Symantec Access Management

 View Only
  • 1.  Monitoring the Identity Suite with CA APM (Wily)

    Posted Apr 09, 2018 04:39 PM

    Hello Team,

     

    Jim DeZego  James.DeZego & I were reviewing CA APM value for the CA Identity Suite solution.

     

    The CA Identity Suite Virtual Appliance and standard deployments typically leverage Wildfly as the J2EE.     Standalone deployments (non-vApp) may also choose RHEL JBOSS EAP (commercial version), IBM WebSphere, or Oracle Weblogic.

     

    Lets focus on the Wildfly instances for Identity Manager, Identity Governance, and Identity Portal.

     

     

     

     

    Documentation for CA APM with Wildfly as the J2EE shows the following JVM options to be leveraged.

    JBoss and WildFly - CA Application Performance Management - 10.7 - CA Technologies Documentation 

     

    "For JBoss 7 and above (including WildFly 8, 9, and 10): Add -Djboss.modules.system.pkgs=org.jboss.byteman,com.wily,com.wily.* -javaagent:<PathToAgentJar> -DagentProfile=<PathToAgentProfile>."

     

     

     

     

     

    However, during our testing with the Identity Suite vApp and standalone deployments, there were a few additional switches required to support the additional logging features that CA APM required for Wildfly.

     

     

    JVM switches required for CA APM agent for wildfly:

     

    -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager 

    -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily/Agent.jar

    -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily/core/config/IntroscopeAgent.profile

     

    JVM switch, to "rename" without updating the "profile" file:

    -Dcom.wily.introscope.agent.agentName=IM_Wildfly_AWS_Node2

     

    JVM switches required for Wildfly logging that CA APM required.

     

    -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager 

    -Djava.util.logging.manager=org.jboss.logmanager.LogManager

    -Xbootclasspath/p:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.1.4.GA.jar:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/log4j/logmanager/main/log4j-jboss-logmanager-1.1.0.Final.jar:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-8.2.0.Final.jar:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-1.5.2.Final.jar

     

    [Note:   Used   find /opt/CA/wildfly-idm   -name "*log*.jar"    to locate ALL the log4j modules under "org.jboss"]

     

     

     

     

    Example of the IM JVM OPTIONS:

     

    JAVA_OPTS=-Xms512m -Xmx2048m -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true  -Djava.security.egd=file:/dev/./urandom -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager  -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily/Agent.jar -Dcom.wily.introscope.agent.agentName=IM_Wildfly_Alan_Laptop -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily/core/config/IntroscopeAgent.profile -Xbootclasspath/p:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.1.4.GA.jar:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/log4j/logmanager/main/log4j-jboss-logmanager-1.1.0.Final.jar:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-8.2.0.Final.jar:/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-1.5.2.Final.jar

     

     

     

    Example of the IG JVM OPTIONS:

     

    JAVA_OPTS=-Xms512m -Xmx2048m -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily/Agent.jar -Dcom.wily.introscope.agent.agentName=IG_Wildfly_Alan_Laptop -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily/core/config/IntroscopeAgent.profile -Xbootclasspath/p:/opt/CA/wildfly-ig/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.1.4.GA.jar:/opt/CA/wildfly-ig/modules/system/layers/base/org/jboss/log4j/logmanager/main/log4j-jboss-logmanager-1.1.0.Final.jar:/opt/CA/wildfly-ig/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-8.2.0.Final.jar:/opt/CA/wildfly-ig/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-1.5.2.Final.jar

     

     

     

    Three (3) common error messages:

     

    1) Memory issues due to use of -XX:+UseLargePages JVM Option with CA APM   [wildfly-console.log]

    ERROR:   Java HotSpot(TM) 64-Bit Server VM warning: Failed to reserve shared memory (errno = 1).

    RESOLUTION:   Remove JVM option

     

    2) JBoss/Wildfly Log Manager required by CA APM.     [wildfly-console.log]

    ERROR:  Could not load Logmanager "org.jboss.logmanager.LogManager"
    java.lang.ClassNotFoundException: org.jboss.logmanager.LogManager
            at java.net.URLClassLoader.findClass(URLClassLoader.java:381)

    RESOLUTION:   Add in the JVM switches to declare the LogManager modules & class files (jar)

     

    3) -Djboss.modules.system.pkgs=com.wily,com.wily.*   switch is NOT defined or overwritten on the vApp.

