System Administration
Introduction
The System Administration section of Resolve Actions Pro allows you to access the status and system information of the platform. The menu items enable you to update or create system properties, system scripts, and more.
Status Information
- List Registration
- Session Information
- Server Information
System Definition
- Job Schedule
- System Properties
- System Scripts
Security
- Application Security
Status Information Menu Group
This section describes in details the three sections of the Status Information menu group.
List Registration
Each Actions Pro component periodically registers with RSControl to indicate its component status and other configuration information, such as its unique identifier (GUID), operating system. The registration provides a health status, version information and other details for the Actions Pro system without actively querying each component.
The registration interval is configurable with a default value of 5 minutes. These conditions apply if the component:
- Fails to register with RSControl in 3 consecutive registration times (15 minutes), the status changes from ACTIVE to INACTIVE.
- Does not register within 7 days, the status changes to EXPIRED.
- Does not register within 30 days, the registration is discarded.
To view the status of all registered components, access System Administration > List Registrations.
To see the details of a registration, click the View Details icon of that component.
Initiating Component Registration
- To explicitly have a component registered, the component must be instructed using a console or system command.
- For the TARGET, select BROADCAST to ensure all components are instructed to perform the Registration.
See RSConsole Administration for more information on managing registrations.
Session Information
The Session Information section contains information about a user session as shown below.
To remove a session:
- Go to the System Administration main menu and select Sessions Information. This page lists:
- Active Sessions
- Max Active Sessionsnote
This is peak usage per rsview. If this is a cluster, please add (RSVIEW1, RSVIEW2,…RSVIEWn)
- Max Sessions
- Timeout
- Select a sessions(s) by activating the checkbox.
- Select the Remove command.
Server Information
The Server Information Menu Item contains information only about your server - version, memory, thread, server details.
System Definition Menu Group
In this menu group, you can define menus and make each active or inactive, re-define system properties, and add or delete system scripts.
Job Scheduler
There is a feature that allows Runbook execution on a scheduled or periodic basis. Actions Pro job scheduler can trigger a Runbook execution based on a "cron" expression. The feature allows you to schedule a Runbook to execute automatically, based on either a time interval (e.g., every 10 minutes) or specific times and days (e.g., at noon and midnight on Tuesdays and Thursdays).
To schedule a job:
- Navigate to the System Administration main menu and select Job Scheduler.
- The Job Scheduler lists all entries, which can be activated, deactivated, deleted, or executed immediately.
- You can review and edit a specific schedule from the list by clicking on the View Details icon next to the schedule to bring up the job edit screen.
- Click Save to save any changes. note
The scheduled executions are based on the date/time of the Actions Pro server, and not on the user local time, which may be different. Ensure that date/time are synchronized across all servers in the cluster.
- To schedule a new job, go to the toolbar beyond the page title and click the New button.
- Fill in the following fields for the newly scheduled job:
| Entry | Description |
|---|---|
| Name | The name of the scheduled job. |
| Module | Module name for scheduled job, used to import or export the job. |
| Runbook | The full name, with namespace, of the Runbook to be executed, for example "Runbook.WebHome" |
| Schedule settings | (see below for syntax examples) |
| Time Range | (optional) The job will only be active between these dates |
| Parameters | (optional) Parameters to be passed to the Runbook automation |
Scheduler Syntax Examples
The following special characters can be used in the Schedule section in a job edit screen to help specify unusual dates or times.
| Character | Description | Example |
|---|---|---|
| Asterisk (*) | all values | The * in the "Minutes" field means every minute |
| Question Mark (?) | No specific values | Used to specify something in one of the "Day of month" or "Day of week" field, but not the other |
| Dash (-) | Specifies ranges | "10-12" in the "Hours" field means the hours 10, 11 and 12 |
| Comma (,) | Specifies additional values | "MON,WED,FRI" in the day-of-week field means the days Monday, Wednesday, and Friday |
| Forward Slash (/) | increments | "0/15" in the "Seconds" field means the seconds 0, 15, 30, and 45 while "5/15" in the "Seconds" field means the seconds 5, 20, 35, and 50; in the "Month" field, "*/3" means every third month |
| Letter "L" | last | "L" is useful when you need to specify the last day-of-month or last day-of-week |
| Letter "W" | weekday | Specifies the weekday (Monday through Friday) nearest the given day (this can be the proceeding day) |
| Hash Mark (#) | N-th day of month | "6#3" in the "Day of week" field means the third Friday of the month |
The following table provides further examples of the special characters in use. The Expression column in the Scheduled Jobs List follows this standard format.
| Expressions | Description |
|---|---|
| 0 0 12 * * ? | Fire at 12 pm (noon) every day |
| 0 15 10 ? * * | Fire at 10:15 am every day |
| 0 15 10 * * ? | Fire at 10:15 am every day |
| 0 * 14 * * ? | Fire every minute starting at 2 pm and ending at 2:59 pm, every day |
| 0 0/5 14 * * ? | Fire every 5 minutes starting at 2 pm and ending at 2:55 pm, every day |
| 0 0/5 14,18 * * ? | Fire every 5 minutes starting at 2 pm and ending at 2:55 pm, AND fire every 5 minutes starting at 6 pm and ending at 6:55 pm, every day |
| 0 0-5 14 * * ? | Fire every minute starting at 2 pm and ending at 2:05 pm, every day |
| 0 10,44 14 ? 3 WED | Fire at 2:10 pm and at 2:44 pm every Wednesday in the month of March |
| 0 15 10 ? * MON-FRI | Fire at 10:15 am every Monday, Tuesday, Wednesday, Thursday and Friday |
| 0 15 10 15 * ? | Fire at 10:15 am on the 15th day of every month |
| 0 15 10 L * ? | Fire at 10:15 am on the last day of every month |
| 0 15 10 ? * 6L | Fire at 10:15 am on the last Friday of every month |
| 0 15 10 ? * 6# 3 | Fire at 10:15 am on the third Friday of every month |
System Properties
System properties provide application-wide configuration settings.
To access this menu item, go to: System Administration > System Definition > System Properties.
To create new system property:
- Click the New button situated below the page title.
- In the pop-up window, fill in the available fields.
- Click Save.
Boolean Properties
System properties of type Boolean take the following values:
trueoryes(case-insensitive)falseorno(case-insensitive)
Leaving the value field blank is equivalent to setting it to false/no.
Changing the System Home Page
The default homepage for users logging in to Actions Pro is the main menu. To change what the home page displays on log in, access System Administration > System Properties and find the system.homepage. The table below lists the possible values.
| Value | Description |
|---|---|
| wiki | Loads the Wiki page configured in wiki.property.table.homepage. The default is Runbook.WebHome. |
| menu | Loads the Actions Pro main menu. Its items depend on the user's roles. |
note
Null, empty, or undefined values default to the main menu.
Session Timeout
To change the session timeout, access the System Properties:
- If set to 'true', the session timeout is set to 30 regardless of user activity.
- The default is 'false'. This will close the session only when the user has been idle for the session.timeout value.
System Scripts
This feature allows you to execute the following actions, related to System Scripts:
- Add
- Delete
- Show matching
- Filter out
- Reset
To add a script:
- Go to: System Administration > System Definition > System Scripts.
- Click New.
The System Script window opens. - Assign a name and click Save. The last updated date, created date, created by, and last updated by are filled automatically.
- Add a description.
- Input a script.
- Click Save.
- Click the Script tab.
- Assign a name and click Save. The last updated date, created date, created by, and last updated by are filled automatically.
- Enter your script.
- Click Save.
Security
This feature is used to setup and modify catalog access rights.
Application Security
See ::title guide to learn how to restrict access to product features using roles.
RSConsole Administration
RSConsole is one of Actions Pro components, along with RSView, RSControl, RSRemote, RSMQ, RSMgmt. It is mostly used for internal management of the Actions Pro cluster via command line. It also provides a command line interface to Actions Pro to execute some simple, independent tasks, e.g. execute individual runbooks, action tasks, import or export a module, etc.
Most RSConsole commands have their corresponding groovy scripts, which will be executed at run time by RSConsole. Most Actions Pro components, such as RSConsole, RSView, RSRemote, and more, have a directory called "service", which contains groovy script files. Groovy scripts are organized into different folders, e.g. "config", "internal", "control", which organize the scripts based on their functions.
RSConsole application is included in all Actions Pro installations. RSConsole provides access to pre-built Groovy scripts that perform the actions listed in the following links:
- RSConsole Launch
- Groovy Script Execution
- RSConsole Configuration
RSConsole Launch
The RSConsole is automatically installed in the /rsconsole/ directory. To launch the tool in UNIX, run the script run.sh from the /bin directory inside /rsconsole/. In Windows, run the batch file run.bat. The run.sh script and Windows batch file use the following parameters:
run.sh –u <~username> -p <password~>
run.bat –u <~username> -p <password~>
The variables <username> and <password> are the RSConsole user account. This account defaults to admin/resolve on new installations.
