EFT™ Insight v1.0.7 Installation, Administration, and User Guide...2019/05/07 · (v1.0.7) Oracle...

INSTALLATION, ADMINISTRATION, AND USER GUIDE

GlobalSCAPE, Inc. (GSB)

Corporate Headquarters

Address: 4500 Lockhill-Selma Road, Suite 150, San Antonio, TX (USA) 78249

Sales: (210) 308-8267

Sales (Toll Free): (800) 290-5054

Technical Support: (210) 366-3993

Web Support: http://www.globalscape.com/support/

© 2008-2019 GlobalSCAPE, Inc. All Rights Reserved

May 7, 2019

http://www.globalscape.com/support/

i

Table of Contents Introduction ............................................................................................................................................................ 3

What's New in Insight? .......................................................................................................................................... 4

System Requirements............................................................................................................................................. 7

Installing and Configuring EFT Insight ............................................................................................................... 9

Insight Database ..................................................................................................................................................... 9

Installing Insight ..................................................................................................................................................... 15

Upgrade, Repair, or Remove Insight .................................................................................................................. 25

Registering Insight ................................................................................................................................................ 27

Initial Configuration ............................................................................................................................................. 29

Add Binding to the Insight IPv4 Address in IIS................................................................................................... 31

Changing SSL Certificate in IIS Manager .......................................................................................................... 33

Troubleshooting .................................................................................................................................................... 37

Insight Logging...................................................................................................................................................... 38

Using EFT Insight ............................................................................................................................................. 43

Logging in to Insight ............................................................................................................................................. 43

Navigation ............................................................................................................................................................. 45

Servers Tab............................................................................................................................................................ 46

Expectations Tab .................................................................................................................................................. 47

Evaluated Expectations ................................................................................................................................... 49

Transfers Tab .......................................................................................................................................................... 51

Event Rules Tab .................................................................................................................................................... 53

AWE Tasks Tab ..................................................................................................................................................... 54

Summary Tab ........................................................................................................................................................ 55

Filters .................................................................................................................................................................... 56

Table of Contents

ii

3

Introduction As the complexity of managing data flows to and from the organization has increased, companies have consolidated and replaced their aging file transfer systems with enterprise-grade Managed File Transfer (MFT) solutions such as EFT. The data flowing through these systems is critical to businesses. This includes the need to surface the operational and business intelligence needed to ensure that SLAs are being met, standards and policies are being adhered to, and business continuity is being maintained, as data flows into and out of the organization.

With Insight you gain full visibility into the flow of data through your EFT system. Insight facilitates better governance, with the knowledge and depth of information gleaned from business and operational intelligence. Evaluate data trends over time and gain instantaneous knowledge about the current state of your system.

Insight provides:

• Visibility into your EFT system’s transfers and event rules

• Instant status of your EFT server for improved monitoring

• Faster, easier data browsing through advanced filters and a responsive user interface design

• Improved inquiry resolution to reduce IT overhead

• Automation of business expectations to save on unmet SLAs and processes

• Isolation of information from administration so users can learn from your data risk free

Insight Monitors Critical Data Flows, So You Can Manage the Rest of Your Network

A rich set of filters and responsive interface enable investigation at any granularity, as well as an array of metrics for an all-around server status. Insight gives you the power to drill down into important data from your system, to quickly cull the information you need to run effectively and efficiently. Data is consolidated from multiple EFT nodes, making the management of EFT clusters easy.

Additionally, a unique database for Insight facilitates improved performance under large data sets and heavy usage, ensuring robust reporting for even the largest EFT deployments. Numerous business-critical processes take place in your network every day. Insight allows you to set alerts regarding any expected transfers and event rules within your system, enabling automatic monitoring of your EFT environment. Why manually check for unmet SLAs and missing files after the fact, when you could be automatically notified instead? Receive email notifications regarding any unmet workflows, to improve your response time and decrease your management needs.

Installing and Configuring EFT Insight

4

What's New in Insight? Release notes (version history) for all versions of Insight, the latest updates, downloads, and support information are on our website at: https://www.globalscape.com/eft-insight-support. The latest changes are listed below.

v1.0.7

• Added support for Oracle 12c Release 2 or 18c database

• Ability to use SQL or Oracle database

• Updated OLE DB driver for SQL Server database to use stronger protocols (TLS 1.1 and 1.2)

• Added alternate connection method selection (EFT Insight versions prior to v1.0.7 used "MSXMS2.ServerXMLHTTP" to connect to EFT Enterprise. EFT Insight v1.0.7 uses an alternate .NET method.)

• Allowing the Insight database user to provide a user name that will access the database. This will allow EFT Insight to be removed, if needed, and then can be reinstalled and continue to access the same database.

• Added file logging for "Globalscape.BI.ProcessingEngine.Service.exe.sml" and for the web site. By default, this logging is turned off. It should be enabled for troubleshooting, and then turned off once information has been gathered.

• Added password complexity check

• Improved installer usability

• Added installer prompt for credentials

• Added ability to register EFT Insight offline

v1.0.6

• Tested with EFT Enterprise versions 7.4.7.18, 7.4.9.11, 7.4.10.6, and 7.4.11.28.

• Operating systems used in testing are Windows Server 2012 R2 and Windows Server 2016 Datacenter.

• The browsers used while testing were the current versions of: Firefox, Chrome, Internet Explorer, and Edge.

• When upgrading EFT Insight, stop the EFT Insight service before launching the new installer. If you are upgrading the EFT Enterprise Server that the EFT Insight monitor is pointing at, stop the EFT Insight service. This will keep EFT Insight's BI service from generating errors in the "EFTInsight.logEntry" table.

https://www.globalscape.com/eft-insight-support

Insight v1.0.7 Installation, Administration, and User Guide

5

• Bug fixes:

• Fresh installation of EFT Insight cannot connect to the EFT database - SQL client library is now installed even if you are not using SQL Server Express that is in the installer

• AWE table records are not being synchronized on the initial load - Now checking parameters before running substring

• Cannot import Event Rules if Event Name is greater than 50 characters; Event Rules not showing up after data sync - Updated Insight table EventRule field Name to allow up to 250 characters

v1.0.5

• Advanced Workflow Engine tasks are now visible in Insight on a new AWE Tasks tab.