    ERROR: Exception in thread "main" java.lang.NoClassDefFoundError: com/wily/introscope/agent/AgentShim
            at org.jboss.as.server.Main.main(Main.java)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

    RESOLUTION:    Update the JVM swtich for system modules to include com.wily,com.wily.*

     

     

    After the above has been configured, ensure that TCP 5001  (both incoming/outgoing) is enabled.

    Execute a netstat -an | findstr 5001  [Win OS]    or    netstat -an | grep 5001    [Linux OS]

    Ensure that a network connection is ESTABLISHED between the agent(s) and the CA APM Mgmt Server.

     

     

     

    Example of the CA APM Management token in the "profile".

    agentManager.url.1=54.152.177.5:5001

     

     

    Example of the CA APM Agent response within CA APM Management UI.

     

     

     

     

    Cheers,

     

    Alan Alan_Baugher & Jim DeZego  James.DeZego

     

     

     

     

     

     

    Edit:   4/9/2018

     

    If you wish to use business friendly names for your CA APM agents, you may wish to use the above JVM switch, -Dcom.wily.introscope.agent.agentName=IM_Wildfly_AWS_Node2 ,      This may be important to clarify when more than one Wildfly J2EE instance exists on a shared server where only one (1) CA APM profile is required; useful for dev-ops deployments.

     

     

    However, if you wish to take advantage of "auto-naming", there is an additional JAR & configuration that may be used.

    - May also be used for Wildfly 8.x

     

    Java Agent Naming - CA Application Performance Management - 10.7 - CA Technologies Documentation 

    JBoss and WildFly - CA Application Performance Management - 10.7 - CA Technologies Documentation 

     

    Configure JBoss 7 for Autonaming

    The Automatic Agent Naming feature works with JBoss 7 only if you copy the webappsupport.jar file to the appserver deployment folder. The agent name is based on the configuration name that is specified when the server is started.

    Example

    For a standalone server, copy webappsupport.jar to the <JBoss7_Home>/standalone/deployments/ folder

    Enable the Autonaming feature for JBoss 7.1 application servers.

    Follow these steps:

    1. Navigate to the <Agent_Home>\core\ext directory of your Java agent installation.
    2. Select and move the WebAppSupport.jar file into the appserver(standalone) deployments folder.
    3. Add the following line to the IntroscopeAgent.profile:

      com.wily.use.platform.mbeanserver=true

    4. Add the following line to the standalone.xml file:

      <server name="jboss7" xmlns="urn:jboss:Domain:1.2">

    5. Verify that the name specified displays in the Investigator.

     

     

     

    For the Identity Suite vApp, to update the standalone-full-ha.xml file, will required use of the JBOSS_HOME/bin/jboss-cli.sh process, to allow secure access to the vApp's Wildfly configuration files.  (JBOSS_HOME/standalone/configuration/standalone-*.xml)

     

     

     

    Edit: 4/11/18  -   Attached examples of Wildfly 8.2 standalone.conf for IM and IG; as well as the jvm-args.conf for the IM vApp Wildfly example; and jvm_options.conf for the IAMCS (jcs) on vApp

     

     

    Edit: 4/11/18  Added a few extra screen shots of CA APM for IM/IP/IG & IAMCS with JMX metrics as well.

     

     

     

     

    ####   ####

     

    Note1:    Most CA APM settings may be updated in the CA_APM_HOME/wily/core/config/Introscope.profile  configuration.

     

    However, it is also possible to define these CA APM key:value pairs as a JVM option.   This method may assist you with your testing cycle, and keep a "generic" Introscope.profile for your various JVM components.

     

    Note 2:   If using CA APM for multiple JVM on the same server, ensure that separate CA APM agent folder are used for each, to avoid collision of logs and updates from the CA APM management server back to the CA APM agent folder.