Changing the Default RSConsole Credentials
After installation, the system provides a default set of credentials for logging in to RSConsole: admin:resolve. It is highly recommended to change the default admin password to a safer one immediately after installation.
Take these steps to change the RSConsole default password:
- Open
<actions-home>/bin/blueprint.propertiesfor editing. - Set
rsconsole.users.user.password.1to the new password in plain text and save the file. - (Optional) Change the administrator username in the
rsconsole.users.user.username.1property (adminby default). - Apply the configuration change:
<actions-home>/bin/config.sh
The configuration script replaces the plain-text password that you entered with an irreversible hash.
Adding RSConsole Administrators
In addition to the default administrator user, you can add as many RSConsole users as you want. All users that you add will have the same level of administrative permissions as the built in user.
Take these steps to add an RSConsole user:
- Open
<actions-home>/bin/blueprint.propertiesfor editing. - Create a new set of properties for the user, making sure you don’t duplicate the numerical index.
For example:rsconsole.users.user.username.2
rsconsole.users.user.password.2 - Set the values.
- Apply the configuration change:
<actions-home>/bin/config.sh
The configuration script replaces the plain-text password that you entered with an irreversible hash.
Groovy Script Execution
You can run commands from RSConsole as soon as you login. Each execution of a command may be run by another Actions Pro components, not always by RSConsole. Each command has a groovy script with the same name. For example, command "ImportModule" is executed by a groovy script file named "ImportModeule.groovy" located in RSConsole install directory "rsconsole/service/impex".
Each Actions Pro component has separate groovy scripts installed to support different RSConsole commands. Normally groovy scripts for each Actions Pro component are in install directory called "service". The majority of useful groovy scripts are located in RSConsole component's install directory.
To execute a Groovy script from RSConsole to perform actions on the system, perform the following steps:
- Change to the directory where the command/script lives.
- Specify the component you want to work with. For example, RSRemote, RSView, or RSControl. RSMQ cannot be managed via the RSConsole.
For example:Connect RSREMOTE - Enter the script name/command plus any parameters, at the prompt:
<~cmd> <value1> <value2~> - To see usage for a command, use the syntax:
Help <~cmd~>
The table below lists the available commands, their directories, description, and usage in RSConsole.
| Commands | Directories | Descriptions | Usages |
|---|---|---|---|
| Get Properties | /config | Returns the local system properties and environment variables on the component. | GetProperties |
| GetProperty | /config | Returns the value of the specified property on the component.See GetProperties to generate a list of property names. | GetProperty |
| loadLogMapping | /config | Displays the current log re-mapping configuration. | loadLogMapping |
| LogCapture | /config | Collects all log and configuration files to a .zip file in thersconsole/;file directory. | LogCapture |
| register | /config | Initiates the registration process for the component. | register |
| RemoveProperty | /config | Removes the specified property from the component. See GetProperties to generate a list of property names. | RemoveProperty |
| saveConfig | /config | Saves the current active configuration of the component to the file system. | saveConfig |
| SetDebug | /config | Changes the logging level of the log for the component to DEBUG.This setting is not persisted. Edit the log.cfg file for the component tomake a permanent change. | SetDebug |
| SetLogLevel | /config | Sets the logging level of the log for the component. Options are DEBUG, INFO, WARN, or ERROR. This setting is not persisted. Edit the log.cfg file for the component to make a permanent change. | SetLogLevel |
| SetProperty | /config | Sets a system property. Prefix the property name with ENC_ if the value is to be encrypted. | Set Property |
| View | /config | Views a configuration file, such as "config.xml". | View |
| abort | /control | Terminates the component without saving configuration to the file system. Options are ALL, RSCONSOLE, RSCONTROL, RSMQ, RSREMOTE, RSVIEW, TOMCAT | abort |
| start | /control | Starts the component(s). Options are ALL, RSCONTROL, RSMQ, RSREMOTE, RSVIEW, TOMCAT | start |
| status | /control | Shows the process ID for the specified component(s). Options are ALL, RSCONTROL, RSMQ, RSREMOTE, RSVIEW. | status |
| stop | /control | Stops specified component(s). Options are ALL, RSCONTROL, RSMQ, RSREMOTE, RSVIEW, TOMCAT. RSCONSOLE cannot be stopped using this method. | stop |
| terminate | /control | Terminates the component and saves the active configuration to the file system. Options are ALL, RSCONTROL, RSMQ, RSREMOTE, RSVIEW, TOMCAT.RSCONSOLE cannot be stopped using this method. | terminate |
| ListTask | /cron | Displays the currently scheduled cron tasks. listTask | listTask |
| LoadTask | /cron | Displays the specified task definition from the database.Options are ALL or the resolve_cron.sys_id. See listTask for a list of thecron tasks. | loadTask ... |
| removetask | /cron | Removes the specified cron task from memory, not from the database. The task will be added back to memory on next restart. | removetask |
| disableFilter | /gateway/netcool | Disables the specified filter on the connected Netcool Gateway.Ensure that the correct gateway connection is established before issuing the command. | disableFilter |
| enableFilter | /gateway/netcool | Enables the specified filter on the connected Netcool Gateway.Ensure that the correct gateway connection is established before issuing the command. | enableFilter |
| getFilters | /gateway/netcool | Returns a list of the gateways from the Netcool Gateway. The results will be populated into the database. | getFilters |
| removeFilter | /gateway/netcool | Removes the specified filter on the connected Netcool Gateway.Ensure the correct gateway connection is established before issuing thecommand. | removeFilter |
| removeFilters | /gateway/netcool | Removes multiple specified filters in a single command.Ensure the correct gateway connection is established before issuing the command. | removeFilters |
| setFilter | /gateway/netcool | Sets the filter on the connected Netcool Gateway.Ensure the correct gateway connection is established before issuing the command. | setFilter |
| info | /info | Queries the specified component(s) for summary configuration information. | info ... |
| version | /info | Provides the version and build information for the specified component. | version |
| DBPoolUsage | /info | Provides DB pool size and usage data | DBPoolUsage |
| ThreadPoolRatio | /info | Show rscontrol thread pool busy ration | ThreadPoolRatio |
| FindMaster | /info | Find current master rscontrol in cluster | FindMaster |
| resolve-configure | /install | Configures Actions Pro components based on the blueprint file. | resolve-configure |
| EventGenerate | /internal | Sends test events. For example, e.g. EventGenerate "Condition.High CPU Load" 10; | EventGenerate |
| Event | /internal | Send an Actions Pro event, e.g. Event EVENTID=id EVENT_REFERENCE=id... | Event<name=value> ... |
| Threadpool | /internal | Query the specified component(s) for threadpool summary, e.g. rscontrol | Threadpool |
| info | /license | Get license information, if "key" param not provided then cummulative license info is displayed | Info [key=License Key] |
| upload | /license | Upload the license file | Upload file=<absolute location of license file>, e.g. upload file=/usr/home/resolve/license.lic |
| remove | /license | Remove a list of licenses | Remove <space separated list of license keys>, e.g. remove 9D799F78E42C2F6C60946909B321BC59 E86799F78E42C2F6C61246909B321BD25 |
| ExecuteAction | /runbook | Executes the ActionTask. The Worksheet can be specified with either the worksheet ID, NEW for a new Worksheet or ACTIVE for the currently Active Worksheet. For example, executeaction "Condition.High CPU Load" NEW. Input parameters for the ActionTask can be specified as name=value pairs. | ExecuteAction |
| ExecuteLoadTest | /internal | Executes the specified Runbook with provided load test parameters. is the Runbook to be executed. is the number of jobs to be requested in each batch. is the number of batches to be submitted. The following example submits 10 requests every second for 10 seconds, for a total of 100 requests. ExecuteLoadTest DEFAULT "Condition.High CPU Load" 1 10 10 NAME=VALUE | ExecuteLoadTest ... |
| ExecuteRunbook | /runbook | Executes the Wiki Runbook with the provided parameters. For example, e.g. executeaction DEFAULT "Condition.High CPU Load" NAME=VALUE | ExecuteRunbook = ... |
| AbortRunbook | /runbook | Abort a runbook execution by its processid | AbortRunbook processid |
| AbortWorksheet | /runbook | Abort a runbook execution by its worksheet id or number | AbortWorksheet <problemid |
| Archive | /runbook | Start running Actions Pro archive | Archive [force=true |
| Index | /runbook | Reindex existing action tasks and wiki documents | Index <action task> <wikidocuments>, provide true |
| IndexWorksheets | /runbook | index on all worksheets based on the time period | IndexWorksheets<start time> <end time> |
| Purge | /runbook | Purge archived data beyond the given date. Lobonly=true purges only data in LOB tables | Purge date=yyyymmdd[lobonly=true |
| importModule | /impex | Imports the module specified by module name. The imported module will be read from the RESOMEHOME/rsexpert folder. | importModule <module name> |
| importUpdates | /impex | Imports the update XMLs located at <Actions Pro home>/tomcat/webapps/resolve/WEBINF/ updates | importUpdates <modulename> |
| ImpexCustomTable | /impex | Import/export data into/out of a custom table | ImpexCustomTable ... |
| exportModule | /impex | Export the module to rsexpert folder | ExportModule <module name> |
| usage | /metric | Displays JVM statistics. | usage |
Example
The following is an example of how to turn on the debug log level by using RSConsole.
