Data Center Real User Monitoring

Transcription

1 Data Center Real User Monitoring Dynatrace Enterprise Portal Administration Guide Release 12.3

2 Please direct questions about DC RUM or comments on this document to: Customer Support Copyright 2014 Compuware Corporation. All rights reserved. Unpublished rights reserved under the Copyright Laws of the United States. U.S. GOVERNMENT RIGHTS-Use, duplication, or disclosure by the U.S. Government is subject to restrictions as set forth in Compuware Corporation license agreement and as provided in DFARS (a) and (a) (1995), DFARS (c)(1)(ii) (OCT 1988), FAR (a) (1995), FAR , or FAR (ALT III), as applicable. Compuware Corporation. This product contains confidential information and trade secrets of Compuware Corporation. Disclosure is prohibited without the prior express written permission of Compuware Corporation. Use of this product is subject to the terms and conditions of the user's License Agreement with Compuware Corporation. Documentation may only be reproduced by Licensee for internal use. The content of this document may not be altered, modified or changed without the express written consent of Compuware Corporation. Compuware Corporation may change the content specified herein at any time, with or without notice. All current Compuware Corporation product documentation can be found at Compuware, FrontLine, Network Monitoring, Enterprise Synthetic, Server Monitoring, Dynatrace Network Analyzer, Dynatrace, VantageView, Dynatrace, Real-User Monitoring First Mile, and Dynatrace Performance Network are trademarks or registered trademarks of Compuware Corporation. Cisco is a trademark or registered trademark of Cisco Systems, Inc. Internet Explorer, Outlook, SQL Server, Windows, Windows Server, and Windows Vista are trademarks or registered trademarks of Microsoft Corporation. Firefox is a trademark or registered trademark of Mozilla Foundation. Red Hat and Red Hat Enterprise Linux are trademarks or registered trademarks of Red Hat, Inc. J2EE, Java, and JRE are trademarks or registered trademarks of Oracle Corporation. VMware is a trademark or registered trademark of VMware, Inc. SAP and SAP R/3 are trademarks or registered trademarks of SAP AG. Adobe Reader is a registered trademark of Adobe Systems Incorporated in the United States and/or other countries. All other company and product names are trademarks or registered trademarks of their respective owners. Build: December 8, 2014, 20:04

3 Contents Contents Introduction Who Should Read This Guide Organization of This Guide Related Publications Customer Support Information Information to Provide to Customer Support Documentation Conventions Chapter 1 Dynatrace Enterprise Portal Administration Overview Access the Dynatrace Enterprise Portal The Portal Interface Session Timeout Configuration Configure SSL for the Dynatrace Enterprise Portal Change the JVM Settings Assign Rights to Pages Localized Languages in the Portal Chapter 2 Report Server Management in the Portal Chapter 3 Portal Control Panel Add Dashboards and Pages Page Types and Type Settings Distribution Page Look and Feel Edit Page Settings Create a Page in the Control Panel Create a Page That Does Not Require a Login Create a Banner Import Dashboard Pages Export Dashboard Pages Manage Dashboards and Pages Portal Integrations - Server Client Settings User Management Features in the Dynatrace Enterprise Portal

4 Contents Add or Import Users Add a Local User Import LDAP Users Deactivate and Delete Users Reset a Locked-out User Create User Groups Import LDAP Groups Roles Overview Assign Roles to Users and User Groups Create New Roles Roles Page Actions Menu Portal Server Administration Chapter 4 Enterprise Synthetic in the Portal Configure Enterprise Synthetic in the Portal Enterprise Synthetic Agent Health Portlet Configuration Enterprise Synthetic Transaction Health Portlet Configuration Chapter 5 VantageView In the Portal Configure a VantageView Connection in the Portal Glossary Index

5 INTRODUCTION Who Should Read This Guide This manual is written for the system administrator, application manager, or any other individual who installs and administers Dynatrace Enterprise Portal. Organization of This Guide This guide provides a reference for using the dashboards and portlets for Dynatrace. It includes the following chapters: Dynatrace Enterprise Portal Administration Overview [p. 9] Describes Administration in the Portal. Report Server Management in the Portal [p. 17] Discusses connecting to servers. Portal Control Panel [p. 19] Describes using the Control Panel. Enterprise Synthetic in the Portal [p. 33] Describes how to configure Enterprise Syntheticfor integration. VantageView In the Portal [p. 37] Describes how to configure VantageView for integration. Related Publications Online help is accessible from the interface menu and by pressing [F1]. The following documents are provided in PDF format: Data Center Real User MonitoringSystem Administration Guide Contains the following information: Installation process for Data Center Real User Monitoring. System requirements and configuration. Report server integration, aggregation, and administration. 5

