Maintaining CA Network Flow Analysis › Service Management

Service Management

You can start or stop CA Network Flow Analysis services or check the status of a service in the Windows Services window.

The CA Network Flow Analysis services are described briefly in the following list. If the CA Network Flow Analysis components are installed on more than one server, the services run on each server as shown in the following list. If all the components are installed on a standalone system, all the services run on the standalone server.

• CA NFA Collection and Poller Webservices: Provides web service interfaces for the NFA console to communicate with the Harvester and Poller (Harvesters).
• CA NFA DNS/SNMP Proxies: Handles polling and reverse DNS lookups for the NFA console and Harvesters (NFA console and Harvesters).
• CA NFA Harvester: Runs the Harvester/collector process (Harvesters).
• CA NFA Harvester Data Retention Service: Deletes old data files (Harvestesr).
• CA NFA Harvester File Pump Web Service: Enables the NFA console to retrieve data from the Harvester (Harvesters).
• CA NFA Poller: Runs the poller, retrieves interface lists from the routers, and handles mapping for persistent interface IDs (Harvesters).
• CA NFA Reaper: Runs the Reaper process, which processes incoming flow and writes out files for 1-minute, 15-minute, and Enterprise Overview data (Harvesters).
• CA NFA RibSource: Provides CA Network Flow Analysis data for CA Performance Center views and dashboards (NFA console).
• NetQoS Mysql51: Runs the standard MySQL instance and stores MySQL configuration data (NFA console and Harvesters).
• NetQoS NQMySql51: Runs the Custom Storage Engine, which stores files for 1-minute data, 15-minute data, and Flow Forensics data (Harvesters).
• NetQoS Reporter Manager Service: Synchronizes the Harvester and NFA console databases (NFA console).
• NetQoS Reporter/Analyzer General Services: Handles several tasks, including detecting inactive interfaces and reading legacy HASP devices (NFA console).
• NetQoS Reporter/Analyzer Pump Service: Retrieves Enterprise Overview data from the Harvester (NFA console).
• NetQoS Reporter/Analyzer Query Services: Provides interfaces to run on-the-fly Custom Reports and Analysis reports (NFA console).
• NetQoS Reporter/Analyzer Watchdog: Polls components for status information (NFA console).
• NetQoS Reporter/Analyzer Report Service: Provides interfaces to run Flow Forensics reports and scheduled Custom Reports (NFA console).

Service Log Files

The following lists identify the CA Network Flow Analysis service names as they appear in the Services window on Windows servers. The table also lists the services associated log file names and locations, along with the configuration file or Windows registry key that controls the log level setting.

NFA Console Server Services and Logs

• CA NFA RibSource

  Log name and location: <NFA_install_path>\Reporter\RIB\NFA\webapps\NFARS\WEB-INF\logs\application.log

• DNS Proxy Web Service

  Log name and location: <NFA_install_path>\ProxyServices\Logs\DnsProxyWSLog<yyyy-mm-dd>.log

  Log level setting: <NFA_install_path>\ProxyServices\Web.config

  <add key="LogLevel" value="6"/> Default: 4

• NetQoS Reporter Manager Service

  Manager Service log name and location: <NFA_install_path>\Reporter\Logs\Manager Service Log<yyyy-mm-dd>.log

  Log level setting: <NFA_install_path>\Reporter\bin\ ReporterManagerService.exe.config
  <setProperties Severity="6" /> Default: 4

• NetQoS Reporter/Analyzer General Services

  Log name and location: <NFA_install_path>\Reporter\Logs\nqservErrors<yyyy-mm-dd>.log

• NetQoS Reporter/Analyzer Pump Service

  Log name and location: <NFA_install_path>\Reporter\Logs\PumpLog<yyyy-mm-dd>.log

  Log level setting: <NFA_install_path>\Reporter\NetQoS.ReporterAnalyzer.PumpService\bin\NetQoS.ReporterAnalyzer.PumpService.exe.config
  <setProperties Severity="6"/> Default value: 4

• NetQoS Reporter/Analyzer Query Services (AKA ‘Reporting services’)
  • Automatic Groups task: Maintains system controlled groups and their memberships.

    Log name and location: <NFA_install_path>\Reporter\Logs\ManagerService_AutomaticGroupsLog<yyyy-mm-dd>.log

  • DNS task: Performs reverse DNS resolution to provide names for host IP addresses.

    Log name and location: <NFA_install_path>\Reporter\Logs\ManagerService_DnsLog<yyyy-mm-dd>.log

  • Maintenance tasks: Cull data, deploy settings to Harvester servers and other servers, and perform other tasks.

    Log name and location: <NFA_install_path>\Reporter\Logs\ManagerService_MaintenanceLog<yyyy-mm-dd>.log

• NetQoS Reporter/Analyzer Watchdog

  Log name and location:

  <NFA_install_path>\Reporter\Logs\WatchdogLog<yyyy-mm-dd>.log

  Log level setting: <NFA_install_path>\Reporter\ NetQoS.ReporterAnalyzer.WatchdogService\bin\WatchdogService.exe.config <setProperties Severity="6"/> Default value: 4

• NetQoS ReporterAnalyzer Report Service

  Log name and location: <NFA_install_path>\Reporter\Logs\FlowForensicsLog<yyyy-mm-dd>.log

  Log level setting: <NFA_install_path>\Reporter\NetQoS.ReporterAnalyzer.ReportService\ bin\NetQoS.ReporterAnalyzer.ReportService.exe.config

  <setProperties Severity="6" /> Default value: 4

  To log each poll in addition to regular event logging:
  <add key="VerboseLogging" value="True"/>

Harvester Server Services and Logs

• CA NFA Collection and Poller Webservices

  Log name and location: <NFA_install_path>\Netflow\Logs\collpollws-wrapper.log

• CA NFA DNS/SNMP Proxies

  Log name and location: <NFA_install_path>\Netflow\Logs\proxies-wrapper.log

  No option for log level setting.

• CA NFA Harvester

  Harvester log name and location: <NFA_install_path>\Netflow\Logs\harvester-wrapper.log

• CA NFA Harvester Data Retention Service

  Log name and location: <NFA_install_path>\Netflow\Logs\dataretention-wrapper.log

• CA NFA Harvester File Pump Web Service

  Log name and location: <NFA_install_path>\Netflow\Logs\filewebservice-wrapper.log

• CA NFA Poller

  Log name and location: <NFA_install_path>\Netflow\Logs\poller-wrapper.log

• CA NFA Reaper

  Reaper log name and location: <NFA_install_path>\Netflow\Logs\RealtimeReaperErrors<yyyy-mm-dd>.log

• DNS Proxy Web Service

  Log name and location: <NFA_install_path>\ProxyServices\Logs\DnsProxyWSLog<yyyy-mm-dd>.log

• NetQoS NQMySql51

  NQ MySQL log name and location: <NFA_install_path>\Netflow\Logs\oursql_5.1_error.log

Services and Logs on All Servers

• NetQoS Mysql51

  Log name and location: <NFA_install_path>\MySql51\data\<server_name>.err