Citrix Systems CITRIX NETSCALER 9.3 manual Enabling AppFlow for a Service

Page 180

Chapter 7	AppFlow

For example, expand Content Switching to enable AppFlow for a content switching virtual server, and then click Virtual Servers.

2.In the details pane, do one of the following:

•To enable AppFlow for a new virtual server, click Add.

•To enable AppFlow for an existing virtual server, select the virtual server, and then click Open.

3.In the Create Virtual Server (feature_name) dialog box or the Configure Virtual Server (feature_name) dialog box, select the AppFlow Logging check box.

4.Click Create or OK, and then click Close.

Enabling AppFlow for a Service

You can enable AppFlow for services that are to be bound to the load balancing virtual servers.

To enable AppFlow for a service by using the NetScaler command line

At the NetScaler command prompt, type:

set service<name> -appflowLog ENABLED

To enable AppFlow for a service by using the configuration utility

1.In the navigation pane, expand Load Balancing, and then click Services.

2.In the details pane, do one of the following:

•To enable AppFlow for a new service, click Add.

•To enable AppFlow for an existing service, select the service, and then click Open.

3.In the Create Service or the Configure Service dialog box, select the AppFlow Logging check box.

4.Click OK, and then click Close.

Setting the AppFlow Parameters

You can set AppFlow parameters to customize the exporting of data to the collectors.

To set the AppFlow Parameters by using the NetScaler Command Line

At the NetScaler command prompt, type the following commands to set the AppFlow parameters and verify the settings:

180

Image 180

Contents Citrix NetScaler Administration Guide Copyright and Trademark Notice Page Page Contents Snmp Vii Audit Logging Web Server Logging 105 Advanced Configurations Contents Web Interface AppFlow Reporting Tool Contents Xvi Formatting Conventions for NetScaler Documentation This PrefaceFormatting Conventions Meaning Boldface Documentation Available on the NetScaler Appliance ConventionTo view the documentation Getting Service and Support NetScaler Documentation FeedbackTo provide feedback at the Knowledge Center home Preface Authentication and Authorization TopicsConfiguring Users and Groups Configuring User AccountsShow system user Example Parameters for configuring a user account Password PasswordTimeout CLI Idle Session Timeout Secs UserName User NameConfiguring User Groups To create a user group by using the NetScaler command lineShow system group Example Show system group groupName Example Parameters for configuring a user group Show system group groupNameGroupName Group Name UserNameConfiguring Command Policies Built-in Command PoliciesCLI Prompt CLI Idle Session Timeout Secs Creating Custom Command Policies Built-in Command Policies Policy name AllowsExcept show runningconfig, show Runningconfig, and sh gslbMatches these commands Command specification regular expressionParameters for configuring a command policy Sh system cmdPolicy ExamplePolicyname ActionBinding Command Policies to Users and Groups Parameters for binding a command policy to a user Sh system user userName ExampleSh system user userName PriorityParameters for binding a command policy to a group Sh system group groupName ExampleSh system group groupName GroupNameResetting the Default Administrator nsroot Password To reset the nsroot passwordExample of a User Scenario Fsck /dev/ad0s1a Mount /dev/ad0s1a /flashConfiguration steps Sample Values for Creating Entities FieldConfiguring External User Authentication Configuring Ldap Authentication Examples of Base Distinguished Name Ldap server Base DN Examples of Bind Distinguished Name Ldap serverBind DN Authentication Type, select LDAP. Next to Server, click New Determining attributes in the Ldap directory Configuring Radius Authentication Choosing Radius authentication protocolsAuthentication Type, select Radius Configuring IP address extraction Configuring TACACS+ Authentication Configuring NT4 AuthenticationAuthentication Type, select Tacacs Authentication Type, select NT4 Authentication and Authorization Snmp Importing MIB Files to the Snmp Manager and Trap Listener Enabling or Disabling an Snmp Alarm Enable snmp alarm alarm name Sh snmp alarm alarm nameConfiguring Alarms To configure an Snmp alarm by using the command lineParameters for configuring Snmp alarms SeverityConfiguring Traps To configure Snmp alarms by using the configuration utilityTo add an Snmp trap by using the NetScaler command line Parameters for configuring Snmp traps To configure Snmp Traps by using the configuration utilityEnabling Unconditional Snmp Trap Logging Configuring the NetScaler for Snmp v1 and v2 Queries Specifying an Snmp ManagerParameters for unconditional Snmp trap logging SnmpTrapLogging Snmp Trap LoggingTo add an Snmp manager by using the NetScaler command line Show snmp managerParameters for configuring an Snmp manager IPAddressTo add an Snmp manager by using the configuration utility Parameters for configuring an Snmp community string Specifying an Snmp CommunitySh snmp community PermissionsConfiguring Snmp Alarms for Rate Limiting Configuring an Snmp Alarm for Throughput or PPSCommunity String*-communityName Show snmp alarm PF-RL-RATE-THRESHOLD Show snmp alarm PF-RL-PPS-THRESHOLD ThresholdValueNormalValue StateConfiguring Snmp Alarm for Dropped Packets Alarm Threshold-thresholdValue Normal Threshold-normalValueConfiguring the NetScaler for SNMPv3 Queries Parameters for configuring an Snmp alarm for dropped packetsSetting the Engine ID Configuring a View To set the engine ID by using the NetScaler command lineParameters for setting the engine ID To set the engine ID by using configuration utilityConfiguring a Group Parameters for configuring an Snmp viewTo add an Snmp group by using the NetScaler command line Configuring a User Parameters for configuring an Snmp groupTo configure a user by using the NetScaler command line SecurityLevelParameters for configuring an Snmp user Citrix NetScaler Administration Guide Snmp Audit Logging Audit Logging Configuring the NetScaler Appliance for Audit Logging Configuring Audit ServersShow audit syslogAction name Parameters for configuring auditing servers Show audit nslogAction nameServerIP ServerPortLog levels defined Configuring Audit Policies To configure an auditing server actionTo configure a Syslog policy by using the command line To configure an Nslog policy by using the command line Parameters for configuring audit policiesRule To configure an audit server policy Binding the Audit Policies GloballyParameters for binding the audit policies globally Name* name Server* actionConfiguring Policy-Based Logging Configuring an Audit Message ActionTo globally bind the audit policy Pre RequisitesBypassSafetyCheck StringBuilderExprLogtoNewnslog Installing and Configuring the Nslog Server Binding Audit Message Action to a PolicyInstalling Nslog Server on the Linux Operating System Supported Platforms for the Nslog Server Operating systemSoftware requirements Installing Nslog Server on the FreeBSD Operating System Pkginfo grep NSaudserver Pkgdelete NSaudserverTo install Nslog server on a Windows operating system On the system, where you have downloaded the Nslog packageNslog Server Command Options To uninstall the Nslog server on a Windows operating systemAudserver -remove Audserver -stopTo add the IP addresses of the NetScaler appliance Audserver -remove SpecifiesVerifying the Nslog Server Configuration File Running the Nslog ServerTo start audit server logging Customizing Logging on the Nslog Server Creating FiltersTo create a filter Specifying Log Properties Default Settings for the Log Properties Sample Configuration File audit.conf Following is a sample configuration fileWeb Server Logging Configuring the NetScaler Appliance for Web Server Logging Enabling or Disabling Web Server LoggingModifying the Default Buffer Size Parameter for modifying the buffer sizeSh weblogparam Example