6 Introduction Backup and recovery. Data Center Real User Monitoring Central Analysis Server User Guide Contains the following information: Logging into the server and accessing reports. Configuring the server. Using data views. Business Service Management Release Notes This document contains information about the release: New feature descriptions List of supported platforms, databases, hardware, adaptors, and browsers Known issues Troubleshooting information APM Customer Support contact information Business Service Management Installation Guide Contains the following information: Preparation for Business Service Management installation, including requirements for databases Installation, upgrade, and maintenance procedures Post-installation procedures and checks It also includes notes on typical system configurations, which may helpful in assessing your setup and installation. Customer Support Information Dynatrace Community For product information, go to and click Support. You can review frequently asked questions, access the training resources in the APM University, and post a question or comment to the product forums. You must register and log in to access the Community. Corporate Website To access the corporate website, go to The Dynatrace site provides a variety of product and support information. Information to Provide to Customer Support Provide Customer Support with as much information as possible about your environment and the circumstances that led to the difficulty. Please be ready to provide: 6

7 Introduction Your client number. This number is assigned to you by Compuware and is recorded on your sales contract. The name, release (version), and build number of the product and its components. This information is displayed when you select the About command from your product's Help menu. The name and release are also on the covers of the product documentation. Environment information, such as the operating system and release (including service pack level) on which the product is installed, memory, hardware/network specifications, and the names and releases of other applications that were running. Problem description, including screen shots. Exact error messages, if any (screen shots recommended). Whether the problem is reproducible. If yes, sequence of steps to reproduce the problem. If not, a description of the actions taken before the problem occurred. A description of the actions that may have been taken to recover from the difficulty, and their results. Log file(s) from the component(s) affected by the problem. Compuware values your comments and suggestions about our products and documentation. Your feedback is very important to us. If you have questions or suggestions for improvement, let us know. Documentation Conventions The following font conventions are used throughout documentation: This font Bold Citation Documentation Conventions [p. 7] Fixed width Fixed width bold Fixed width italic Menu Item Screen Code block Indicates Terms, commands, and references to names of screen controls and user interface elements. Emphasized text, inline citations, titles of external books or articles. Links to Internet resources and linked references to titles in documentation. Cited contents of text files, inline examples of code, command line inputs or system outputs. Also file and path names. User input in console commands. Place holders for values of strings, for example as in the command: cd directory_name Menu items. Text screen shots. Blocks of code or fragments of text files. 7

8 Introduction 8

9 CHAPTER 1 Dynatrace Enterprise Portal Administration Overview This chapter describes the administrative tasks for the Dynatrace Enterprise Portal. After you have installed and logged onto the Dynatrace Enterprise Portal (Access the Dynatrace Enterprise Portal [p. 10]) as an administrator you will complete the following administrative tasks to get up and running. Optional tasks are listed as well. Connect to the CAS You must configure the Portal to work with Central Analysis Server (CAS) which provides real-time access to information about performance and usage of key business applications. To use the Applications dashboard pages and Data Mining Interface Simple and Advance Charts and Table portlets, at least one CAS report server must be defined. Click Administration Manage Report Servers to easily connect to the CAS. Integrate With BSM This lets you integrate the Portal with Business Service Management (BSM). This optional connection provides an open, flexible framework for integrating performance, third-party, analytics, service desk, and business data. It enables you to use the Operations and Executive dashboard pages, and access to health reports and notifications. To configure a BSM connection, click Administration Control Panel Integrations BSM Server Lines. Click Administration Business Service Management to access BSM notification and reconciliation options, as well as diagnostic information to inform you about the health of your system. After you validate your connection with CAS, and BSM (if you chose to integrate with BSM), set up your users and security. Add Users and Set up Security The Central Security Server (CSS), added in release 12.0, provides a single point of access for user management and security for Data Center Real User Monitoring, Business Service 9

10 Chapter 1 Dynatrace Enterprise Portal Administration Overview Management the Dynatrace Enterprise Portal and optionally for Enterprise Synthetic. A new installation of DC RUM was integrated with the CSS during the installation process. Select an authentication method and add users and user groups in the CSS Console. Limited CSS functionality is available from the Portal. As a system administrator, you can manually add user accounts. You can also use LDAP authentication, where authentication takes place when users log into the system with their network ID and password. Optional Administration To use Enterprise Synthetic in the Portal to monitor, capture, report and pinpoint the cause of application performance problems, it must be installed and running on your machine and enabled in the Portal. To use VantageView within the Portal to view data from the suite of tools, real-time status and historical information of clients, servers, networks, and 3rd-party tools, it must be installed and running. After, you can configure it in the Portal. The Control Panel is used solely for advanced configuration and customization of the Portal. Click Administration Control Panel to access the Control Panel to configure web content, settings, monitoring, plugins, and server administration. To view business information output from the Service Model in the Portal click Administration Service Model. The Service Model functions as the engine that transforms events and messages coming to it into relevant business information that can be used to assess the impact on the quality of business services. Access the Dynatrace Enterprise Portal Access the Portal via a supported browser. Refer to the Release Notes for supported browsers. Prerequisites: The CSS is installed and running. The CAS server is configured and running to view or configure dashboard pages within the portal. Do one of the following: Use a web browser to go to the Dynatrace server. Enter the following URL in your browser s main address field: For a non-secure connection enter where <Portal_host> is the machine on which the Portal Service Model system is installed, and <server_port> (usually 8080) is the configured Web server port. For a secure connection, after you install the SSL certificate, enter where <Portal_host> is the machine on which the Service Model is installed, <DNS> is the domain name system (for example,.clients.nasa.cpwr.corp), and <server_port> (usually 443) is the configured Web server port. The SSL certificate is tied to the exact name. Configure SSL for the Dynatrace Enterprise Portal [p. 13] 10