     

    Example:   

     

    1) IAMCS (jcs) enabled with CA APM JVM (default + JMX) via   /opt/CA/IdentityManager/ConnectorServer/data/jvm_options.conf

     

    -Xms1G -Xmx2G -Dcom.sun.net.ssl.enableECC=false -Dcom.wily.introscope.agent.agentName=IAMCS_JCS_Node01 -Dcom.wily.introscope.agent.agentManager.url.1=54.152.177.5:5001 -Djava.awt.headless=true  -Djava.security.egd=file:/dev/./urandom  -Djboss.modules.system.pkgs=com.wily,com.wily.*  -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily_jcs/Agent.jar -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily_jcs/core/config/IntroscopeAgent.profile  -Dcom.wily.introscope.agent.jmx.enable=true  -Dcom.wily.introcope.agent.jmx.syncWithAllMbeanServersForcibly=true  -Dcom.wily.use.platform.mbeanserver=true

     

    2) The IM/IG/IP Wildfly instances for the vApp; CA APM default agent & JMX monitoring:

     

    # IM jvm-args.conf with JMX monitoring [Copy AGENT_HOME/common/WebAppSupport.jar to AGENT_HOME/core/ext]
    JAVA_OPTS=-Xms1G -Xmx4G -Dcom.wily.introscope.agent.agentName=IM_Wildfly_Node01 -Dcom.wily.introscope.agent.agentManager.url.1=54.152.177.5:5001 -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true  -Djava.security.egd=file:/dev/./urandom -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager  -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily_im/Agent.jar -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily_im/core/config/IntroscopeAgent.profile -Xbootclasspath/p:$JBOSS_HOME/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.1.4.GA.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/log4j/logmanager/main/log4j-jboss-logmanager-1.1.0.Final.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-8.2.0.Final.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-1.5.2.Final.jar  -Dcom.wily.introscope.agent.jmx.enable=true  -Dcom.wily.introcope.agent.jmx.syncWithAllMbeanServersForcibly=true  -Dcom.wily.use.platform.mbeanserver=true

    # IG jvm-args.conf with JMX monitoring [Copy AGENT_HOME/common/WebAppSupport.jar to AGENT_HOME/core/ext]
    JAVA_OPTS=-Xms2G -Xmx8G -Dcom.wily.introscope.agent.agentName=IG_Wildfly_Node01 -Dcom.wily.introscope.agent.agentManager.url.1=54.152.177.5:5001 -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true  -Djava.security.egd=file:/dev/./urandom -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager  -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily_ig/Agent.jar -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily_ig/core/config/IntroscopeAgent.profile -Xbootclasspath/p:$JBOSS_HOME/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.1.4.GA.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/log4j/logmanager/main/log4j-jboss-logmanager-1.1.0.Final.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-8.2.0.Final.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-1.5.2.Final.jar  -Dcom.wily.introscope.agent.jmx.enable=true  -Dcom.wily.introcope.agent.jmx.syncWithAllMbeanServersForcibly=true  -Dcom.wily.use.platform.mbeanserver=true

    # IP jvm-args.conf with JMX monitoring [Copy AGENT_HOME/common/WebAppSupport.jar to AGENT_HOME/core/ext]
    JAVA_OPTS=-Xms1G -Xmx2G -Dcom.wily.introscope.agent.agentName=IP_Wildfly_Node01 -Dcom.wily.introscope.agent.agentManager.url.1=54.152.177.5:5001 -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true  -Djava.security.egd=file:/dev/./urandom -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djboss.modules.system.pkgs=com.wily,com.wily.*,org.jboss.byteman,org.jboss.logmanager  -javaagent:/opt/CA/VirtualAppliance/custom/apm/wily_ip/Agent.jar -Dcom.wily.introscope.agentProfile=/opt/CA/VirtualAppliance/custom/apm/wily_ip/core/config/IntroscopeAgent.profile -Xbootclasspath/p:$JBOSS_HOME/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.1.4.GA.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/log4j/logmanager/main/log4j-jboss-logmanager-1.1.0.Final.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-8.2.0.Final.jar:$JBOSS_HOME/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-1.5.2.Final.jar  -Dcom.wily.introscope.agent.jmx.enable=true  -Dcom.wily.introcope.agent.jmx.syncWithAllMbeanServersForcibly=true  -Dcom.wily.use.platform.mbeanserver=true



  • 2.  Re: Monitoring the Identity Suite with CA APM (Wily)

    Posted Apr 09, 2018 06:40 PM

    A view of the available CA APM v10.7 Agent tokens in an example IntroscopeAgent.profile.

