementing IT Analytics Client Server Management Content Pack 38 About Key Performance Indicators (KPIs)
The Default Open Cube Behavior is opened with Cube Browser. To switch to the OWC view, right-click a cube and select Open with OWC. This opens the cube in a new tab with the traditional OWC view. If any required components for this view are missing, you are prompted to install them. If the Default Open Cube Behavior is opened with OWC, you may switch to the Cube Browser view. To switch, right-click a cube and select Open with Cube Browser. The cube opens in a new tab. See “Cube prerequisites (OWC behavior only)” on page 48. See “Creating a table using the Computer cube example” on page 65.
About Key Performance Indicators (KPIs) One of the advantages of using OLAP is the ability to use an intuitive reporting framework. This framework lets you quickly translate large data volumes with the goal of making informed business decisions. Analysis Services leverages this capability through Key Performance Indicators (KPIs). KPIs are defined as quantifiable measures that represent a critical success factor in an organization. The emphasis is on the action of quantifying something in the environment. For example, the KPIs must be measurable to successfully be monitored and compared against a given objective. For an overview on KPIs, please see the following video: http://www.youtube.com/watch?v=3SOdeMUOVKU See “Creating Key Performance Indicators (KPIs)” on page 54. See “Setting the status of a KPI (advanced)” on page 55.
Viewing a cube You can access the IT Analytics reports in many ways. See “Ways to access IT Analytics reports” on page 37. To view a cube 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes. 3 Select a cube to view. See “Adding cubes” on page 24. Implementing IT Analytics Client Server Management Content Pack 39 Cube Browser Behavior
Cube Browser Behavior These instructions pertain to using the Cube Browser to consume cube data. See “Cube Browser Behavior - Cube fields” on page 39. See “Cube Browser Behavior - Cube view toolbar functions” on page 40. See “Saving a cube view” on page 42. See “Loading a cube view” on page 43. See “Modifying a cube view” on page 43. See “Deleting a cube view” on page 44. See “Exporting cube results” on page 44. See “Creating Key Performance Indicators (KPIs)” on page 45. See “Setting the status of a KPI (advanced)” on page 46.
Cube Browser Behavior - Cube fields The following cube fields are available.
Table 4-2 Cube fields
Field Description
Field List Displays the available fields within the cube to be used for creating a cube view. Note that different cubes will contain different fields. Fields can be added within a specific section to the Cube View Configuration at the bottom of the Cube Browser. Each field is defined and identified by the following:
■ Measures Measures are the aggregate count, or how you quantify results in a view. Every view you create must contain at least one measure and they can only be used within the Measures section of the Cube View Configuration. ■ Dimensions Dimensions are a grouping of specific data types you are quantifying when you create a view. Expanding each dimension will reveal the attributes to be used when creating a view. ■ Attributes Each dimension may have one or more attributes to be leveraged for view creation. These can be used within the Rows, Columns, Filters or Details sections of the Cube View Configuration. Implementing IT Analytics Client Server Management Content Pack 40 Cube Browser Behavior
Table 4-2 Cube fields (continued)
Field Description
Cube View Configuration - The aggregate count or summary results of the attributes that are defined Measures in the filter, row, and column sections of the Cube View Configuration.
Cube View Configuration - The rows of the cube view displayed in the interactive matrix. As attributes Rows are added, the attribute name appears and displays (+)(-) next to the field name. These symbols let you drill down into the values of each attribute. You can place additional attributes before or after the existing attributes to modify the structure.
Cube View Configuration - The columns of the cube view displayed in the interactive matrix. As Columns attributes are added, the attribute name appears and displays (+)(-) next to the attribute name. These symbols let you drill down into the values of each attribute. You can place additional attributes before or after the existing attribute to modify the structure.
Cube View Configuration - The value on which to filter the given results. You can place attributes Filters within this section and then select which value to filter the report results on. Note that filters can also be set on Rows, Columns or Details attributes.
Cube View Configuration – For cube views with multiple dimensions, the details view lets you see Details data displayed in a more tabular fashion, without having to drill into multiple attributes to see specific values.
See “About cubes” on page 37.
Cube Browser Behavior - Cube view toolbar functions The following toolbar functions are available in the top toolbar:
Table 4-3 Toolbar functions
Function Description
Views > Open Opens the Cube View Manager window. From this window you can load the previously saved cube view or chart views. You can also delete previously saved cube views or chart views. You must select the appropriate view from the list of available views before performing an open/delete action.
Views > Save Saves the configuration of a cube view or chart view to allow for quick and easy access to the same information format in the future. Implementing IT Analytics Client Server Management Content Pack 41 Cube Browser Behavior
Table 4-3 Toolbar functions (continued)
Function Description
Filter > Manage Rows to Gives the user the ability to specify the number of rows to be displayed Display in the cube view. To use this filter, click on a row then select this option from the toolbar and input a value for the number of rows to display. Alternatively, right-click a row, and then click Display First X Rows where X is the desired row count.
Filter > Manage Columns to Gives the user the ability to specify the number of columns to be displayed Display in the cube view. To use this filter, click on a column then select this option from the toolbar and input a value for the number of columns to display. Alternatively, right-click a row, and then click Display First X Columns where X is the desired column count.
Filter > Manage Filters Displays a Filter Member dialog box which allows a user to include or exclude specific values for the selected dimension. To use this option, select one dimension and then click Manage Filters on the toolbar, or right-click and select Manage Filters.
Filter > Add Filter to Include Includes specific data from the cube view, based on what member is Only Selection selected. To filter only by a specific row or column, click the appropriate row/column header and select to include only from the Filter menu, or right-click and include only.
Filter > Add Filter to Exclude Excludes specific data from the cube view, based on what member is Selection selected. To filter out a specific row or column, click the appropriate row/column header and select to exclude from the Filter menu, or right-click and exclude only.
Filter > Clear Filter for Clears any filters you have created that are specific to a selection. Selection
Filter > Clear All Filters Clears all filters from the current cube view.
Sort > Sort Rows Ascending Sorts the selected rows in ascending order. Click to clear the current sort order and to select a new sort order.
Sort > Sort Rows Descending Sorts the selected rows in descending order. Click to clear the current sort order and to select a new sort order. Implementing IT Analytics Client Server Management Content Pack 42 Cube Browser Behavior
Table 4-3 Toolbar functions (continued)
Function Description
Sort > Sort Columns Sorts the selected column in ascending order. Ascending Click to clear the current sort order and to select a new sort order.
Sort > Sort Columns Sorts the selected column in descending order. Descending Click to clear the current sort order and to select a new sort order.
KPIs Displays the additional options for defining a new Key Performance Indicator.
Details > View Details Allows a user to view detail information in a tabular format (separate window) in addition to the cube view. Users can also export this information in a Microsoft Excel or CSV format. Specific dimensions to be used in the detail view must be added to the Detail section of the Cube View Configuration in the lower right.
Charts > Pie Chart Creates a pie chart in a separate window for the selected data.
Charts > Bar Chart Creates a bar chart in a separate window for the selected data.
Charts > Column Chart Creates a column chart in a separate window for the selected data.
Charts > Area Chart Creates an area chart in a separate window for the selected data.
Charts > Line Chart Creates a line chart in a separate window for the selected data.
See “About cubes” on page 37.
Saving a cube view You can save cube views, in both chart formats and table formats. To do this, you do not need to reconfigure the views that you most commonly access. These saved views can be private and available only to the user who created it. You can also choose to make a view publicly available for all users. To save a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select a cube. 3 In the right pane, configure a table or chart. 4 In the toolbar at the top of the cube page, click Views > Save. Implementing IT Analytics Client Server Management Content Pack 43 Cube Browser Behavior
5 In the Save View dialog box, select one of the following options:
Create a new view. Saves the current configuration as a new view with the name that you specify.
Overwrite an existing view. Overwrites a previously saved view with the current configuration. Select a view from the drop-down list to overwrite.
6 (Optional) Check This view is accessible by all Users (Public) if this view should be publicly available. Otherwise, leave the box unchecked (default). 7 Click OK. See “About cubes” on page 37.
Loading a cube view You can load a cube view that you previously created. To load a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select the cube that contains your saved view. For example, click the Computers cube. 3 In the toolbar at the top of the cube page, click Views > Open. 4 In the Open Cube View dialog box, select the saved view to load, and then click Open. The page refreshes and displays the view. See “About cubes” on page 37.
Modifying a cube view You can modify a view that you previously created. To modify a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select the cube that contains your saved view. For example, click the Computers cube. 3 In the toolbar at the top of the cube page, click Views > Open. Implementing IT Analytics Client Server Management Content Pack 44 Cube Browser Behavior
4 In the Open Cube View dialog box, select the saved view to load, and then click Open. The page refreshes and displays the cube view. 5 Modify the configuration as necessary. 6 In the toolbar at the top of the page, click Views > Save. 7 In the Save View dialog box, select one of the following options:
Create new view. Saves the current configuration as a new view with the name that you specify.
Overwrite an existing view. Overwrites a previously saved view with the current configuration. Select a view from the drop-down list to overwrite.
8 (Optional) Check This view is accessible by all Users (Public) if this view should be publicly available. Otherwise, leave the box unchecked (default). 9 Click OK. See “About cubes” on page 37.
Deleting a cube view You can delete a view that you previously created. To delete a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select the cube that contains your saved view. For example, click the Computers cube. 3 In the toolbar at the top of the cube page, click Views > Open. 4 In the Open Cube View dialog box, select the saved view to delete, and then click Delete. The page refreshes and displays the view under the name of the cube. 5 In the Confirm Delete dialogue box, click OK. 6 Click Close. See “About cubes” on page 37.
Exporting cube results You can export data from cube lists to other programs, such as Microsoft Excel. Implementing IT Analytics Client Server Management Content Pack 45 Cube Browser Behavior
If you want to further analyze the data, you can export the list to a Microsoft Excel pivot table. You can also print a customized version of the data from a Microsoft Excel pivot table. This feature requires that you install Microsoft Excel on each computer that connects to the Symantec Management Console. To export cube results 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select a cube and open an existing table view. If there is not an existing table view, drag and drop some measures and dimensions to create a table view. If there is no existing table view, drag and drop some measures and dimensions to create a table view. 3 In the toolbar at the top of the cube view, click Details > View Details. 4 Click Export and select the format to use for exporting. 5 Follow the on-screen instructions. See “About cubes” on page 37.
Creating Key Performance Indicators (KPIs) IT Analytics lets you create KPIs by manually defining them in the console navigation under the Settings folder. You can also directly create KPIs through the tables. This procedure is an example of creating KPIs for computers with critical patch vulnerability defined through the cube. The example highlights how this procedure automatically populates some of the MDX code that is needed to define the KPI. To create KPIs 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand the IT Analytics > Cubes folder. 3 Click Patch Management Cube. 4 Click and drag the Software Update - Severity field into the Drop Row Fields Here section. 5 Click and drag Vulnerable Computer Count into the Drop Totals or Detail Fields Here section. 6 Click and drag Applicable Computer Count into the Drop Totals or Detail Fields Here section. 7 Right-click the cell in the cube that represents Vulnerable Computer Count with Critical Severity and click Create KPI from Selected Cell. 8 In the New KPI dialogue box, use Selected value with a goal of zero then click Next. Implementing IT Analytics Client Server Management Content Pack 46 Cube Browser Behavior
9 Select Gauge – Descending and click Next. 10 Select No Trend Indicator and click Next. 11 In the KPI Name box, enter Computers with Critical Vulnerability, and then click Next. 12 Verify the information on the summary screen and click Next. 13 Click Finish to close the dialogue box. 14 On the Reports > IT Analytics menu, click Key Performance Indicators. The new KPI should now display in the list with the current value and goal already defined. The calculated measures that are associated with the KPI (Goal, Status, and Value) are also displayed in the pivot table field the next time you browse the cube, alongside the default measures. See “About Key Performance Indicators (KPIs)” on page 38.
Setting the status of a KPI (advanced) IT Analytics can leverage some of the graphical capabilities of Analysis Services and Reporting Services. It looks for visual status indicators, such as a stoplight or other images. This functionality gives a quick, high-level view of the current state of defined KPI. The Status Expression of the KPI is defined as a number between 1 and -1. The most flexible way of defining how these values are populated is through an MDX string. This procedure is an example of enhancing the KPI that was previously created. To set the status of a KPI 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand the IT Analytics folder. 3 Click Key Performance Indicators to edit the KPI that was already created. 4 In the Status Expression box, click MDX Expression. Implementing IT Analytics Client Server Management Content Pack 47 OWC Behavior
5 In the text area box that pops up, enter the following MDX code:
CASE WHEN aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Vulnerable Computer Count]) < 0.1 * aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Applicable Computer Count]) THEN 1 WHEN aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Vulnerable Computer Count]) > 0.25 * aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Applicable Computer Count]) THEN -1 ELSE 0 END
6 For Status Graphic, click Traffic Light. 7 Click Save KPI, and then click Close. 8 Refresh the list of KPIs. A stoplight should display under the Status column. It indicates the current status for this KPI. See “About Key Performance Indicators (KPIs)” on page 38.
OWC Behavior These instructions pertain to using the Cube Browser to consume cube data. See “Cube prerequisites (OWC behavior only)” on page 48. See “Cube Browser Behavior - Cube fields” on page 39. See “OWC Behavior - Top cube toolbar functions” on page 49. See “OWC Behavior - Cube toolbar functions” on page 49. See “OWC Behavior - Charts toolbar functions” on page 50. See “OWC behavior - Saving a cube view” on page 51. See “OWC behavior - Loading a cube view” on page 51. See “OWC behavior - Modifying a cube view” on page 52. See “OWC behavior - Deleting a cube view” on page 53. See “OWC behavior - Exporting cube results” on page 53. Implementing IT Analytics Client Server Management Content Pack 48 OWC Behavior
See “Creating Key Performance Indicators (KPIs)” on page 54. See “Setting the status of a KPI (advanced)” on page 55.
Cube prerequisites (OWC behavior only) You must install the Microsoft Office Web Components to work with an interactive cube in your browser. If the freely available components are installed and you do not have Microsoft Office already installed, you can view the components with reduced functionality. For instructions on how to download and install the Office Web Components, see the Microsoft Web site at the following URL: http://www.microsoft.com/downloads/details.aspx?FamilyId=7287252C -402E-4F72-97A5-E0FD290D4B76&displaylang-en. You must also install Microsoft SQL Server 2005 Analysis Services 9.0 OLE DB Provider for the Office Web Components. The DB Provider is a standard component that is bundled with Microsoft products such as Office 2007 and SQL Server 2005 Management Studio. It is also available from the Microsoft Web site. For instructions on how to download and install the OLE DB Provider, see the Microsoft Web site at the following URL: http://www.microsoft.com/downloads/details.aspx?familyid=df0ba5aa -b4bd-4705-aa0a-b477ba72a9cb&displaylang=en. See “About cubes” on page 37.
OWC Behavior - Cube fields The following cube fields are available.
Table 4-4 Cube fields
Field Description
Drop Filter Fields Here The value on which to filter the given results.
Drop Column Fields Here The columns of the cube. As fields are added, the field name appears and displays (+)(-) next to the field name. These symbols let you drill down into the values of each field. You can place added fields before or after the existing fields to modify the structure. Implementing IT Analytics Client Server Management Content Pack 49 OWC Behavior
Table 4-4 Cube fields (continued)
Field Description
Drop Row Fields Here The rows of the cube. As fields are added, the field name appears and displays (+)(-) next to the field name. These symbols let you drill down into the values of each field. You can place added fields before or after the existing fields to modify the structure.
Drop Totals or Details Fields Here The aggregate count or summary results of the fields that are defined in the filter, row, and column fields.
See “About cubes” on page 37.
OWC Behavior - Top cube toolbar functions The following toolbar functions are available in the top toolbar.
Table 4-5 Top cube toolbar functions
Function Description
Open Loads the previously configured and saved cube views. You must select the appropriate view from the list of available views.
Save Saves the configuration of a cube view to allow for quick and easy access to the same information format in the future.
New KPI Displays the additional options for defining a new Key Performance Indicator.
Delete Deletes the currently loaded cube view.
Display as Table Displays the data and results as a table.
Display as Chart Displays the data and results as a chart.
See “About cubes” on page 37.
OWC Behavior - Cube toolbar functions The following toolbar functions are available in the cube toolbar: Implementing IT Analytics Client Server Management Content Pack 50 OWC Behavior
Table 4-6 Cube toolbar functions
Function Description
Copy Copies the selected results. You must highlight the results that you want to copy.
Sort Ascending Sorts the selected column in ascending order. Click it to clear the current sort order and to select a new sort order.
Sort Descending Sorts the selected column in descending order. Click it to clear the current sort order and to select a new sort order.
Auto Filter Enables or disables the auto filter function. IT Analytics retains your filter settings as you toggle on and off the Auto Filter. Fields that have an applied filter have a blue arrow at the selected field.
Show As Changes the format with which the data results are represented. Options include the actual value or a percent of values.
Refresh Refreshes the results of the table.