11 Chapter 1 Dynatrace Enterprise Portal Administration Overview Log in to the Portal by providing the user name and password in response to the prompt. If you successfully log in, the menu options display. If you are not granted access, a message indicates that the authentication failed. If there is no activity within the web browser for 60 minutes, the session times out. You must log in again. The default screen following the login screen offers top-level menu choices. The multi-level menus provide accelerated access to the various views of the Portal. A common starting point is the Application Health Status page, which displays applications with performance problems, and the impact of these problems on business. The Portal Interface This topic discusses all of the options available from the main menu bar for easy reference. The CAS Application Health Status Report When you first open the Portal, the CAS Application Health Status report displays by default. The Application Health Status(AHS) report displays data from all user experience measurement sources like probes, browser instrumentation, and synthetic sources. This data combines to display a single integrated view of end-user experience for all monitored applications. For information click the CAS help link in the upper right. Dashboards Manage Pages Add a page to, or delete a page from, a dashboard. Applications The Application Health Status dashboards are available only if you migrate them from a Portal version earlier than The dashboards show critical application health, business impact, and fault domain information. Analysis Server Opens the Central Analysis Server (CAS). The CAS provides real-time information about performance and key business applications usage. It monitors user session, application, and server performance in different configurations to identify when and where problems occur, and how to address them. 11

12 Chapter 1 Dynatrace Enterprise Portal Administration Overview My Pages This is available on the toolbar only if you create public or private pages in the Control Panel. Tools Toggle Editing Edit and reposition portlets on a page. Add Content Provides a list of available portlets in the Content Library that can be inserted on a page. Print Generates a PDF document of the screen. Change Page Layout Opens the Manage Page Layout page. Edit Dynagrid Layout Opens the Dynagrid page. Use this to modify the page. This menu item is available only if the current page is using the Dynagrid Layout. My Profile Opens the profile page in the Control Panel, which contains information for the active user. Add personal information such as your organization, user groups, addresses, and custom fields. Set as Homepage Sets the current page as the home page of the currently logged-in user. Administration Control Panel Use this for advanced configuration and to customize the Portal. Manage Report Servers Opens the Report Server Management in the Portal [p. 17] 12

13 Session Timeout Configuration A warning displays when the current session is about to expire. A yellow message appears one minute before expiration, and a red message appears after the page expires. When you view pages in a dashboard a session is established. This allows the server to hold information such as login credentials, about the client currently accessing dashboard pages. If the session is inactive, it ends and the information is lost and the user must log in again. A timeout occurs so the server resources are not used up as multiple clients are connected. By default, the session timeout is 60 minutes. If necessary, configure the session timeout: 1. Go to C:\Program Files\Compuware\Vantage\tomcat\webapps\ROOT\WEB-INF\web.xml. 2. Look for the entry near the bottom of the file: <session-config> <session-timeout>60</session-timeout> </session-config> 3. Change the timeout value. This value is in minutes. 4. Restart the web server. Configure SSL for the Dynatrace Enterprise Portal To use HTTPS operations on the Dynatrace Enterprise Portal, you must generate unique SSL keys and certificates and configure the Portal application server. If you are using Business Service Management, you can also use these instructions to configure SSL for its server components. Generating Keys and Certificates 1. Stop the Dynatrace Enterprise Portal service. 2. Open a command prompt on the server where the Portal is installed. 3. Run the appropriate command for your system: Windows set PATH=Portal_Home\jre\bin;%PATH% UNIX export PATH=Portal_Home/jre/bin;$PATH 4. Create a private key within an existing or new keystore. Execute the following: keytool -genkeypair -keyalg rsa -keystore keystorename -storepass [keystorepassword] -alias [my_new_key] NOTE If you are using Java 1.6, use -genkeypair for -genkey. If your SSL certificate must be a certain size, add the following command to the keytool line of code: -keysize [size you need] Chapter 1 Dynatrace Enterprise Portal Administration Overview 13

