Configuring Aternity APM The following sections explain configuration tasks to set up APM and customize its behavior to suit your application environment. Most configuration is done through the APM web interface. Some tasks require access to the agent systems. Major topics are as follows: “Web Interface Configuration“ “Agent System Configuration and Metrics“ Aternity APM Version 11.4.2 1 2 Aternity APM Version 11.4.2 Web Interface Configuration This material describes configuration screens in the APM analysis server web interface. See the “Agent System Configuration and Metrics“ topics for details on configuration tasks you perform on agent systems. Aternity APM Version 11.4.2 1 2 Aternity APM Version 11.4.2 CHAPTER 1 SteelCental SaaS - Account The ACCOUNT menu option opens a separate browser window with options to manage users. For SteelCentral SaaS, each company account corresponds to a separate analysis server in the cloud. The company name is displayed as the Realm value in the main screens of the APM interface. The Account screen lists the users that have been created for a company’s account. As described “Getting Started with Aternity APM SaaS“, when you first sign up for an APM SaaS account, the analysis server corresponding to a company’s account will have a single user with the “owner“ role. Users with the owner role can use this screen to add new users or remove and modify existing users. See “User Roles“ for details on the different roles. The main analysis server interface shows the company account name and the email address for the user that is logged in: Account Details The Account Details area shows the company name and company ID along with the user email address and name. The company name is displayed as the Realm value in the main screens of the APM interface. The company ID is used to specify the analysis server when installing agent software on monitored systems. Edit Profile and Change Password Options In the Account Details area, any user can change the settings that apply to their own profile: Click Edit Profile to open the Edit User screen. You can change the value of the Name field. This is a display name for the user, but is currently used only in the Account screen. Click Edit User to save the change. Use the browser back button to navigate back to the Account screen. Aternity APM Version 11.4.2 3 SteelCental SaaS - Account Click Change Password to open the Change Password screen. Supply the old password, new password and confirmation, and click Change Password. Use the browser back button to navigate back to the Account screen. This option is not available if the user was configured to use SAML single sign-on access, as indicated by saml in the Type column in the list of users (see “Adding Users: SAML-Enabled Companies“ for details). SAML Configuration Option The SAML Configuration option is available only for users with the “owner“ role, and only when this feature is enabled for the company (also called realm) by Aternity APM SaaS operations. Click SAML Configuration to open the “SAML Configuration“ screen. Adding Users Only users with the “owner“ role can add users. You must supply a valid email address for each new user added. Users are identified through the address, and adding a new user triggers invitation and validation email messages that the user must interact with. To add a user, use follow these steps: 1) Click the ACCOUNT option in the menu to open the Account screen. 2) Click Add Users at the top of the Users list. 3) The Add User screen opens. Supply the user’s email address and choose a role: 4 Aternity APM Version 11.4.2 SteelCental SaaS - Account 4) Click Add User and use the browser’s back button to reopen the Account screen. Notice that the user you added is present, with a status of Invited...: 5) Adding a user triggers an invitation email to the address you specified. The new user clicks the Join Now link in the email: 6) Clicking the Join Now link opens a web page where the user supplies a display user name (currently used only in the Account screen) and password. The new user clicks the Join button: Aternity APM Version 11.4.2 5 SteelCental SaaS - Account 7) Clicking Join triggers another email to the new user. This email contains a Verify Now link. The new user clicks the link to open a web page that verifies the email address and links to the analysis server sign-in page: Adding Users: SAML-Enabled Companies If SAML-based authentication has been enabled in the “SAML Configuration“ screen, the Add User screen has an additional User Type setting: Choose Local for the user to authenticate with the APM SaaS authentication server. Choose SAML for the user to authenticate with the IdP server configured in the SAML Configuration screen. You must choose SAML to take advantage of single-sign on authentication. Note—If you choose SAML, the email address must be the full canonical address, not an alias. Modifying Other Users Only users with the owner role can modify other users. Click the edit icon ( ) to change the user’s role (see “User Roles“). Click the delete icon ( ) to delete the user. User Roles The user account you use to log in to the APM interface has different capabilities depending on the roles it has been assigned. 6 Aternity APM Version 11.4.2 SteelCental SaaS - Account The following table describes the roles and their capabilities. Role Description read-only Log in and access “Data Analysis Tabs and Metric Data Views“ in APM. Accounts with the read-only role cannot perform configuration tasks. The CONFIGURE menu and its options are not available: Accounts with the read-only role can click the ACCOUNT menu option, edit their own profile, and see the names of users with the owner role. Because accounts with the read-only role cannot perform configuration tasks, the following links are not available: • The link to the “Define a Transaction Type Screen“ from an empty “Top Transaction Types Card“is not available • Direct URL links (for example, if someone copies/pastes a URL for a configure screen) will be redirected to the Overview tab. However, note that the “Alert History Screen“ (an option under the CONFIGURE menu) is still accessible (via the “Recent Alerts Card“ on the Overview tab). admin Accounts with the admin role have read-only access plus access to the CONFIGURE menu and its options. owner Accounts with the owner role have admin access plus the ability to: • Add and modify other users • Configure SAML single sign-on access (this configuration is available only when this feature is enabled for the company (also called realm) by Aternity APM SaaS operations) Aternity APM Version 11.4.2 7 SteelCental SaaS - Account 8 Aternity APM Version 11.4.2 CHAPTER 2 Install Agents Screen Note: This Screen Not Available to Read-Only Users Configuration screens are available only when you log in to APM using an administrative account. See the “User Roles“ topic for details on administrative and read-only accounts. This screen provides an easy way to download agent software to your computer. It is an alternative to downloading the agent software from the APM support page here: https://support.riverbed.com/content/support/software/opnet-performance/appinternals-xpert.html. The links on this page provide access to more recent agent versions that are compatible with this release of the analysis server: Long-Term Support (LTS) agent releases are maintenance releases that contain important problem fixes only. These versions correspond to the latest release available on the support page. Latest agent releases contain new features and fixes to problems found in versions since the stable release branch. Agent Installation Steps Step : Click the link for the software for the operating system on which you want to install the agent. For more details on agent installation, see the following installation topics: “Agent Installation: Windows“ “Agent Installation: Unix-Like Operating Systems“ Step (SaaS): Agents that connect to a SaaS analysis server require a customer ID to connect. When you install such agents, choose the SaaS option and the installation prompts for the customer ID. Supply the Customer Id value shown here. Step (on-premises): For agents that will connect to an analysis server installed in your environment (“on premises”), the agent installation prompts for the location of the analysis server. Use the Analysis Server hostname value shown here. Recently Discovered Agents After you install and start the agent, it should connect to the analysis server and appear in the Recently Discovered Agents list. Click the View all Agents link below the list to open the “Agent List Screen“. Aternity APM Version 11.4.2 9 Install Agents Screen 10 Aternity APM Version 11.4.2 CHAPTER 3 Agent List Screen Note: This Screen Not Available to Read-Only Users Configuration screens are available only when you log in to APM using an administrative account. See the “User Roles“ topic for details on administrative and read-only accounts. This screen lists agent systems being monitored by the APM analysis server. Each row in the display shows details about an agent. Click on column headings to sort rows in ascending order based on the column value. Click the column heading again to sort in descending order. An icon indicates ascending or descending sort order. The Agent column shows the icon representing the “Agent Status“ and the agent name. Sorting by ascending Name sorts as follows: Fully-qualified-domain names are grouped together by matching domain name components.