     

    We may only need to update three (3) values or define them as JVM options for the agent:

     

    introscope.autoprobe.enable=true

    agentManager.url.1=localhost:5001                                              [Update to IP/FQDN of remove CA APM Mgmt Srv]

    introscope.agent.agentName=JBoss Agent                                 [Define an unique name or use auto-naming]

     

     

     

    #### #####

    Full view of all CA APM tokens:

     

    /opt/CA/VirtualAppliance/custom/apm/wily/core/config/IntroscopeAgent.profile

     

    grep -v '^#' IntroscopeAgent.profile | grep -v -e '^[[:space:]]*$'

     

    ####### ######

     


    introscope.autoprobe.enable=true
    introscope.autoprobe.logfile=../../logs/AutoProbe.log
    introscope.autoprobe.directivesFile=jboss-typical.pbl,hotdeploy
    log4j.logger.IntroscopeAgent=INFO, logfile
    log4j.appender.logfile.File=../../logs/IntroscopeAgent.log
    log4j.additivity.IntroscopeAgent=false
    log4j.appender.console=com.wily.org.apache.log4j.ConsoleAppender
    log4j.appender.console.layout=com.wily.org.apache.log4j.PatternLayout
    log4j.appender.console.layout.ConversionPattern=%d{M/dd/yy hh:mm:ss a z} [%-3p] [%c] %m%n
    log4j.appender.console.target=System.err
    log4j.appender.logfile=com.wily.introscope.agent.AutoNamingRollingFileAppender
    log4j.appender.logfile.layout=com.wily.org.apache.log4j.PatternLayout
    log4j.appender.logfile.layout.ConversionPattern=%d{M/dd/yy hh:mm:ss a z} [%-3p] [%c] %m%n
    log4j.appender.logfile.MaxBackupIndex=4
    log4j.appender.logfile.MaxFileSize=2MB
    introscope.agent.dns.lookup.type=separateThread
    introscope.agent.dns.lookup.max.wait.in.milliseconds=200
    agentManager.url.1=localhost:5001                                                 [Update to IP/FQDN of remove CA APM Mgmt Srv]
    introscope.agent.customProcessName=JBoss     
    introscope.agent.defaultProcessName=UnknownProcess
    introscope.agent.agentNameSystemPropertyKey=
    introscope.agent.agentAutoNamingEnabled=true
    introscope.agent.agentAutoNamingMaximumConnectionDelayInSeconds=120
    introscope.agent.agentAutoRenamingIntervalInMinutes=10
    introscope.agent.disableLogFileAutoNaming=false
    introscope.agent.agentName=JBoss Agent                                 [Define an unique name or use auto-naming]
    introscope.agent.display.hostName.as.fqdn=false
    introscope.agent.sockets.reportRateMetrics=false
    introscope.agent.io.socket.client.hosts=
    introscope.agent.io.socket.client.ports=
    introscope.agent.io.socket.server.ports=
    introscope.agent.nio.datagram.client.hosts=
    introscope.agent.nio.datagram.client.ports=
    introscope.agent.nio.datagram.server.ports=
    introscope.agent.nio.socket.client.hosts=
    introscope.agent.nio.socket.client.ports=
    introscope.agent.nio.socket.server.ports=
    introscope.agent.extensions.directory=../ext
    introscope.agent.extensions.bundles.directory=../../extensions
    introscope.agent.extensions.bundles.mode=dynamic
    introscope.agent.extensions.eagerloader=cached
    introscope.agent.common.directory=../../common
    introscope.agent.clonedAgent=false
    introscope.agent.jmx.enable=false
    introscope.agent.jmx.name.filter=jboss.modules*type=ModuleLoader,jboss.as*subsystem=jca,jboss.as*subsystem=datasources,java.lang|type=Threading:*ThreadCount,java.lang|type=ClassLoading*:*ClassCount
    introscope.agent.jmx.excludeStringMetrics=true
    introscope.agent.leakhunter.enable=false
    introscope.agent.leakhunter.logfile.location=../../logs/LeakHunter.log
    introscope.agent.leakhunter.logfile.append=false
    introscope.agent.leakhunter.leakSensitivity=5
    introscope.agent.leakhunter.timeoutInMinutes=120
    introscope.agent.leakhunter.collectAllocationStackTraces=false
    introscope.agent.leakhunter.ignore.0=org.apache.taglibs.standard.lang.jstl.*
    introscope.agent.leakhunter.ignore.1=net.sf.hibernate.collection.*
    introscope.agent.leakhunter.ignore.2=org.jnp.interfaces.FastNamingProperties
    introscope.agent.leakhunter.ignore.3=java.util.SubList
    introscope.agent.leakhunter.ignore.4=org.jboss.seam.servlet.ServletApplicationMap
    introscope.agent.leakhunter.ignore.5=com.sun.faces.context.BaseContextMap$EntrySet
    introscope.agent.leakhunter.ignore.6=com.sun.faces.context.BaseContextMap$KeySet
    introscope.agent.leakhunter.ignore.7=com.sun.faces.context.SessionMap
    introscope.agent.leakhunter.ignore.8=java.util.Collections$UnmodifiableMap
    introscope.agent.leakhunter.ignore.9=org.hibernate.collection.PersistentSet
    introscope.agent.leakhunter.ignore.10=org.jboss.seam.servlet.ServletSessionMap
    introscope.agent.leakhunter.ignore.11=org.jboss.seam.servlet.ServletRequestSessionMap
    introscope.agent.leakhunter.ignore.12=org.jboss.seam.servlet.ServletRequestMap
    introscope.agent.sqlagent.statement.clamp=100
    introscope.agent.sqlagent.sql.maxlength=500
    introscope.agent.sqlagent.maxparamlength=100
    introscope.agent.sqlagent.statements.max=1000
    introscope.agent.sqlagent.resultsets.max=1000
    introscope.agent.metricClamp=5000
    introscope.agent.transactiontracer.parameter.httprequest.headers=X-Forwarded-For,X-Forwarded-Host