14 Chapter 1 Dynatrace Enterprise Portal Administration Overview To protect the new private key by its own keypassword within the keystore, you have to add the keypass option. If you don't use the keypass option, the keystore password is used to protect the private key. To delete a key password (which is not possible with keytool), copy the keystore password to the key password. To use the key as a client certificate, use RSA as a key algorithm, instead of default DSA, because many servers only accept RSA client certificates. 5. Generate a CSR. keytool -certreq -alias my_new_key (from step 4) -keystore keystorename(from step 4) -storepass keystorepassword(from step 4) -file my_new.csr -validity[number of days] 6. Send you CSR to a certificate authority. 7. When you receive your files back from the CA, export files to Base64 X509 format, if your CA didn't provide it in that format. a. Right-click on the certificate chain file (for example, newcert.p7b) and select Open. The certificate should open in Window's Certificates tool. b. In the left pane, expand Certificates - Current User Certificates. You will see two certificates in the right pane, one above the other, first the root certificate and then the web server. c. Export each certificate into Base64 X509 by right-clicking on each certificate and selecting All Tasks Export. d. Click Next. e. Enter the name of the exported file, for example, root.cer for the root certificate. Click Finish. f. Repeat for the web server certificate (webserver.cer). 8. Open root.cer and webserver.cer in Notepad. Append all contents from each file (Control-A) and merge both into a new text file. Make sure to merge them in the same order they were opened: root followed by webserver. 9. Save the merged file as chain.txt. Import files 10. Import chain.txt into your keystore file. keytool -import -alias root keystore keystorename(from step 4) storepass keystorepassword (from step 4) -trustcacerts -file chain.txt 11. Import webserver.cer. keytool -import -alias tomcat keystore keystorename (from step 4) storepass keystorepassword (from step 4) -trustcacerts -file webserver.cer Configure Tomcat 12. Using a text editor, open server.xml, located in PORTAL_HOME\Dynatrace Enterprise Portal\Tomcat\Conf\. 13. Add the attribute keystorefile that specifies the full path to the keystore file created. Note that the values are case-sensitive. Uncomment the XML element. <Connector port="8443" protocol="http/1.1" SSLEnabled="true" maxthreads="150" scheme="https" secure="true" 14

15 Chapter 1 Dynatrace Enterprise Portal Administration Overview clientauth="false" sslprotocol="tls" emptysessionpath="true" keystorepass = [keystorepassword] (from step 4) keystorefile="[keystorename and location]"(from step 4) /> 14. Optional: To force the server to only accept strong ciphers, add the following attribute to the SSL connector: ciphers="ssl_rsa_with_rc4_128_md5,ssl_rsa_with_rc4_128_sha,tls_rsa_with_aes_128_cbc_sha, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA" 15. Restart the Dynatrace Enterprise Portal service. To browse to the Portal site, use the fully qualified name (FQN) of the web server in the URL. When you created the keystore, you specified the FQN of the web server, so the SSL certificate is tied to that exact name. Change the JVM Settings These instructions describe adjusting the Java Virtual Machine (JVM) settings. The installer initially allocates 50% of the available memory for the portal, up to 4GB. If you must adjust this for your site follow these instructions. For Windows, edit the registry by going to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\TomcatWebserver120\Parameters\Java Double-click on the JvmMx property and set it to the preferred value. For Solaris or Linux, navigate to the /opt/compuware/enterprise_portal/tomcat/bin/setenv.sh file and find the JAVA_OPTS variable and make the following modifications: JAVA_OPTS="$JAVA_OPTS -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack =true -Xmx1024m:-XXMaxPermSize=256m-Dvantage.controller=liferay -DJSDT.SocketFactory=com.proxima.centauri.messaging.jsdt.HttpsSocketFactory -Dorg.ops4j.pax.logging.DefaultServiceLog.level=ERROR" Assign Rights to Pages If you have Administrator or Power User permission, you can assign rights to users to delete, update or view a page. 15

16 Chapter 1 Dynatrace Enterprise Portal Administration Overview The User Access and Security Overview provides a single point of access for user management and security. Use this to assign rights to users or user groups. 1. Click Dashboards Manage Pages. The Manage Dashboard Pages dialog box appears. 2. Select a dashboard from the list. 3. Select a page and right-click. 4. Select Assign Rights. You assign rights to a user so the user can do the following: Delete a page Update a page (make modifications) View a page without making modifications If you do not select a checkbox, rights are inherited from the assigned role or user group membership. 5. Click Save. Localized Languages in the Portal Pages in the Portal are localized in four languages: English Japanese Korean Chinese simplified Browser language settings are checked on login and retained. Changes committed after login do not affect the current session. English is the default If the browser uses an unsupported language. 16