Buffer SizeTo modify the buffer size by using the configuration utility Supported Platforms for the Nswl Client Operating systemInstalling Nswl Client on a Solaris Operating System Hardware requirementsCp pathtocd/Utilities/weblog/Solaris/NSweblog.tar /tmp Installing Nswl Client on a Linux Operating System Cd /tmpTar xvf NSweblog.tar Pkginfo grep NSweblogInstalling Nswl Client on a FreeBSD Operating System To view the installed Web server logging filesTo get more information about the NSweblog RPM file Installing Nswl Client on a Mac OS Operating System Pkgdelete NSweblogCp pathtocd/Utilities/weblog/macos/NSweblog.tgz /tmp Installing Nswl Client on a Windows Operating System To install the Nswl client on a Windows systemInstalling Nswl Client on an AIX Operating System To uninstall the Nswl client on a Windows systemCp pathtocd/Utilities/weblog/AIX/NSweblog.rpm /tmp Rpm -i NSweblog.rpmNswl Client Command Options Nswl Command Options Nswl command SpecifiesAdding the IP Addresses of the NetScaler Appliance To add the Nsip address of the NetScaler applianceNswl -addns -f directorypath \log.conf Verifying the Nswl Configuration File To verify the configuration in the Nswl configuration fileRunning the Nswl Client Customizing Logging on the Nswl Client SystemParameters for Creating a Filter Specifies On OFFTo create a filter for a virtual server LogFormat Ncsa Understanding the Ncsa and W3C Log Formats Ncsa Common Log FormatW3C Extended Log Format Ncsa Common Log Format Argument SpecifiesEntries DirectivesDirective Descriptions Fields IdentifiersPrefix Descriptions Specifies ExamplesW3C Extended Log Format Identifiers No Prefix Required DescriptionCreating a Custom Log Format by Using the Nswl Library Creating a Custom Log FormatField Description To create the custom log format by using the Nswl Library Creating a Custom Log Format ManuallySample Configuration File Creating Apache Log FormatsNcsa Arguments for Defining a Custom Log Format 11.Custom Log Format Argument SpecifiesFoobari Foobaro Formatt Time Format Definition 12.Time Format Definition Argument SpecifiesArgument Specifies 123 Web Server Logging 124 Advanced Configurations Configuring Clock Synchronization To add an NTP server by using the NetScaler command lineShow ntp server Example Parameters for configuring an NTP server ServerNameMinpoll MaxpollConfiguring Clock Synchronization Manually Enable ntp sync Disable ntp syncStarting or Stopping the NTP Daemon Usr/sbin/ntpd -c /nsconfig/ntp.conf -l /var/log/ntpd.log Show ns config ExampleViewing the System Date and Time Configuring TCP Window Scaling Parameters for configuring window scaling Show ns tcpParam ExampleWSVal Configuring Selective Acknowledgment EnabledClearing the Configuration To enable Sack by using the Configuration UtilityParameters for clearing a configuration To clear a configuration by using the configuration utilityViewing the Http Band Statistics LevelReqBandSize RespBandSizeConfiguring Http Profiles To modify the band range by using the configuration utilityTo add an Http profile by using the NetScaler command line Built-in Http Profiles Built-in profile DescriptionParameters for adding an Http profile Configuring TCP Profiles To add an Http profile by using the configuration utilityBuilt-in TCP Profiles Built-in profile Description To add a TCP profile by using the NetScaler command line Parameters for creating a TCP profile To add a TCP profile by using the configuration utility Specifying a TCP Buffer Size Example Parameters for setting the TCP buffer size in a TCP profile BufferSizeSpecifying the MSS Value in a TCP Profile Parameters for specifying the MSS value in a TCP profileMss Learn MSS for VServer LearnVsvrMSS Advanced Configurations 148 Web Interface How Web Interface Works PrerequisitesInstalling the Web Interface Configuring the Web Interface Web Interface tar file pathJRE tar file path Parameters for configuring Web interface sites Gateway Direct Mode Authentication PointAccess Gateway URL PortConfiguring a Web Interface Site for LAN Users Using Http XML Service AddressesXML Service Port TransportA Web Interface Site Configured for LAN Users Using Http Site Type Published Resource Type Kiosk ModeVirtual Server Protocol select Https IP Address Port Add service WILoopbackService 127.0.0.1 Http Configuring a Web Interface Site for LAN Users Using Https A Web Interface Site Configured for LAN Users Using Https160 161 Add lb vserver Httpswi SSL 10.102.29.3 Configuring a Web Interface Site for Remote Users Using Agee A Web Interface Site Configured for Remote Users Using Agee 165 166 AppFlow How AppFlow Works NetScaler Flow SequenceFlow Records TemplatesConfiguring the AppFlow Feature Enabling or Disabling the AppFlow Feature To specify a collector by using the NetScaler command lineSpecifying a Collector Configuring an AppFlow Action To remove a collector by using the NetScaler command lineTo specify a collector by using the configuration utility Parameters for specifying a collectorParameters for configuring an AppFlow action CollectorsComment Configuring an AppFlow Policy Show appflow policy nameParameters for configuring an AppFlow policy Rule ActionTo add an expression by using the Add Expression dialog box HttpBinding an AppFlow Policy Show appflow globalParameters for binding an AppFlow policy GotoPriorityExpressionInvoke Invoke flag LabelType LabelNameEnabling AppFlow for Virtual Servers Click Apply ChangesEnabling AppFlow for a Service Setting the AppFlow ParametersAppFlow Parameters HttpCookie HttpRefererHttpMethod HttpHostReporting Tool Using the Reporting Tool To invoke the Reporting toolWorking with Reports Using Built-in Reports Creating and Deleting ReportsModifying the Time Interval Time Intervals Time interval DisplaysSetting the Data Source and Time Zone Exporting and Importing Custom ReportsWorking with Charts Adding a ChartModifying a Chart Viewing a Chart To change the graph type of a chartTo view numeric data for a graph To change the color and graph type of a data set Deleting a Chart To export chart data to ExcelExamples Stopping and Starting the Data Collection Utility Limits on Entity Numbers Retrieved by nscollect Entity nameTo stop nscollect To start nscollect on the local systemEntity name Limit Netscaler/nscollect stopTo start nscollect on the remote system Netscaler/nscollect start