Export to Excel Launches Microsoft Excel and exports the results into an Excel pivot table.
Commands & Options Configures the advanced options for the table or chart, such as font type, font size, sorting, column headings, legends, and colors.
Field List Displays the available attributes within the cube. Each attribute can be added to the table to shape your results.
See “About cubes” on page 37.
OWC Behavior - Charts toolbar functions The following toolbar functions are available only for charts.
Table 4-7 Charts toolbar functions
Function Description
Chart Type Displays the available chart types that can be displayed. For example, bar, area, line, and pie.
Show/Hide Legend Toggles on and off the chart legend display. Implementing IT Analytics Client Server Management Content Pack 51 OWC Behavior
Table 4-7 Charts toolbar functions (continued)
Function Description
By Row/Column Switches the x axis of the chart to either row headings or column headings and allows the displayed data to be represented correctly.
See “About cubes” on page 37.
OWC behavior - Saving a cube view You can save views, in both chart formats and table formats. Using this functionality, you do not have to reconfigure the views that you most commonly access. In addition, these saved views can be private and available only to the user that created it. You can also choose to make a view publicly available to all console users. To save a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select a cube. 3 In the right pane, configure a table or chart. 4 In the toolbar at the top of the cube page, click Save. 5 In the Save Cube View dialog box, select one of the following options:
Save the current configuration as a new view. ■ Click Save as new view. ■ In the Save as new view box, name the cube view.
Overwrite a previously saved cube view with the ■ Click Save as existing view. new configuration. ■ In the Save as existing view drop-down list, select the cube view that you want to overwrite.
6 (Optional) Check Available to All Users if this view should be publicly available. Otherwise, leave the box unchecked (default). 7 Click Save. See “About cubes” on page 37.
OWC behavior - Loading a cube view You can load a cube view that you previously created. Implementing IT Analytics Client Server Management Content Pack 52 OWC Behavior
To load a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select the cube that contains your saved view. For example, click the Computers cube. 3 In the toolbar at the top of the cube page, click Open. 4 In the Open Cube View dialog box, in the Saved Cube Views drop-down list, select the saved view to load, and then click Open. The page refreshes and displays the table view under the name of the cube. See “About cubes” on page 37.
OWC behavior - Modifying a cube view You can modify a cube view that you previously created. To modify a cube view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select the cube that contains your saved view. For example, click the Computers cube. 3 In the toolbar at the top of the cube page, click Open. 4 In the Open Cube View dialog box, in the Saved Cube Views drop-down list, select the saved view to load, and then click Open. The page refreshes and displays the table view under the name of the cube. 5 Modify the configuration as necessary. 6 In the toolbar at the top of the page, click Save. 7 In the Save Cube View dialog box, select one of the following options:
Save the current configuration as a new view. ■ Click Save as new view. ■ In the Save as new view box, name the cube view.
Overwrite a previously saved cube view with the ■ Click Save as existing view. new configuration. ■ In the Save as existing view drop-down list, select the cube view that you want to overwrite.
8 (Optional) Check Available to All Users if this view should be publicly available. Otherwise, leave the box unchecked (default). 9 Click Save. The page refreshes and displays the table view under the name of the cube. Implementing IT Analytics Client Server Management Content Pack 53 OWC Behavior
See “About cubes” on page 37.
OWC behavior - Deleting a cube view You can delete a cube view that you previously created. To delete a view 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select the cube that contains your saved view. For example, click the Computers cube. 3 In the toolbar at the top of the cube page, click Open. 4 In the Open Cube View dialog box, in the Saved Cube Views drop-down list, select the saved view to load, and then click Open. The page refreshes and displays the table view under the name of the cube. 5 In the toolbar at the top of the cube page, click Delete. 6 In the Message from webpage dialog box, click OK. 7 In the Message from webpage dialog box, click OK. When you refresh the cube page, the page refreshes without the saved view under the name of the cube. See “About cubes” on page 37.
OWC behavior - Exporting cube results You can export data from a cube list to other programs, such as Microsoft Excel. If you want to further analyze the data, you can export the list to a Microsoft Excel pivot table. You can also print a customized version of the data from a Microsoft Excel pivot table. This feature requires that you install Microsoft Excel on each computer that connects to the Symantec Management Console. To export cube results 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Cubes, and then select a cube and open an existing table view. If there is not an existing table view, drag and drop some measures and dimensions to create a table view. 3 In the toolbar at the top of the table view, click the Export to Microsoft Office Excel symbol (green x with pencil). 4 Follow the on-screen instructions. See “About cubes” on page 37. Implementing IT Analytics Client Server Management Content Pack 54 OWC Behavior
Creating Key Performance Indicators (KPIs) IT Analytics Client and Server Management Content Pack lets you create KPIs by manually defining them in the console navigation under the Settings folder. You can also directly create KPIs through the tables. See “About Key Performance Indicators (KPIs)” on page 38. This procedure is an example of creating KPIs for computers with critical patch vulnerability defined through the cube. The example highlights how this procedure automatically populates some of the MDX code that is needed to define the KPI. To create KPIs 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand the Cubes folder. 3 Click Patch Management Cube. 4 Click anywhere inside the cube to display the Field List. 5 Click and drag the Software Update - Severity field into the Drop Row Fields Here section. 6 Click and drag Vulnerable Computer Count into the Drop Totals or Detail Fields Here section. 7 Click and drag Applicable Computer Count into the Drop Totals or Detail Fields Here section. 8 Right-click the cell in the cube that represents Vulnerable Computer Count with Critical Severity and click Use as KPI Value. 9 Right-click the cell in the cube that represents Applicable Computer Count with Critical Severity and click Use as KPI Goal. 10 In the New Key Performance Indicator section, verify that KPI Value and KPI Goal are defined. 11 Click Create KPI. 12 In the resulting pop-up window, in the KPI Name box, enter Computers with Critical Vulnerability. 13 Verify that the following boxes are correctly filled out:
■ Database Name. This box should be the name of the Analysis Services database that IT Analytics Server is configured to use.
■ Cube Name. This box should already be set to the Patch Management Cube.
■ Associated Measure Group. This box should already be set to Applicable Patches. Implementing IT Analytics Client Server Management Content Pack 55 OWC Behavior
■ Value Expression. This box should already be populated with the MDX code that represents the measure that was selected for the KPI Value.
■ Goal Expression. This box should already be populated with the MDX code that represents the measure that was selected for the KPI Goal. You might want to compare the number of vulnerable computers to a percentage of all applicable computers. By adding “0.1*” directly before the MDX string, you define your goal as 10% of all applicable computers. With this measure in place, any KPI value that is less than your goal is acceptable. Any value that is more than your goal is an undesirable state where there are too many computers in the environment with critical patch vulnerabilities. 14 Click Save Changes. 15 Click OK to allow the window to refresh. 16 In the left pane, open the Settings folder. 17 On the Reports > IT Analytics menu, click Key Performance Indicators. The new KPI should now display in the list with the current value and goal already defined. The calculated measures that are associated with the KPI (Goal, Status, and Value) are also displayed in the pivot table field the next time you browse the cube, alongside the default measures.
Setting the status of a KPI (advanced) IT Analytics Client and Server Management Content Pack can leverage some of the graphical capabilities of Analysis Services and Reporting Services. It looks for visual status indicators, such as a stoplight or other images. This functionality gives a quick, high-level view of the current state of defined KPI. See “Creating Key Performance Indicators (KPIs)” on page 54. See “About Key Performance Indicators (KPIs)” on page 38. The Status Expression of the KPI is defined as a number between 1 and -1. The most flexible way of defining how these values are populated is through an MDX string. This procedure is an example of enhancing the KPI that was previously created. To set the status of a KPI 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Key Performance Indicators to edit the KPI that was already created. 4 In the Status Expression box, click MDX Expression. Implementing IT Analytics Client Server Management Content Pack 56 Viewing a Dashboard report
5 In the text area box that pops up, enter the following MDX code:
CASE WHEN aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Vulnerable Computer Count]) < 0.1 * aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Applicable Computer Count]) THEN 1 WHEN aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Vulnerable Computer Count]) > 0.25 * aggregate({[Software Update].[Software Update - Severity].&[Critical]}, [Measures].[Applicable Computer Count]) THEN -1 ELSE 0 END
6 For Status Graphic, click Traffic Light. 7 Click Save Changes. 8 Refresh the list of KPIs. A stoplight should display under the Status column. It indicates the current status for this KPI.
Viewing a Dashboard report Dashboards display a top-level management view of precompiled data in a graphical and color-rich format. Dashboards also provide click-through features so that you can drill down and view the underlying reports in detail. See “Ways to access IT Analytics reports” on page 37. To view Dashboard reports 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Dashboards. 3 Select a Dashboard to view. See “Viewing a detailed report” on page 57. See “Creating a new report” on page 57. See “Adding reports” on page 25. Implementing IT Analytics Client Server Management Content Pack 57 Viewing a detailed report
Viewing a detailed report Reports provide you with access to various data views. They also provide you with click-through capabilities to the Symantec Management Console pages. See “Ways to access IT Analytics reports” on page 37. To view a detailed report 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics > Reports. 3 Expand a folder, and then select a report to view. See “Viewing a Dashboard report” on page 56. See “Creating a new report” on page 57. See “Adding reports” on page 25.
Creating a new report You can create new SQL Server Reporting Services reports by using the SQL Server Reporting Services Report Builder. The Report Builder provides you with access to the cubes that let you create the customized reports that you can distribute. Report Builder is a client-side application that you can use to create and design reports. Using Report Builder, you can design the reports that are based on your data. You can use Report Builder without having to understand the underlying schema or complex programming languages. Depending on which version of SQL Server you are running, you may have different options available to you in Report Builder. SQL Server 2008 SP1, 2008 R2 or 2012 includes Report Builder 2.0 or 3.0.
Note: Symantec recommends using SQL Server 2008 SP1, 2008 R2 or 2012 to take advantage of the new features that are included in Report Builder 2.0/3.0. These features allow for a more robust custom report creation experience.
To create a report in Microsoft Report Builder 1.0 (SQL Server 2008 non-SP1) To create a report in Microsoft Report Builder 2.0/3.0 (SQL Server 2008 SP1 or Higher) Implementing IT Analytics Client Server Management Content Pack 58 Creating a new report
To create a report in Microsoft Report Builder 1.0 (SQL Server 2008 non-SP1) 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Reports. 4 In the right pane, click the Report Builder tab. 5 Click Launch Report Builder. 6 In the right pane of the Report Builder, under the configuration options, select a Reporting Services Site. The default is http://servername/ReportServer. 7 Select a data source for your report. Choose from any of the installed cubes. For example, Computer Cube. 8 Select a report layout. For example, Chart. 9 Click OK. The Object Explorer appears on the left side, and a Report Model appears in the center of your screen. 10 In the top left pane, select from the available entities. The available fields for each entity appear in the lower left pane. 11 In the lower left pane, drag and drop fields to one of the categories in the report model. Keep dragging and dropping fields until the report displays what you want it to the way you want it to. For example, you can drag and drop data value fields, series fields, or category fields. 12 Name your report. 13 Click Run Report on the toolbar to ensure the report renders properly. If the report does not run correctly, click Design Report on the toolbar and make the necessary changes. 14 Click Save on the toolbar to save your report. Save your report with a name that represents how the report displays in the Symantec Management Console. The file name is used to name the report in the Symantec Management Console. Implementing IT Analytics Client Server Management Content Pack 59 Creating a new report
To link this report to the Symantec Management Console 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics, and then do one of the following actions:
If you want the ■ Right-click Dashboards. report to appear in ■ Click New > IT Analytics Report. the Dashboards folder:
If you want the ■ Expand Reports. report to appear in ■ Right-click the folder in which you want the report to appear. one of the Report ■ Click New > IT Analytics Report. folders:
3 In the Add Report dialog box, in the Report Type drop-down list, select Dashboard or Report. 4 In the Report Name drop-down list, select the report that you saved. 5 In the Parameter Area drop-down list, select Initially Visible or Initially Collapsed. 6 Click Add Report, and then click Close. 7 On the Reports menu, click All Reports. 8 In the left pane, do one of the following actions:
If you added the ■ Expand Reports > IT Analytics > Dashboards. report the ■ Click the Dashboard that you added and verify that the report renders Dashboard folder: properly.
If you added the ■ Expand Reports > IT Analytics > Reports. report to one of the ■ Expand the Report folder in which you added your report. Report folders: ■ Click the report that you added and verify that it renders properly.
To create a report in Microsoft Report Builder 2.0/3.0 (SQL Server 2008 SP1 or Higher) 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand IT Analytics Settings, and then click Reports. 3 In the right pane, on the Reports page, on the Report Builder tab, click Launch Report Builder. 4 In the Getting Started dialog box, in the left pane click New Report, and then in the right pane, click Blank Report. Implementing IT Analytics Client Server Management Content Pack 60 Creating a new report
5 In the Report Builder workspace, click Click to add title and type an appropriate title for the report. 6 In the Report Data pane, right-click Data Sources, and then click Add Data Source. 7 In the Data Source Properties dialog box, in the Name box, type IT Analytics as the data source name, and then click Use a connection embedded in my report. 8 In the Select connection type drop-down list, click Microsoft SQL Server Analysis Services, and then click Build. 9 In the Connection Properties dialog box, do on of the following:
If SQL is local to ■ In the Server name box, type "." for the name of the SQL Server. where you are ■ In the Select or enter a database name drop-down list, click IT Analytics. running Report ■ Click OK. Builder:
If SQL is not local ■ In the Server name box, type name of the SQL Server. to where you are ■ In the Select or enter a database name drop-down list, click IT Analytics. running Report ■ Click OK. Builder:
10 In the Data Source Properties dialog box, click OK. 11 In the Report Data pane, right-click Datasets, and then click Add Dataset. 12 In the Dataset Properties dialog box, in the left pane, click Query. 13 In the Name box, use the default name: DataSet1. 14 Click Use a dataset embedded in my report, then in the Data source drop-down list, click IT Analytics, and then click Query Designer. 15 In the Query Designer, click the ... symbol. 16 In the Cube Selection dialog box, select a cube, and then click OK. For example, click Computers. 17 In the Query Designer in the Metadata pane, expand the measures and attributes within the cube and drag the desired fields into the query workspace. Keep dragging and dropping fields until the report displays what you want, the way you want. 18 When you are finished, click OK. 19 In the Dataset Properties dialog box, click OK. 20 In the Report Builder, in the report builder menu, on the Insert tab, click Chart > Chart Wizard. Implementing IT Analytics Client Server Management Content Pack 61 Creating a new report
21 In the New Chart wizard, on the Choose a dataset page, click DataSet1 (the data set that you previously created), and then click Next. 22 On the Choose a chart type page, select a chart type, and then click Next. 23 On the Arrange chart fields page, drag relevant attributes from the Available fields list to the Series list. Drag relevant measure from the Available fields list to the Values list. Drag relevant attributes from the Available fields list to the Categories list. 24 When you are finished, click Next. 25 On the Choose a style page, select a chart style, and then click Finish. 26 In the Report Builder, modify the chart title, chart size, or legend properties as needed. 27 In the report builder menu, on the Home tab, click Run to preview the report and make additional adjustments. You are presented with a preview of your report with real-time data. 28 On the Run tab, click Design to return to the Design view. 29 In the toolbar at the top of the Report Builder, click the Save symbol (disc) and save this report to the Report Server IT Analytics folder. Save your report with a name that represents how the report displays in the Symantec Management Console. The file name is used to name the report in the Symantec Management Console. 30 Close the Report Builder. To link this report to the Symantec Management Console 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand Reports > IT Analytics, and then do one of the following actions:
If you want the ■ Right-click Dashboards. report to appear in ■ Click New > IT Analytics Report. the Dashboards folder:
If you want the ■ Expand Reports. report to appear in ■ Right-click the folder in which you want the report to appear. one of the Report ■ Click New > IT Analytics Report. folders:
3 In the Add Report dialog box, in the Report Type drop-down list, select Dashboard or Report. 4 In the Report Name drop-down list, select the report that you saved. 5 In the Parameter Area drop-down list, select Initially Visible or Initially Collapsed. Implementing IT Analytics Client Server Management Content Pack 62 Displaying cube data results in a chart or table
6 Click Add Report, and then click Close. 7 On the Reports menu, click All Reports. 8 In the left pane, do one of the following actions:
If you added the ■ Expand Reports > IT Analytics > Dashboards. report the ■ Click the Dashboard that you added and verify that the report renders Dashboard folder: properly.
If you added the ■ Expand Reports > IT Analytics > Reports. report to one of the ■ Expand the Report folder in which you added your report. Report folders: ■ Click the report that you added and verify that it renders properly.
See “Viewing a Dashboard report” on page 56. See “Viewing a detailed report” on page 57. See “Adding reports” on page 25.
Displaying cube data results in a chart or table You can display cube data as either a chart or table. The default presentation is a pivot table. Usually, it is easier to configure a table with the required fields and configuration. Then, you can switch to a chart, instead of building a chart from the beginning.
■ Charts make it easier to compare data because you can see a summary of the information in graphical format.