17 CHAPTER 2 Report Server Management in the Portal Use the Report Server Manager to define and configure servers. Click Administration Manage Report Servers. You can add multiple report servers), however there must be one default server. Information for the default server is displayed when you open the Report Server Manager and includes the product and connection status information. Servers added in previous versions remain on the definitions list. The Portal 12.3 and later supports CAS release 12.3 and later. These must be installed on the same machine. To add a new report definition, click Add and type the new information into the fields provided. NOTE Fields in the Report Server Manager are case sensitive. Field name Server label Server name/ip address TCP port Authenticate with common Compuware Security Description Type a friendly name for the server. Type the server name and its IP address. Type the TCP port number for the session. Select this to automatically authenticate with common Compuware Security. This is recommended for use with CAS. Note that the CAS you are pointing to must be pointing to this as well. If you do not select this, you must be an Administrator and enter information for User login and Password. Default server Select this to make the selected server the default one. Product, Protocol and Status information display by default. To test the validity of the information, click Test Connection. You are connected to the server and the login information is verified. All information can be saved even if the test failed. 17

18 Chapter 2 Report Server Management in the Portal To delete a definition, select a server from the list and click Delete. Each time you add or delete a server and click OK, the dialog closes and is refreshed. When you click Apply the changes are applied but the dialog is not refreshed and does not close. If you modify an existing server and click OK, the dialog does not close. 18

19 CHAPTER 3 Portal Control Panel The Control Panel is used solely for advanced configuration and customization of the Portal. To access the Control Panel click Administration Control Panel. Use the Dashboard Page Management dialog box for managing pages and dashboards. Portal Admin The first section contains profile information for the active user. Add your personal information such as user groups, addresses, and custom fields. Use My Pages to create private pages that accessible only to you. These are accessed from My Pages on the main menu bar. Portal The options in the Portal section enable portal administrators to set up and maintain the portal. Settings displays the main configuration for the Portal like name and mail domain. Use Monitoring to view and/or kill live sessions. You cannot kill your own session. Click Plugins Configuration to see a list of Portlet Plugins and if they are active. Use Portal Integrations - Server Client Settings [p. 25] to configure servers, ports and settings, as well as VantageView and Enterprise Synthetic. User Management Add users, user groups and assign access roles. Server Portal Server Administration [p. 31] options allow you to administer and monitor the portal server. Add Dashboards and Pages We recommend you use Manage Dashboard Pages from the Dashboards menu to add dashboards and pages. 1. Click Tools Control Panel Dashboards. 19

20 Chapter 3 Portal Control Panel 2. Click Add. 3. Type a name for the dashboard. 4. Click Save on the panel to the right to save your changes. Add pages to the dashboard 5. Click Dashboards Actions Page Settings. 6. Type a name in the Name field. 7. Choose a Page Types and Type Settings [p. 20] to create. The default is Portlet. 8. Choose Hidden to be the only user to see the page. 9. Click Add Page. 10. Double click on the new page in the list on the left to Edit Page Settings [p. 22]. Page Types and Type Settings Choose a page type and setting. Portlet This is the default when you add a new page. Use this page type for typical portal behavior. Choose Panel for a simpler version. Panel A page that holds a number of applications and provides access among them through a menu. Embedded Displays an external website or application through an Iframe. Use this to efficiently integrate external applications.. Web Content A portlet that displays static web content which can be formatted, edited and maintained. Type an ID for the content so it can be accessed by other users. URL Displays a link to an external resource. This page does not display any content of its own. Add a link to an external resource to the website by typing the URL and a description. Link to Page This page type is a specialization of the URL page type. Table 1. Page Type Settings When you select a page type, the settings under the Refresh Interval setting change depending on the page type. The following table describes the settings according to each type you select in the Type menu. Type Portlet Panel Setting Copy Page Description Description Choose an existing page from the list and create a copy. Type a description for the panel that displays when you view the page Select applications for Select the applications that will be displayed on the page. You the panel can see these when you click View Pages 20

21 Chapter 3 Portal Control Panel Table 1. Page Type Settings (continued) Type Embedded URL Web Content Link To Page Setting URL Web Content ID Link to Page Description Type a description for the URL that displays when you view the page. Type an ID for the web page. Select a page from menu to which to link. These are all the pages within the organization. Distribution Use the Distribution option to distribute reports and pages to various users. Choose the format and a method to distribute the page or report. Specify who is to receive reports and how via the configuration option. NOTE To use the Distribution function, the 32-bit Adobe Flash Player must be installed on the Portal server. NOTE Before configuring the reports distribution function, you must configure the SMTP server. To do this, click Tools Control Panel Server Administration Mail Tab. Configure settings for the selected distribution method. The options requiring information will change depending on which distribution method you choose. To send the page or report via , click Enable and select from a list of recipients. To send the page or report via FTP or HTTP, type the necessary information. Additionally, you can type an optional filename override, or friendly name. Page Look and Feel Themes can transform the entire look and feel of your portal. To expose themes for pages and reports, click Control Panel Pages Look and Feel or Tools Page Settings Look and Feel. Themes are created and installed via Control Panel Plugin Installation Theme Plugins. Themes and Color Schemes are a collection of.css and image files that customize the overall look and feel of pages. Color Schemes are also specified in.css and image files, as well as some other property and.xsl files. The use of color schemes allows for different background colors and images, border colors, text colors, etc. within your theme. The Portal contains the following themes: Login Page to control the display of the dashboard login page, Default, Reporting and Classic. Click Themes to control all non-color and non-image visuals that make up the page. Click the CSS tab and copy and paste a unique stylesheet. Remember to save the stylesheet. 21