    introscope.agent.crossprocess.compression=lzma
    introscope.agent.crossprocess.compression.minlimit=1500
    introscope.agent.crossprocess.correlationid.maxlimit=4096
    introscope.agent.ttClamp=50
    introscope.agent.transactiontracer.tailfilterPropagate.enable=true
    introscope.agent.urlgroup.keys=default
    introscope.agent.urlgroup.group.default.pathprefix=*
    introscope.agent.urlgroup.group.default.format={path_delimited:/:0:5}
    introscope.agent.urlgroup.frontend.url.clamp=5
    introscope.agent.urlgroup.frontend.url.resources.list=tif,tiff,jpg,jpeg,gif,png,bmp,bmpf,ico,cur,xbm,svg,img,css,woff,nil
    introscope.agent.backendpathgroup.keys=default
    introscope.agent.backendpathgroup.group.default.pathprefix=*
    introscope.agent.backendpathgroup.group.default.format={path_delimited:/:0:5}
    introscope.agent.urlgroup.backend.url.clamp=5
    jms.temporaryDestination.names=*AMQ*,*$TMP$*,*CSQ*,*Temp*
    jms.receive.parent.lookupFallback.maximumDepth=7
    introscope.agent.synthetic.user.name=Synthetic_Trace_By_Vuser
    introscope.agent.synthetic.node.name=Synthetic Users
    introscope.agent.non.synthetic.node.name=Real Users
    introscope.agent.errorsnapshots.enable=true
    introscope.agent.errorsnapshots.throttle=10
    introscope.agent.stalls.thresholdseconds=30
    introscope.agent.stalls.resolutionseconds=10
    introscope.agent.remoteagentconfiguration.enabled=true
    introscope.agent.remoteagentconfiguration.allowedFiles=domainconfig.xml
    introscope.bootstrapClassesManager.enabled=true
    introscope.bootstrapClassesManager.waitAtStartup=5
    introscope.agent.remoteagentdynamicinstrumentation.enabled=true
    introscope.autoprobe.dynamicinstrument.enabled=true
    introscope.autoprobe.deepinheritance.enabled=true
    introscope.autoprobe.deepinheritance.auto.turnoff.enable=true
    introscope.autoprobe.deepinheritance.auto.turnoff.requests.per.interval=100
    introscope.autoprobe.deepinheritance.auto.turnoff.maxtime.per.interval=12000
    introscope.autoprobe.deepinheritance.auto.turnoff.maxtime.total=120000
    introscope.agent.metricAging.turnOn=true
    introscope.agent.metricAging.metricExclude.ignore.0=Threads*
    introscope.agent.metricAging.metricExclude.ignore.1=ChangeDetector.AgentID
    introscope.agent.metricAging.metricExclude.ignore.2=File System*
    introscope.agent.decorator.enabled=false
    introscope.agent.decorator.security=encrypted
    introscope.agent.appmap.levels.enabled=MethodClass
    introscope.agent.appmap.owners.enabled=Application,BusinessTransactionComponent
    introscope.agent.sockets.managed.reportToAppmap=true
    introscope.agent.sockets.managed.reportClassAppEdge=false
    introscope.agent.sockets.managed.reportMethodAppEdge=true
    introscope.agent.sockets.managed.reportClassBTEdge=false
    introscope.agent.sockets.managed.reportMethodBTEdge=true
    introscope.agent.bizRecording.enabled=true
    introscope.agent.bizdef.matchPost = before
    introscope.agent.bizdef.matchPost.vetoedURI=
    introscope.agent.gcmonitor.enable=true
    introscope.agent.threaddump.enable=true
    introscope.agent.threaddump.deadlockpoller.enable=false
    introscope.agent.threaddump.deadlockpollerinterval=15000
    com.wily.introscope.agent.harvesting.debugmetrics.enabled=true
    concurrentMapPolicy.generatemetrics=true
    introscope.agent.deep.instrumentation.enabled=true
    introscope.agent.deep.trace.enabled=true
    introscope.agent.deep.instrumentation.level=low
    introscope.agent.deep.instrumentation.level.batch.size=5
    introscope.agent.deep.instrumentation.level.batch.interval=2
    introscope.agent.deep.errorsnapshot.enable=true
    introscope.agent.deep.stallsnapshot.enabled=true
    introscope.agent.deep.instrumentation.max.methods=10000
    introscope.agent.deep.trace.max.components=1000
    introscope.agent.deep.trace.max.consecutive.components=15
    introscope.agent.deep.instrumentation.custom.prefixes=java
    introscope.agent.deep.automatic.trace.enabled=true
    introscope.agent.deep.automatic.trace.clamp=5
    introscope.agent.deep.automatic.trace.crossprocess.enabled=true
    introscope.agent.deep.entrypoint.enabled=true
    introscope.agent.deep.entrypoint.skip.pkgs=
    introscope.agent.autopersist.instrumentation.count.max=60
    introscope.agent.automatic.backend.detection.enabled=true
    introscope.agent.automatic.backend.detection.skip.pkgs=
    introscope.agent.external.biz.enabled=true
    introscope.agent.external.biz.header.size.max=10
    introscope.agent.external.biz.bt.count.max=100
    introscope.agent.browseragent.autoInjectionEnabled=false
    introscope.agent.browseragent.autoInjection.appID=default
    introscope.agent.browseragent.autoInjection.default.snippetLocation=../config/default.basnippet
    introscope.agent.browseragent.autoInjection.default.includeURLsRegex=.*
    introscope.agent.browseragent.response.decoration.enabled=false
    introscope.agent.browseragent.response.decoration.includeURLsRegex=.*
    introscope.agent.browseragent.dxchost=localhost
    introscope.agent.browseragent.dxcport=80
    introscope.agent.browseragent.ssl.enable=false
    introscope.agent.acc.enable=true
    com.wily.introscope.agent.soa.mapdependency.enabled=false