■ Tables make it easier to identify specific values because you can expand and collapse various rows and columns. A table is the default view for cube information. To display results in a table 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand the IT Analytics>Cubes folder. 3 Click the cube that you want to create a table for. For example, the Computers cube. 4 From the toolbar at the top of the page, click Display as Table. Table view is the default view. Implementing IT Analytics Client Server Management Content Pack 63 Removing warning messages
5 On the cube toolbar, click the Field List icon . The Field List box displays the fields that are available within the cube. You can position the available fields on the table by dragging and dropping fields from the Field List box. You can also use filters to define the data for each field that you want displayed in the chart. See “OWC Behavior - Cube fields” on page 48. See “OWC Behavior - Cube toolbar functions” on page 49. 6 Once you have configured the cube data, you can choose to save the view. By saving the view, you do not have to reconfigure the data that you most commonly access. See “Saving a cube view” on page 42. To display results in a chart 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 In the left pane, expand the Cubes folder. 3 Click the cube that you want to configure a chart for. For example, the Computers cube. 4 From the toolbar at the top of the page, click Display as Chart. 5 On the cube toolbar, click the Field List icon. The Field List box displays the fields that are available within the cube. You can position the available fields on the table by dragging and dropping fields from the Field List box. You can also use filters to define the data for each field that you want displayed in the chart. See “OWC Behavior - Cube fields” on page 48. See “OWC Behavior - Charts toolbar functions” on page 50. 6 Once you have configured the cube data, you can choose to save the view. By saving the view, you do not have to reconfigure the data that you most commonly access. See “Saving a cube view” on page 42. See “Creating a table using the Computer cube example” on page 65. See “About Key Performance Indicators (KPIs)” on page 38.
Removing warning messages While trying to access cubes, you might encounter the following warning messages: Implementing IT Analytics Client Server Management Content Pack 64 Removing warning messages
Click OK in both of these instances. These warnings can be attributes to Internet Explorer security settings and might display when the following conditions occur:
■ A field list attempts to access the data that is on another domain. For example, if the hostname of the SQL Server Analysis Server is different than the hostname of Symantec Management Platform.
■ The site that the control accesses is not included in the list of trusted sites. You need to change your Internet Explorer security settings so these warning messages do not appear. To remove warning messages 1 In Internet Explorer, on the Tools menu, click Internet Options. 2 On the Security tab, select the appropriate Web content zones (Local Intranet and Trusted Sites). 3 For the Local Intranet zone, add the URL string for the Symantec Management Console. For example, http://localhost/. 4 For the Trusted Sites zone, add the URL string for the Symantec Management Console. For example, http://servername/. 5 Click Local Intranet Zone. 6 Click Custom Level. 7 Under Miscellaneous, set Access data sources across domains to Enable. Implementing IT Analytics Client Server Management Content Pack 65 Creating a table using the Computer cube example
8 Under User Authentication, set the Logon box to Automatic logon with current user name and password. 9 Repeat for the Trusted Sites zone. This page no longer prompts the user for credentials or trusts the Web site and data provider. See “Verifying your installation” on page 27. See “About cubes” on page 37.
Creating a table using the Computer cube example You can create a Computer cube table that displays computers by system type, OS name, and system manufacturer in this example. See “About cubes” on page 37. To create a Computer cube table 1 In the Symantec Management Console, on the Reports menu, click All Reports. 2 Click Cubes. A list of available cubes displays. 3 Select the Computer cube. 4 Click Field List. The Field List displays the fields that are available within the cube. You can add each of these fields to the table to shape your results. 5 In the Computer cube, expand Totals. 6 Click Computer Count to select the measure value that you want to use. Measures, or totals, are the aggregate summary counts for each cube. Your data is totaled in the metric. 7 From the field list, click Computer - OS Name, and then drag it to the Row area. This field displays the operating system by name. 8 From the field list, click Computer - System Manufacturer, and then drag it to the Row area. 9 Because you already have an existing field (Computer - OS Name), you have the option of placing the new field before or after the existing field. A blue bar highlights the existing field. You can place the field in different places to dynamically change how your data is presented. Implementing IT Analytics Client Server Management Content Pack 66 Managing resources from the built-in cube browser
10 From the field list, click Computer - System Type, and then drag it to the Row area. This field displays each system type and the total results for the name and the system manufacturer. You can select the drop-down arrow next to each System Type to further define your results. 11 Expand the OS Name to view the results by each system manufacturer. In the totals area, you can view the number of each System by Type, OS Name, and System Manufacturer. Grand total values are also included at the end of each category.
Managing resources from the built-in cube browser You can manage resources from the built-in cube browser. You can access the right-click menu options for resources from the cube browser. The right-click menu options let you access Resource Manager. They let you assign a computer to an organizational group They also let you perform other actions, such as accessing a computer by Remote Management. See “Ways to access IT Analytics reports” on page 37. The right-click menu option Display Resource List displays only for the cubes in the Client and Server Management Content Pack. The cubes must have the Computer or the Asset dimension present. Resources from external CMDB connections are excluded from the resource list because you cannot manage them by using the tools that are provided. Therefore, the number of computers that are in the resource list may not match the number of resources that are shown in the field that you have selected in the cube browser. To manage resources from the built-in cube browser 1 In the Symantec Management Console, on the Reports menu, click All Reports 2 In the left pane, expand the Reports > IT Analytics > Cubes folder. 3 Select a cube to view. 4 Click Field List. The Field List displays the fields that are available within the cube. You can select the fields that you want to add to the table to shape your results. In the Field List expand Totals. 5 Select the measure value that you want to use and drag it into the Totals pane of the cube browser Continue to drag and drop any other fields that you want to add into the cube browser. 6 Right-click a field in the cube browser. The field should be a measure/total field that contains the resources. Implementing IT Analytics Client Server Management Content Pack 67 Integrating custom inventory data in IT Analytics
7 On the right-click menu, click Display Resource List. The pop-up window lists all of the resources that the host Symantec Management Platform manages. 8 Select one or more resources in the pop-up window, and then right-click a resource. Right-clicking a resource lets you access the right-click menu options. The right-click menu options let you perform any actions that are valid for the selected set of resources.
Integrating custom inventory data in IT Analytics When you author reports in IT Analytics, it may be beneficial to combine data from custom inventory previously configured to achieve the desired result set. For example, an administrator may want to combine hardware inventory data with registry settings acquired from custom inventory, all within the same report. IT Analytics is built on standard, proven technologies. Therefore, the process to combine data from IT Analytics and the Symantec CMDB into a single report is achievable with a consistent pattern through leveraging Microsoft Report Builder. The following example illustrates how to achieve this goal, without needing to understand the underlying schema or implement complex queries. To complete this example, first, you must have the Computers Cube from the Client and Server Management content pack installed and processed. Next, you must previously have run a custom inventory script that populates data in the Symantec CMDB and includes GUID information. Finally you must have Report Builder 3.0 installed. Symantec recommends that you use SQL Server 2008 SP2, 2008 R2 or 2012 to take advantage of the new features that are included in Report Builder 3.0. These features let you author a more robust custom report. For more information on using Report Builder, please see the Microsoft website. To create a data set for computer data 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, click Reports. 3 Click the Report Builder tab and then the Launch Report Builder button. 4 Allow a few minutes for the application to load. 5 From the Getting Started window, select Table or Matrix Wizard. 6 In the Choose a dataset panel, you are prompted to choose a data set. A data set includes the desired fields and values to populate the report. This process is similar to how the totals and attributes are selected when you browse a cube and create a pivot table view in the Symantec Management Platform console. If it is the first-time Report Builder is used then most likely there is no data set to choose from. Make sure that the Create a dataset radio button is selected and click Next. Implementing IT Analytics Client Server Management Content Pack 68 Integrating custom inventory data in IT Analytics
7 In the Choose a connection to a data source panel, you are prompted to choose a connection to a data source. A data source is the repository where the data for the report is stored. In the case of IT Analytics, the data is stored in the Microsoft Analysis Services Database that is specified when IT Analytics was installed. If you do not know the Analysis Services Database name, the server where it resides, or have the credentials necessary to connect to it, please contacts your Altiris Administrator. 8 To create a new data source, click the Browse button and navigate to the ReportServer/IT Analytics folder on the server that houses SQL Reporting Services. Within that folder there is a data source called ITAnalytics. Select ITAnalytics as the data source for the report and click Open. 9 Verify that the data source you browsed to is displayed on the next screen of the wizard. 10 Ensure that the connection to the data source is valid by clicking the Test Connection button in the lower right of the wizard. Assuming the test succeeded, you should see the following message: "Connection created Successfully" 11 Click Next. You are prompted to design a query to make up the data set for the report. 12 First we build the report with information from the Computers cube and then add in the custom inventory data later. In the Design a query panel, click the browse ...button toward the top of the panel. In the Cube Selection window, select the Computers cube and click OK. 13 Expand Measures > Computers, then drag the Computer Count into the main query window. 14 Expand Computer and drag Computer – Name into the query window, before Computer Count. 15 Drag Computer – Manufacturer into the query window, before Computer Name. 16 Drag Computer – Model into the query window, in between Computer – Manufacturer and Computer Name. 17 Click Next to complete the creation of the data set. 18 In the Arrange fields panel, you are prompted to arrange the fields to display properly in the table. Drag Computer_Count to the Values window and drag Computer__Name, Computer – Manufacturer, Computer – Model to the Row Groups window. Click Next. 19 In the Choose the layout panel, you are prompted to choose the layout of the report. Accept the default settings and click Next. 20 In the Choose a style panel, you are prompted to select a style for the report. Choose a color scheme you prefer and click Finish. Implementing IT Analytics Client Server Management Content Pack 69 Integrating custom inventory data in IT Analytics
21 You should see a sample table on the report canvas. The data source and data set that display on the left navigation have already been created for you by the wizard. Rename the title of the report to Custom Inventory Example, or a title relevant to your environment. 22 Resize the font of the title so that it fits within the given area. Also, widen the columns of the table so that you can read the column headers. You can format in the same way you would with Excel. Click on the line between the columns. Then when a gray bar appears at the top of the table, expand by dragging the columns. 23 Right-click on DataSet1 which was created automatically by the wizard (this displays in the Report Data pane on the far left) and then click on Dataset Properties. 24 Rename the data set as “ComputerData” which helps to differentiate it from the new data that we create in the next procedure to pull in the custom inventory. Also notice the query for the data set which has been written entirely in the background by going through the wizard. 25 Next we create the data set for custom inventory data. To create data set for custom inventory data 1 Now we create a new data source to pull in custom inventory data from the Symantec CMDB. Right-click on Data Source in the Report Data pane and select Add Data Source. 2 In the Data Source Properties window, name the data source “CMDB” and select to Use a shared connection or report model, then click the Browse button. 3 Navigate to the ReportServer/IT Analytics folder on the server that houses SQL Reporting Services. Within that folder there is a data source called CMDB. Select CMDB as the data source for the report and click Open. 4 Verify that the data source you browsed to is displayed on the next screen of the wizard. 5 Ensure that the connection to the data source is valid by clicking the Test Connection button in the lower right of the wizard. Assuming the test succeeded, you should see the following message: "Connection created Successfully" 6 Click OK. The new data source should be listed in the Report Data pane on the left. 7 Now we create a new data set to pull in custom inventory data. In the Report Data pane, right-click on Datasets and select Add Dataset. 8 In the Dataset Properties window, name the data set “Custominv” and select to Use a dataset embedded in my report, then select CMDB in the Data source drop-down. Implementing IT Analytics Client Server Management Content Pack 70 Integrating custom inventory data in IT Analytics
9 Click the Query Designer button. The query designer window that opens looks different than the one you worked with from the previous data set because here we create a standard SQL query from the relational Symantec CMDB database, whereas before we created a data source from the IT Analytics cubes themselves. While a bit different to navigate, it is important to note that we still do not need to know any SQL to create this query, we need to know where the specific data resides. 10 Expand the Tables folder and navigate to the table where your custom inventory resides. In our example, we created a custom inventory to pull specific details on how a computer was imaged (and named it Inv_Image_Details) but you can use any custom inventory here as long as it has specific Resource Guid information per computer. Check all the fields from the table you want to display in the final report and click Run Query. For the purposes of this example we only executed custom inventory on one computer. The screen shot reflects the data for the same.
11 In the Database View pane on the left, expand the Views folder, then open the vComputer view and check both Guid and Name fields. Implementing IT Analytics Client Server Management Content Pack 71 Integrating custom inventory data in IT Analytics
12 In the Relationships section in the middle of the Query Designer window, select the Add Relationship button. Here pull in Computer Name to align with our custom inventory data. We require this information later to link it with the IT Analytics cube data. 13 Click under the Left Table header and select the vComputer view. 14 Click under the Right Table header and select your table that houses your custom inventory. 15 Double-click under the Join Fields header. You are prompted to choose specific fields from each table/view that can be used as a common identifier. In our case we use the Resource Guids to match on, however depending on the way your custom inventory is set up you can use other unique identifiers. Click under each Join Field and select the fields to match on, then click OK. 16 In Query Designer, click Run Query to test the join and if the relationship is valid, you should see additional columns in the query result set. If the join produces an error, go back and edit the relationship fields to correct the join. When the query result displays as expected, click OK to close the Query Designer window. 17 Notice that the underlying SQL query has been written for you in the Dataset Properties window. 18 Click OK to close the Dataset Properties window. 19 We now need to create three additional columns in our table to display the additional image details from our custom inventory. To add a column, right-click the gray column header that appears when you click into the Computer Name field, then select: Insert Column > Right. 20 Click into the new column header and type a name specific to your custom inventory data you want to display. For our example, we use "Image Version." Then right-click on the data cell and select Expression. 21 Report Builder has several predefined functions that are built into it that can be leveraged to form an expression and extend report functionality. These functions work much the same way functions work in Excel, where users need to understand the format of specific functions and the arguments that are expected to be able to use them accordingly. For this example, use the Lookup function to tie data from the two data sets together. In the Category column, expand Common Functions and click Miscellaneous, then in the Item column that appears select Lookup. Implementing IT Analytics Client Server Management Content Pack 72 Integrating custom inventory data in IT Analytics
22 Notice the description and the example that is provided on the right-hand side for the Lookup function. To tie the data sets together we need a common identifier that resides in both sets. In this example, Computer – Name (from the Computer cube) and Name (from the custom inventory data set) are used to signify the 1-to-1 relationship. Once that is established we can then add in the custom inventory data to display in the report. To set the expression value for the Lookup function, type the following into the Set expression for: Value field :
=Lookup(Fields!Computer___Name.Value,Fields!Name.Value,
Fields!Image_Version.Value, "CustomInv")
23 Note that you replace “ - “ with “___” because spaces and dashes are not allowed in the expression. Click OK to close the expression window. 24 You should see an abbreviated place holder in that cell within the table, which represents the expression. 25 We can add additional columns, based on the remaining data from the custom inventory that we want to display. To do so, repeat steps 19– 23, being sure to name the columns and set the value of the lookup expression appropriately. In our example, we added two additional columns to display other fields from custom inventory and populated the values for each expression as follows:
=Lookup(Fields!Computer___Name.Value, Fields!Name.Value,
Fields!Deployment_Date.Value, "CustomInv")
=Lookup(Fields!Computer___Name.Value, Fields!Name.Value,
Fields!Deployment_Technician.Value, "CustomInv") Implementing IT Analytics Client Server Management Content Pack 73 Integrating data from two cubes in IT Analytics
26 Once you are done adding the additional columns and expression values, your table should look like something similar to the following screen shot:
27 We are now ready to preview the report and ensure that the data has been tied together correctly. To preview the report, click the Run button at the top left. 28 Depending on what custom inventory you have added to your report, you should see data from both data sets display together. 29 Select the Design button to go back to the Design view and save the report. 30 Click the save icon in the Report Builder toolbar to save this report to Reporting Services IT Analytics folder and name it appropriately for your environment. For our example. we named the report “Custom Inventory Example”. 31 To link this report into the Symantec Management Platform console open the console then navigate to the Reports > IT Analytics > Reports folder. 32 Right-click on the Reports folder and select New > IT Analytics Report. 33 In the Report Type drop-down box, select Report, verify that the Folder Name is consistent with where you saved it and then in the Report Name drop-down select the report under the name you saved. Then click the Add Report button. 34 You should see a message saying that the report was added successfully. 35 Refresh your browser and expand the Reports folder. 36 Locate and select the report you added.