- Start RSCONSOLE with the following command:
<INSTALLDIR>/rsconsole/bin/run.sh
Username: admin
Password: resolve - Connect to a component (e.g. RSCONTROL, RSREMOTE, etc) by using the following command:
connect rscontrol - Use the info command to view machine information:This displays:
RSCONTROLS#/> info/info
RSCONTROLS#/>Configuration Information
ConfigFile Version: 1.0
type: RSCONTROL
name: DEVRH53-2.GENERATIONETECH.COM
guid: 379803C230BD2502DF4D4913D15976DB
ipaddress: DEVRH53-2.GENERATIONETECH.COM/
172.16.5.203
esbuser: admin
version: 2.5.1
build: 20091221
description: RSCONTROL
cronoffset: 0
Configuration Information
ConfigFile Version: 1.0
type: RSCONTROL
name: DEVRH53-1
guide: 337CF0524235B7C0CF59AB183FD2FDC1
ipaddress: DEVRH53-1/127.0.0.1
esbuser: admin
version: 2.5.1
build: 20091221
description: RSCONTROL
cronoffset: 0
RSCONTROLS#/> - Use the setDebug command to enable debugging. Messages should be returned for each machine indicating that debug is turned on as follows:This displays:
config/setDebug
RSCONTROLS#/> cd config
RSCONTROLS#/> setDebug[337CF0524235B7C0CF59AB183FD2FDC1#MService.config.SetDebug]
Log set to level: DEBUG
[379803C230BD2502DF4D4913D15976DB#MService.config.SetDebug]
Log set to level: DEBUG
RSCONTROLS#> [resolve@DEVRH53-1 bin]$ - Set the log level to warn or error as follows:This displays:
config/setLogLevel WARN
RSCONTROLS#> cd config
RSCONTROLS#> setLogLevel WARN[337CF0524235B7C0CF59AB183FD2FDC1#MService.config.SetDebug]
Log set to level: WARN
[379803C230BD2502DF4D4913D15976DB#MService.config.SetDebug]
Log set to level: WARN
RSCONTROLS#> [resolve@DEVRH53-1 bin]$
RSConsole User Passwords
To create new a RSConsole user or to change the passwords for an existing user, perform the following steps:
- Edit the config.xml file in the following location:
<installDir>/rsconsole/config - Create new or edit the existing
<user>block. For passwords, enter the new/updates password in clear text. The password gets encrypted automatically when the file is saved.<USERS>
<USER USERNAME="admin" PASSWORD="ENC:79zTyaGvxYg="/>
</USERS> - Save the
config.xmlfile. The log Information is in second row of the file.RSConsole Configuration - <INSTALLDIR>/rsconsole/config/
log.cfg
RSConsole Configuration
Use the <INSTALLDIR>/rsconsole/config/config.xml to configure the RSConsole.
The table below lists the general variables.
note
All changes to RSConsole Configuration must be done when RSConsole is shut down.
| Variable | Description | Default Values | Examples |
|---|---|---|---|
| HOME | The install directory for RSConsole. | opt/resolve |
The table below lists the ESB variables.
| Variables | Descriptions | Default Values | Examples |
|---|---|---|---|
| USERNAME | The user name for RSConsole. | admin | admin |
| PASSWORD | The password for RSConsole. Plain text values will automatically be encrypted on configuration save. | resolve | resolve |
| BROKEADDR | The IP address for the Primary RSMQ Server. | localhost:4004 | 192.168.1.1:4004 |
| BROKEADDR2 | The IP address for the Backup RSMQ server | 192.168.1.2:4004 |
The table below lists the remaining variables.
| Variables | Descriptions | Default Values |
|---|---|---|
| log4j2.xml | The configuration file for log4j. | |
| rsremote.log4j.Loggers.Root.level | Defines common log level. | WARN |
| log4j.appender.RSCONSOLE | Defines type of logger used. RollingFileAppender will archive and create a new log file at a specified size. | org.apache.log4j.RollingFileAppender |
| log4j.appender.RSCONSOLE.File | Name and location of log file. | rsconsole/log/rsconsole.log |
| log4j.appender.RSCONSOLE.MaxFileSize | Size of file when archive and create new occurs | 8192KB |
| log4j.appender.RSCONSOLE.MaxBackupIndex | Maximum number of backup files saved before deleting. | 1 |
| log4j.appender.RSCONSOLE.layout | Type of formatting used on the log files | org.apache.log4j.PatternLayout |
| log4j.appender.RSCONSOLE.layout.ConversionPattern | Pattern used to format the log files | %d %5p %t (%F:%L) - %m%n |
Log4j2 Configuration
Make the following configuration:
- Additional Log4j2 properties file & async logger setup:
- Tomcat JVM Settings
- RS
<service_name>JVM SettingsnoteRefer to the Developer's onboarding guide for details on a) and b) above.
- Make sure
resolve/conf/rsmgmt/conf/blueprint.propertieschanges are reflected inresolve/blueprint.properties(local copy):<service_name>.ESAPI.Logger=com.resolve.logging.Log4J2EsapiLogFactory - Make sure
dist/<service_name>/config/ESAPI.propertieshas loaded the correct log factory from the blueprint:ESAPI.Logger=com.resolve.logging.Log4J2EsapiLogFactory - Verify point 3 for rsview:
C:\project\resolve\dist\tomcat\webapps\resolve\WEB-INF\ESAPI.properties.
Archived Logs
Archived logs (on time/size basis) are moved to folders (<year>-<month>), e.g. 2019-10/auth-10-08-2019-1.log.zip.
All log4j2 configurations are consistently following the same convention across each Actions Pro service (RSView, RSRemote, RSControl, etc.):
<service_name>/log/$${date:yyyy-MM}/<log_file_name>**-%d{MM-dd-yyyy}-%i.log.zip, e.g. 2019-10/auth-10-08-2019-1.log.zip${sys:catalina.home}/logs/$${date:yyyy-MM}/<log_file_name>-%d{MM-dd-yyyy}-%i.log.zip, e.g. tomcat/logs/2019-10/rsview-10-08-2019-1.log.zip
Blueprint Logger/Appender Configuration with Log4j2
Follow these instructions to correctly configure log4j2:
- Appender Configuration:
- It should be done within the service's own log4j2.xml, as all appender configuration defined within the blueprint are no longer supported, i.e. not applied in the environment.
- Logger Configuration is partially supported:
- Users can still define log level and appender refs for loggers, provided that these loggers are already specified in the corresponding log4j2.xml.
- All other Logger configurations are no longer supported.
- Resolve Log4j2 Logger/Appender Configuration and log4j 1.x differences:
- Log4j2 configuration is defined in xml format and use completely different structures, predefined and custom classes also differ. This makes the logger/appender configuration via blueprint inconsistent, overly-complicated and generally obsolete with log4j2.
- Log4j2 configuration is provided via jvm parameters rather than programmatically.
- Use log4j2.xml configurations directly and avoid using the blueprint.
- Log4j2.xml provides a simpler and cleaner way to configure loggers and appender.
Troubleshooting
CSRF: banner.url = "/resolve/google.com" leads to 403 and breaks the resolve instance.
Symptom
If system property banner.url is set with value /resolve/google.com, this cause error 403 for every request made after that for EVERY user on this system.
Possible Solution
- Go to System Properties.
- Set:This should result in showing Error 404 and harmless 403 message.