• Insight v1.0.5 is supported with EFT v7.4.7 and later; not supported on EFT v7.4.5 and earlier, due to addition of AWE tables in Insight v1.0.5 database.

• When using Internet Explorer if you have upgraded from a prior version of EFT Insight, you should perform a hard refresh of the browser's Cache (Control + F5 Keys).

• Operating systems used in testing are Windows Server 2012 R2 and Windows Server 2016 Datacenter.

• The browsers used while testing were the current versions of: Firefox, Chrome, Internet Explorer, and Edge.

v1.0.4

• Added Multiple Dashboard capability to the Expectation View.

• Versions of EFT Enterprise used in testing were v7.4.5.6 and 7.4.5.7

• SQL Server 2016 and SQL Express were the databases used in testing

• Chrome, Firefox, Internet Explorer, and Edge were the browsers used in testing

• Windows 2012 and Windows 2016 were the operating platforms used in testing

• For this new version of Insight, upgrades are supported only from EFT Insight v1.0.3.520. EFT Insight v1.0.3.520 was the first version of EFT Insight with REST API.

• If an upgrade is performed, the existing Expectations will be saved in its own dashboard (AutoSaved)

v1.0.3

• Support for secure SSL/TLS SMTP connections

• Integration with EFT’s REST API provides compatibility across EFT upgrades (EFT v7.4.4 and later);

• Removed COM API support from Insight

• Added support for EFT Enterprise version 7.4.5 and newer


6

v1.0.2

• Added support for EFT Enterprise versions 7.3.6, 7.3.7, and 7.4.1

v1.0.1

New Features/Enhancements:

• Added support for Active Directory-authenticated EFT administrators as valid Insight accounts

• Added the ability to customize the name of your Insight database.

• Updated text on the IIS configuration page of the installer

Fixes:

• Fixed a collision between Insight database on the same SQL server so that multiple Insight databases are supported

• Fixed issue with Event Rule data export to CSV option

7

System Requirements Insight is installed on a server remotely from EFT and requires a connection to a SQL Server database. (Oracle is not supported on Insight at this time.) You can connect Insight to the same database that the EFT Auditing and Reporting module is using, or a separate one.

• Internet access is required to register Insight. (v1.0.7) If no internet connection is detected, Insight will do a check to see if the serial number is valid (well formed) and if so, it will write an entry to the registry. Upon startup, if Insight detects that registry entry, it will identify itself as activated and continue operating as normal, as if it had been activated online.

• These hardware configuration applies to a standalone Insight system with both EFT and a database, SQL Server or Oracle in v1.0.7, installed on external servers.

o Processor: Quad-core, at least 2.5 GHz (4 processors)

o Memory: 8GB of RAM

o Disk Storage: 500MB

• Insight was tested on a virtual machine with 8 GB of memory, 4 CPUs, and a 100GB hard drive with SQL Server Express installed locally. In a production environment, however, it is likely that Insight will log to a remote enterprise version of SQL Server. The Insight database will grow at almost the same rate as the EFT Auditing and Reporting module database.

• Insight was tested and is supported on the following EFT Enterprise versions:

7.1.0.11 7.2.2 7.3.2.8 7.4.1

7.1.1.11 7.2.4.3 7.3.3.21 7.4.2

7.1.2.4 7.2.6.4 7.3.5.4 7.4.4

7.1.3.5 7.2.8.5 7.3.6 7.4.5

7.1.5 7.2.9.9 7.3.7 7.4.7

- - - 7.4.9

- - - 7.4.10

- - - 7.4.11

7.4.13

o EFT 7.2.0, 7.2.1, 7.3.0, and 7.3.1.2 have known limitations that may interfere with your ability to run Insight

o Insight v1.0.3 and later are supported only with EFT Enterprise version 7.4.4 and later, which use a REST API

o Insight v1.0.6 was tested and validated with" EFT Enterprise v7.4.7.18, v7.4.9.11, v7.4.10.6, v7.4.11.28, 7.4.13


8

• Remote administration - EFT should have remote administration enabled. (Insight uses remote administration to connect to the EFT server it is monitoring.)

• Require SSL for remote administration in EFT and an SSL certificate is required for the web site’s HTTPS access. If you have a trusted CA signed certificate, please have it ready for the installation process. If you do not have a certificate, a self-signed certificate will be created by the installer. Please note that you may encounter browser warnings unless a trusted certificate has been applied.

• REST API must be enabled in EFT, and port defined (defaulted to 4450)

• Run & Edit Reports (Optional permissions) for the EFT admin account

• EFT Auditing and Reporting module (ARM) - Data used by Insight comes from the ARM database, so this module must be installed, licensed, and enabled.

• Database for Insight:

o SQL Server - SQL Server Express 2014 SP1 is bundled with the installer. You can use the included SQL version or select your own instance. Supported SQL Server versions include 2008 R2, 2008 R2 Express, 2012, 2014, 2016. You will need the connection information during installation. For SQL Server system requirements, refer to https://docs.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-requirements-for-installing-sql-server?view=sql-server-2017.

o (v1.0.7) Oracle database 12c Release 2 or 18c - In version 1.0.7 of EFT Insight, there is no visible indication that this is an Oracle installation. The application (under the covers) looks for the colon (:) between the host name/address and the TCP port (e.g., 192.168.100.70:1571. If the colon is not there, the installer assumes SQL Server is the database.