Integrating data from two cubes in IT Analytics When you author reports in IT Analytics, it may be beneficial to combine data from two different cubes to achieve the desired result set. For example, an administrator may want to combine Patch Management with Asset data to easily identify the location of computers that require Implementing IT Analytics Client Server Management Content Pack 74 Integrating data from two cubes in IT Analytics
critical updates within the same report. Because IT Analytics is built on standard, proven technologies the process to combine data from two cubes into a single report is achievable with a consistent pattern through leveraging Microsoft Report Builder. The example below illustrates how to achieve this goal, without needing to understand the underlying schema or implement complex queries. To complete this example, assets must be assigned to locations and the Report Builder 3.0 must be installed. If possible, Symantec recommends that you use SQL Server 2008 SP2, 2008 R2 or 2012 to take advantage of the new features included in Report Builder 3.0 to author a more robust custom report. For more information on using Report Builder, please see the Microsoft website. To create a data set for computer data 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, click Reports. 3 Click the Report Builder tab and then the Launch Report Builder button. 4 Allow a few minutes for the application to load. 5 From the Getting Started window, select Table or Matrix Wizard. 6 In the Choose a dataset panel, you are prompted to choose a data set. A data set includes the desired fields and values to populate the report, similar to how the totals and attributes are selected when you browse a cube and create a pivot table view in the Symantec Management Platform console. If it is the first-time Report Builder is used then most likely there is no data set to choose from. Make sure that the Create a dataset radio button is selected and click Next. 7 In the Choose a connection to a data source panel, you are prompted to choose a connection to a data source. A data source is the repository where the data for the report is stored. In the case of IT Analytics, the data is stored in the Microsoft Analysis Services Database that is specified when IT Analytics was installed. If you do not know the Analysis Services Database name, the server where it resides, or have the credentials necessary to connect to it please contacts your Altiris Administrator. 8 To create a new data source, click the Browse button and navigate to the ReportServer/IT Analytics folder on the server that houses SQL Reporting Services. Within that folder there is a data source called ITAnalytics. Select ITAnalytics as the data source for the report and click Open. 9 Verify that the data source you browsed to is displayed on the next screen of the wizard. Implementing IT Analytics Client Server Management Content Pack 75 Integrating data from two cubes in IT Analytics
10 Ensure that the connection to the data source is valid by clicking the Test Connection button in the lower right of the wizard. Assuming the test succeeded, you should see the following message: "Connection created Successfully" 11 Click Next. You are prompted to design a query to make up the data set for the report. 12 First we build the report with information from the Computers cube and then add in the custom inventory data later. In the Design a query panel, click the browse ...button toward the top of the panel. In the Cube Selection window, select the Patch Management cube and click OK. 13 Expand Measures > Patch Vulnerabilties, then drag the Vulnerable Computer Count into the main query window. 14 Expand Computer and drag Computer – Name into the query window, before Vulnerable Computer Count. 15 Expand Software Update and drag Software Update - Severity into the query window, before Computer Name. 16 Click Next to complete the creation of the data set. 17 In the Arrange fields panel, you are prompted to arrange the fields to display properly in the table. Drag Vulnerable_Computer_Count to the Values window and drag Computer__Name and Software_Update_Severity to the Row Groups window. Click Next. 18 In the Choose the layout panel, you are prompted to choose the layout of the report. Accept the default settings and click Next. 19 In the Choose a style panel, you are prompted to select a style for the report. Choose a color scheme you prefer and click Finish. 20 You should see a sample table on the report canvas. The data source and data set that display on the left navigation have already been created for you by the wizard. Rename the title of the report to Computer Patch Severity and Location. 21 Resize the font of the title so that it fits within the given area. Also, widen the columns of the table so that you can read the column headers. You can format in the same way you would with Excel, click on the line between the columns, and when a gray bar appears at the top of the table, then expand by dragging the columns. 22 Right-click on DataSet1 which was created automatically by the wizard (this displays in the Report Data pane on the far left) and then click on Dataset Properties. Implementing IT Analytics Client Server Management Content Pack 76 Integrating data from two cubes in IT Analytics
23 Rename the data set as “PatchData” which helps to differentiate it from the new data that we create in the next procedure to pull in the Asset Data. Also notice the query for the data set which has been written entirely in the background by going through the wizard. 24 Next we create the data set for asset data. To create a data set for Asset data 1 Now we create a new data set to pull in Asset data specific to the computer's location. In the Report Data pane, right-click on Datasets and select Add Dataset. 2 In the Dataset Properties window, name the data set “AssetData” and select to Use a dataset embedded in my report, then select ITAnalytics in the Data source drop-down. 3 Click the Query Designer button. 4 In the Design a query window, if the Assets cube is not already selected, click the browse ...button toward the top of the window. In the Cube Selection window, select the Assets cube and click OK. 5 Expand Measures > Assets and drag Asset Count into the query window. 6 Expand Asset and drag the Asset–Name field into the query window. 7 Expand Location and drag the Location–Name field into the query window, in between Asset–Name and Asset Count. 8 Click OK to close the Query Designer window and click OK again to close the Dataset Properties window. You should see both data sets listed in the Report Data pane. 9 We now need to create an additional column in our table to display the location data for each computer. To add a column, right-click the gray column header that appears when you click into the Computer Name field, then select: Insert Column > Right. 10 Click into the new column header and type “Location” then right-click on the data cell below and select Expression. 11 Report Builder has several predefined functions that are built into it that can be leveraged to form an expression and extend report functionality. These functions work much the same way functions work in Excel, where users need to understand the format of specific functions and the arguments that are expected to be able to use them accordingly. For this example, use the Lookup function to tie data from the two data sets together. In the Category column, expand Common Functions and click Miscellaneous, then in the Item column that appears select Lookup. Implementing IT Analytics Client Server Management Content Pack 77 Integrating data from two cubes in IT Analytics
12 Notice the description and the example that is provided on the right-hand side for the Lookup function. To tie the data sets together we need a common identifier that resides in both sets. In this example, Computer – Name (from the Patch Management cube) and Computer – Name (from the Assets cube) are used to signify the 1-to-1 relationship. Once that is established we can then add in the Location Name for each computer to display in the report. To set the expression value for the Lookup function, type the following into the Set expression for: Value field :
=Lookup(Fields!Computer___Name.Value,Fields!Asset___Name.Value,
Fields!Location___Name.Value, "AssetData")
13 Note that “ - “ is replaced by “___” because spaces and dashes are not allowed in the expression. Click OK to close the expression window. 14 You should see an abbreviated place holder in that cell within the table, which represents the expression. 15 We are now ready to preview the report and ensure that the data has been tied together correctly. To preview the report, click the Run button at the top left. 16 Expand the patch severity levels and verify that the computer name and their associated locations display correctly. If you receive values of "Unknown" for location, verify that you have associated a location to that specific asset in the Symantec Management Platform console. Also verify that the Assets cube has been processed in the IT Analytics Settings. 17 Select the Design button to go back to the Design view and save the report. 18 Click the save icon in the Report Builder toolbar to save this report to Reporting Services IT Analytics folder and name it “Computer Patch Severity and Location”. 19 To link this report into the Symantec Management Platform console open the console then navigate to the Reports > IT Analytics > Reports > Patch Management folder. 20 Right-click on the Reports folder and select New > IT Analytics Report. 21 In the Report Type drop-down box, select Report, verify that the Folder Name is consistent with where you saved it and then in the Report Name drop-down select the Computers Patch Severity and Location report. Then click the Add Report button. 22 You should see a message saying that the report was added successfully. 23 Refresh your browser and expand the Reports folder. 24 Locate and select the report you added. Chapter 5
Granting access to IT Analytics Server
This chapter includes the following topics:
■ About security
■ About the SQL Server Database Engine
■ About SQL Server Analysis Services
■ Granting access to cubes using the Symantec Management Console
■ Adding a user to a default role
■ Modifying role privileges
■ Creating a role
■ Deleting a role
■ Granting access to cubes using SQL Server Management Studio
■ About SQL Server Reporting Services
■ Granting access to reports using the Symantec Management Console
■ Granting access to reports using the Report Manager Web site
■ Granting access to the dashboards, cubes, and reports
■ Symantec Management Platform role-based privileges
■ Granting access to save and load views and create new reports
■ Filtering role-based cubes (advanced) Granting access to IT Analytics Server 79 About security
■ About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes
■ Reconfiguring the Reporting Services data sources to access the Analysis Services cubes
■ Configuring Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers
■ Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection
About security In some instances, you might want to manage a standard security configuration. In this configuration, all users of IT Analytics are granted the same rights to view cubes and report information. In this instance, a recommended best practice is to create a Domain Security Group. Your group can contain all the users and groups or users that require access. For the purpose of this configuration example, this group is called IT Analytics Users. Users typically use the Symantec Management Console to access the content pack. Users must have access through a Symantec Management Platform security role and have at least Symantec Guests role privileges. They must also have access to the data within the Analysis Services cubes and reporting services reports to have full functionality. For the standard security configuration, users in the IT Analytics Users group already have access to the Symantec Guests Security role in Symantec Management Platform. See “Granting access to cubes using the Symantec Management Console” on page 81. See “Granting access to reports using the Symantec Management Console” on page 86. See “Granting access to the dashboards, cubes, and reports” on page 89. See “Symantec Management Platform role-based privileges” on page 89.
About the SQL Server Database Engine IT Analytics provides the configuration information and the user functionality that is hosted inside Symantec Management Platform. It supports all database versions that Symantec Management Platform supports. You can access the specific configuration information and the user functionality through the Symantec Management Console. The relational data that the CMDB hosts acts as the source for the cubes that are installed in SQL Analysis Services. During the configuration of the Analysis Server section of the Connections page in the IT Analytics Settings folder, the data source gets created. The data source is created in the Granting access to IT Analytics Server 80 About SQL Server Analysis Services
specified SQL Server Analysis Services Database that inherits the configured settings for the host Symantec Management Platform database. The data source also connects from Analysis Services to the database engine at the time of cube processing. Specific configurations within Symantec Management Platform might cause the data sources in Analysis Services to fail to connect to the relational database engine. In case this situation happens, it is important that you understand how and when the data sources in Analysis Services are created. You should also know how to reconfigure the data sources if a connection fails. When you click Save Database Setting for the Analysis Server database box, the current connection settings for CMDB are used. This situation happens while you configure the Analysis Server section of the Connection Settings. The connection settings are used to either create new data sources in the Analysis Server database (if they do not already exist). They can also overwrite the existing settings. To repair the data sources that fail to connect, click the edit symbol for the Analysis Server database box. Then, click Save Database Settings without altering the configuration. This action sets the data sources to the current values. This step is necessary whenever the database settings for Symantec Management Platform are altered. If you need to make advanced configuration changes to the data sources, you can directly manipulate the data sources by using SQL Server Management Studio. For example, you might want to change the host name or its credentials. The configuration changes persist as long as the Analysis Server database is not reconfigured using the instructions in this section. This action might be necessary when Notification Server is configured to connect to the CMDB using local host. It also might be necessary when the Analysis Server database is not on the same host as Notification Server and the database engine. See “How IT Analytics works” on page 14. See “About SQL Server Analysis Services” on page 80. See “About SQL Server Reporting Services” on page 86.
About SQL Server Analysis Services SQL Server Analysis Services is accessed during the configuration of the Analysis Services database and its contents. The users that access the cubes as a source of information for tables, charts, dashboards, and reports also access Analysis Services. In addition, the currently configured application identity of Notification Server is used to access Analysis Services during the setup process. For the application identity to configure objects in the designated Analysis Server, one of the following conditions must be true:
■ The application identity is a local administrator on the Analysis Services host computer. It also has administrator rights to the local Analysis Services instance. Granting access to IT Analytics Server 81 Granting access to cubes using the Symantec Management Console
■ The application identity is a member of the designated Analysis Services instance server role. This membership lets the users that are not local administrators have administrative privileges on the Analysis Services instance. You can add a user to the Analysis Services server role from the SQL Server Management Studio. Add a user by accessing the properties dialog box for the Analysis Services instance. Then, navigate to the Security page. On this page, you can add the application identity user or a group to which the user belongs.
■ The target Analysis Services database for the content pack is already created on the designated Analysis Services instance before the configuration of the Server. The application identity is in a role in that database that has administrative privileges. The most common access to Analysis Services is for users to connect to cubes to perform analysis and run reports. These connections commonly use the cubes and the data source to an SQL Server Reporting Services report that is accessed through the Symantec Management Platform. You can also use a third-party application that is designed for cube browsing including Microsoft SQL Server Management Studio, Microsoft Excel, ProClarity, and others. You can manage the user rights in Analysis Services through the use of roles. To view a cube, a user must be in a role that has read access to a cube. Roles also let you control the details of cubes, including the dimensions of cubes and the actual dimension members and data within cubes. You can grant read access to cubes by using the Security tab on the Cube Setup page in the Symantec Management Console. See “How IT Analytics works” on page 14. See “About the SQL Server Database Engine” on page 79. See “About SQL Server Reporting Services” on page 86. See “About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes” on page 92. See “Configuring the content pack and IT Analytics Server” on page 21.
Granting access to cubes using the Symantec Management Console You can grant cube access to users that do not already have administrative privileges on the Analysis Server instance that hosts the IT Analytics cubes. To grant access to cubes 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Cubes. Granting access to IT Analytics Server 82 Adding a user to a default role
4 In the right pane, click the Security tab. 5 (Optional) Add members to the default IT Analytics Users role or create and manage new roles. See “Adding a user to a default role” on page 82. See “Modifying role privileges” on page 82. See “Creating a role” on page 83. See “Deleting a role” on page 84. See “Granting access to cubes using SQL Server Management Studio” on page 85.
Adding a user to a default role You can add members to the default IT Analytics Users role. To add a user to the default role 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Cubes. 4 In the right pane, click the Security tab. 5 In the Role Members section, click Add. 6 Select users or groups of users from the local computer or domain. 7 Click OK. After the screen refreshes, the selected users or groups display in the Role Members section. See “Granting access to cubes using the Symantec Management Console” on page 81. See “Modifying role privileges” on page 82. See “Creating a role” on page 83. See “Deleting a role” on page 84.
Modifying role privileges You can modify the privileges for each defined role. Granting access to IT Analytics Server 83 Creating a role
To modify privileges for a role 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Cubes. 4 In the right pane, click the Security tab. 5 Under Automatically Scoped Roles, check the Enable Schedule box to synchronize the content pack-founded security with the Symantec Management Platform's role and scoped security. Once the schedule box is enabled, any resource scoping that is defined in the organizational groups or views are automatically applied to the cubes. Only items in that cube which are within the same organizational group or view they have been granted access to see. The schedule indicates when the synchronization should occur. 6 Under Security Roles, is the list of roles within the Symantec Management Platform. Click the Manage Cube Permissions link next to the desired role to manage cube access for that specific role. An empty box indicates that members of this role do not have access to that cube. An empty box also indicates that any cubes, dashboard, or the reports that include this cube have reduced data sets or return no results. The Synchronize check box indicates if the role should be included in the Automatic Scoped Roles synchronization process. 7 In the Manually Managed Security Roles section, in the drop-down box, select the appropriate role to modify. Use the + or X options to add or remove members of the role. Check or uncheck the cubes to which the role should or should not have access. 8 Click Apply. See “Granting access to cubes using the Symantec Management Console” on page 81. See “Adding a user to a default role” on page 82. See “Creating a role” on page 83. See “Deleting a role” on page 84.
Creating a role You can create a new role that is separate from the default IT Analytics Users role. Granting access to IT Analytics Server 84 Deleting a role
To create a role 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Cubes. 4 In the right pane, click the Security tab. 5 Under Manually Managed Security Roles, click New. 6 Enter a name for the role. 7 Add members to the role. 8 Grant read access to the required cubes. 9 Click Save Changes. See “Granting access to cubes using the Symantec Management Console” on page 81. See “Adding a user to a default role” on page 82. See “Modifying role privileges” on page 82. See “Deleting a role” on page 84.
Deleting a role You can delete any roles that you created. To delete a role 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Cubes. 4 In the right pane, click the Security tab. 5 Under Roles, select the role that you want to delete from the drop-down list. 6 Wait for the screen to refresh, and then click Delete. The screen refreshes again, and a message displays at the top of the page, which states that the role was successfully deleted. 7 Click Apply. See “Granting access to cubes using the Symantec Management Console” on page 81. See “Adding a user to a default role” on page 82. Granting access to IT Analytics Server 85 Granting access to cubes using SQL Server Management Studio
See “Modifying role privileges” on page 82. See “Creating a role” on page 83.