```
product.logo = logo.png
product.logoHeight = 300
product.logoHidden = false
banner.url = "/resolve/google.com"
```
Rights Table 1
# rights
# app.rights.rsclient<list>=
## list of roles required to access specified application
# app.rights.rswiki<list>=
## list of roles required to access specified application
# app.rights.rsactiontask<list>=admin,resolve_dev
## list of roles required to access specified application
# app.rights.rsadmin<list>=admin
## list of roles required to access specified application
# app.rights.rsnetcool<list>=admin
## list of roles required to access specified application
# app.rights.rsadmin.menuset<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.menudefinition<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.properties<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.cron<list>=admin,resolve_process,resolve_dev
## list of roles required to access the application
# app.rights.rsadmin.users<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.groups<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.roles<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.wikiadmin<list>=admin,resolve_process,resolve_dev
## list of roles required to access the application
# app.rights.rsadmin.wikilookup<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.impex<list>=admin,resolve_process,resolve_dev
## list of roles required to access the application
# app.rights.rsadmin.registration<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.target<list>=admin
## list of roles required to access the application
# app.rights.rsadmin.systemscript<list>=admin
## list of roles required to access the application
#AjaxActionTask
app.actiontask.controllers<list>=/actiontask
app.actiontask.roles<list>=admin,resolve_dev,resolve_process
app.actiontask.description=Action Task app
app.actiontask.name=RS.actiontask.Main
app.actiontask_list.controllers<list>=/actiontask/list
app.actiontask_list.roles<list>=
app.actiontask_list.description=Action Task listing
app.actiontask_list.name=List Of Actiontask
app.actiontask_treelist.controllers<list>=/actiontask/treelist
app.actiontask_treelist.roles<list>=
app.actiontask_treelist.description=Action Task Treelist API
app.actiontask_treelist.name=Action Task Treelist API
#AjaxActionTaskAssessor
app.assessor.controllers<list>=/assessor
app.assessor.roles<list>=admin,resolve_dev,resolve_process
app.assessor.description=Action Task Assessor app
app.assessor.name=RS.actiontask.AssessDefinitions
app.assessor_list.controllers<list>=/assessor/list
app.assessor_list.roles<list>=
app.assessor_list.description=Action Task Assessor List
app.assessor_list.name=Action Task Assessor List
#AjaxActionTaskParser
app.parser.controllers<list>=/parser
app.parser.roles<list>=admin,resolve_dev,resolve_process
app.parser.description=Action Task Parser app
app.parser.name=RS.actiontask.ParserDefinitions
app.parser_list.controllers<list>=/parser/list
app.parser_list.roles<list>=
app.parser_list.description=Action Task Parser List
app.parser_list.name=Action Task Parser List
#AjaxActionTaskPreprocessor
app.preprocess.controllers<list>=/preprocess
app.preprocess.roles<list>=admin,resolve_dev,resolve_process
app.preprocess.description=Action Task Preprocessor app
app.preprocess.name=RS.actiontask.PreprocessDefinitions
app.preprocess_list.controllers<list>=/preprocess/list
app.preprocess_list.roles<list>=
app.preprocess_list.description=Action Task Preprocessor List
app.preprocess_list.name=Action Task Preprocessor List
#AjaxActionTaskProperties
app.atproperties.controllers<list>=/atproperties
app.atproperties.roles<list>=admin,resolve_dev,resolve_process
app.atproperties.description=Action Task Property app
app.atproperties.name=RS.actiontask.PropertyDefinitions
app.atproperties_list.controllers<list>=/atproperties/list
app.atproperties_list.roles<list>=
app.atproperties_list.description=Action Task Property List
app.atproperties_list.name=Action Task Property List
app.atproperties_modules.controllers<list>=/atproperties/modules
app.atproperties_modules.roles<list>=
app.atproperties_modules.description=Action Task Property Modules
app.atproperties_modules.name=Action Task Property Modules
#AjaxAlertLog - no roles so that anyone can use this app
app.alertlog.controllers<list>=/alertlog
app.alertlog.roles<list>=admin
app.alertlog.description=Alert Log app
app.alertlog.name=RS.syslog.AlertLog
app.alertlog_deleteAlertLogRecs.controllers<list>=/alertlog/deleteAlertLogRecs
app.alertlog_deleteAlertLogRecs.roles<list>=admin
app.alertlog_deleteAlertLogRecs.description=Alert Log Delete
app.alertlog_deleteAlertLogRecs.name=Alert Log Delete
#AjaxApps -
app.apps.controllers<list>=/apps
app.apps.roles<list>=admin
app.apps.description=App Access Rights
app.apps.name=RS.sysadmin.ApplicationRights
#AjaxArchive -
app.archive.controllers<list>=/archive
app.archive.roles<list>=admin,resolve_dev
app.archive.description=Archive
app.archive.name=Archives for components like Assessor, Preprocessor, etc
#AjaxAttachmentAdmin -
app.attachment_upload.controllers<list>=/wiki/attachment/upload
app.attachment_upload.roles<list>=
app.attachment_upload.description=Attachment Upload
app.attachment_upload.name=Attachment Upload
app.attachment_download.controllers<list>=/wiki/attachment/download
app.attachment_download.roles<list>=
app.attachment_download.description=Attachment Download
app.attachment_download.name=Attachment Download
app.attachment_list.controllers<list>=/wikiadmin/attachment/list
app.attachment_list.roles<list>=
app.attachment_list.description=Attachment List
app.attachment_list.name=Attachment List
app.attachment_rename.controllers<list>=/wikiadmin/attachment/rename
app.attachment_rename.roles<list>=admin,resolve_process,resolve_dev
app.attachment_rename.description=Attachment Rename
app.attachment_rename.name=Attachment Rename
app.attachment_delete.controllers<list>=/wikiadmin/attachment/delete
app.attachment_delete.roles<list>=admin,resolve_process,resolve_dev
app.attachment_delete.description=Attachment Delete
app.attachment_delete.name=Attachment Delete
app.attachment_index.controllers<list>=/wikiadmin/attachment/index
app.attachment_index.roles<list>=admin,resolve_process,resolve_dev
app.attachment_index.description=Attachment Index
app.attachment_index.name=Attachment Index
#AjaxAuditLog - no roles so that anyone can use this app
app.auditlog.controllers<list>=/auditlog
app.auditlog.roles<list>=admin
app.auditlog.description=Audit Log app
app.auditlog.name=RS.syslog.AuditLog
app.auditlog_deleteAuditLogRecs.controllers<list>=/auditlog/deleteAuditLogRecs
app.auditlog_deleteAuditLogRecs.roles<list>=admin
app.auditlog_deleteAuditLogRecs.description=Audit Log Delete
app.auditlog_deleteAuditLogRecs.name=Audit Log Delete
#AjaxBusinessRules
app.businessrules.controllers<list>=/businessrules
app.businessrules.roles<list>=admin
app.businessrules.description=Business Rules app
app.businessrules.name=RS.sysadmin.BusinessRule
app.businessrules_list.controllers<list>=/businessrules/list
app.businessrules_list.roles<list>=
app.businessrules_list.description=Business Rules List
app.businessrules_list.name=Business Rules List
#AjaxCatalog - no roles so that anyone can use this app
app.catalog.controllers<list>=/catalog
app.catalog.roles<list>=
app.catalog.description=Catalog Viewer app
app.catalog.name=RS.catalog.CatalogViewer
#AjaxCatalog - builder
app.catalogbuilder.controllers<list>=/catalogbuilder
app.catalogbuilder.roles<list>=resolve_process,resolve_dev,admin
app.catalogbuilder.description=Catalog Builder app
app.catalogbuilder.name=RS.catalog.Catalog
#AjaxClient
app.client.controllers<list>=/client
app.client.roles<list>=
app.client.description=Client app
app.client.name=RS.client.Main
#AjaxCommon
app.common.controllers<list>=/common
app.common.roles<list>=
app.common.description=Common entry points
app.common.name=Common
#AjaxConfigActiveDirectory
app.configad.controllers<list>=/configad
app.configad.roles<list>=admin
app.configad.description=Config Active Directory
app.configad.name=RS.sysadmin.ConfigAD
#AjaxConfigLDAP
app.configldap.controllers<list>=/configldap
app.configldap.roles<list>=admin
app.configldap.description=Config LDAP
app.configldap.name=RS.sysadmin.ConfigLDAP
#AjaxController
app.result.controllers<list>=/result
app.result.roles<list>=
app.result.description=Entry point for Result macro
app.result.name=Result Macro
app.detail.controllers<list>=/detail
app.detail.roles<list>=
app.detail.description=Entry point for Detail macro
app.detail.name=Detail Macro
#AjaxCustomForm
app.form.controllers<list>=/form