If connecting to an Oracle database, Oracle Data Access Components (ODAC) for Oracle Client needs to be installed before installing EFT Insight

o (v1.0.7) Version 18.1.0.0 of Microsoft OLE DB Driver for SQL Server is automatically loaded during installation

• Windows Server 2012 R2 or later - Insight server components can be installed on Windows Server 2012 R2 or later. (v1.0.7 was tested on 2012, 2016, and 2019)

• Microsoft .NET 4.5 - Windows Server 2012 R2 includes Microsoft .NET 4.5. If .NET 4.5 is not present, the installer will detect the missing component and notify you.

• IIS v8 - Included in Window Server 2012 R2, will be enabled by the installer.

• Pending Updates - Please make sure there are no pending automatic system updates on the server where you install, as these may interrupt the Insight installation process.

https://help.globalscape.com/help/eft7-4/mergedProjects/eft/Remote_Administration.htm

https://help.globalscape.com/help/eft7-4/mergedProjects/SSL/Enabling_SSL_on_the_Server.htm

https://help.globalscape.com/help/eft7-4/mergedProjects/eft/Enabling_REST_API_for_Remote_Admin.htm

https://help.globalscape.com/help/eft7-4/mergedProjects/eft/CreatingEFTAdministrators.htm

https://help.globalscape.com/help/eft7-4/mergedProjects/install/InstallingEnterpriseServerAdministratorModules.htm

https://help.globalscape.com/help/eft7-4/ActivatingtheSoftware.htm

https://help.globalscape.com/help/eft7-4/mergedProjects/arm/DatabaseAuditSettings.htm

https://docs.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-requirements-for-installing-sql-server?view=sql-server-2017

https://docs.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-requirements-for-installing-sql-server?view=sql-server-2017

9

Installing and Configuring EFT Insight Insight Database The EFT Insight database is separate from the EFT Auditing and Reporting (ARM) database. All reporting displayed in EFT Insight is done against its own database. When EFT Insight is installed, it synchronizes with an initial dataset of the ARM data (based on the Days of historical data to import setting in the installer). After that, the BI process (EFT Insight Service) continually extracts information from the ARM database and inserts it into the EFT insight database. This is the data appears in the EFT Insight dashboard.

Consider the following when installing and configuring a database for use with EFT Insight"

• Refer to System Requirements for database versions supported.

• If the ARM database is using Windows Authentication, you will need to configure the Insight service to run as a Windows account that has permission to access the ARM database.

• When installing Insight, for setup to complete successfully, you will need database credentials with permission to create and edit databases and to create and update tables and for inserting and reading data. If the database account you are using does not have sufficient permission to create the Insight database, you will encounter an error and have to start the installation over (with the proper permissions). (If you later need to remove Insight, but not the database, you can reinstall Insight and connect to the same Insight database with the same credentials.)

• (added in v1.0.7) Version 18.1.0.0 of Microsoft OLE DB Driver for SQL Server is automatically loaded during the installation of EFT Insight v1.0.7.

• (added in v1.0.7) Connecting to Oracle should be looked at from these two perspectives: The ARM database connection from EFT Insight is read-only; the EFT Insight database is a read-write connection. If you are using an Oracle database, you need:

o Oracle Data Access Components (ODAC) for Oracle Client.

o Oracle system identifier (SID). The name cannot have any spaces.

o Database server IP address or server name along with the TCP Port information in the format hostname:port. The default TCP port for Oracle is 1521.

o Database schema/owner username and password

• Database maintenance is very important to performance. In every database, index fragmentation results from inserts, updates, and deletes. Regularly rebuilding the index can improve performance. In SQL Server Enterprise Edition, index rebuilding can even take place while online. Refer to https://docs.microsoft.com/en-us/previous-versions/technet-magazine/cc671165(v%3dmsdn.10) for information about SQL Server database maintenance. (Performance is also affected by the hardware and RAM of the computer on which the database is installed.)

https://docs.microsoft.com/en-us/previous-versions/technet-magazine/cc671165(v%3dmsdn.10)

https://docs.microsoft.com/en-us/previous-versions/technet-magazine/cc671165(v%3dmsdn.10)


10

The following tables, with intuitive names, are created during installation of EFT Insight. (You can also use SQL Server Management Studio to view the tables.)

MigrationHistory

Action

Authentication

AweTask

See AWE Tasks Tab for more about AWE tasks in EFT Insight.


11

Configuration

Evaluation

EventRule

See Event Rules Tab for more about Event Rules in EFT Insight.

ExpectationDashboard

Refer to Expectations Tab and Filters for more about EFT Insight Expectations and filters.


12

License

LogEntry

Message

Queue

SecurityPrincipal

Session


13

Site

TableSyncStatus

Server

Refer to Servers Tab for more about servers in EFT Insight.

14

Transfer

Refer to Transfers Tab for more about transfers in EFT Insight.

15

Installing Insight The procedure below describes the installation of Insight. Before starting the installation, review the System Requirements to ensure the system is ready for installation.

• Ensure there are no pending automatic system updates on the server on which you install Insight, as these may interrupt the EFT Insight installation process.

• Insight v1.0.3 and later use a REST API; if you have installed Insight v1, v1.0.1 or v1.0.2, uninstall them before installing Insight v1.0.3 or later.

• If the ARM database is using Windows Authentication, you will need to configure the Insight service to run as a Windows account that has permission to access the ARM database.

• Start the Insight installation process with an account that has sufficient permissions. If the database account you are using does not have sufficient permission to create the Insight database, you will encounter an error and have to start the installation over (with the proper permissions).

• When upgrading EFT Insight, stop the EFT Insight service before launching the new installer. If you are upgrading the EFT Enterprise Server that the EFT Insight monitor is pointing at, stop the EFT Insight service first. This will keep EFT Insight's BI service from generating errors in the "EFTInsight.logEntry" table.