22 Chapter 3 Portal Control Panel You can create and add custom themes by inserting a custom.css file on the CSS tab in the Look and Feel section of a page. Edit Page Settings 1. In the Control Panel click Dashboards. 2. Click the Actions menu of the dashboard containing the page you want to edit, and click Page Settings. 3. Double click the page you want to edit in the list to the right. 4. The following fields are configurable: Default name Default HTML Title Localized language, name and title. Type Query string to be used when none exists. This will be the default parameter for the page. Target attribute for the page indicating how it should open. Refresh Interval in seconds. Hidden prevents the page from being displayed. 5. Click Permissions to assign rights to users. 6. Click Save to save your settings, or click Delete to delete the page. Create a Page in the Control Panel Typically, you add pages in the Manage Dashboard Pages dialog box. Add pages in the Control Panel if the page requires customizing. 1. Click Administration Control Panel Pages. 2. Type a name for the page. 3. Choose a template, if desired. 4. Choose a page type. For more information, see Page Types and Type Settings [p. 20]. 5. Click Add Page. The page appears in the list to the left. Create a Page That Does Not Require a Login Create a page that you can access without logging in to the Portal. 1. Create a public page. For more information, see Create a Page in the Control Panel [p. 22]. a. Copy the URL b. Log out of the Portal c. Type the URL in the address bar. The page will appear, but you must be logged on as an administrator to see the page menu. 22

23 Chapter 3 Portal Control Panel 2. Add third party content, DMI portlet content, or BSM portlet content. You may have to configure DMI data access to use DMI portlets on the public page. NOTE DMI data access requires Portal 12.3 SP1. a. Create a special user with guest only access within CSS. b. At the installation location, find the following path: <install>\tomcat\webapps\root\web-inf\classes\portal-customizations.properties c. Locate the following code: #Guest user to access the public pages #guest user cpwr.guest.user.password.encrypted=true cpwr.guest.username=guestuser cpwr.guest.user.password=zqmnvng8ws18wbpiy5ma0q== d. Set cpwr.guest.user.password.encrypted to false. e. Change the cpwr.guest.username to the special user you just created. f. Set cpwr.guest.user.password to the clear text password for that user. When the system restarts, the password is encrypted. g. Restart the Compuware Dynatrace Enterprise Portal service to apply this change. Create a Banner Add a banner to display at the top of your portal pages. 1. Locate tomcat\webapps\vantage-reporting-hook\meta-inf\ custom_jsps\html\portlet\dockbar\custom-banner-content.jsp 2. Follow the instructions in the file to activate the custom banner code by changing false to true on the specified line. 3. Find custom-banner-css.jsp in the same location and update the height property. Import Dashboard Pages We recommend you use the Manage Dashboards and Pages [p. 24] dialog box to import. NOTE The.lar files are version-dependent. You cannot export from an old version of Liferay and import to a newer version. If the following error message appears, ensure that the.lar file was created with, or migrated to, the same version as the Portal you are importing to. ERROR [ImportPagesAction:93] com.liferay.portal.layoutimportexception: LAR build number xxx does not match portal build number xxx 1. Click Tools Control Panel Dashboards. 23

24 Chapter 3 Portal Control Panel The View All tab is displayed by default and lists all the dashboards. 2. ClickActions Page Settings next to the desired dashboard. 3. Click Export / Import Import. 4. Choose the elements to be imported. 5. Click Browse... to navigate to the location of the.lar file that contains the information. The.lar file overwrites the information in the selected location. 6. Select the.lar file and click Open. 7. Click Import. The information from the.lar file is added to the selected location. Export Dashboard Pages We recommend you use the Manage Dashboards and Pages [p. 24] dialog box to export. 1. Click Tools Control Panel Dashboards. 2. Click Actions Page Settings next to a dashboard. 3. Click Export / Import Export. We recommend that you use the default settings. Optionally, you can type a unique name for the file. The File Download dialog box appears. 4. Click Save. The Save As dialog box appears. 5. Select a location and click Save. 6. When the Download complete message appears, click Close. Manage Dashboards and Pages Use the Manage Dashboard Pages dialog box to manage dashboards and pages. From this dialog box, you can add and delete pages, as well as add, delete, rename, copy, and move dashboards. Use the Manage Dashboard Pages to perform the related tasks 24