app.form.roles<list>=
app.form.description=Form Viewer
app.form.name=Form Viewer
app.form_delete.controllers<list>=/form/delete
app.form_delete.roles<list>=admin,resolve_process,resolve_dev
app.form_delete.description=Form Delete
app.form_delete.name=Form Delete
app.formbuilder.controllers<list>=/formbuilder
app.formbuilder.roles<list>=admin,resolve_process,resolve_dev
app.formbuilder.description=Form Builder
app.formbuilder.name=RS.formbuilder.Main
#AjaxCustomTable
#lookuptable is not required as of this moment. Its for the application rights like CR/SR
#test url --> http://www.espncricinfo.com/world-t20/engine/match/682919.html
#app.lookuptable.controllers<list>=/lookuptable
#app.lookuptable.roles<list>=admin,resolve_process,resolve_dev
#app.lookuptable.description=Table Data viewer App
#app.lookuptable.name=Table Data viewer App
app.customtable.controllers<list>=/customtable
app.customtable.roles<list>=
app.customtable.description=Custom Table apis
app.customtable.name=Custom Table apis
app.customtable_delete.controllers<list>=/customtable/delete
app.customtable_delete.roles<list>=admin,resolve_process,resolve_dev
app.customtable_delete.description=Custom Table Delete
app.customtable_delete.name=Custom Table Delete
#AjaxDB
app.dbapi.controllers<list>=/dbapi
app.dbapi.roles<list>=admin,resolve_user
app.dbapi.description=Table Data viewer App
app.dbapi.name=DB apis
#AjaxExecuteController
app.execute_submit.controllers<list>=/execute/submit
app.execute_submit.roles<list>=
app.execute_submit.description=Execute Runbook/Actiontask
app.execute_submit.name=Execute Runbook/Actiontask
#AjaxFilter
app.filter.controllers<list>=/filter
app.filter.roles<list>=admin
app.filter.description=Filter CRUD operations
app.filter.name=Filters CRUD Operations
app.filter_list.controllers<list>=/filter/list
app.filter_list.roles<list>=
app.filter_list.description=Filter listing
app.filter_list.name=Filters Listings
#AjaxGateway
app.gateway.controllers<list>=/gateway
app.gateway.roles<list>=admin
app.gateway.description=CRUD operations for Gateway
app.gateway.name=CRUD operations for Gateway
#AjaxGatewayLog
app.gatewaylog.controllers<list>=/gatewaylog
app.gatewaylog.roles<list>=admin
app.gatewaylog.description=Gateway Log app
app.gatewaylog.name=RS.syslog.GatewayLog
#AjaxImpex
app.impex.controllers<list>=/impex
app.impex.roles<list>=admin
app.impex.description=Impex app
app.impex.name=RS.impex.Main
#AjaxImpexLog
app.impexlog.controllers<list>=/impexlog
app.impexlog.roles<list>=admin
app.impexlog.description=Impex Log app
app.impexlog.name=RS.syslog.ImpexLog
#AjaxJobScheduler
app.jobscheduler.controllers<list>=/jobscheduler
app.jobscheduler.roles<list>=admin
app.jobscheduler.description=Job Scheduler App
app.jobscheduler.name=RS.sysadmin.JobSchedules
#AjaxLicense
app.license.controllers<list>=/license
app.license.roles<list>=admin
app.license.description=License App
app.license.name=RS.license.Main
#AjaxListRegistration
app.registration.controllers<list>=/registration
app.registration.roles<list>=admin
app.registration.description=Resolve Registration App
app.registration.name=RS.sysadmin.ListRegistrations
#AjaxMCP
app.mcp.controllers<list>=/mcp
app.mcp.roles<list>=admin
app.mcp.description=MCP app
app.mcp.name=RS.mcp.Main
#AjaxMenuDefinition
app.menudefinition.controllers<list>=/menudefinition
app.menudefinition.roles<list>=admin
app.menudefinition.description=Menu Definition
app.menudefinition.name=RS.sysadmin.MenuDefinitions
#AjaxMenuSet
app.menuset.controllers<list>=/menuset
app.menuset.roles<list>=admin
app.menuset.description=Menu Sets
app.menuset.name=RS.sysadmin.MenuSets
#AjaxMetric
app.metric.controllers<list>=/metric
app.metric.roles<list>=admin
app.metric.description=Metrics app
app.metric.name=RS.metric.Definition
#AjaxModelController - same url as AjaxWiki..so ignore it
#app.wiki_model.controllers<list>=/wiki
#app.wiki_model.roles<list>=
#app.wiki_model.description=Wiki Model Entry points
#app.wiki_model.name=Wiki Model Entry points
#AjaxOrganization
app.organization.controllers<list>=/organization
app.organization.roles<list>=admin
app.organization.description=Organization app
app.organization.name=RS.sysadmin.Organization
app.organization_list.controllers<list>=/organization/list
app.organization_list.roles<list>=
app.organization_list.description=Organization List
app.organization_list.name=Organization List
#AjaxResolutionBuilder
app.automationbuilder.controllers<list>=/resolutionbuilder
app.automationbuilder.roles<list>=
app.automationbuilder.description=Automation Builder app
app.automationbuilder.name=RS.wiki.resolutionbuilder.Automations
#AjaxSearch
app.search.controllers<list>=/search
app.search.roles<list>=
app.search.description=Search UI app
app.search.name=RS.search.Search
#AjaxServerInformation
app.server.controllers<list>=/server
app.server.roles<list>=admin
app.server.description=Server Information App
app.server.name=Server Information App
#AjaxSocial
app.social.controllers<list>=/social
app.social.roles<list>=
app.social.description=Social UI app
app.social.name=RS.social.Main
#AjaxSocialAdmin
app.socialadmin.controllers<list>=/socialadmin
app.socialadmin.roles<list>=admin,social_admin
app.socialadmin.description=Social Admin app
app.socialadmin.name=RS.socialadmin.Component
#AjaxSystemProperties
app.sysproperties.controllers<list>=/sysproperties
app.sysproperties.roles<list>=admin
app.sysproperties.description=System Property app
app.sysproperties.name=RS.sysadmin.SystemProperty
app.sysproperties_getByName.controllers<list>=/sysproperties/getSystemPropertyByName
app.sysproperties_getByName.roles<list>=
app.sysproperties_getByName.description=Get the System Property By Name
app.sysproperties_getByName.name=Get the System Property By Name
#AjaxSystemScripts
app.sysscript.controllers<list>=/sysscript
app.sysscript.roles<list>=admin
app.sysscript.description=System Script app
app.sysscript.name=RS.sysadmin.SystemScript
app.sysscript_list.controllers<list>=/sysscript/list
app.sysscript_list.roles<list>=
app.sysscript_list.description=System Script List
app.sysscript_list.name=System Script List
#AjaxTag
app.tag.controllers<list>=/tag
app.tag.roles<list>=
app.tag.description=Tag CRUD api
app.tag.name=RS.tag.Tag
app.tag_deleteTags.controllers<list>=/tag/deleteTags
app.tag_deleteTags.roles<list>=admin
app.tag_deleteTags.description=Delete Tag
app.tag_deleteTags.name=Delete Tag
#AjaxUser
app.user.controllers<list>=/user
app.user.roles<list>=admin
app.user.description=Users/Groups/Roles CRUD api
app.user.name=RS.user.User
app.user_get.controllers<list>=/user/getUser
app.user_get.roles<list>=
app.user_get.description=Get the User info
app.user_get.name=Api to get the User info
app.user_crop.controllers<list>=/user/crop
app.user_crop.roles<list>=
app.user_crop.description=Crop the User image
app.user_crop.name=Crop the User image
app.user_downloadProfile.controllers<list>=/user/downloadProfile
app.user_downloadProfile.roles<list>=
app.user_downloadProfile.description=Download User Profile
app.user_downloadProfile.name=Download User Profile
app.user_listGroups.controllers<list>=/user/listGroups
app.user_listGroups.roles<list>=
app.user_listGroups.description=List Of Groups
app.user_listGroups.name=List Of Groups
app.user_listRoles.controllers<list>=/user/listRoles
app.user_listRoles.roles<list>=
app.user_listRoles.description=List Of Roles
app.user_listRoles.name=List Of Roles
app.user_listUsers.controllers<list>=/user/listUsers
app.user_listUsers.roles<list>=
app.user_listUsers.description=List Of Users
app.user_listUsers.name=List Of Users
app.user_previewProfile.controllers<list>=/user/previewProfile
app.user_previewProfile.roles<list>=
app.user_previewProfile.description=Preview Profile
app.user_previewProfile.name=Preview Profile
app.user_upload.controllers<list>=/user/upload
app.user_upload.roles<list>=
app.user_upload.description=User Image Upload
app.user_upload.name=User Image Upload
app.user_saveUser.controllers<list>=/user/saveUser
app.user_saveUser.roles<list>=
app.user_saveUser.description=User Save
app.user_saveUser.name=User Save
#AjaxUserSessionInformation
app.user_sessioninfo.controllers<list>=/user/sessioninfo
app.user_sessioninfo.roles<list>=admin
app.user_sessioninfo.description=Session Info
app.user_sessioninfo.name=Session Info
#AjaxView
app.view.controllers<list>=/view
app.view.roles<list>=admin,resolve_process,resolve_dev
app.view.description=Custom Table View view api
app.view.name=RS.customtable.Table
app.view_list.controllers<list>=/view/list
app.view_list.roles<list>=
app.view_list.description=Custom Table View List
