• No results found

To make the demo database available to users locate the folder called demodat in the Spotfire Server installation media. Select the oracle or mssql sub-folder depending on your database server, and copy the file within this folder, demo.part0.zip to the shared disk location. This ZIP file contains analysis files and an information model that links to the demo data.

When this file is in place, a Spotfire Administrator or a Library Administrator can import these files to the Library.

To Import the Demo Files into the Library 1 Start TIBCO Spotfire and log in as a Spotfire Admin.

2 Select Tools > Library Administration.

3 Navigate to the Library folder where you want to import the demo files. For instance, you can create a folder called Demo.

4 Select Import.

5 Click Browse and select the file demo.part0.zip. 6 Click OK.

7 Click OK.

8 Click Close when the dialog states Import Done.

A template data source will also be imported with this file. You must use the Informa-tion Designer to edit this and supply the URL and login informaInforma-tion of your database server for it to work. See the Information Designer help for more information about how to set up and edit data sources.

6 Monitoring

TIBCO Spotfire Server can be monitored. Reasons for monitoring include detecting problems with the server itself, problems with external systems such as databases and LDAP servers, network problems, misconfigured clients and in some cases malicious behavior. The purpose is typically to reduce down-time, detect and fix problems before users notice them and to eliminate performance bottle necks.

Spotfire Server can be monitored using TIBCO Hawk or any other Java Management Extensions (JMX) compliant monitoring tool, like JConsole, a part of the Java SDK which is bundled with the Spotfire Server. JMX is a Java framework for monitoring and managing applications and devices. It is part of the Java Platform, Standard Edi-tion since version 5.0.

6.1 Instrumentation

JMX consists of three levels:

1 Instrumentation level: Provides monitoring information and management operations.

2 Agent level: Server that provides applications access to the instrumentation level.

3 Remote Management level: Connectors and adaptors providing access to the agent.

TIBCO Spotfire Server runs within the Tomcat application server which provides the basic functionality needed, the server (Agent level) and a Java Remote Method Invo-cation (Java RMI) connector (Remote Management level).

Tomcat provides a rich instrumentation set for monitoring and managing the applica-tion server, for instance Tomcat configuraapplica-tion parameters and basic usage statistics.

On top of this the JVM shipped with Spotfire Server is also heavily instrumented using JMX, providing information about CPU and memory usage, garbage collection and thread pools. The Spotfire Server also provides measures.

Server

Server version

Date and time the server was started

Uptime time since the server was started, both as a formatted string and in milliseconds since January 1, 1970, 00:00:00 GMT

Logging

Current log configuration file (configurable)

Available log configuration files (readonly)

Lists all log configuration files in <installation dir>\tomcat\webapps\spotfire\

WEB‐INF

Number of logging events on warn, error and fatal levels

Logger

There may be several of these or none at all, depending on the log configuration.

Log appender name

Notifications: Outputs all log statements from a configured log4j appender as JMX notifications

Server Metrics

Number of attachments on the server

Number of running Information Services jobs

Number of authenticated HTTP sessions HTTP Status Codes

Number of HTTP response codes representing client or server errors, that is the 4xx and 5xx ranges returned from the server. 

Note: Even in a system working well responses in these series may be common.

Data Source

One entry for each currently running data source on the server, including the servers own data source:

Name

URL

Configured minimum number of connections

Configured maximum number of connections

Current number of active connections

Current number of idle connections

The maximum number of concurrently active connections seen

6.2 Configuration

Because sensitive information may be provided through JMX and since the JVM, Tomcat, and Spotfire Server provide some management capabilities, it is important to restrict the access. The JMX RMI connector is disabled by default; the administrator must enable it. Also consider the authentication, authorization and encryption security features.

Authentication

The Spotfire Server solution applies the existing database authentication mechanism using a separate database table. Passwords are hashed and the same principals may be used across an entire Spotfire Server cluster.

Authorization

Each user has either read or read and write permissions, meaning the user can either only read attribute values or both and modify the attributes in case they are writable.

Authorization is enabled by default. Authorization only works with the default authen-tication implementation.

JMX accounts and credentials are separated from Spotfire accounts and credentials.

They are only used for monitoring. Ordinary Spotfire login does not work.

Encryption

The RMI connector can easily be configured to encrypt the traffic using SSL. Doing so is recommended since usernames and passwords are otherwise transmitted in plain text.

SSL is not enabled by default. It requires a certificate.

Firewalls

A firewall can easily be configured to allow traffic to the desired ports. By default the RMI registry and the RMI connector share a common port (1099) to facilitate firewall configuration.

JMX Configuration Commands

The following commands are used to configure and administrate JMX access to the monitoring component.

config‐jmx Configures the JMX RMI connector

create‐jmx‐user Creates a new JMX user account delete‐jmx‐user Deletes a JMX user

list‐jmx‐users Lists all JMX users

6.3 Example

The procedure to set up JMX monitoring using JConsole is simple. This example does not use SSL and provides passwords inline:

1 Run the config‐jmx command: config  config‐jmx  ‐‐enabled=true

2 Import the configuration: config  import‐config  ‐‐comment=”Enabling  JMX” 

configuration.xml

3 Provide the configuration tool password.

4 Create a JMX user: config  create‐jmx‐user  ‐‐username=MyJMXUser 5 Provide the MyJMXUser password.

6 Provide the configuration tool password to write the user and password to database.

7 Restart the Spotfire Server.

8 Launch the JConsole application. In a default Windows installation: C:\tibco\tss\4.5.0\

jdk\bin\jconsole.exe

9 In the JConsole New Connection dialog, select Remote Process, enter the

<hostname>:1099, and provide the JMX username and password.

Comment: Specifically note the MBeans tab and the com.spotfire.server domain.