25 Portal Integrations - Server Client Settings The Integrations option opens the Server/Client page and enables various ports, server lines, settings and dashboards. VantageView Enter information for Server Label, Host and Port in the fields. You can enable the integrated VantageView In the Portal [p. 37] and create an option from the main menu. Tomcat Ports Change the following ports that Tomcat is using: Tomcat port - The application runs on this port. This is accessed via the browser. Shutdown port - Listens for shutdown requests. Chapter 3 Portal Control Panel Database Settings Change the database that the portal is using. If you change this information to a blank database, the settings and dashboards will default to the original settings and dashboards. Enterprise Synthetic Integrates Enterprise Synthetic dashboards and functionality. Provide a server name/ip and port for the agent manager. The default port is After this is enabled the Enterprise Synthetic in the Portal [p. 33] dashboard option is available from the Administration menu. User Management Features in the Dynatrace Enterprise Portal Complete functionality to set up user management is included in the Central Security Server (CSS) interface, available from the Start menu on the server where the CSS is installed. In the Portal Control Panel, you can also add users, user groups and assign access roles. Add or Import Users System or Report Administrators can add users, or import them from LDAP. In the Portal, go to Administration Control Panel and under User Management, select Users. The Users page has the following icons at the top of the page: View All Shows all users. When an administrator uses the Actions menu corresponding to an existing user, they can edit the user's account; set permissions on who can edit the user's account; edit a user's page settings; impersonate the user; and deactivate the user. Add Search for users by entering search criteria in the Search field. For a more detailed search, including searching for active or deactivated users, click the Advanced link. Add "local" users to the system. 25

26 Chapter 3 Portal Control Panel Import LDAP Users If you have enabled and configured LDAP authentication, you can import LDAP users to access the system. Add a Local User If you are using local authentication, you can add users for DC RUM, BSM, Enterprise Synthetic and the Dynatrace Enterprise Portal. 1. From the Portal menu, select Administration Control Panel. Under User Management, select Users. 2. On the Users page, click Add. The Details form appears. 3. Complete the form and include a password that is allowed by the password policy configured. NOTE User names can only include alphanumeric characters, periods, dashes and underscores. No other special characters can be used. 4. By default, the Password Reset Required option is enabled. New users must reset their passwords when they log in for the first time, or when a password is reset by an administrator. Deselect this option if a password reset is not required. 5. Click Save. New users are assigned a Guest role and have limited access to product functionality. They are also added to the Everyone user group. You can assign them to other user groups, roles with additional product access, and custom dashboards. For example, if you want the new user to have full access to the Portal, dashboards and reports, you would assign them to a Report Administrator role or to a user group with that role. Import LDAP Users Before You Begin You must enable and configure LDAP authentication in the CSS console before importing LDAP users. You should also test in CSS that your LDAP searches yield the users you intend to import. 1. From the Portal menu, select Administration Control Panel. Under User Management, select Users. 2. Click Import LDAP Users. Four search fields will display. 3. Enter enough criteria to find the new user and click Search. By default, a maximum of 20 user names will be displayed. You can limit or extend the search by changing the value in the Max Results Returned field 4. Select the users needed and click Import The users will appear on the View All page. 26

27 Chapter 3 Portal Control Panel NOTE If an LDAP user account matches a locally-created user account, the local user account takes precedence over the LDAP account. New users are assigned a Guest role and have limited access to product functionality. They are also added to the Everyone user group. You can assign them to other user groups, roles with additional product access, and custom dashboards. For example, if you want the new user to have full access to the Portal, dashboards and reports, you would assign them to a Report Administrator role or to a user group with that role. Deactivate and Delete Users Deleting a user account is a two-step process: first an administrator deactivates the account, then deletes it. 1. From the Portal menu, select Administration Control Panel. Under User Management, select Users. 2. For the user you want to deactivate, click the Actions menu and select Deactivate. A confirmation request displays; click OK to proceed. At the top of the Users page, a message displays stating that the deactivation request processed successfully. The user account can no longer access the system. 3. At the top of the Users page, click the Advanced link under the Search field. Additional search fields display, including one to show Active users. 4. Change the Active value to No and click Search. The newly deactivated user account appears, along with any other deactivated accounts. At this stage, an administrator has three options: Leave the user account in a deactivated state. Delete the user account by selecting the check box next it, and clicking Delete. The user account is removed from the list. Re-activate the account by selecting the Actions menu for the account and selecting Activate. Reset a Locked-out User If a user locks themselves out of the system for some reason (failed login attempts, etc.), an administrator can change the password on the user's account to regain access. 1. From the Portal menu, select Administration Control Panel. Under User Management, select Users. 2. Select the Actions menu for the user that requires the reset, and select Edit. That user's information page is displayed. 3. Click the Password link at the right of the page. 4. Enter a new password. If you want the user to create a new password when they log in, select Password Reset Required. 27