app.view_list.name=Custom Table View List
app.view_read.controllers<list>=/view/read
app.view_read.roles<list>=
app.view_read.description=Custom Table View Read
app.view_read.name=Custom Table View Read
#AjaxWiki
app.wiki.controllers<list>=/wiki
app.wiki.roles<list>=
app.wiki.description=Wiki view api
app.wiki.name=RS.wiki.Main
app.wiki_results.controllers<list>=/wiki/resultmacro
app.wiki_results.roles<list>=
app.wiki_results.description=Result and Detail Macro
app.wiki_results.name=Result and Detail Macro
#AjaxWikiAdmin
app.wikiadmin.controllers<list>=/wikiadmin
app.wikiadmin.roles<list>=admin,resolve_process,resolve_dev
app.wikiadmin.description=Wiki Admin api
app.wikiadmin.name=RS.wiki.WikiAdmin
app.wikiadmin_list.controllers<list>=/wikiadmin/list
app.wikiadmin_list.roles<list>=
app.wikiadmin_list.description=Wiki Admin List
app.wikiadmin_list.name=Wiki Admin List
app.wikiadmin_getRating.controllers<list>=/wikiadmin/getRating
app.wikiadmin_getRating.roles<list>=
app.wikiadmin_getRating.description=Wiki Document Rating
app.wikiadmin_getRating.name=Wiki Document Rating
app.wikiadmin_moveRenameCopy.controllers<list>=/wikiadmin/moveRenameCopy
app.wikiadmin_moveRenameCopy.roles<list>=
app.wikiadmin_moveRenameCopy.description=Wiki Document Copy/Rename
app.wikiadmin_moveRenameCopy.name=Wiki Document Copy/Rename
app.wikiadmin_setDeleted.controllers<list>=/wikiadmin/setDeleted
app.wikiadmin_setDeleted.roles<list>=
app.wikiadmin_setDeleted.description=Wiki Document Mark Deleted
app.wikiadmin_setDeleted.name=Wiki Document Mark Deleted
#AjaxWikiLookupMapping
app.wikilookup.controllers<list>=/wikilookup
app.wikilookup.roles<list>=admin,resolve_process
app.wikilookup.description=Wiki Lookups
app.wikilookup.name=RS.wiki.Lookups
#AjaxResolutionRouting
app.resolutionrouting_rule.controllers<list>=/resolutionrouting/rule
app.resolutionrouting_rule.roles<list>=admin,resolve_process
app.resolutionrouting_rule.description=Resolution Routing Mapping Admin
app.resolutionrouting_rule.name=RS.resolutionrouting.Rules
app.resolutionrouting_schema.controllers<list>=/resolutionrouting/schema
app.resolutionrouting_schema.roles<list>=admin,resolve_process
app.resolutionrouting_schema.description=Resolution Routing Schema Admin
app.resolutionrouting_schema.name=RS.resolutionrouting.Schemas
#AjaxWikiNamespaceAdmin
app.nsadmin.controllers<list>=/nsadmin
app.nsadmin.roles<list>=admin,resolve_process,resolve_dev
app.nsadmin.description=Wiki Namespace Admin
app.nsadmin.name=RS.wiki.NamespaceAdmin
app.nsadmin_list.controllers<list>=/nsadmin/list
app.nsadmin_list.roles<list>=
app.nsadmin_list.description=Wiki Namespace List
app.nsadmin_list.name=Wiki Namespace List
#AjaxWikiTemplate
app.wikitemplate.controllers<list>=/wikitemplate
app.wikitemplate.roles<list>=admin,resolve_process
app.wikitemplate.description=Wiki Template api
app.wikitemplate.name=RS.wiki.Template
app.wikitemplate_list.controllers<list>=/wikitemplate/list
app.wikitemplate_list.roles<list>=
app.wikitemplate_list.description=Wiki Template List
app.wikitemplate_list.name=Wiki Template List
app.wikitemplate_get.controllers<list>=/wikitemplate/get
app.wikitemplate_get.roles<list>=
app.wikitemplate_get.description=Wiki Template Get
app.wikitemplate_get.name=Wiki Template Get
#AjaxWorksheet
app.worksheet.controllers<list>=/worksheet
app.worksheet.roles<list>=
app.worksheet.description=Worksheet Application
app.worksheet.name=RS.worksheet.Worksheet
app.processrequest.controllers<list>=/processrequest
app.processrequest.roles<list>=
app.processrequest.description=Process Request Application
app.processrequest.name=RS.worksheet.ProcessRequests
app.taskresult.controllers<list>=/taskresult
app.taskresult.roles<list>=
app.taskresult.description=TaskResult Application
app.taskresult.name=RS.worksheet.TaskResults
app.worksheet_get.controllers<list>=/worksheet/get
app.worksheet_get.roles<list>=
app.worksheet_get.description=Worksheet Get Api
app.worksheet_get.name=Worksheet Get Api
#AjaxWSDATA
app.wsdata.controllers<list>=/wsdata
app.wsdata.roles<list>=
app.wsdata.description=WSDATA apis
app.wsdata.name=WSDATA apis
#kibana url
app.kibana.controllers<list>=/kibana
app.kibana.roles<list>=admin
app.kibana.description=ES Kibana
app.kibana.name=ES Kibana
#bigdesk url
app.bigdesk.controllers<list>=/bigdesk
app.bigdesk.roles<list>=admin
app.bigdesk.description=ES Bigdesk
app.bigdesk.name=ES Bigdesk
###########################
## TODO listing
###########################
#AuthController
#EditController
#ExecuteController
#GwtRpcController
#HelloController
#ImpexController
#ModelController
#NavigateController
#PublicController
#ResultController
#ViewController
#WorksheetController
Rights Table 2
# rights
app.rights.rsclient<list>=
## list of roles required to access specified application
app.rights.rswiki<list>=
## list of roles required to access specified application
app.rights.rsworksheet<list>=
## list of roles required to access specified application
app.rights.rsactiontask<list>=admin,resolve_dev
## list of roles required to access specified application
app.rights.rsadmin<list>=admin
## list of roles required to access specified application
app.rights.rsnetcool<list>=admin
## list of roles required to access specified application
app.rights.rstable<list>=
## list of roles required to access specified application
app.rights.rsexchange<list>=
## list of roles required to access specified application
app.rights.rsadmin.menuset<list>=admin
## list of roles required to access the application
app.rights.rsadmin.menudefinition<list>=admin
## list of roles required to access the application
app.rights.rsadmin.properties<list>=admin
## list of roles required to access the application
app.rights.rsadmin.cron<list>=admin,resolve_process,resolve_dev
## list of roles required to access the application
app.rights.rsadmin.users<list>=admin
## list of roles required to access the application
app.rights.rsadmin.groups<list>=admin
## list of roles required to access the application
app.rights.rsadmin.roles<list>=admin
## list of roles required to access the application
app.rights.rsadmin.wikiadmin<list>=admin,resolve_process,resolve_dev
## list of roles required to access the application
app.rights.rsadmin.wikilookup<list>=admin
## list of roles required to access the application
app.rights.rsadmin.impex<list>=admin,resolve_process,resolve_dev
## list of roles required to access the application
app.rights.rsadmin.registration<list>=admin
## list of roles required to access the application
app.rights.rsadmin.target<list>=admin
## list of roles required to access the application
app.rights.rsadmin.systemscript<list>=admin
## list of roles required to access the application
wiki.rights.view.ALL=admin,resolve_user,resolve_dev,resolve_process
## global default wiki view rights
wiki.rights.edit.ALL=admin,resolve_user,resolve_dev,resolve_process
## global default wiki edit rights
wiki.rights.admin.ALL=admin,resolve_user,resolve_dev,resolve_process
## global default wiki admin rights
wiki.rights.execute.ALL=admin,resolve_user,resolve_dev,resolve_process
## global default wiki execute rights
wiki.rights.view.Example<list>=admin,resolve_user,resolve_dev,resolve_process
## view rights for Example namespace
wiki.rights.view.SystemAdmin=admin
## SystemAdmin namespace default wiki view rights
wiki.rights.edit.SystemAdmin=admin
## SystemAdmin namespace default wiki view rights
wiki.rights.admin.SystemAdmin=admin
## SystemAdmin namespace default wiki view rights
wiki.rights.execute.SystemAdmin=admin
## SystemAdmin namespace default wiki view rights
customtable.rights.view.ALL=admin,resolve_user,resolve_dev,resolve_process ## global default customtable view rights
customtable.rights.edit.ALL=admin,resolve_user,resolve_dev,resolve_process ## global default customtable edit rights
customtable.rights.admin.ALL=admin,resolve_user,resolve_dev,resolve_process ## global default customtable admin rights
customtable.rights.execute.ALL=admin,resolve_user,resolve_dev,resolve_process ## global default customtable execute rights
#app
app.worksheets.retentionHours = 24
## Specifies how long (in hours) worksheets executed by runbooks in the System namespace are kept in Elastic Search. Worksheets that are older than the setting of the system property are deleted. If the property is blank the default value is 24 hours. Setting the value to 0 is equivalent to disabling the log write.
app.worksheets.writeToLog = true
##Controls whether the removed system worksheets are stored in a RSSystemWorksheets-MM-DD-YYYY.log log file or permanently deleted after the retention period expires.