  • 3.  RE: Re: Monitoring the Identity Suite with CA APM (Wily)

    Posted Oct 07, 2020 03:39 PM
    FYI - This agent is available in the CA Identity Suite vApp as well.  (IM r14.2 & IM r14.3 vApp)

    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-3/virtual-appliance/monitoring-virtual-appliance.html

    CA APM Agent in IM


    ------------------------------
    Alan Baugher
    ANA Technology Partner (anapartner.com)
    ------------------------------



  • 4.  RE: Re: Monitoring the Identity Suite with CA APM (Wily)

    Posted Oct 31, 2023 01:42 PM
    Edited by Alan Baugher Oct 31, 2023 02:35 PM

    Team,

    Update my notes with the current use of DX APM tools and the embedded feature of HostMonitoring via sysedge with non-root ID deployment/access.

    The APM agents for SiteMinder may be included in the APM Infra agent as well

    https://anapartner.com/2023/10/31/elevating-application-performance-and-security-on-software-appliances-with-apm-host-monitoring-apm-java-and-apm-jbosswildfly/

    APM offers insight to the JBoss/Wildfly instances and to the Virtual Appliance via sysedge process, even with the 'config' or 'ec2-user' IDs. (non-root).



    Cheers,

    Alan 



    ------------------------------
    Alan Baugher
    ANA
    ------------------------------