28 Chapter 3 Portal Control Panel 5. Click Save. Create User Groups System or Report Administrators can create user groups to help streamline user management. Administrators can assign roles to user groups, in addition to individuals. All new groups are assigned to the Guest role, which has limited product access. You can add locally-created users or imported LDAP users to local user groups. 1. From the Portal menu, select Administration Control Panel. Under User Management, select User Groups. 2. On the User Groups page, click Add. 3. Enter a name and description. 4. Click Save. When you click View All, the new user group appears in the list. 5. To add members to the user group, click the group's Actions menu and select Assign Members. 6. Click Available to display all available users. 7. Select the users to include in the user group. 8. Click Update Associations. By selecting Default, all users subsequently added will be part of the group, in addition to the Everyone group. Import LDAP Groups If your organization has well-defined Active Directory groups that match your potential user base, we recommend importing LDAP groups rather than individual LDAP users. If the Active Directory groups do not match your user base (for example, the groups are too large), you should import individual LDAP users and manage them in local user groups. LDAP groups are different from locally-created user groups, in that an entire group is imported from LDAP, and users cannot be added or deleted in the CSS. User membership is controlled by the corporate group in Active Directory, so users can be added or deleted from the group by network administrators. Before trying to import an LDAP group, ensure that LDAP authentication is enabled, and initial configuration tests yielded groups with users that you needed. If you didn't see the groups and users needed during the test, you may need to adjust the LDAP attributes. 1. From the Portal menu, select Administration Control Panel. Under User Management, select User Groups. 2. Click Import LDAP Groups at the top of the page. A search field is displayed. 3. Enter a group name and click Search. Groups matching the search criteria will be displayed. Maximum results can be decreased or increased. 4. Select the necessary groups and click Import. The selected groups appear on the View All page. 28

29 Chapter 3 Portal Control Panel After the group is imported, it has a default role of Guest, which has limited product access. To provide additional access, you can assign a different role and dashboard(s) to the group. When a user from the group logs in with their network ID and password, a user account is created automatically. Once that user account is created, you can assign that user a role, local user group (that has a different role) or dashboard. NOTE If an LDAP user account matches a locally-created user account, the local user account takes precedence over the LDAP account. Roles Overview Roles define access for the product components integrated with the CSS (DC RUM, BSM, Enterprise Synthetic, and Dynatrace Enterprise Portal). A system administrator can assign users and user groups to roles. All new users, by default, are assigned to the Guest role. There are seven default user roles with different levels of product access: System Administrator Has complete access to system functionality, including user management, LDAP and database configuration; and can create and view all reports and dashboards. A system administrator must install the product and set up a user authentication method. Only a system administrator can access the RUM Console to configure DC RUM monitoring. A system administrator is automatically added to the System Administrator user group on the CAS. NOTE CAS user groups cannot be configured in the CSS. Reporting Administrator Has access to all functionality needed to configure Dynatrace Enterprise Portal reporting. Can access the CSS to add local users and assign roles and user groups. Has the same CAS access as a Reporting Power User, with the additional privileges to use all DMI features. Has full access to BSM functionality. Reporting Power User On the CAS, this user can create, save, import, and export reports. Can assign users to Portal dashboards. In BSM, this user can set up adaptor connections and navigate the Service Model. Synthetic Console User Can log in to the Enterprise Synthetic Console and access all available Console features. Packet Capture User Has access to the packet data-mining tool on the CAS. Also has the same access as a Reporting User. Reporting User Can use the Data Mining Interface in CAS to create personal reports. Can use the Charting Portlet in the Portal to create personal reports. In BSM, can navigate in the client, but cannot change any component or feature. 29

30 Chapter 3 Portal Control Panel Mobile Application User Has access to assigned reports in the MobileAPM app. In the CAS, has the same access rights as a Guest. Guest On the CAS, this user can view reports assigned to this user. Has view access to the default Dynatrace Enterprise Portal Executive and Operations dashboards, but cannot make changes to any component or feature. Will have view access to custom dashboards and to any drill-down reports assigned to this user. Assign Roles to Users and User Groups To assign a user or user group to a role: 1. From the Portal menu, select Administration Control Panel. Under User Management, select Roles. The View All page for Roles appears, displaying an Actions menu for each role. 2. Click Actions on the role to be assigned and select Assign Members. The role's page displays, with Assign Members, Users and Current highlighted. This view shows the users currently assigned to the role. 3. To assign users to the role, select Available. A list of all users appears. Alternatively, you can select User Groups and Available to display a list of user groups to assign. 4. Select the user(s) by clicking the box next to their names and click Update Associations. You will receive a message that your request processed successfully. Create New Roles The five default roles should provide you the flexibility you need to assign users and groups securely. You can also create new roles, but those roles would only impact Portal features and will not affect product access. Roles Page Actions Menu Configure options for a role by clicking Roles in the Control Panel. Click the Actions menu next to a Role. Edit Type changes in the Name and Description fields. You should not edit default roles provided with the system. Define Permissions Choose from Portal Permissions or Portlet Permissions. Portal Permissions cover portal-wide (dashboard-wide) activities that are in several categories. Portlet Permissions cover permissions that are defined within various portlets (portlets). Click Portlet Permissions to browse the names of the portlets that are currently installed in your dashboards. After you choose a portlet, define the actions within this portlet that the Role will have permission to perform. 30