RSSystemWorksheets-MM-DD-YYYY.log file is in: <INSTALL_DIR>/tomcat/logs/RSSystemWorksheets.log
When it reaches 32 MB in size, it is zipped in <INSTALL_DIR>/tomcat/logs/yyyy-MM directory. The format of the file name of the archived file is: RSSystemWorksheets-MM-dd-yyyy-%i.log.zip
%i is a counter in case there are multiple archives for the same day, it will start from 1 and increase for each new file for the same day. The maximum archived log files for a single day is set to 100. This means: if there are 100 log files for the same day, and another one comes, the oldest one is deleted.
Example:
RSSystemWorksheets-02-17-2020-1.log.zip
RSSystemWorksheets-02-17-2020-2.log.zip
# session
session.url.count=10
## no of URLS that will be stored in session for each user
session.timeout=43200
## session timeout in seconds (default 43200 / 12 hours). Minimum value is 720 seconds (12 minutes)
#session.timeout=720
## session timeout in seconds (default 43200 / 12 hours). Minimum value is 720 seconds (12 minutes)
session.maxallowed=-1
## cleanup sessions older than maxallowed seconds. Default setting of -1 disables session cleanup feature. Effective maxallowed time is greater of the session.timeout and session.maxallowed.
# product
product.description=
## product description
product.logo=
## product logo
product.logoHidden=true
## true to hide the left logo; default to false
product.logoHeight=0
## Height of the left logo
product.logoWidth=
## Width of the left logo; default to auto which will be proportionally adjusted
product.rightLogo=
## Logo displayed on the right of the banner
product.rightLogoHidden=
## true to hide the right logo; default to false
product.rightLogoHeight=
## Height of the right logo
## Width of the right logo; default to auto which will be proportionally adjusted
product.toolbarLogo=logo.png
## Toolbar left logo
product.toolbarLogoHidden=false
## true to hide the toolbar left logo; default to false
product.toolbarLogoHeight=21
## Height of the toolbar left logo; default to 0
product.toolbarLogoWidth=134
## Width of the toolbar left logo; default to 0
product.toolbarRightLogo=
## Toolbar right logo
product.toolbarRightLogoHidden=
## true to hide the toolbar right logo; default to false
product.toolbarRightLogoHeight=
## Height of the toolbar right logo; default to 0
product.toolbarRightLogoWidth=
## Width of the toolbar right logo; default to 0
product.displayPRB=true
## true to display the prb number in the client false to hide it
product.type=ON-PREMISE
## Type of Resolve Instance (Cloud or On-premise)
product.notificationLevel=INFO
## Currently supported values are INFO, ERROR, and NONE
# max count of results to allow memory sorting.
memory.sorting.count=500
## max count of results to allow memory sorting.
# table export listeners - resolve_business_rule,sys_app_application,sys_app_applicationroles,sys_app_module,sys_app_moduleroles,sys_perspective,sys_perspectiveapplications,sys_perspectiveroles,sys_user,sys_user_role,groups,user_role_rel,user_group_rel,group_role_rel
export.listener.tables=resolve_business_rule
## tables automatically exported to WEB-INF/updates
# netcool gateways (tab)
netcool.gateways<list>=
## netcool gateways
# users
users.password.bcrypt.log_rounds=10
## Determines the computational complexity of the password hash. The amount of work increases exponentially (2**log_rounds), so each increment is twice as much work. The default log_rounds is 10, and the valid range is 4 to 31.
users.password.historycheck=0
users.password.allowRecovery=true
## true to allow password recovery from the login screen
users.password.recoverySubject=Password Reset
users.password.recoveryContent=As you requested, your password has been reset. The new temporary password is <b>${password}</b>. Please use this password to login and change your password.
users.login.allowRememberMe=true
##True to allow the remember me checkbox on the page, false to not allow browser to remember user
#help
help.context.url=https://community.resolvesys.com/
##Help and Documentation url
help.context.namespace=
##Help namespace to use for documentation
# banner
banner.url=
## Banner URL. It will take precedence over product logo and product description.
# metrics
metric.group.names<list>=JVM,Runbook
## list of metric groups names
metric.unit.names.JVM<list>=MemoryPercentFree,ThreadPeak
## list of metric unit names for JVM
metric.unit.names.Runbook<list>=Completed,Aborted
## list of metric unit names for Runbook
# search
search.exclude.namespace=Doc
## list of exclude specific namespaces
search.exclude.document.pattern=_Decision
## list of document patterns that will be excluded from search results, changing the pattern will require a reindex to take effect
search.attachment.limit=5000000
## maximum size limit of an attachment that RSSearch will index.
search.worksheet.ttl=-1
## Time To Live (TTL) in days for worksheet, process request, task result in RSSearch. Set -1 (default) for never to purge.
# menu
menu.menuset.default=User Menu
## default selected menuset when login
menuitemgroup.collapse.default=false
## default collapse menu item group
#Example for configurable toolbar
#menu.toolbar=New=/resolve/jsp/rsclient.jsp?url=menu;Menu=/resolve/service/menu;Social=/resolve/social/rssocial.jsp;Wiki=rswiki.jsp?wiki=CURRENT;Worksheet=rsworksheet.jsp?sys_id=ACTIVE;
menu.toolbar=
## displays the main menu list added to the toolbar.For Example: New=/resolve/jsp/rsclient.jsp?url=menu;Menu=/resolve/service/menu;Social=/resolve/social/rssocial.jsp;Worksheet=rsworksheet.jsp?sys_id=ACTIVE[Active Worksheet=rsworksheet.jsp?sys_id=ACTIVE;New Worksheet=NEWWORKSHEET;All Worksheets=rsworksheet.jsp?main=WorkSheet;];Wiki=rswiki.jsp?wiki=CURRENT[Add Document=ADDDOCUMENT;];
# wiki
wiki.property.table.homepage=Runbook.WebHome
## global wiki homepage
wiki.property.table.roles=false
## make it true, if you want the roles homepage to take into effect
wiki.controlpanel.show.default=true
## if TRUE, by default CP will be shown. Works together with the 'wiki.controlpanel.show.exclude.roles' property
wiki.controlpanel.show.exclude.roles<list>=
## the exclusion list of roles. Works based on what is set for 'wiki.controlpanel.show.default'
wiki.attachment.image.extension<list>=jpeg,jpg,png,gif
## attachments with these extensions will be listed for {image} tag in the document edit mode
wiki.lookup.default.doc=
## default lookup redirection wiki document, if blank then falls back to wiki.property.table.homepage value.
# metaform
metaform.hiddenfields<list>=
##hidden variables that are passes to all the Meta Forms when it is rendered
metaformview.rights.view.ALL<list>=admin,resolve_user,resolve_dev,resolve_process
## global default customtable view rights
metaformview.rights.edit.ALL<list>=admin,resolve_user,resolve_dev,resolve_process
## global default customtable edit rights
metaformview.rights.admin.ALL<list>=admin,resolve_user,resolve_dev,resolve_process
## global default customtable admin rights
metaformview.rights.execute.ALL<list>=admin,resolve_user,resolve_dev,resolve_process