• (added in v1.0.7) Version 18.1.0.0 of Microsoft OLE DB Driver for SQL Server is automatically loaded during the installation of EFT Insight v1.0.7.

• (added in v1.0.7) If you are using an Oracle database, you need to install Oracle Data Access Components (ODAC) for Oracle Client.

During installation, the following settings must be enabled in the EFT administration interface Administration tab:

• Allow remote administration

• Require SSL for remote administration

• Enable REST API and REST API port (defaulted to 4450)

• Run & Edit Reports (Optional permissions) for the EFT admin account.


16

To install Insight

1. Double-click the Insight installer icon to start the installer wizard. The Welcome to Insight Setup page of the wizard appears.


17

2. Click Next. The License Agreement appears.

3. Review the terms and then click Next. The Select service installation folder page appears.

4. Click Browse to specify a different location or keep the default location, then click Next. The IIS

Configuration page appears.


18

5. Specify the location and connection information for the EFT Insight web site:

a. Specify the Hostname URL you will use to access the EFT Insight web service.

b. Port 443 is set by default, or enter any port you would like to use for the site.

c. Specify the physical path for the web site where the site’s files will be stored; leave the default or browse to a location of your choosing.

d. Specify a certificate to use for the site. The installer is set to Create a self-signed certificate by default. Use of a self-signed certificate will result in a warning from your browser, so a CA-signed certificate is preferred. Browse to a certificate that you would like to use, making sure your Insight hostname matches. You can preview the certificate details by clicking View or refresh the listing by clicking Refresh.

Additional help steps for creating a DNS entry or changing out certificates are available by clicking the question mark icons at the bottom of the window. A DNS entry is necessary to reach the site’s URL from other devices.

6. Click Next when ready to proceed. If you selected Create a self-signed certificate, the Create SSL Certificate page of the wizard appears (otherwise skip to the next step).


19

7. Provide the details to create a self-signed certificate:

a. A Domain Name matching your selected hostname will be entered by default.

b. Provide a Private Key Passphrase of your choosing. Record or remember this value for future reference.

c. Specify a Destination for the certificate files or accept the default location.

8. Click Next. The EFT connection settings screen appears.


20

9. Provide the EFT host address, REST API port, Administrator username, and Administrator password for an EFT "Server Admin" account with "Run and Edit Reports" permission. If you are installing for an HA cluster, any one of the servers will suffice for connection. (Refer to the EFT help documentation

10. You can also specify the number of Days of historical data to import from the EFT ARM database. Please allow for longer syncing time on initial setup when importing large amounts of data.

Large ARM data sets can take considerable time if loading months of data. The import currently loads 1000 records at a time. If an EventRule table has over a million records, the import could take hours. A work around is importing '0' days. This keeps past data from being imported and only new information is analyzed. When importing data from a large ARM database, to help improve import performance, you may want to rebuild ALL indexes on the following tables: Authentication, EventRule, Transfer, Action, and AweTasks.

11. (added in v1.0.7) Select the Use alternative connection method check box to connect to EFT, if Insight fails to connect to EFT. (Requires .NET, which is an EFT Insight requirement.)

12. Click Next. If connection is successful, the database type page appears.

13. Now you need to set up the EFT Insight database. This is separate from the EFT Auditing and Reporting (ARM) database. All reporting displayed in EFT Insight is done against its own database. When EFT Insight is installed, it synchronizes with an initial dataset of the ARM data (based on the Days of historical data to import setting above). After that, the BI process (EFT Insight Service) continually extracts information from the ARM database and inserts it into the EFT insight database. This is the data appears in the EFT Insight dashboard.

14. Select existing SQL Server, existing Oracle database (v1.0.7), or Install SQL Server Express

Edition. Then click Next.


21

15. Configure the database:

If you are connection a SQL Server database, provide connection details for a SQL Server that you have already installed:

o Insight database name—A database name is entered by default, but you can change the

name if you'd like—unless you are using SQL Express; changing the name is only available when you are using SQL Server. The name cannot have any spaces.

o Authentication mode—Specify the SQL account to connect to or click Windows to connect with the current logged-in Windows user. (See the warning below regarding Windows authentication.)

o Database server host address or instance name—Provide the host address or instance name of the Insight database.

o Database owner username and password—If you are using SQL authentication, provide the SQL database credentials. This account needs permission to create and edit databases for setup to complete successfully. (If you later need to remove Insight, but not the database, you can reinstall Insight and connect to the Insight database with the same credentials.)

If you are using Windows authentication, these boxes are blank.

(in v1.0.7) If you are connecting to an Oracle data base:

Connecting to Oracle should be looked at from these two perspectives: The ARM database connection from EFT Insight is read-only; the EFT Insight database is a read-write connection.


22

Provide connection details for an Oracle database that you already have installed:

o ORACLE system identifier (SID) - this is where the Oracle System Identifier information

is placed. The name cannot have any spaces.

o Database server - this is where the IP address or server name is placed along with the TCP Port information in the format hostname:port to allow the connection to Oracle. The default TCP port for Oracle is 1521.

o Database owner name and password - This is the Oracle system administration account. This account needs permission to create and edit databases for setup to complete successfully. This user will create the EFT Insight schema. (If you later need to remove Insight, but not the database, you can reinstall Insight and connect to the Insight database with the same credentials.)

16. Click Test to test your connection to a valid database.

17. Click Next. The EFT Insight database schema page appears in which you create a schema within the database for creating and updating tables and for inserting and reading data to/from the database.


23

18. Under Schema details, create a schema name and schema password for creating and updating

tables and for inserting and reading data to/from the Insight database. You can click generate to create a password for you that meets the operating system password policy (i.e., number/type of characters, etc.). If you already have a database account that you want to use, you can enter that here, provided it meets the password complexity requirements.

19. Click Next. When installation continues, the Installing page appears.


24

20. Once installation completes, click Next. The Installation Complete page appears.

21. Click Finish to close setup.

22. Launch EFT Insight in your browser at the address and port specified during installation (e.g., https://eftinsight.com:4439/#/login).