Granting access to cubes using SQL Server Management Studio As an alternative to granting access to cubes using the Symantec Management Console, you can also use SQL Server Management Studio. See “Granting access to cubes using the Symantec Management Console” on page 81. To grant access to a cube using SQL Server Management Studio 1 Open SQL Management Studio. 2 Connect to Analysis Services using an account that has administrative rights. 3 Within the content pack database, right-click the Roles folder. 4 Click New Role. 5 On the Create Role dialog box, enter IT Analytics Users as the role name. 6 Select the Read Definition database permission for the role. 7 On the Cubes page, set the Access drop-down list to Read for each cube that you want this role to have access to. If you install additional cubes in the future, you need to explicitly grant the read privilege for each cube after you install it. 8 On the Membership page, click Add to specify users and groups for this role. 9 Click Object Types, and then select Groups to allow the security group to be added to the role. 10 Click OK. 11 Click Location and change the location to the domain for which you created the IT Analytics Users security group. 12 Click OK. 13 In the box for objects to select, add the IT Analytics Users group. 14 Click OK. Members of this role now have the appropriate rights to view the cubes that this role permits. You might need to configure Notification Server security to see the IT Analytics tab and installed cubes or reports. Granting access to IT Analytics Server 86 About SQL Server Reporting Services
About SQL Server Reporting Services SQL Server Reporting Services is accessed during the configuration of the reporting services folder and its content. The contents include the data source reports that are used to access cubes as well as the installation of dashboards and reports. Reporting Services is also accessed each time that a user runs a report in the Symantec Management Platform. They can also access reports directly through the Reporting Services Report Manager Web site. During configuration of the reporting services folder, the currently configured application identity of Notification Server is used to access Reporting Services. The content pack configuration pages help with this configuration. The application identity must be granted the content manager privilege to a Reporting Server. The application identity needs this privilege to configure objects in the designated Reporting Server. By default, the local administrators group on the Reporting Server has content manager privileges. However, if the application identity is not part of this group, it can be granted the system administrator privilege. You can start this process by navigating to the permissions page of the properties dialog box within SQL Server Management Studio for that Reporting Server. By default, only the users in the local administrators group have access to the reports on the SQL Reporting Service. The browser role must be granted in SQL Server Reporting Server. The browser role can be applied at the top-level folder, where all child reports inherit the role. Alternatively, security can be applied to individual reports if you want more granular control. You can apply security within the Security tab of the Report Setup page. This functionality is similar to how Read access is administered for individual cubes. Alternatively, the Report Manager Web site within SQL Reporting Services can be used to manage user Read access to specific reports. For reports to return data, the account that you use must have at least Read access to the Analysis Server cubes that the report accesses. See “How IT Analytics works” on page 14. See “About the SQL Server Database Engine” on page 79. See “About SQL Server Analysis Services” on page 80. See “About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes” on page 92.
Granting access to reports using the Symantec Management Console You can grant access to reports to the users that do not already have browser privileges. You can grant access by using the Symantec Management Console. Granting access to IT Analytics Server 87 Granting access to reports using the Symantec Management Console
To grant access to a report using the Symantec Management Console 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, expand the Settings folder. 3 Click Reports. 4 In the right pane, click the Security tab. 5 On the Report configuration page on the Security tab, take one of the following actions:
If you see the error "Unable to locate Browser The error indicates that the content pack was role. Please specify the name of the Browser unable to determine the correct name for the Role as it appears in SQL Reporting Services" Browser role in Report Services. Go to step 6.
If you do not see the error "Unable to locate Go to step 11. Browser role. Please specify the name of the Browser Role as it appears in SQL Reporting Services"
6 On the Internet, go to the SQL Server Reporting Services Report Manager page at the following URL: http://servername/Reports 7 In SQL Reporting Services 2005, on the Properties tab, click Folder Settings > New Role Assignment. 8 Identify the correct role. The role is in the native language for the server; therefore, it may be in a different language than is currently set in Internet Explorer. The English translation for the role is Browser or Explorer. 9 On the Report configuration page, in the text box, enter the role in the native language. 10 Click Save Changes. 11 In the Role Members dialog box, add members to the role. See “About security” on page 79. See “Granting access to reports using the Report Manager Web site” on page 88. Granting access to IT Analytics Server 88 Granting access to reports using the Report Manager Web site
Granting access to reports using the Report Manager Web site You can grant reports access to users that do not already have browser privileges on the report server instance that hosts the content pack. See “About security” on page 79. See “Granting access to reports using the Symantec Management Console” on page 86. To grant access to a report using the Report Manager Web site 1 As a user with system administrator privileges for the reporting services instance, access the Report Manager Web site. The URL for the report manager is similar to http://servername/Reports/. If you did not install SQL Server Reporting Services as the default instance, the URL might be http://servername/Reports$InstanceName/. 2 Navigate to the folder that is configured to host the IT Analytics reports. By default, it is the IT Analytics folder. 3 Navigate to the Properties tab for the current folder. 4 In the left pane, navigate to the Security page. 5 Click New Role Assignment. 6 In the Group or user name box, enter IT Analytics Users. 7 Select the browser role. 8 Click OK. Members of this role now have the appropriate rights to view the reports that this role permits. You might need to configure Notification Server security to see the IT Analytics tab and any installed cubes or reports. 9 (Optional) If the IT Analytics User or any individual users need access to create reports using Report Builder, you must grant the System User privilege. To grant System User privilege, complete the following steps:
■ Click Site Settings in the top right-hand corner.
■ Under the Security header, click Configure site-wide security.
■ Click New Role Assignment.
■ In the Group or user name box, enter IT Analytics Users.
■ Select the System User role.
■ Click OK. Granting access to IT Analytics Server 89 Granting access to the dashboards, cubes, and reports
Members of this role now have the appropriate rights to create reports through Report Builder.
Granting access to the dashboards, cubes, and reports You can grant access through a Notification Server security role to the dashboards, the cubes, and the reports that are available on the IT Analytics Privileges section. To grant access to the dashboards, cubes and reports 1 In the Symantec Management Console, on the Settings menu, click Security > Account Management. 2 In the left pane, click Roles. 3 From the list of roles, select IT Analytics Users. 4 On the Members tab, click Add Member. 5 Select Add Account or Add Role. 6 Select the accounts and roles, and then click OK. 7 Click Save changes. All users assigned to the IT Analytics Users role now have access to the content pack features in the Symantec Management Console. They also have full access to the installed cubes and reports. Other Notification Server role-based privileges are provided to help you secure the data that is available within the content pack. These added privileges let administrators specify which Notification Server roles can save (author) and read (load) cube views. See “About security” on page 79. See “Granting access to cubes using the Symantec Management Console” on page 81. See “Granting access to cubes using SQL Server Management Studio” on page 85. See “Granting access to reports using the Symantec Management Console” on page 86. See “Granting access to reports using the Report Manager Web site” on page 88. See “Granting access to save and load views and create new reports” on page 90.
Symantec Management Platform role-based privileges The following Symantec Management Platform role-based privileges exist. Granting access to IT Analytics Server 90 Granting access to save and load views and create new reports
Table 5-1 Symantec Management Platform role-based privileges
Privilege Description
Author Private Cube Views Lets the users save the configured table or the chart views as private views.
Author Public Cube Views Lets the users save the configured table or the chart views as public views.
Read Private Saved Cube Views Lets the users open or load the previously saved table or the chart views that are marked as private.
Read Public Saved Cube Views Lets the users open or load the previously saved table or the chart views that are marked as public.
Author Key Performance Indicators Lets the user create or edit a Key Performance Indicator from a configured table view.
See “About security” on page 79. See “Modifying role privileges” on page 82.
Granting access to save and load views and create new reports You can grant the privileges that allow other users to author and save table or chart views. You can let others load and read those same views and create new reports. To grant access to save and load views and create new reports 1 In the Symantec Management Console, on the Settings menu, click Security > Roles. 2 In the left pane, select the role that you want to grant access to. 3 In the right pane, click the Privileges tab. 4 Scroll down to the IT Analytics privileges section, and expand it if necessary. 5 Select the privileges that you want to grant the role. 6 Click Apply. You can configure additional, scope-based security for each individual dashboard, report, or cube. See “About security” on page 79. See “Granting access to the dashboards, cubes, and reports” on page 89. Granting access to IT Analytics Server 91 Filtering role-based cubes (advanced)
Filtering role-based cubes (advanced) SQL Server Analysis Services has a wide range of advanced security opportunities. You can explore these opportunities through the SQL Server Management Studio. One such feature is the ability to filter the data that a role has access to by restricting access to specific members of a dimension. You can restrict access for the IT Analytics Users role to return the cube data only for computers with a Win32 system type. For this example, you must grant access to the Computer cube for the IT Analytics Users role. See “About security” on page 79. See “About SQL Server Analysis Services” on page 80. To filter a role-based cube 1 In SQL Server Management Studio, in the IT Analytics analysis services database, navigate to the properties for the IT Analytics Users role. 2 In the Edit Role dialog box, navigate to the Dimension Data page. 3 In the Dimension drop-down list, click the Computer dimension. 4 Select the Deselect all members radio symbol. 5 In the Attribute Hierarchy drop-down list, click Computer - System Type. 6 Select the dimension members that you want the role to have access to. In our example, there is a Win32 member. Actual names are specific to each instance of Notification Server. 7 Navigate to the Advanced tab of the Dimension Data page. 8 Click Enable Visual Totals. This step prevents the role from seeing the aggregate totals that are independent of the configured filtering and restricts aggregations. 9 Click OK to save the role configuration. Users in the configured role now see the results only for the computers that have a Win32 system type across all cubes. This filtering is enforced across all means of accessing the cubes including dashboards, cubes, reports, and third-party applications. Granting access to IT Analytics Server 92 About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes
About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes Before granting users access to reports, you must determine the level of control that you need over the reports and the information within the reports. How Reporting Services data sources is configured to access the Analysis Service cubes determines your level of control over reports and information within the reports. See “Configuring the content pack and IT Analytics Server” on page 21. The Authentication Type lets you choose how to configure the Reporting Services. You can use Stored Credentials or Windows Integrated Authentication as the Authentication Type. In the Symantec Management Console, navigate to the IT Analytics > Settings. Under Reporting Server on the SQL Server Settings tab, you can view the Authentication Type that you selected when you initially configured the content pack. Stored Credentials explicitly defines the user credentials. It automatically manages authentication across all application tiers because access to Reporting Services is always authenticated with the same rights for all users. After a user logs on to IT Analytics, all user inquiries to the reports impersonate the user privileges that are specified in Stored Credentials. You can grant individual access to the reports, but you cannot control individual access to the information within the reports. For example, you can allow the Asset managers to view the Asset Management reports. You can allow the Patch Management administrators to view the Patch Management reports. If you want more granular control over the information in the reports, you need to use Windows Integrated Authentication. Windows Integrated Authentication lets a user’s Windows credentials pass through to the Reporting Server. This method is recommended for restricting access to the Reporting Services on a per-user basis. If you use Windows Integrated Authentication, additional configuration might be necessary to ensure that authentication is appropriately managed across all application tiers. Windows Integrated Authentication lets you grant individual access to the reports. It also provides a more granular control over the information that you allow users to see in the reports. Windows Integrated Authentication lets you filter the available cube data. For example, you can allow Patch Management managers in different districts to view the same Patch Management reports. Because Windows Integrated Authentication lets you filter the available cube data, you can limit each Patch Management manager’s view of the Granting access to IT Analytics Server 93 Reconfiguring the Reporting Services data sources to access the Analysis Services cubes
information within the reports. Now, the Patch Management managers can only view the information in the reports that is relevant to their district. If you use Windows Integrated Authentication in the following environments, you need to configure Kerberos to allow a user’s Windows credentials to be used for authentication purposes:
■ Symantec Management Platform is installed on a different server than SQL Server Analysis Services and Reporting Services, and the Report Server Authentication Type is set to Windows Integrated Authentication See “Configuring Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers” on page 94.
■ SQL Server Analysis Services and SQL Reporting Services are all installed on different servers, and the Report Server Authentication Type is to Windows Integrated Authentication See “Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection” on page 96. The delegation features and impersonation features that are available with Windows Integrated Authentication can exist across multiple servers. In order for this feature to work, the network environment in which the content pack is installed must be configured to use the Kerberos protocol. Without the Kerberos protocol, Windows credentials are passed across only one server connection before they expire. The Kerberos protocol allows credential delegation over multiple connections. If Stored Credentials provides enough control over the reports, you can reconfigure the Reporting Services data sources to use Stored Credentials to access the Analysis Services cubes. If you need control over the information in the reports, you can reconfigure the Reporting Services data sources to use Windows Integrated Authentication to access the Analysis Services cubes. See “Reconfiguring the Reporting Services data sources to access the Analysis Services cubes” on page 93.
Reconfiguring the Reporting Services data sources to access the Analysis Services cubes When you initially configure the content pack and IT Analytics Server, you select either Stored Credentials or Windows Integrated Authentication to access Reporting Services. See “Configuring the content pack and IT Analytics Server” on page 21. If you want to change your selection, you can reconfigure the Reporting Services data sources to access the Analysis Services cubes. Granting access to IT Analytics Server 94 Configuring Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers
See “About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes” on page 92. To reconfigure the Reporting Services data sources to access the Analysis Services cubes 1 In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings. 2 In the left pane, click Configuration. 3 In the right pane, click the edit symbol (the yellow pencil) next to Authentication Type. 4 Under Authentication Type, select one of the following options:
■ Stored Credentials Explicitly defines the user credentials. Access to Reporting Services is always authenticated with the same rights for all users.
■ Windows Integrated Authentication Depending on the set-up of your environment, you may need to configure Kerberos so users can access the reports to which you grant them access. 5 Enter your user name and password. 6 Click Save Security Settings.
Configuring Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers If you install Symantec Management Platform on a different server than the SQL Server Analysis and Reporting Services and the Authentication Type is set to Windows Integrated Authentication, users cannot access the reports to which you grant them access unless you configure Kerberos. See “About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes” on page 92. If Stored Credentials provides enough control over the reports, you can reconfigure the Reporting Services data sources to use Stored Credentials to access the Analysis Services cubes. Then, you do not need to configure Kerberos. See “Reconfiguring the Reporting Services data sources to access the Analysis Services cubes” on page 93. If you need the control that Windows Integrated Authentication provides over the information in the reports, you must configure Kerberos. Kerberos allows the user’s credentials to pass from the Symantec Management Platform server to the SQL Server Analysis and Reporting Granting access to IT Analytics Server 95 Configuring Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers
Services server. Kerberos must be correctly configured on the following servers: Symantec Management Platform and the SQL Server Analysis and Reporting Services servers. Kerberos Authentication and configuration is a function of Microsoft Active Domain. Although configuration and support of Kerberos authentication is beyond the support policies of Symantec, we provide the following as guidance to help in configuring Kerberos in your environment. To configure Kerberos on the Symantec Management Platform and SQL Server Analysis Services and Reporting Services servers 1 From Active Directory, set the computer on which the Symantec Management Platform is hosted to Trust this computer for delegation to any server (Kerberos only). If the Application Pool that Symantec Management Platform uses in IIS uses a domain account, you also need to set that account to be trusted for delegation. If the Application Pool is using the default value "ApplicationPoolIdentity", you may skip this step. 2 Add the following Service Principal Names to the Symantec Management Platform:
■ Setspn - S http/netbiosName netbiosName For example, Setspn - S http/computer1 computer1
■ Setspn - S http/Fully Qualified Domain Name netbiosName For example, Setspn - S http/computer1.domain.com computer1 If the Application Pool that Symantec Management Platform uses in IIS uses a domain account, you may need to set the Service Principal Names for that account instead of computer1. For example: Setspn - S http/computer1 domain\username Setspn - S http/computer1.domain.com domain\username For additional information on Setspn, see the Microsoft Technet Web site at the following URL: http://technet.microsoft.com/en-us/library/cc773257(WS.10).aspx 3 If you use SQL 2008, on the Reporting Services server edit the ReportServer.config file. Edit the config file so that RSWindowsNegotiate/ is listed at the top of the Authentication node. You can locate this file at SQL Server Install Directory\MSRS10.MSSQLSERVER\ReportingServer The ReportServer.config file is installed on the box that hosts the Reporting Services. The config file is an XML file; use a program such as Notepad to edit the file. If you do not use SQL 2008, you do not need to edit the config file on the Reporting Services server. Granting access to IT Analytics Server 96 Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection
4 If SQL Reporting Services is running as a domain account, add the following Service Principal Names for the account that the SQL Reporting Services service is running as.
■ Setspn - S http/netbiosName domain\username
■ Setspn - S http/fqdn domain\username For additional information on Setspn, see the Microsoft | Technet Web site at the following URL: http://technet.microsoft.com/en-us/library/cc773257(WS.10).aspx If SQL Reporting Services is not running as a domain account, you do not need to add the Service Principal Names. 5 To make the changes take effect, restart all affected systems. See “About security” on page 79. See “About SQL Server Analysis Services” on page 80. See “About SQL Server Reporting Services” on page 86.
Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection Symantec recommends that the SQL Server Analysis Services and SQL Server Reporting Services instances that IT Analytics uses reside on the same host server. You can host these services on different servers in a highly distributed environment. However, when you host these services on different servers, additional configuration might be necessary to ensure that authentication is managed appropriately across all application tiers. When SQL Server Analysis Services and SQL Server Reporting Services are hosted on different servers and the Authentication Type is set to Windows Integrated Authentication, an additional connection is required to pass the credentials of the user from the Reporting Server to the Analysis Server. To ensure that the user’s credentials are passed successfully, you must configure Kerberos. Without configuring Kerberos, the connection is attempted as an anonymous user, which fails authentication in a typical configuration. When authentication fails, users cannot access the reports to which you grant them access. Therefore, if you need the control that Windows Integrated Authentication provides over the information in the reports, you must configure Kerberos. See “About configuring the Reporting Services data sources to use Stored Credentials or Windows Integrated Authentication to access the Analysis Services cubes” on page 92. Granting access to IT Analytics Server 97 Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection
If Stored Credentials provides enough control over the reports, you can reconfigure the Reporting Services data sources to use Stored Credentials to access the Analysis Services cubes. Then you do not need to configure Kerberos. See “Reconfiguring the Reporting Services data sources to access the Analysis Services cubes” on page 93. Kerberos Authentication and configuration is a function of Microsoft Active Domain. Although configuration and support of Kerberos authentication is beyond the support policies of Symantec, we provide the following as guidance to help in configuring Kerberos in your environment. To configure Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection 1 Configure the Kerberos protocol for the SQL Server Reporting Services server to SQL Server Analysis Services server connection to allow credential delegation over multiple connections. If Symantec Management Platform is installed on the same server as SQL Server Reporting Services, no additional configuration is required. If Symantec Management Platform is installed on a different server than SQL Server Reporting Services, go to step 2. 2 Configure Kerberos so that the user’s credentials can pass from the Symantec Management Platform server to the SQL Server Reporting Services server. 3 From Active Directory, set the computer on which the Symantec Management Platform is hosted to Trust this computer for delegation to any server (Kerberos only). If the Application Pool which Symantec Management Platform uses in IIS uses a domain account, you also need to set that account to be trusted for delegation. 4 Add the following Service Principal Names to the Symantec Management Platform:
■ Setspn - S http/netbiosName netbiosName For example, Setspn - S http/computer1 computer1
■ Setspn - S http/Fully Qualified Domain Name netbiosName For example, Setspn - S http/computer1.domain.com computer1 If the Application Pool which Symantec Management Platform uses in IIS uses a domain account, you may need to set the Service Principal Names for that account instead of computer 1. For example, Setspn - S http/computer1 domain\username Setspn - S http/computer1.domain.com domain\username For additional information on Setspn see the Microsoft Technet Web site at the following URL: Granting access to IT Analytics Server 98 Configuring Kerberos for the SQL Server Analysis Services server to SQL Server Reporting Services server connection
http://technet.microsoft.com/en-us/library/cc773257(WS.10).aspx 5 If you use SQL 2008, on the Reporting Services server edit the ReportServer.config file. Edit the config file so that RSWindowsNegotiate/ is listed at the top of the Authentication node. You can locate this file at SQL Server Install Directory\MSRS10.MSSQLSERVER\ReportingServer The ReportServer.config file is installed on the server that hosts the Reporting Services. The config file is an XML file; use a program such as Notepad to edit the file. If you do not use SQL 2008, you do not need to edit the ReportServer.config file on the Reporting Services server. 6 If SQL Reporting Services is running as a domain account, add the following Service Principal Names for the account that the SQL Reporting Services service is running as.
■ Setspn - S http/netbiosName domain\username
■ Setspn - S http/fqdn domain\username For additional information on Setspn, see the Microsoft | Technet Web site at the following URL: http://technet.microsoft.com/en-us/library/cc773257(WS.10).aspx If the SQL Reporting Services is not running as a domain account, you do not need to add the Service Principal Names. 7 To make the changes take effect, restart all affected systems. See “About security” on page 79. See “About SQL Server Analysis Services” on page 80. See “About SQL Server Reporting Services” on page 86. Appendix A
Dashboard reference
This appendix includes the following topics:
■ Symantec Management Agent Dashboard
■ Asset Control Dashboard
■ Computer Inventory Dashboard
■ Event Console Alerts Dashboard
■ IT Analytics Usage Dashboard
■ Monitor Alerts Dashboard
■ Patch Management Dashboard
■ Software Delivery Dashboard
■ Software Installs Dashboard
Symantec Management Agent Dashboard Displays a graphical representation of basic inventory age, a count of received solution inventory and received application metering summary information for all Symantec Management Agents.
Asset Control Dashboard Displays a graphical representation of computers by asset status and in-stock assets by type. It also contains the pie charts that represent the ratios of assets with and without their assigned owners, locations, cost centers, and departments. Dashboard reference 100 Computer Inventory Dashboard
Computer Inventory Dashboard Displays a graphical representation of the operating system, manufacturer, and domain breakdown of computers. It also includes the top five operating systems.
Event Console Alerts Dashboard Displays a graphical representation of Event Console Alerts by category and severity level. It also includes the top event console messages.
IT Analytics Usage Dashboard Provides a high-level summary of IT Analytics usage over time. It also includes the top users, top cubes, and top reports.
Monitor Alerts Dashboard Displays a graphical representation of Monitor Alerts by category and severity level. It also includes the most active rules that generated alerts.
Patch Management Dashboard Displays a graphical representation of patch risk level and vulnerable computers by severity.
Software Delivery Dashboard Provides a high-level overview of the top software advertisements by execution status. This report filters by data range, filter, and organizational group.
Software Installs Dashboard Provides a breakdown of the top five software titles, top Microsoft Office editions, and top five Adobe installations. This report filters by filter and organizational group. Appendix B
Report reference
This appendix includes the following topics:
■ Add Remove Programs by Name report
■ Add Remove Programs Search report
■ Advertisement Execution Event Summary report
■ Application Metering by File Name report
■ Application Metering Search report
■ Asset Search report
■ Assets by Asset Type report
■ Assets by Cost Center report
■ Assets by Department report
■ Assets by Location report
■ Assets by Model report
■ Computer Search report
■ Computers by CPU report
■ Computers by Domain report
■ Computers by Manufacturer report
■ Computers by Memory report
■ Computers by Operating System report
■ Computers by System Type report Report reference 102
■ Event Console Alert Details report
■ Event Console Alerts Trend report
■ Installed Files by File Name report
■ Installed Files Search report
■ iOS Device Details report
■ Microsoft Server Applications report
■ Microsoft Software Installs report
■ Mobile Device Details report
■ Monitor Alert Details report
■ Monitor Metrics CPU Utilization Trend report
■ Monitor Metrics Disk Utilization Trend report
■ Monitor Metrics Network Utilization Trend report
■ Monitor Metrics Trend report
■ Monitored Processes CPU Utilization Trend report
■ Package Download Event Summary report
■ Package Server Availability - Monthly report
■ Package Server Availability - Daily report
■ Patch Management Bulletin Summary report
■ Patch Management Details report
■ Patch Vulnerability report
■ Patch Vulnerability Search report
■ Servers by Type and Version report
■ Software Delivery Search report
■ Software License Compliance by Cost Center report
■ Software License Compliance by Department report
■ Software License Compliance by Location report
■ Software License Trend report Report reference 103 Add Remove Programs by Name report
■ Top 10 Applications Consuming CPU report
■ Top 10 Applications Consuming Memory report
■ Top 10 Users Consuming CPU report
■ Windows 8 Readiness Details report
Add Remove Programs by Name report Displays the publisher and the program name of all of the programs that the Software Management Framework detected. The Software Management Framework detects the programs as they are defined in the Add Remove Programs registry. It also includes a count of computers where each item was detected. This report lets users define a publisher and a program name to filter the results with.
Add Remove Programs Search report Displays the publisher, program name, and computer name for each distinct program and computer that the Software Management Framework detected. The Software Management Framework detects the programs in the Add Remove Programs registry. This report lets users define a publisher and a program name to filter the results with.
Advertisement Execution Event Summary report Contains the information from the Software Delivery Execution Event Cube. It includes a graphical trend of advertisement execution events over time. This report also includes a summary of the number of events, computers, packages, average duration in seconds per advertisement, and event status.
Application Metering by File Name report Displays a file name with a breakdown by year, quarter, and month. It also includes a computer count and run count, as detected by Application Metering Solution. This report lets users define a file name and product name to filter the results with. Report reference 104 Application Metering Search report
Application Metering Search report Displays the file name, product name, computer name, and run count for each file that Application Metering Solution detected. The report lets users define a month and a year date range, file name, and product name to filter the results with.
Asset Search report Displays the asset name, serial number, system number, asset type, asset status, cost center, department, location, manufacturer, model, and owner. The report lets users filter the results by any of these fields.
Assets by Asset Type report Displays the asset type, along with counts of each asset status. The report lets users filter the results by asset type, asset status, department, cost center, and location.
Assets by Cost Center report Displays the asset type by cost center, along with counts of each asset status. The report lets users filter the results by asset type, asset status, department, cost center, and location.
Assets by Department report Displays the asset type by department, along with counts of each asset status. The report lets users filter the results by asset type, asset status, department, cost center, and location.
Assets by Location report Displays the asset type by location, along with counts of each asset status. The report lets users filter the results by asset type, asset status, department, cost center, and location. Report reference 105 Assets by Model report
Assets by Model report Displays the asset models by manufacturer, along with counts of each asset status. The report lets users filter the results by asset type, asset status, department, cost center, and location.
Computer Search report Displays a summary of computer hardware and OS inventory as detected by Inventory Solution. The report allows users to filter the results by computer name, manufacturer, and model.
Computers by CPU report Displays a count of computers by CPU type, speed, and count.
Computers by Domain report Displays a count of computers by domain.
Computers by Manufacturer report Displays a count of computers by manufacturer and model.
Computers by Memory report Displays a count of computers by total physical memory in megabytes.
Computers by Operating System report Displays a count of computers by OS name and version.
Computers by System Type report Displays a count of computers by system type (platform). Report reference 106 Event Console Alert Details report
Event Console Alert Details report Displays a summary of Event Console Alerts.
Event Console Alerts Trend report Displays a count of critical, warning, major, informational, normal, undetermined, and by value alerts over time. These counts are displayed in table format along with a graphical trend of alerts for a designated period of time.
Installed Files by File Name report Displays the file name, product name, and manufacturer. It also includes a count of computers where software exists as detected by Software Management Framework. The report lets users filter the results by manufacturer, product name, and file name.
Installed Files Search report Displays the manufacturer, product name, file name, product version, and computer name as detected by Software Management Framework. The report lets users filter the results by manufacturer, product name, and file name. iOS Device Details report Displays a summary of managed iOS devices as detected by Mobile Management Solution. The report allows users to filter the results by device name, client version, model, jailbroken status, passcode compliance or organizational group.
Microsoft Server Applications report Displays the number of computers that have Microsoft server applications.
Microsoft Software Installs report Displays the number of systems that host common Microsoft software. Report reference 107 Mobile Device Details report
Mobile Device Details report Displays a summary of managed mobile devices as detected by Mobile Management Solution. The report allows users to filter the results by device name, client version, model, OS platform or organizational group.
Monitor Alert Details report Displays a summary of Monitor Alerts.
Monitor Metrics CPU Utilization Trend report Displays a graphical representation of the utilization of each individual processor over time for the monitored client computer. This report includes a table that details the CPU utilization metrics for each processor.
Monitor Metrics Disk Utilization Trend report Displays a graphical representation of disk utilization over time for a monitored client computer. This report includes a table that details the disk utilization metrics.
Monitor Metrics Network Utilization Trend report Displays a graphical representation of network utilization over time for a monitored client computer. This report includes a table that details the network utilization metrics.
Monitor Metrics Trend report Displays a graphical representation of Monitor Alerts and Tasks.
Monitored Processes CPU Utilization Trend report Displays a graphical representation of the utilization of the CPU over time for the monitored client. This report includes a table that details the CPU utilization metrics for the CPU. Report reference 108 Package Download Event Summary report
Package Download Event Summary report Displays the information that is contained in the Software Delivery Package Event cube. This summary includes a graphical trend of package download events by download method (HTTP or UNC). This report includes a summary of the number of events, computers, packages, disk space used, and download duration per download source and package.
Package Server Availability - Monthly report Displays the information that is contained in the Package Server Configuration Event cube. The report displays the percentage of time that the package servers communicate with Symantec Management Platform. The time is measured by comparing the expected number of configuration requests from a package server to the actual number of configuration requests that the package server performs over time. The report contains a parameter to designate the expected configuration request interval from the package server plug-in settings that should be used for the calculation. The results are presented in a graphical form. Bars represent the actual configuration requests per month in green. The difference between the expected requests and the actual requests are in red. This report also contains summary information by month and day in table form. It contains the ability to drill down to see the data further broken down by days within any given month.
Package Server Availability - Daily report Displays the information that is contained in the Package Server Configuration Event cube. The report displays the percentage of time that the package servers communicate with Symantec Management Platform. The time is measured by comparing the expected number of configuration requests from a package server to the actual number of configuration requests that the package server performs over time. The report contains a parameter to designate the expected configuration request interval from the package server plug-in settings that should be used for the calculation. The results are presented in a graphical form. Bars represent the actual configuration requests per day in green. The difference between the expected requests and the actual requests are in red. This report also contains summary information by day in table form.
Patch Management Bulletin Summary report Displays the applicable, installed, and vulnerable computer counts by bulletin. Report reference 109 Patch Management Details report
Patch Management Details report Displays a summary of computer hardware and OS inventory as detected by Inventory Solution. It contains the parameters that let you on patch risk level and vulnerable computers by severity.
Patch Vulnerability report Displays the bulletins by severity with a count of applicable, installed, and vulnerable computers as detected by Patch Management Solution. The report lets users filter the results by severity and bulletin name.
Patch Vulnerability Search report Displays a summary of the vulnerable computers for each bulletin that Patch Management Solution discovered. It also includes the computer hardware and OS inventory as detected by Inventory Solution. The report lets users filters the results by severity, bulletin name, and patch status.
Servers by Type and Version report Displays a count of the computers that are running a server OS, and displays these computers by OS title and version.
Software Delivery Search report Displays a summary of computers that have executed the Software Delivery Solution Advertisement. It contains the hardware and OS inventory as detected by Inventory Solution. The report requires users to select an advertisement. The report lets users filter the results by a month and a year date range. The source information for this report is the Software Delivery - Standard cube. The cube contains the information that is derived from the summary data that is stored in inventory classes and not from the original events.
Software License Compliance by Cost Center report Displays the license name by cost center. It also contains a count of installed, used, owned, and compliance status. Report reference 110 Software License Compliance by Department report
The report lets users filter the results by license name, month and year, cost center, department, and location.
Software License Compliance by Department report Displays the license name by department. It also contains a count of installed, used, owned, and compliance status. The report lets users filter the results by license name, month and year, cost center, department, and location.
Software License Compliance by Location report Displays the license name by location. It also contains a count of installed, used, owned, and compliance status. The report lets users filter the results by license name, month and year, cost center, department, and location.
Software License Trend report Displays by year, quarter, and month a count of installed, used, and owned licenses and their compliance status. It also displays a graphical trend representation of the licenses that are owned, installed, and used. The report requires users to select a license name. The report lets users filter the results by cost center, department, and location.
Top 10 Applications Consuming CPU report Displays a graphical representation of the top Windows processes that are consuming the greatest amount of CPU for a given monitored client computer. This report includes a table that details the hourly maximum and minimum CPU utilization percentage.
Top 10 Applications Consuming Memory report Displays a graphical representation of the top Windows processes that use the greatest amount of virtual memory for a given monitored client computer. This report includes a table that details the hourly virtual memory utilization. Report reference 111 Top 10 Users Consuming CPU report
Top 10 Users Consuming CPU report Displays a graphical representation of the top owners of Windows processes that are consuming the greatest amount of CPU for a given monitored client computer. This report includes a table that details the hourly maximum and minimum CPU utilization percentage.