## global default customtable execute rights
# login
login.fail.attempts.allowed=10
## total # of failed attempts before it locks the user
# actiontask
actiontask.rights.view.ALL<list>=admin,resolve_dev
# default actiontask view rights
actiontask.rights.edit.ALL<list>=admin,resolve_dev
## default actiontask edit rights
actiontask.rights.admin.ALL<list>=admin,resolve_dev
## default actiontask admin rights
actiontask.rights.execute.ALL<list>=admin,resolve_dev,action_execute
## default actiontask execute rights
# index
#index.on.startup=no
## index on startup flag - remove all index data, reindex all, values should be 'yes' or 'no', it is case insensitive
#indexing.enabled.wikiuiflag=true
## Wiki UI flag of Indexing Enabled (true) or disable (false). By default, it's enabled.
#index.resync=true
## Indexing Resync based on last index time (true) or disable (false). By default, it's enabled.
#remove.expired.posts=false
## Remove expired posts (true) disable (false). By default, it's disable.
# graphdb
#graphdb.startup.init.users=true
## add users to the graph database on startup
#graphdb.startup.init.rss=true
## add rss to the graph database on startup
#graphdb.add.namespace=no
## add namespace to graphdb -- value = yes or no
# rss
social.expiration.rss.interval=168
## expiration from feed update in days
# RSS Access Rights
rss.rights.admin<list>=social_admin,admin
## Default roles to create a new rss
rss.rights.edit<list>=social_admin,admin
## Default roles to edit a rss
rss.rights.read<list>=social_admin,admin,resolve_user
## Default rss read rights
rss.rights.post<list>=social_admin,admin,resolve_user
## Default rss post rights
# system
system.homepage=social
## Default social. Defines the user landing page. Possible values are social, wiki, menu
system.resolve.url=http://localhost:8080/resolve
## Root URL used by user to access Resolve.
# Sync
sync.content
## Default 'false'. Setting the property to "true" enables the content synchronization for ActionTasks and Runbooks.
Content created prior enabling the option is not synchronized.
sync.content.name.push
## Default value = System.GitPushAutomationChanges. On ActionTask or Runbook commit use this Runbook to push changes to the centralized repository.
# Job Scheduler
GIT_POLL
## Default is "inactive" and its default value is set to 15 minutes. This is the Job Scheduler that triggers System.GitPollAutomationChanges runbook in "System" Module.
# Team Access Rights
teams.rights.admin<list>=social_admin,admin
## Default roles to create a new team
teams.rights.edit<list>=social_admin,admin
## Default roles to edit a team
teams.rights.access<list>=social_admin,admin,resolve_user
## Default team access rights
teams.rights.post<list>=social_admin,admin,resolve_user
## Default team post rights
# Forum Access Rights
forums.rights.admin<list>=social_admin,admin
## Default roles to create a new forum
forums.rights.edit<list>=social_admin,admin
## Default roles to edit a forum
forums.rights.read<list>=social_admin,admin,resolve_user
## Default forum read rights
forums.rights.post<list>=social_admin,admin,resolve_user
## Default forum post rights
# Process Access Rights
process.rights.admin<list>=social_admin,admin
## Default roles to create a new process
process.rights.edit<list>=social_admin,admin
## Default roles to edit a process
process.rights.access<list>=social_admin,admin,resolve_user
## Default process access rights
process.rights.post<list>=social_admin,admin,resolve_user
## Default process post rights
# Social default values
post.auto.refresh.interval=2
## refresh interval for the post screen on the social ui
#max.teams.depth=7
## the max teams depth
# System session timout flag used for straight timeout
session.fixed.timeout=false
## System session timout flag used for straight/fixed timeout
# automation select task
## automation select task flag used for display Select Task Menu. After changed the properties, need restart rsview.
automation.select.task=false
# automation.merge.policy.default = ALL
## valid options: ALL, ANY. Sets the default merge policy type that controls the execution behavior of tasks,pre-conditions and events when multiple incoming paths are connected to it.
automation.inlinemodel.refreshinterval=3
## refresh interval for the inline model screen on the wikidoc in seconds (s)
automation.add.inputs.to.params=false
## if true, adds all the ActionTask INPUTS to PARAMS in a runbook
#Default rights for Custom Form Builder/Creation
customform.rights.admin<list>=admin
## Default roles to create a new customform
customform.rights.edit<list>=admin
## Default roles to edit a customform
customform.rights.read<list>=admin
## Default customform read rights
#Default rights for Wiki Templates
wikitemplate.rights.admin<list>=admin
## Default roles to create a new wiki template
wikitemplate.rights.edit<list>=admin
## Default roles to edit a wiki template
wikitemplate.rights.read<list>=admin
## Default roles to read a wiki template
# Import / Export
impex.export.properties=true
## Option to export Properties when the scan is ON during export operation. By default it's true.
impex.validation=true
## Option to introduce Import/Export validation. If it's true, a validation file will be exported in the module which will be read by Import process. If false, no validation file will be created and ignored if present. By default it's true.
# Default values for reporting
dashboard.namespace.exclude<list>=Doc3,System,SystemAdmin,Dashboard,CR
## Option to exclude these namespaces in KM reports
# Property for customer's default color theme for the login page. Accepted values: LIGHT, DARK, HIGHCONTRAST.
# default.color.theme =LIGHT
# enable/disable "Save Document" and "Save ActionTask" modal dialogs
disable.save.comment
## valid values are true/false. Default value = true
# default setting for Decision Tree option
dt.option.default=dropdown
## valid values are - dropdown, radio
dt.option.autoNavigate=false
## Option to allow auto navigation upon selecting answer in Decistion Tree. Valid values are - true, false.
dt.option.history.showAnswer=false
## Option to display both Question and Answer in History Panel for Decistion Tree. Valid values are - true, false.
dt.option.showQuestionOnBottom=false
## Option to display Question and Answer for Decistion Tree on the bottom. Valid values are - true, false.
dt.option.radio.vertical=False
## Option to display Answer ( Radio style ) in vertical layout. Valid values are - true, false.
# default abort value for the dt node
dt.node.abortInSecs.default=300
## default abort value for a DT node in secs
# custom tables
customtable.form.exclude.list=social_process,social_team,social_forum
## list of custom tables forms not to be displayed
customtable.table.exclude.list=social_process,social_team,social_forum
## list of custom tables not to be displayed
# event gateway properties
event.gateway.queue=
## Name of the queue that will process the event message (e.g., NETCOOL)
event.gateway.messagehandler=
## Name of the corresponding message handler class, case-sensitive (e.g., MNetcool)
event.gateway.filter.name=
## Name of the filter(s) to execute when event message arrives, case-sensitive. (e.g., MyEvtFilter1,MyEvtFilter2)
resultmacro.check.archive=false
## If it's true, will query archive for action task results if no result found in ElasticSearch
resultmacro.createdon.hide=false
## If it's true, will hide the "Created On" column of result macro
menu.navigation.active=false
## displays the left navigation menu panel
# servicenow single sign-on (SSO) properties
servicenow.rest.url=https://hostname.service-now.com/api/now/v1/table/
servicenow.rest.username=resolve
servicenow.rest.password=resolve
servicenow.grouprequired=false
servicenow.sso.disable=false
## Disable ServiceNow SSO. True/False or Yes/No (case insensitive). Defaults to false.
# system script global execute timeout in millisec.
global.execute.timeout=10000
## Global timeout for System Script execution in milliseconds. Timeout present in the parameter takes precedence.
global.draft.version.limit.count=50
## Maximum draft version count allowance for WikiDocument, ActionTask, DecisionTree, Runbook. Versions marked as "committed" are not affected.
# saas customer information
saas.customer.name=ABC
## Customer name on the reports
saas.start.date=01/01/2015
## Start date of SAAS license enforcement
saas.event.quota=40000
## Number of licensed event quota
saas.ticket.quota=5000
## Number of licensed ticket quota
saas.duration=365
## License duration (days)
# REST API with timeout in sec
rest.token.timeout=1209600
rest.max.token.cache.size=10000
# User Authentication
authentication.defaultdomain=
## Default domain to use in case username is not prefixed with domain.
authentication.defaultmemberof=
## Default group assigned to user if external authentication does not return group(s) user is member of.
# SAML/ADFS/Splunk SSO
sso.saml.trustedADFSIssuerHostnames=win2k8r2-adfs.resolvetest-3.com
## List of trusted ADFS hostnames
sso.splunk.instanceHost=10.40.1.137
## Hostname of the Splunk instance where the Resolve Splunk Application is installed
sso.splunk.instancePort=8089
# URLs to allow in X-Frame-Options ALLOW-FROM and
# CSP frame-ancestors headers for iframe integration.
# Please note 'self' for CSP is added by default.
security.http.iframe.integration.allowedurls<list>=moog-01.resolvesys.com
## Comma separated list of URLs to allow in X-Frame-Options ALLOW-FROM and CSP frame-ancestors headers for iframe integration. Please note 'self' for CSP is added by default.