After you click Finish, EFT Insight will synchronize with the EFT Auditing and Reporting (ARM) database. Insight will import the historical data from ARM, based on the number of days you specified during installation. Once ARM and Insight are synchronized, going forward, data will import in real time.

23. Next: Refer to Logging in to Insight


25

Upgrade, Repair, or Remove Insight Follow the instructions below to upgrade, repair, or remove Insight.

• Previous builds must be removed before installing the new version. • If you have upgraded from a prior version of Insight, you should perform a hard refresh of the browser's

cache (Control + F5 Keys). • Instructions for removing the SQL Server Express bundled with the installation are also below. (SQL

Server Express is not removed by the Insight removal wizard.) • When upgrading EFT Insight, you should stop the EFT Insight service before launching the new installer. • If you are upgrading the EFT Enterprise server that the Insight monitor is pointing at, stop the EFT

Insight service. This will keep the service from generating errors in the "EFTInsight.logEntry" table. • If you are going to upgrade both EFT Enterprise and EFT Insight:

1. First upgrade or install EFT Insight. 2. Allow Insight to synchronize its tables. 3. If EFT Enterprise has AWE tasks that were run, these should be pulled over and populated into

the EFT Insight database. 4. Once you verify EFT Insight works, proceed to upgrade the EFT Enterprise server.

If this upgrade order is not followed, the AWE task historical data will not be pulled over. • Insight includes a SampleDashboard. If you upgraded from a previous version of Insight, one of the

dashboards is "This was the old AutoSaved," which contains the Expectations you had defined. You can rename it, if desired.

To upgrade Insight

1. Run the new installer and click Accept on the license agreement page. The Welcome page appears.

2. Click Upgrade, then click Next. Installation (upgrade) is completed.


26

3. Click Next, then click Finish to close the installer.

To repair Insight

1. Run the same installer that you used to install Insight.

2. On the license agreement page, click Accept. The Welcome page appears.

3. Click Repair, then click Next.

4. After the repair is complete, click Next, then click Finish.


27

To remove Insight

1. Run the Insight installer and Accept the license agreement.

2. Click Remove, then click Next.

3. Click Uninstall.

4. Click Yes, if you want to restart now; click No if you want to restart later.

To remove SQL Server Express

1. In the Windows Control Panel, click Program and Features.

2. Scroll down the list of programs and features, click Microsoft SQL Server 2014 (64-bit), click Uninstall.

3. In the wizard that appears, click Remove.

4. Under EFTINSIGHT, select Database Engine Services.

5. On the Ready to Remove page of the wizard, click Remove. Wait—this takes a few minutes. Eventually a Complete screen will be displayed.

6. Reboot the computer to ensure all files that need to be deleted are removed from the system.

7. Log back in to the system and then remove the SQLEXPR folder found under the "C:\Program Files (x86)" folder.

Registering Insight New installations include a free 30-day trial. A license reminder is encountered every time you sign in during the trial. Please contact our sales team to obtain a license. Provide the license key at any time to activate Insight, or click Continue Trial to defer activation until later.

Internet access is required to register Insight. If no internet connection is detected, Insight will do a check to see if the serial number is valid (well formed) and if so, it will write an entry to the registry. Upon startup, if Insight detects that registry entry, it will identify itself as activated and continue operating as normal, as if it had been activated online.

If you don't register the product after 30 days, the trial will expire, the Continue Trial button will not be available, and you will be unable to use the product.

https://www.globalscape.com/contact-us


28

To activate Insight

• Copy and paste your Insight license into the license key box, then click Activate Now.


29

Initial Configuration The following items must be configured before using Insight.

• SMTP - Insight uses the SMTP server settings from EFT. Make sure you have an SMTP server configured in EFT in order to receive email alerts from Insight.

• Firewall - The port you use for the Insight website should be open to your internal network to allow access from other network devices. Optionally, this port can be opened to your external network to allow remote access.

• DNS - Your DNS server must be configured to route the Insight hostname to the Insight server before remote access is possible. The installation wizard creates a host file entry, so you start with access to EFT Insight from the device on which you’ve installed Insight. Also, if the EFT database host address is configured with a machine name, this machine name has to be resolved via DNS.

Follow these steps to configure a DNS entry for the Insight hostname you have chosen:

a. Open DNS Manager.

b. Right-click the applicable Forward Lookup Zone in the navigation tree and click New Alias.

c. Retype your chose hostname as the Alias name.

d. Enter the Insight server as the FQDN for target host.

e. Click OK to save.

• EFT database IP address - Ensure that the ARM database remote IP address under the TCP/IP properties is enabled and active. In the case of dev/sandbox environments, if you have installed the database locally, ensure that the local IP address is enabled in the TCP/IP properties.


30

• SSL certificates -

o It is possible to change the Insight website’s SSL certificate using IIS Manager.

o If your SSL certificate for remote administration has expired, you will get a COM error during the installation process.

• Logon as Windows account - If the ARM database is using Windows Authentication instead of SQL Server authentication, you will need to configure the Insight server service to logon as a Windows account.

https://technet.microsoft.com/en-us/library/cc794944(v%3dws.10).aspx

https://technet.microsoft.com/en-us/library/cc794944(v%3dws.10).aspx


31

Add Binding to the Insight IPv4 Address in IIS When you install Insight, it installs as localhost/127.0.0.1. For other applications and services to be able to find Insight, you need to "bind" its IPv4 address in Internet Information Services (IIS) Manager.

To bind Insight to an IPv4 address using IIS Manager

1. Open the Internet Information Services (IIS) Manager (Start > Run > inetmgr).

2. In the Connections panel on the left, click the server name for which you want to generate the CSR.

3. Click No if the message "Do you want to get started with Microsoft Web Platform to stay connected with latest Web Platform Components?" appears.

