Previous Topic: How to Troubleshoot the Reporting ServiceNext Topic: Troubleshoot the Report Agent on a Windows Computer


Troubleshoot the Report Agent on a UNIX Computer

Valid on UNIX

The Report Agent collects scheduled snapshots of the local CA ControlMinder database and any policy model databases (PMDBs) on the endpoint, and sends this snapshot in XML format to the report queue on the Distribution Server.

Note: The Report Agent also performs other tasks. For more information about the Report Agent, see the Reference Guide.

To troubleshoot the Report Agent on a UNIX computer

  1. Verify that the library path environment variable is set correctly. Do the following:
    1. su to root.
    2. Set the library path environment variable to ACSharedDir/lib. Be default, ACSharedDir is the following directory:
      /opt/CA/AccessControlShared
      
    3. Export the library path environment variable.
  2. Verify that the following configuration settings are correct. The configuration settings are located in the [ReportAgent] section of the accommon.ini file:

    Note: You can use either CA ControlMinder Endpoint Management or selang commands to verify the value of the configuration settings. However, for this procedure we recommend that you use selang commands in the config environment to change the value of configuration settings. Using selang commands lets you change the configuration settings in this procedure without having to stop and restart CA ControlMinder.

    reportagent_enabled

    Specifies whether reporting is enabled (1) on the local computer.

    Default: 0

    Important! You must set the value of this configuration setting to 1 to enable the Report Agent to run automatically. If the value of this configuration setting is 0, the Report Agent does not send scheduled snapshots of the database to the Distribution Server. However, if the value of this configuration setting is 0 you can still run the Report Agent in debug mode.

    schedule

    Defines the schedule of when reports are generated and sent to the Distribution Server.

    You specify this setting in the following format: time@day[,day2][...]

    Default: 00:00@Sun,Mon,Tue,Wed,Thu,Fri,Sat

    Example: "19:22@Sun,Mon" generates reports every Sunday and Monday at 7:22 pm.

    send_queue

    Defines the name of the Message Queue on the Distribution Server to which the Report Agent sends snapshots of the local database.

    Default: queue/snapshots

    Important! Do not change the default value of this configuration setting.

  3. Verify that the following configuration setting is correct. The configuration setting is located in the [communication] section of the accommon.ini file:

    Note: You can use either CA ControlMinder Endpoint Management or selang commands to verify the value of the configuration settings. However, for this procedure we recommend that you use selang commands in the config environment to change the value of configuration settings. Using selang commands lets you change the configuration settings in this procedure without having to stop and restart CA ControlMinder.

    Distribution_Server

    Defines the Distribution Server URL.

    Note: The default port for TCP communication is 7222 and the default port for SSL communication is 7243. You should verify that the Distribution Server URL specifies the correct port number for the communication type.

    Default: none

    Example: ssl://172.24.176.145:7243. This URL configures the Report Agent to communicate with the Distribution Server at the IP address 172.24.176.145 on port 7243, using the SSL protocol.

  4. Verify that the following line exists in the [daemons] section of the seos.ini file:
    ReportAgent = yes, ACSharedDir/lbin/report_agent.sh start
    

    This line enables the Report Agent daemon to execute automatically when CA ControlMinder starts.

    Note: By default, the ACSharedDir directory is located at /opt/CA/AccessControlShared.

  5. Stop CA ControlMinder:
    secons -s
    

    CA ControlMinder and the Report Agent stops.

  6. Navigate to the following directory:
    ACSharedDir/bin
    
  7. Run the Report Agent in debug mode, using the following command:
    ./ReportAgent -debug 0 -task 0 -now
    
    ReportAgent

    Runs the Report Agent.

    -debug 0

    Specifies to run the Report Agent in debug mode and to display the output on the console.

    Note: You cannot run the Report Agent in debug mode if the Report Agent daemon is enabled.

    -task 0

    Specifies that the Report Agent collects and sends information about the CA ControlMinder database, and any local PMDBs, to the Distribution Server. This information is used to generate CA ControlMinder reports.

    -now

    Specifies to run the Report Agent now.

  8. Review the Report Agent output as follows:
  9. Start CA ControlMinder:
    seload
    

    CA ControlMinder and the Report Agent start.

Example: Report Agent Output

The following Report Agent output shows the Send Queue and Report File parameters:

------------------------------------------------------------------------
Send report parameters:
------------------------------------------------------------------------
Send Queue................... queue/snapshots
Report File.................. /work/opt/CA/AccessControlShared/data/db2xml/ACDB.xml
------------------------------------------------------------------------
start sending report to queue 'queue/snapshots'...