Windows 8 Readiness Details report Displays a summary of computer hardware and OS inventory as detected by Inventory Solution. This report contains the parameters that let you filter the results that are based on the minimum requirements for Microsoft Windows 8. This report lets you filter the results by computer name, manufacturer, and model. Appendix C
Dimension attribute reference
This appendix includes the following topics:
■ Add Remove Programs
■ Asset
■ Asset Status
■ Asset Type
■ Computer
■ Cost Center
■ Created Date
■ Date
■ Department
■ EAS Managed Device
■ ESX Storage Volume
■ ESX Virtual Machine
■ Event Console Alert
■ Event Console Alert Action Audit Type
■ Event Console Alert Category
■ Event Console Alert Severity Dimension attribute reference 113
■ Event Console Monitor Rule
■ File
■ File Modified Date
■ Filter
■ IIS FTP Site
■ IIS Server
■ IIS Virtual Directory
■ IIS Web Site
■ iOS Device
■ iOS Global Restrictions
■ iOS Phone
■ iOS Program
■ iOS Security Info
■ Last Basic Inventory Date
■ Location
■ Logical Disk
■ Mobile Access Point
■ Mobile Device
■ Mobile Device Created Date
■ Mobile Device Last Updated Date
■ Mobile Device Site Server
■ Mobile Display
■ Mobile Network Wifi Adapter
■ Mobile Phone
■ Mobile Power
■ Mobile Processor
■ Mobile Program Dimension attribute reference 114
■ Monitor Metric
■ Monitor Metric Detail Level
■ Monitor Metric Instance
■ Monitor Metric Source
■ Monitor NT Event Category
■ Monitor NT Event Description
■ Monitor NT Event ID
■ Monitor NT Event Log File
■ Monitor NT Event Message DLL
■ Monitor NT Event Rule Triggered
■ Monitor NT Event Source
■ Monitor NT Event Type
■ Monitor NT Event User
■ Monitor Process Name
■ Monitor Process Owner
■ Monitor Task
■ Organizational Group
■ Package
■ Package Distribution Event Status
■ Package Download Method
■ Package Download Source
■ Package Download URL
■ Package Server
■ Package Status
■ Parent Task
■ Processor
■ Software Component Dimension attribute reference 115
■ Software Delivery Advertisement
■ Software Delivery Execution Event Command Line
■ Software Delivery Execution Event Status
■ Software Delivery Package Event Status
■ Software Delivery Status Event Status
■ Software Delivery Status Event Type
■ Software License
■ Software Management Compliance Package
■ Software Management Compliance Policy
■ Software Management Compliance Created Date
■ Software Management Compliance Modified Date
■ Software Product
■ Software Purchase
■ Software Update
■ Software Update Release Date
■ SQL Cluster
■ SQL Cluster Resource
■ SQL Database
■ SQL Database Creation Date
■ SQL Database System
■ SQL Storage Area
■ SQL User
■ Task
■ Task Server
■ Time
■ User Dimension attribute reference 116 Add Remove Programs
Add Remove Programs Add Remove Programs contains the following dimension attributes:
■ Add Remove Programs - Display Name
■ Add Remove Programs - Hidden
Asset Asset contains the following dimension attributes:
■ Asset - Asset Tag
■ Asset - Barcode
■ Asset - Manufacturer
■ Asset - Model
■ Asset - Name
■ Asset - Resource Guide
■ Asset - Serial Number
■ Asset - Server
Asset Status Asset Status contains the following dimension attributes:
■ Asset - Status
Asset Type Asset Type contains the following dimension attributes:
■ Asset - Type
Computer Computer contains the following dimension attributes:
■ Computer - Symantec Managed
■ Computer - Discovery Method
■ Computer - Domain Dimension attribute reference 117 Cost Center
■ Computer - IP Address
■ Computer - Last Logon User
■ Computer - MAC Address
■ Computer - Manufacturer
■ Computer - Model
■ Computer - Name
■ Computer - OS Name
■ Computer - OS Type
■ Computer - OS Version
■ Computer - OS Revision
■ Computer - Primary User
■ Computer - Resource Guide
■ Computer - Serial Number
■ Computer - Server
■ Computer - System Type
Cost Center Cost Center contains the following dimension attributes:
■ Cost Center - Code
■ Cost Center - Hierarchy Path
■ Cost Center - Name
Created Date Created Date contains the following dimension attributes:
■ Created Date - Date
■ Created Date - Day of Week
■ Created Date - Month
■ Created Date - Quarter
■ Created Date - Year Dimension attribute reference 118 Date
Date Date contains the following dimension attributes:
■ Date
■ Day of Week
■ Month
■ Quarter
■ Year
Department Department contains the following dimension attributes:
■ Department - Hierarchy Level
■ Department - Hierarchy Path
■ Department - Name
EAS Managed Device EAS Managed Device contains the following dimension attributes:
■ EAS Managed Device – Active Sync Mailbox Policy
■ EAS Managed Device – Active Sync Mailbox Policy Is Defaulted
■ EAS Managed Device – Device Friendly Name
■ EAS Managed Device – Device Identity
■ EAS Managed Device – Device IMEI
■ EAS Managed Device – Device Model
■ EAS Managed Device – Device Operator Network
■ EAS Managed Device – Device OS
■ EAS Managed Device – Device OS Agent
■ EAS Managed Device – Device OS Language
■ EAS Managed Device – Device Phone Number
■ EAS Managed Device – Device Type
■ EAS Managed Device – Device User Agent Dimension attribute reference 119 ESX Storage Volume
■ EAS Managed Device – Device Wipe Ack Time
■ EAS Managed Device – Device Wipe Request Time
■ EAS Managed Device – Device Wipe Sent Time
■ EAS Managed Device – Exchange Version
■ EAS Managed Device – First Time Sync
■ EAS Managed Device – Last Ping Heartbeat
■ EAS Managed Device – Last Policy Update Request Time
■ EAS Managed Device – Last Policy Update Time
■ EAS Managed Device – Last Success Sync
■ EAS Managed Device – Last Sync Attempt Time
■ EAS Managed Device – Last Sync Response Status
■ EAS Managed Device – Mailbox Display Name
■ EAS Managed Device – Mailbox Identify
■ EAS Managed Device – Mailbox Name
■ EAS Managed Device – Mailbox When Changed
■ EAS Managed Device – Mailbox When Created
■ EAS Managed Device – Primary SMTP Address
■ EAS Managed Device – Recovery Password
■ EAS Managed Device – Sam Account Name
■ EAS Managed Device – Server Name
ESX Storage Volume ESX Storage Volume contains the following dimension attributes:
■ ESX Storage Volume - File System Version
■ ESX Storage Volume - Free Size GB
■ ESX Storage Volume - Instance ID
■ ESX Storage Volume - Total Size GB
■ ESX Storage Volume - Volume Name Dimension attribute reference 120 ESX Virtual Machine
ESX Virtual Machine ESX Virtual Machine contains the following dimension attributes:
■ ESX Virtual Machine - Automatic Shutdown Action
■ ESX Virtual Machine - Automatic Shutdown Delay
■ ESX Virtual Machine - Automatic Startup Action
■ ESX Virtual Machine - Automatic Startup Delay
■ ESX Virtual Machine - CPS Assigned
■ ESX Virtual Machine - Disk Used GB
■ ESX Virtual Machine - Instance ID
■ ESX Virtual Machine - Max Disk Size GB
■ ESX Virtual Machine - Memory Allocated GB
■ ESX Virtual Machine - Name
■ ESX Virtual Machine - State
■ ESX Virtual Machine - Virtual System Type
Event Console Alert Event Console Alert contains the following dimension attributes:
■ Event Console Alert - Alert ID
■ Event Console Alert - Hostname
■ Event Console Alert - Message
Event Console Alert Action Audit Type Event Console Alert Action Audit Type contains the following dimension attributes:
■ Event Console Alert Action Audit Type - Action Type Description
■ Event Console Alert Action Audit Type - Action Type Name
Event Console Alert Category Event Console Alert Category contains the following dimension attributes:
■ Event Console Alert Category - Name Dimension attribute reference 121 Event Console Alert Severity
Event Console Alert Severity Event Console Alert Severity contains the following dimension attributes:
■ Event Console Alert Severity - Severity Level
■ Event Console Alert Severity - Severity Name
Event Console Monitor Rule Event Console Monitor Rule contains the following dimension attributes:
■ Event Console Monitor Rule - Category Name
■ Event Console Monitor Rule - Monitor Pack Name
■ Event Console Monitor Rule - Rule Name
File File contains the following dimension attributes:
■ File - Name
File Modified Date File Modified Date contains the following dimension attributes:
■ Filed Modified Date - Date
■ Filed Modified Date - Day of the Week
■ File Modified Date - Month
■ Filed Modified Date - Quarter
■ File Modified Date - Year
Filter Filter contains the following dimension attributes:
■ Filter - Name Dimension attribute reference 122 IIS FTP Site
IIS FTP Site IIS FTP Site contains the following dimension attributes:
■ IIS FTP Site - Name
■ IIS FTP Site - Path
■ IIS FTP Site - Rights
IIS Server IIS Server contains the following dimension attributes:
■ IIS Server - Application Server Console Installed
■ IIS Server - ASP Dot Net Installed
■ IIS Server - ASP Installed
■ IIS Server - BITS Service
■ IIS Server - COM Plus Service
■ IIS Server - Instance ID
■ IIS Server - Internet Data Connector Installed
■ IIS Server - Message Queue Service
■ IIS Server - Network DTC Installed
■ IIS Server - NNTP Service
■ IIS Server - Remote Admin Installed
■ IIS Server - Remote Desktop Web Connection Installed
■ IIS Server - Service
■ IIS Server - SMTP Service
■ IIS Server - Version
■ IIS Server - WWW Service
IIS Virtual Directory IIS Virtual Directory contains the following dimension attributes:
■ IIS Virtual Directory - Access Read Enabled
■ IIS Virtual Directory - Access Write Enabled Dimension attribute reference 123 IIS Web Site
■ IIS Virtual Directory - Anonymous Authentication Enabled
■ IIS Virtual Directory - Application Name
■ IIS Virtual Directory - Application Pool
■ IIS Virtual Directory - Basic Authentication Enabled
■ IIS Virtual Directory - Content Expiration Enabled
■ IIS Virtual Directory - Content Expiration Setting
■ IIS Virtual Directory - Content Location
■ IIS Virtual Directory - Content Location Path
■ IIS Virtual Directory - Default Document Name
■ IIS Virtual Directory - Default Document Enabled
■ IIS Virtual Directory - Digest Authentication Enabled
■ IIS Virtual Directory - Directory Browsing Enabled
■ IIS Virtual Directory - Dot Net Passport Authentication Enabled
■ IIS Virtual Directory - Element Name
■ IIS Virtual Directory - Execute Permission
■ IIS Virtual Directory - Integrated Windows Authentication Enabled
■ IIS Virtual Directory - Log Enabled
■ IIS Virtual Directory - Name
■ IIS Virtual Directory - Script Source Access Enabled
■ IIS Virtual Directory - Session State Enabled
■ IIS Virtual Directory - Session Timeout
■ IIS Virtual Directory - SSL Access Enabled
IIS Web Site IIS Web Site contains the following dimension attributes:
■ IIS Web Site - Access Read Enabled
■ IIS Web Site - Access Write Enabled
■ IIS Web Site - Anonymous Authentication Enabled
■ IIS Web Site - Application Name Dimension attribute reference 124 iOS Device
■ IIS Web Site - Application Pool
■ IIS Web Site - Bandwidth Throttling Enabled
■ IIS Web Site - Bandwidth Throttling Limit
■ IIS Web Site - Basic Authentication Enabled
■ IIS Web Site - Buffering Enabled
■ IIS Web Site - Certificate Enabled
■ IIS Web Site - Connection Limit
■ IIS Web Site - Content Expiration Enabled
■ IIS Web Site - Content Expiration Setting
■ IIS Web Site - Content Location
■ IIS Web Site - Default Document Name
■ IIS Web Site - Default Document Enabled
■ IIS Web Site - Digest Authentication Enabled
■ IIS Web Site - Directory Browsing Enabled
■ IIS Web Site - Dot Net Passport Authentication Enabled
■ IIS Web Site - Enforce Process Throttling
■ IIS Web Site - Execute Permission
■ IIS Web Site - Instance ID
■ IIS Web Site - Integrated Windows Authentication Enabled
■ IIS Web Site - Log Enabled
■ IIS Web Site - Max CPU Use Percentage
■ IIS Web Site - Name
■ IIS Web Site - Parents Path Enabled
■ IIS Web Site - Process Throttling Enabled
■ IIS Web Site - Script Source Access Enabled
■ IIS Web Site - Session State Enabled iOS Device iOS Device contains the following dimension attributes: Dimension attribute reference 125 iOS Device
■ iOS Device – 3G Enabled
■ iOS Device – Agent Registered
■ iOS Device – Agent Valid
■ iOS Device – Available Device Capacity GB
■ iOS Device – Battery Level
■ iOS Device – Battery Status
■ iOS Device – Client Version
■ iOS Device – Device Capacity GB
■ iOS Device – Device Name
■ iOS Device – Device Type
■ iOS Device – EULA Accepted
■ iOS Device – GEO Enabled
■ iOS Device – Geo Latitude
■ iOS Device – Geo Longitude
■ iOS Device – IP Address
■ iOS Device - Jailbreak
■ iOS Device - Language
■ iOS Device – MAC Address
■ iOS Device – MDM Managed
■ iOS Device – MDM Registered
■ iOS Device – MDM Valid
■ iOS Device - Model
■ iOS Device – Model Name
■ iOS Device – OEM Info
■ iOS Device – OS Build
■ iOS Device – OS Version
■ iOS Device – Resource Edit URL
■ iOS Device – Serial Number
■ iOS Device - Server
■ iOS Device – Total Storage Memory MB Dimension attribute reference 126 iOS Global Restrictions
■ iOS Device – Up Time
■ iOS Device – User ID
■ iOS Device – WAN IP Address iOS Global Restrictions iOS Global Restrictions contains the following dimension attributes:
■ iOS Global Restrictions – Allowing Adding Game Center Friends
■ iOS Global Restrictions – Allow App Installation
■ iOS Global Restrictions – Allow Camera
■ iOS Global Restrictions – Allow Explicit Content
■ iOS Global Restrictions – Allow Global Background Fetch When Roaming
■ iOS Global Restrictions – Allow In App Purchases
■ iOS Global Restrictions – Allow Multiplayer Gaming
■ iOS Global Restrictions – Allow Safari
■ iOS Global Restrictions – Allow Screen Shot
■ iOS Global Restrictions – Allow Simple
■ iOS Global Restrictions – Allow Video Conferencing
■ iOS Global Restrictions – Allow Voice Dialing
■ iOS Global Restrictions – Allow You Tube
■ iOS Global Restrictions – Allow iTunes
■ iOS Global Restrictions – Force Encrypted Backup
■ iOS Global Restrictions – Force PIN
■ iOS Global Restrictions – Max Failed Attempts
■ iOS Global Restrictions – Max Grace Period
■ iOS Global Restrictions – Max Inactivity
■ iOS Global Restrictions – Max PIN Age In Days
■ iOS Global Restrictions – Min Complex Chars
■ iOS Global Restrictions – Min Length
■ iOS Global Restrictions – PIN History Dimension attribute reference 127 iOS Phone
■ iOS Global Restrictions – Rating Movies
■ iOS Global Restrictions – Rating Region
■ iOS Global Restrictions – Rating TV Shows
■ iOS Global Restrictions – Require Alphanumeric
■ iOS Global Restrictions – Safari Accept Cookies
■ iOS Global Restrictions – Safari Allow Auto Fill
■ iOS Global Restrictions – Safari Allow Popups
■ iOS Global Restrictions – Safari Force Fraud Warning iOS Phone iOS Phone contains the following dimension attributes:
■ iOS Phone – Carrier Settings Version
■ iOS Phone – Cellular Technology
■ iOS Phone – Current Carrier Network
■ iOS Phone – Data Roaming Enabled
■ iOS Phone – Is Roaming
■ iOS Phone – Modem Firmware Version
■ iOS Phone – Phone Number
■ iOS Phone – SIM Carrier Network iOS Program iOS Program contains the following dimension attributes:
■ iOS Program – Bundle Size
■ iOS Program – Device Id
■ iOS Program – Dynamic Size
■ iOS Program - Identifier
■ iOS Program – Program Name
■ iOS Program – Sample Date Time
■ iOS Program - Version Dimension attribute reference 128 iOS Security Info iOS Security Info iOS Security Info contains the following dimension attributes:
■ iOS Security Info – Hardware Encryption Caps
■ iOS Security Info – Passcode Complaint With Profiles
■ iOS Security Info – Passcode Compliant
■ iOS Security Info – Passcode Present
Last Basic Inventory Date Last Basic Inventory Date contains the following dimension attributes:
■ Last Basic Inventory Date - Date
■ Last Basic Inventory Date - Day of Week
■ Last Basic Inventory Date - Month
■ Last Basic Inventory Date - Quarter
■ Last Basic Inventory Date - Year
Location Location contains the following dimension attributes:
■ Location - Address
■ Location - City
■ Location - Country
■ Location - Name
■ Location - State
■ Location - Zip
Logical Disk Logical Disk contains the following dimension attributes:
■ Logical Disk - Description
■ Logical Disk - File System
■ Logical Disk - Name Dimension attribute reference 129 Mobile Access Point
Mobile Access Point Mobile Access Point contains the following dimension attributes:
■ Mobile Access Point – Mac Address
■ Mobile Access Point – Network Type
■ Mobile Access Point – Operating Mode
■ Mobile Access Point – Wep Required
Mobile Device Mobile Device contains the following dimension attributes:
■ • Mobile Device – Available Storage Memory MB
■ Mobile Device – Client Version
■ Mobile Device – Device Name
■ Mobile Device – Host Name
■ Mobile Device – IP Address
■ Mobile Device – MAC Address
■ Mobile Device – OEM Info
■ Mobile Device – OS Build Number
■ Mobile Device – OS CSD Version
■ Mobile Device – OS Major Version
■ Mobile Device – OS Minor Version
■ Mobile Device – OS Platform
■ Mobile Device – OS Version
■ Mobile Device – Phone Number
■ Mobile Device – Resource Edit URL
■ Mobile Device – Resource Guid
■ Mobile Device – Resource Manager URL
■ Mobile Device - Server
■ Mobile Device – Total Memory MB
■ Mobile Device – Total Storage Memory MB Dimension attribute reference 130 Mobile Device Created Date
Mobile Device Created Date Mobile Device Created Date contains the following dimension attributes:
■ Mobile Device Created Date – Date
■ Mobile Device Created Date – Day of Week
■ Mobile Device Created Date – Month
■ Mobile Device Created Date – Quarter
■ Mobile Device Created Date - Year
Mobile Device Last Updated Date Mobile Device Last Updated Date contains the following dimension attributes:
■ Mobile Device Last Updated Date – Date
■ Mobile Device Last Updated Date – Day of Week
■ Mobile Device Last Updated Date – Month
■ Mobile Device Last Updated Date – Quarter
■ Mobile Device Last Updated Date - Year
Mobile Device Site Server Mobile Device Site Server contains the following dimension attributes:
■ Mobile Device Site Server – Device Type