4. In the Connections (left) pane, click Sites.

5. In the center pane, click Insight.

6. In the Actions (right) pane, click Bindings.

7. In the Site Bindings dialog box, click the site's Host Name, then click Add.


32

8. In the Add Site Binding dialog box, configure the settings:

a. Type - Click https. (Clicking https will cause the SSL certificate list to appear.)

b. IP address - Click All Unassigned, or the IP address of the site.

c. Port - Type the port number you are using for Insight (443 by default--this should be different if you are using 443 for EFT or anything else).

d. Host name - Type the host name for Insight (e.g., eftinsight.com).

e. SSL certificate - Specify the certificate that you are using for Insight.

f. Click OK.

9. Click Close to close the Add Site Binding dialog box.

10. In the Actions panel on the right, click Restart to complete the installation process.


33

Changing SSL Certificate in IIS Manager Use this procedure when you need to add or replace the SSL certificate for Insight. At the end of this procedure, you will need to restart the server, so you should perform this procedure during a time of low user activity.

To change the Insight website’s SSL certificate using IIS Manager

1. Open the Internet Information Services (IIS) Manager (Start > Run > inetmgr).

2. In the Connections panel on the left, click the server name for which you want to generate the CSR.

3. Click No if the message "Do you want to get started with Microsoft Web Platform to stay connected with latest Web Platform Components?" appears.

4. In the middle panel, under IIS, double-click Server Certificates.


34

5. In the Actions panel on the right, click Complete Certificate Request.

If you want to create a self-signed certificate. click Create Self-Signed Certificate first, create the certificate and send it to a Certificate Authority, then follow this procedure to complete the certificate request.


35

6. Do the following to install the certificate:

a. File name containing the certificate authority's response - Locate the .crt file (response from Certificate Authority) on your computer, and then click Open.

b. Friendly name - Provide a unique name to identify the SSL certificate. For wildcard SSL certificates, make sure your friendly name matches your common name (such as *.coolexample.com).

c. Select a certificate store for the new certificate - Select Personal.

d. Click OK to save the certificate.

7. In the Connections panel on the left, select the name of the server on which you installed the certificate.

8. Click the site you want to secure with the SSL certificate. (This process is called binding.)

9. In the Actions panel on the right, click Bindings,

10. In the Site Bindings dialog box, click the site's Host Name, then click Add (or Edit if you are updating a certificate binding).


36

11. Do the following to configure the settings:

a. Type - Click https.

b. IP address - Click All Unassigned, or the IP address of the site.

c. Port - Type the port number you are using for Insight (443 by default).

d. Host name - Type the host name for Insight (e.g., eftinsight.com).

e. SSL certificate - Specify the certificate that you are binding.

f. Click OK.

12. Click Close to close the Site Bindings dialog box.

13. In the Actions panel on the right, click Restart to complete the installation process.


37

Troubleshooting Refer to Initial Configuration for various configuration that must be set for Insight to function properly.

Below are various errors you might encounter.

• While the installation is checking the EFT connection settings, if the "ConfigureEFT" error message below appears, check the following:

o Username

o Password

o IP Address of EFT

o Remote admin port

o Verify remote administration is enabled

o If SSL is enabled for remote admin, check the expiration date on the certificate

• During installation:

o "the server is unavailable" may indicate a network connection issue or an offline server:

o While "incompatible server version" indicates an incorrect version of EFT:

o If the SQL account you are using does not have sufficient permission to create the Insight

database, the "permission denied in database" error appears. If you encounter this error, you must restart the Insight installation process with an account that has sufficient permissions.


38

• If multiple websites are managed by IIS and a port conflict occurs, there is no feedback to the user

about it during the installation of Insight. The Insight website in IIS will not start and a port conflict error is reported. The resolution of this problem is a manual process. That is, use the IIS Manager to make changes (bindings, ports, certificates) to the Insight website.

Insight Logging Insight writes to its own database, which you can query for information about Insight.

Because Insight is a browser-based application, you can access the web logs in the browser. In your browser console, Insight will log both request and network errors, as well as general frontend processes. In most browsers, you can press F12 to open the console. Unfortunately, we don’t have a way to export these logs through Insight at this time; however, in Internet Explorer and Firefox, you can right-click, select all, then copy and paste into a text file. In Google Chrome, you can right-click within the Console pane, then click Save As. For more information about using the Console in Chrome, refer to https://developers.google.com/web/tools/chrome-devtools/console/.

As always, if you are editing the logging configuration—or any XML file—verify your changes if you are getting errors, such as "service unavailable."

Web Logging

Currently there is not much information that is displayed in the log file, but it could be helpful for trouble shooting registration issues.

Web logs exist in your browser console, and will log both request and network errors, as well as general frontend processes.

In most browsers, you can press F12 to open the console. Unfortunately, we don’t have a way to export these logs through Insight; however, in Google Chrome, you can right-click within the Console pane, then click Save As.

https://developers.google.com/web/tools/chrome-devtools/console/


39

For more information about using the Console in Chrome, refer to https://developers.google.com/web/tools/chrome-devtools/console/.

In Internet Explorer and Firefox, you can right-click, select all, then copy and paste into a text file.

To enable verbose logging (added in v1.0.7)

1. In a text editor, edit the web.xml configuration file in the InetPub/EFTInsight/Api folder.

2. In the <appSettings> section, change VerboseLogging to true.

3. Add another key FileLogger and set its value to the path and filename to log information:

BI logging (added in v1.0.7)

The BI Service is pulling data from the ARM database and putting it into the EFT Insight database. Some examples of using the BI logger include providing valuable information about the installation if does not go smoothly, and troubleshooting why Expectations fail to be evaluated.

https://developers.google.com/web/tools/chrome-devtools/console/


40

To enable this logging

1. In a text editor, open the file Globalscape.BI.ProcessingEngine.Service.exe.xml.

2. In the <appSettings> section, change VerboseLogging to true.

3. Add a key named FileLogger, and set its value to the path and filename to log information:

Time Adjustments (v1.0.7 and later)

To make adjustments to time zone differences

1. In text editor, such as Notepad, open the file Globalscape.BI.ProcessingEngine.Service.exe.xml.

2. In the appSettings section, find the parameters EFTServerTimeAdjustment and EFTServerTimeUsesDST.

3. EFTServerTimeAdjustment is to override calculation of time difference between servers.

• Set value="0" if they are in the same time zone.

• If the servers are in different time zones, but the time zones change to/from DST at the same time, the difference can be set here.

• If this value is set, Insight will use it and not calculate on its own.

• add key="EFTServerTimeAdjustment" value=""

4. EFTServerTimeUsesDST should be set to true if calculation of time difference between servers should include Daylight Savings Time.

• add key="EFTServerTimeUsesDST" value="true"

5. If EFT Insight and the EFT Enterprise server are in the same time zone, set the EFTServerTimeAdjustment value to 0.


41

Service/API Logs

The service/API logs live in the database, specifically InsightDb, in the dbo.LogEntry table. This log can be viewed and exported via a tool like SQL Server Management Studio. This table logs issues with both Insight Service and Insight’s API.

The recommended query for retrieving this information from the SQL Server database for export is shown below:

SELECT TOP (10000) [Id] ,[EntryTime] ,[SeverityLevel] ,[Message] ,[RequestingSecurityPrincipalId] ,[CallingClassName] ,[CallingMethodName] ,[CallingLineNumber] ,[IpAddress] ,[EventType] ,[SerializedException] ,[MarkedForDeletion]

FROM [EFTInsight].[dbo].[LogEntry] order by Id desc

The ability to run this query is subject to user permissions.

Note that frontend issues will not appear in the Service/API logs.


42

43

Using EFT Insight EFT Insight is a simple to use data-transfer reporting-and-monitoring technology for your EFT platform, offering server health monitoring and enterprise-grade business intelligence. With EFT Insight you have full-spectrum visibility into your organization’s data flows and critical transfers, backed by the security included in all Globalscape products.

EFT Insight provides a unified display, presenting your operational data in a way that's easier to read and interpret. Quickly and easily view a variety of your most important data transfer metrics including PCI reports, server health, event rules and transfers. EFT Insight allows you to drill down into your transfers and event rules, and effortlessly find the data you need to make important business decisions.

EFT Insight provides a system for automating critical data transfer and event rules expectations so that you can be alerted when a problem arises, without having to conduct frequent manual checks. With the Expectations view you can set a schedule for when you should send or receive data transfers or event rules. Email alerts can be set to notify users upon the success or failure of these events.

Insight also offers support for multi-node clusters giving you visibility into even your most complex EFT deployments.

Logging in to Insight Only EFT "Server Admin" accounts are authorized to log in to Insight. The EFT server-administrator account that is logging in must have "Run and Edit Reports" permission. (During installation, the account needs both "Run and Edit Reports" and "COM API" permission.)

To create an EFT Server Admin account so that it can have access to EFT Insight but NOT have any administrator capabilities on EFT itself, create a "Change Password" admin and assign it to a Settings Template with no users, or create an AD group just for Insight users. Refer to Knowledgebase article #11459 for details.

To log in to Insight

1. Navigate to the Insight URL (e.g., https://eftinsight.com). The login page appears.

2. Under Authentication, specify EFT Server or Windows authentication.

3. Provide the EFT administrator or Windows credentials.

https://kb.globalscape.com/KnowledgebaseArticle11459.aspx

Using EFT Insight

44

4. Click Sign in. You are logged in and the Servers view appears.

• Invalid credentials result in the following error:

Make sure you’ve correctly entered the credentials for a user who has administrator privileges within EFT.

• If the authentication service cannot be reached, you will receive the following error:

• If the account does not have Run and Edit Reports permission, you will receive the

following error:


45

Navigation On the Insight main menu, you can view and manage other aspects of your EFT installation. A series of tabs provide insight into the activity of your EFT Enterprise servers. Navigate between the Servers, Expectations, Transfers, Event Rules, AWE Tasks, and Summary tabs to understand the entire transfer environment.

Servers - The Servers tab is the main dashboard in which you can view and manage your servers and associated devices/software. This “single pane of glass” macro-level view into the entire EFT ecosystem, provides the network operations (NetOps) team with a logical mapping of EFT and its primary dependencies while providing at-a-glance summary of their EFT ecosystem’s health and status.

Expectations - The Expectations tab provides insight into critical transfers and Event Rules that you expect to complete within your EFT system. Insight provides a system for automating these expectations so that you can be alerted when there’s a problem, without having to conduct frequent manual checks.

Transfers - The Transfers tab helps you track files as they traverse EFT.

Event Rules - The Event Rules tab gives EFT administrators visibility into the overall status and health of the EFT Event Rule system.

AWE Tasks - The AWE Tasks tab gives you visibility into AWE-related transfers.

Summary - The Summary view provides an overview of your system status, including critical failure events and anomaly detection. Visuals for failed transfers, event rules, expectations, and server/site outages give a snapshot of important problems to address.

In the upper left corner, under the Servers tab, there is a gear icon from which you can specify which components to show:

(Options that appear depend on tab selected.)

Using EFT Insight

46

Servers Tab The Servers tab offers a customizable diagram of your EFT architecture and dependencies, including summary statistics on the individual components.

Expand a server or a site to see details on status, dependencies, users, current activity, activity last 24 hours, and administration.

• Click the gear icon to show and display elements.

• Click the drop-down on ARM and DMZ Gateway to view connection status.