■ Mobile Device Site Server - Name
Mobile Display Mobile Display contains the following dimension attributes:
■ Mobile Display – Display Colors
■ Mobile Display – Resolution
Mobile Network Wifi Adapter Mobile Network Wifi Adapter contains the following dimension attributes:
■ Mobile Network Wifi Adapter – Adapter Index Dimension attribute reference 131 Mobile Phone
■ Mobile Network Wifi Adapter – Adapter Name
■ Mobile Network Wifi Adapter – Description
■ Mobile Network Wifi Adapter – Is Wlan
■ Mobile Network Wifi Adapter – WLAN Ap Mac Address
■ Mobile Network Wifi Adapter – WLAN Associated
■ Mobile Network Wifi Adapter – WLAN Authentication Mode
■ Mobile Network Wifi Adapter – WLAN Encryption Mode
■ Mobile Network Wifi Adapter – WLAN Network Type
■ Mobile Network Wifi Adapter – WLAN Signal Strength
■ Mobile Network Wifi Adapter – WLAN SSID
Mobile Phone Mobile Phone contains the following dimension attributes:
■ Mobile Phone – Accumulated Call Meter
■ Mobile Phone – Current Call Meter
■ Mobile Phone – Current Operator
■ Mobile Phone – Current System Type
■ Mobile Phone – Driver Version
■ Mobile Phone – Equipment State
■ Mobile Phone – Firmware Version
■ obile Phone – GPRS Attached
■ Mobile Phone – Incoming Calls Answered
■ Mobile Phone – Incoming Calls Missed
■ Mobile Phone – Incoming Calls Total
■ Mobile Phone – Location Area Code
■ Mobile Phone – Locked State
■ Mobile Phone - Manufacturer
■ Mobile Phone – Max Accumulated Call Meter
■ Mobile Phone – Mobile Country Code Dimension attribute reference 132 Mobile Power
■ Mobile Phone – Mobile Network Code
■ Mobile Phone - Model
■ Mobile Phone – Outgoing Calls Completed
■ Mobile Phone – Outgoing Calls Not Completed
■ Mobile Phone – Outgoing Calls Total
■ Mobile Phone – Phone Number
■ Mobile Phone – Power State
■ Mobile Phone – Ready State
■ Mobile Phone – Registration Status
Mobile Power Mobile Power contains the following dimension attributes:
■ Mobile Power – AC Line Status
■ Mobile Power – Backup Battery Life Percent
■ Mobile Power – Backup Battery Life Time
■ Mobile Power – Backup Battery Present
■ Mobile Power – Backup Battery Voltage
■ Mobile Power – Battery Average Current
■ Mobile Power – Battery Average Interval
■ Mobile Power – Battery Full Life Time
■ Mobile Power – Battery Chemistry
■ Mobile Power – Battery Current
■ Mobile Power – Battery Full Life Time
■ Mobile Power – Battery Life Percent
■ Mobile Power – Battery Life Time
■ Mobile Power – Battery mAH Consumed
■ Mobile Power – Battery Temperature
■ Mobile Power – Battery Voltage Dimension attribute reference 133 Mobile Processor
Mobile Processor Mobile Processor contains the following dimension attributes:
■ Mobile Processor – Platform Type
■ Mobile Processor – Processor Architecture
■ Mobile Processor – Processor Architecture String
■ Mobile Processor – Processor Clock Speed
■ Mobile Processor – Processor Core
■ Mobile Processor – Processor Core Revision
■ Mobile Processor – Processor Level
■ Mobile Processor – Processor Name
■ Mobile Processor – Processor Name Revision
■ Mobile Processor – Processor Revision
■ Mobile Processor – Processor Type
■ Mobile Processor – Processor Type String
■ Mobile Processor – Processor Vendor
Mobile Program Mobile Program contains the following dimension attributes:
■ • Mobile Program – Program Name
Monitor Metric Monitor Metric contains the following dimension attributes:
■ Monitor Metric - Metric Name
Monitor Metric Detail Level Monitor Metric Detail Level contains the following dimension attributes:
■ Monitor Metric Detail Level Dimension attribute reference 134 Monitor Metric Instance
Monitor Metric Instance Monitor Metric Instance contains the following dimension attributes:
■ Monitor Metric Instance - Instance Key
■ Monitor Metric Instance - Instance Name
Monitor Metric Source Monitor Metric Source contains the following dimension attributes:
■ Monitor Metric Source - Source Name
Monitor NT Event Category Monitor NT Event Category contains the following dimension attributes:
■ Monitor NT Event - Category
Monitor NT Event Description Monitor NT Event Description contains the following dimension attributes:
■ Monitor NT Event - Description
Monitor NT Event ID Monitor NT Event ID contains the following dimension attributes:
■ Monitor NT Event - ID
Monitor NT Event Log File Monitor NT Event Log File contains the following dimension attributes:
■ Monitor NT Event - Log File
Monitor NT Event Message DLL Monitor NT Event Message DLL contains the following dimension attributes:
■ Monitor NT Event - Message DLL Dimension attribute reference 135 Monitor NT Event Rule Triggered
Monitor NT Event Rule Triggered Monitor NT Event Rule Triggered contains the following dimension attributes:
■ Monitor NT Event - Rule Triggered
Monitor NT Event Source Monitor NT Event Source contains the following dimension attributes:
■ Monitor NT Event - Source
Monitor NT Event Type Monitor NT Event Type contains the following dimension attributes:
■ Monitor NT Event - Type
Monitor NT Event User Monitor NT Event User contains the following dimension attributes:
■ Monitor NT Event - User
Monitor Process Name Monitor Process Name contains the following dimension attributes:
■ Monitor Process Name - Name
Monitor Process Owner Monitor Process Owner contains the following dimension attributes:
■ Monitor Process Owner - Name
Monitor Task Monitor Task contains the following dimension attributes:
■ Monitor Task - Task Name Dimension attribute reference 136 Organizational Group
Organizational Group Organizational Group contains the following dimension attributes:
■ Organizational Group - Name
Package Package contains the following dimension attributes:
■ Package Name
Package Distribution Event Status Package Distribution Event Status contains the following dimension attributes:
■ Package Distribution Event Status
Package Download Method Package Download Method contains the following dimension attributes:
■ Package Download Method
Package Download Source Package Download Source contains the following dimension attributes:
■ Package Download Source Name
■ Package Download Source Type
Package Download URL Package Download URL contains the following dimension attributes:
■ Package Download URL
Package Server Package Server contains the following dimension attributes:
■ Package Server Name Dimension attribute reference 137 Package Status
■ Package Server Type
Package Status Package Status contains the following dimension attributes:
■ Package Status
Parent Task Parent Task contains the following dimension attributes:
■ Parent Task - Instance Type
■ Parent Task - Name
Processor Processor contains the following dimension attributes:
■ Processor - Description
■ Processor - Manufacturer
■ Processor - Model
■ Processor - Number of Processors
■ Processor - Speed GHz
Software Component Software Component contains the following dimension attributes:
■ Software Component - Company Name
■ Software Component - Name
■ Software Component - Software Product Name
■ Software Component - Software Type Name
■ Software Component - Type Name
■ Software Component - Version Dimension attribute reference 138 Software Delivery Advertisement
Software Delivery Advertisement Software Delivery Advertisement contains the following dimension attributes:
■ Advertisement Name
Software Delivery Execution Event Command Line Software Delivery Execution Event Command Line contains the following dimension attributes:
■ Command Line
Software Delivery Execution Event Status Software Delivery Execution Event Status contains the following dimension attributes:
■ Event Status
Software Delivery Package Event Status Software Delivery Package Event Status contains the following dimension attributes:
■ Event Status
Software Delivery Status Event Status Software Delivery Status Event Status contains the following dimension attributes:
■ Event Status
Software Delivery Status Event Type Software Delivery Status Event Type contains the following dimension attributes:
■ Event Type
Software License Software License contains the following dimension attributes:
■ Software License - Name Dimension attribute reference 139 Software Management Compliance Package
Software Management Compliance Package Software Management Compliance Package contains the following dimension attributes:
■ Software Management Compliance Package - Location
■ Software Management Compliance Package - Name
■ Software Management Compliance Package - Publisher
■ Software Management Compliance Package - Size
Software Management Compliance Policy Software Management Compliance Policy contains the following dimension attributes:
■ Software Management Compliance Policy - Created By
■ Software Management Compliance Policy - Description
■ Software Management Compliance Policy - Enabled
■ Software Management Compliance Policy - Modified By
■ Software Management Compliance Policy - Name
Software Management Compliance Created Date Software Management Compliance Created Date contains the following dimension attributes:
■ Software Management Compliance Created Date - Date
■ Software Management Compliance Created Date - Day of Week
■ Software Management Compliance Created Date - Month
■ Software Management Compliance Created Date - Quarter
■ Software Management Compliance Created Date - Year
Software Management Compliance Modified Date Software Management Compliance Modified Date contains the following dimension attributes:
■ Software Management Compliance Modified Date - Date
■ Software Management Compliance Modified Date - Day of Week
■ Software Management Compliance Modified Date - Month
■ Software Management Compliance Modified Date - Quarter Dimension attribute reference 140 Software Product
■ Software Management Compliance Modified Date - Year
Software Product Software Product contains the following dimension attributes:
■ Software Product - Name
Software Purchase Software Purchase contains the following dimension attributes:
■ Software Purchase - Description
■ Software Purchase - Name
Software Update Software Update contains the following dimension attributes:
■ Software Update - Custom Severity
■ Software Update - File Name
■ Software Update - Provider
■ Software Update - Reference
■ Software Update - Severity
■ Software Update - Bulletin Enabled
■ Software Update - Reboot Required
Software Update Release Date Software Update Release Date contains the following dimension attributes:
■ Software Update Release Date - Date
■ Software Update Release Date - Day of Week
■ Software Update Release Date - Month
■ Software Update Release Date - Quarter Dimension attribute reference 141 SQL Cluster
SQL Cluster SQL Cluster contains the following dimension attributes:
■ SQL Cluster - Cluster Name
■ SQL Cluster - IP Address
■ SQL Cluster - Max Number of Nodes
■ SQL Cluster - Total Number of Nodes
SQL Cluster Resource SQL Cluster Resource contains the following dimension attributes:
■ SQL Cluster Resource - Instance Name
■ SQL Cluster Resource - IP Address
■ SQL Cluster Resource - Owner Node
■ SQL Cluster Resource - SQL Server Resource Name
■ SQL Cluster Resource - Virtual Server Name
SQL Database SQL Database contains the following dimension attributes:
■ SQL Database - Automatically Grow File
■ SQL Database - Data File Growth Mode
■ SQL Database - Data File Growth Size MB
■ SQL Database - DB Owner
■ SQL Database - Instance Name
■ SQL Database - Language
■ SQL Database - Log File Path
■ SQL Database - Log File Size MB
■ SQL Database - Name
■ SQL Database - Number of Users
■ SQL Database - Size Allocated MB
■ SQL Database - Space Available MB Dimension attribute reference 142 SQL Database Creation Date
SQL Database Creation Date SQL Database Creation Date contains the following dimension attributes:
■ Database Creation Date - Date
■ Database Creation Date - Day of Week
■ Database Creation Date - Month
■ Database Creation Date - Quarter
■ Database Creation Date - Year
SQL Database System SQL Database System contains the following dimension attributes:
■ SQL Database System - Current License In Use
■ SQL Database System - License Code
■ SQL Database System - License Type
■ SQL Database System - Name
■ SQL Database System - Number of License
■ SQL Database System - Path
■ SQL Database System - Processors
■ SQL Database System - Service
■ SQL Database System - Threads Allocated
■ SQL Database System - Vendor
■ SQL Database System - Version
SQL Storage Area SQL Storage Area contains the following dimension attributes:
■ SQL Storage Area - File System Size GB
■ SQL Storage Area - File System Type
■ SQL Storage Area - Name Dimension attribute reference 143 SQL User
SQL User SQL User contains the following dimension attributes:
■ SQL User - Name
Task Task contains the following dimension attributes:
■ Task - Name
■ Task - Return Code
■ Task - Success
Task Server Task Server contains the following dimension attributes:
■ Task Server - Name
Time Time contains the following dimension attributes:
■ Hour
■ Minute
■ Second
■ Time
User User contains the following dimension attributes:
■ User - City
■ User - Company
■ User - Country
■ User - Display Name
■ User - Domain
■ User - Email Dimension attribute reference 144 User
■ User - Given Name
■ User - Job Title
■ User - Office Location
■ User - State
■ User - Street Address
■ User - Surname
■ User - User Name
■ User - Zip Index
Symbols configure how it works 14 Kerberos SQL Server Analysis to Reporting Services A connection 96 configuring 21 about external Symantec CMDB connections 29 configuring access to the Analysis Service Kerberos cubes 92 Authentication Type set to Windows configuring the Reporting Services data Integrated Authentication 94 sources 92 SQL Server Analysis Services and Reporting access to cubes Services server 94 using SQL Server Management Studio 85 Symantec Management Platform server 94 using the Symantec Management Console 81 connection fields accessing external Symantec CMDB 30 cubes 38 connections reports 37 adding external Symantec CMDB 29 adding deleting external Symantec CMDB 33 external Symantec CMDB connections 29 editing external Symantec CMDB 31 Analysis Server 21 fields for external Symantec CMDB Analysis Server Database 21 connection 30 analysis services creating sql server 80 Key Performance Indicators 54 Analysis Services cubes KPIs 54 reconfiguring access to 93 cube Authentication Type deleting a view 44 Stored Credentials 21, 92 exporting results 44 Windows Integrated Authentication 21, 92, 94, fields 48 96 loading a view 43 modifying a view 43 C prerequisites 48 chart saving a view 42 configuring results 62 toolbar functions 49 charts cube browser toolbar functions 50 managing resources from the built-in 66 Client and Server Management Pack Cube Browser behavior 39 about 16 cube data 73 CMDBs cube processing Cube fields excluding cubes from 32 Cube Browser behavior 39 cube filtering role-based 91 cube processing tasks configuring 26 Index 146
Cube results external Symantec CMDB exporting 53 connection fields 30 Cube view editing the Report Integration URLs 32 deleting 53 external Symantec CMDB connections loading 51 adding 29 modifying 52 configuring 29 saving 51 deleting 33 cube view toolbar editing 31 cube browser behavior 40 cubes F access using SQL Server Management Studio 85 fields access using the Symantec Management cube 48 Console 81 external Symantec CMDB connection 30 adding 24 excluding from external CMDBs cube processing 32 H granting access 89 hardware 18 installing 24 overview 37 I custom inventory 67 including local Symantec CMDB 34 D installing 21 dashboard reference 99 verifying your copy 27 dashboard reports integrating cube data 73 viewing 56 integrating custom inventory 67 dashboards IT Analytics granting access 89 about 14 database engine IT Analytics Server sql server 79 installing and configuring 17 default role IT Analytics ServiceDesk Content Pack adding a user 82 configuring 21 deleting external Symantec CMDB connections 33 K dimension attribute reference 112 Kerberos configuring E SQL Server Analysis Services and Reporting editing Services server 94 external Symantec CMDB connections 31 SQL Server Analysis to Reporting Services editing the Report Integration URLs connection 96 external Symantec CMDB 32 Symantec Management Platform server 94 local Symantec CMDB 34 Key Performance Indicator example setting the status 55 creating a cube 65 Key Performance Indicators 38 excluding creating 45, 54 cubes from external CMDBs cube processing 32 KPI local Symantec CMDB 34 creating 45 exporting setting the status 55 cube results 44 KPI status setting KPI status 46 Index 147
KPIs 38 role creating 54 adding a user 82 creating 83 L deleting 84 role privileges local Symantec CMDB modifying 82 editing the Report Integration URLs 34 Symantec Management Platform 89 role-based privileges M Symantec Management Platform 89 managing resources from the built-in cube browser 66 S security O about 79 OWC behavior 47 software 19 solution dependencies P updating 35 pack Stored Credentials 21 Client and Server Management 16 Authentication Type 92–93 ports 20 Symantec Management Platform prompts role-based privileges 89 removing 63 purging T resource event data 27 table configuring results 62 R reconfiguring U access the Analysis Services cubes 93 uninstalling 28 Reporting Services data sources 93 updating report reference 101 solution dependencies 35 Reporting Server 21 reporting services V sql server 86 views Reporting Services data sources granting access to save and load 90 reconfiguring 93 reports adding 25 W creating 57 Windows Integrated Authentication 21 granting access 89 Authentication Type 92–94, 96 granting access to create new 90 granting access using Report Manager Web site 88 granting access using Symantec Management Console 86 installing 25 viewing 57 resource event data purging 27