Offline servers or sites display in red:

A connected device is displayed in green:

To customize the layout to your liking, click and hold the grip on the right side of a tile, and then drag and position it where you want it:


47

Expectations Tab You have critical transfers and Event Rules that you expect to complete within EFT. Insight provides a system for automating these expectations so that you can be alerted when there’s a problem, without having to conduct frequent manual checks.

For example, suppose every day, EFT should run a backup. You can setup an expectation to monitor a timer event with the specific name of your back up event. Configure it so that when it runs at a specific time, if it fails, EFT sends an email to the administrator.

You can set an Expectation for single or multiple transfers or Event Rules that match a set of criteria you define. Additionally:

• An expectation can have a schedule that evaluates once or on a repeating interval.

• Transfer criteria can be set for sender name, file name, direction, or file size.

• Event Rule criteria can be set for event name, EFT Site, or event type.

• Email alerts can be set to notify upon success or failure (To receive notifications, EFT must have an SMTP server configured.)

• Export to CSV - allows you to export the page displayed or the entire dataset. Filter the view as needed before exporting.

• Sort columns by clicking on the column header

Click an Expectation to see a history of its evaluations, or click View Evaluations to view evaluations for all Expectations.

Individual Expectations can be expanded for further detail.

Insight includes a SampleDashboard. If you upgraded from a previous version of Insight, one of the dashboards is "This was the old AutoSaved," which contains the Expectations you had defined. You can rename it, if desired.

Using EFT Insight

48

All information can be filtered to see only the data that you’re interested in. The Expectations view can be filtered by:

• Evaluation Date

• Name

• Status

You can create multiple Expectation "dashboards" and each can have their own expectations defined.

To create a new Expectation dashboard

1. Click Add Dashboard.

2. Give the dashboard an intuitive name.

To create a new Expectation and begin automating your verification process

1. Click Add Expectation.

2. The Expectation Name dialog box appears. Configure the Expectation, then click Save.


49

• You can set an Expectation for single or multiple transfers or Event Rules that match a set of

criteria you define.

• Transfer criteria can be set for sender name, file name, direction, or file size.

• Event Rule criteria can be set for event name, EFT Site, or event type.

• An expectation can have a schedule that evaluates once or on a repeating interval.

• Email alerts can be set to notify upon success or failure (To receive notifications, EFT must have an SMTP server configured.)

Evaluated Expectations

Expectations that have been evaluated appear on the Evaluated Expectations dashboard.

To view evaluated expectations

• On the Expectations dashboard, click View Evaluations. The Evaluated Expectations page appears.

Using EFT Insight

50


51

Transfers Tab The Transfers tab displays a record of all transfers through your servers. Additional visuals provide a summary of transfers over time and success/failure rates.


• Show / hide columns - Select the check boxes to choose which columns to hide or display


The widgets in the Transfers tab can sometimes be slow to appear. Insight will load all the data that belongs to the tab, and do any grouping and sorting in memory before sending it to the web frontend. Having more data to display will slow it down. You can reduce the amount of data to display by using filters. For example, add a Started filter with a custom range:

Using EFT Insight

52

The filter above would only display transfers that were started between 5/7/2019 at 1000 AM and 5/7/2019 at 1130 AM.

You can filter the Transfers view by:

• Completed Date

• Destination IP

• Destination Path

• Destination Port

• Direction (upload, download, pull, push)

• Elapsed Time

• Event Rule

• File Name

• Name (Initiating username or Event Rule name)

• Protocol

• Server name

• Site name

• Size

• Source IP

• Source Port

• Started Date

• Status (Succeeded, Failed)

• Status Code (click on the code to see details)

• Transaction ID


53

Event Rules Tab EFT Enterprise’s Event Rule system allows administrators to create automated workflows for their servers.


• Show / hide columns - Select the check boxes to choose which columns to hide or display


Insight provides easy visibility into these Event Rules, including the ability to drill down to view specific steps of the Event Rule that succeeded or failed.

All information can be filtered so you’re only seeing the data that you’re interested in. The Event Rules filters include:

• Completed

• Elapsed

• Name

• Type

• Server

• Site

• Status

• Transaction ID

• Trigger

• Started

54

AWE Tasks Tab The Advanced Workflow Engine tasks can be viewed on the AWE Tasks tab in Insight.

The tab displays the following information:

• Name - Name of the task

• Started - Date/time the task started

• Completed - Date/time the task completed

• Elapsed - Amount of time the task was run

• Rule Name - Name of the Event Rule the task is used in

• Status - Success or Failure of the task

• Error # - Error number of the failure

• Description - Description of error

As with other tabs, the AWE Tasks tab can be filtered to show just the information that you want to display.

The table can be sorted by certain columns and can be exported in CSV format.


55

Summary Tab The Summary tab provides an overview of your system status, including critical failure events and anomaly detection. Visuals for failed transfers, event rules, expectations, and server/site outages give a snapshot of important problems to address.

Click each of these visuals to jump to a view containing specific outages and failures. Additional graphics for Authentications, Connections, and Transfers provide key data points for general system usage, while monitors for licensing and PCI compliance help with system management.

You can filter the Summary view by Date, Server, and Site.

Using EFT Insight

56

Filters Filters can be applied on many views of Insight, to narrow the scope of the data you’re viewing.

Each tab (except Servers) has its own set of filter parameters on the Filter pane.

Applied filters will affect all data in the current view, turning it into a dashboard on the specific information you need.

If you click the angle bracket on the Filters pane, the Filters pane will be hidden or shown.

To filter a view

1. In the Filters panel, click Add Filter.

2. Specify the parameters for the filter, then click Done.

The view changes based on your filter settings.

• To edit a parameter, click the pencil icon.

• To remove a parameter, click the X next to it.

Date post:	30-Jul-2020
Category:	Documents
Upload:	others
View:	4 times
Download:	0 times

EFT™ Insight v1.0.7 Installation, Administration, and User Guide...2019/05/07 · (v1.0.7) Oracle...

Documents