View Utility Group Status
HID_ConfigStatus
The Utility Group Status panel provides comprehensive status information about the Utility Appliances that are configured in Utility Groups in your environment.
Access the Utility Group Status Panel
To access the Utility Group Status panel, navigate to
Configuration
,Utility
, Status
in the PAM UI.The
Utility Group Status
panel lists all the Utility Groups in your environment. Select the Name
or Description
column headers to sort the list.Obtain the Status of a Utility Group
To obtain the status of a listed Utility Group, double-click that group or select the entry and select the
View
button in the top right-hand corner. The
View
dialog opens, displaying the Utility Group
Devices
tab.View
Utility Group
Tab DescriptionsThe View
Utility Group
dialog provides comprehensive information about the corresponding Utility Group in the following tabs:Basic Info Tab
Provides the Utility Group name and description
Devices Tab
The
Devices
tab provides information about the status of each Utility Appliance in the Utility Group and the services running on it.
The services are explained in a table later in this topic.
The top row of the Devices tab provides controls that allow you to:
- Filter on a specific service name.
- Download a JSON file containing comprehensive information about the Utility Group and its members.
- Expand or collapse all entries in the table.
- Recycle all Utility Appliance services. Recycling a service kills it, forcing PAM SC to reschedule the service on the same or another host (depending on its configuration).Recycling can be useful when services do not start correctly, clearing the issue and allowing the services to start successfully.
Status Icons for
Devices
and Service
tabs:Each row in the following table provides status information and options for a Utility Appliance or a service running on a Utility Appliance.
Status Icon | Meaning for a Utility Appliance | Meaning for a Service |
|---|---|---|
Green check mark | Utility Appliance is healthy to run services. No Disk, RAM, CPU pressure. | The service is deployed and running. (This status does not report the health of the service functionality – only that it is running.) |
Yellow bell | N/A | Attempt to deploy the service on this Utility Appliance was made, but the service does not start. |
Red stop sign | Utility Appliance is not reachable or not ready to run services on this device. | Either the Utility Appliance is unreachable (see the previous row) or the service cannot run for some other reason. |
Functional Icons for
Devices
and Service
tabs:The following table describes the status and functional icons that appear beside each entry on the
Devices
and Services
tabs:Icon | Meaning |
|---|---|
Information icon ( ) | Returns detailed information about the associated Utility Appliance or service. |
View service logs icon ( ) | Returns the logfile for the associated service. |
Recycle service icon ( ) | Kills the service, forcing PAM SC to reschedule the service on the same or another host (depending on its configuration).
Recycle can be useful when the service did not start correctly. Recycling can clear the issue and result in the service starting successfully. |
Services Tab
The
Services
tab provides an alternative view of devices and services, grouping the list by service and showing the utility appliances on which each service is running.
(The Services tab uses the same status and functional icons as the Devices tab described previously.)
The following table describes all available services:
Service Name | Description | How Deployed |
|---|---|---|
pam-config | Sends the PAM configuration map to the Utility Group | Changes when the cluster is stop/started and or primary site is changed. |
reloader | A utility within the Utility Group that watches for configuration changes. The reloader utility knows which other services to recycle when a specific configuration is changed. | Only one is needed per Utility Group. Therefore it should live on only one Utility Appliance. |
pam-a2a | Communicates with PAM to service Utility Appliance information that is stored when a Policy assigned or finalized. | One required for each Utility Appliance. |
pam-policy-orchestrator | Communicates between the Utility Appliance and PAM A2A. Facilitates device registration for Server Control, Login Integration, and UNAB. | One required for each Utility Appliance. |
pam-dh | Allows Server Control endpoints to communicate with the DH for policy information | One required for each Utility Appliance. |
activemq-config | Configuration values that are used by ActiveMQ and other dependent services like eventforwarder. | Updates if the PAM Syslog server is changed or Tibco is deployed. |
pam-activemq | Endpoints connect to ActiveMQ for Login Integration, UNAB, & Event Forwarder. | One required for each Utility Appliance. |
pam-eventforwarder | Syslog/Splunk consumer from ActiveMQ to an external server | If the PAM Syslog Server is defined and active, it deploys and configures this service on each Utility Appliance. |
pam-loginintegration | Service that listens for calls from PAM to process a login integration transaction | One required for each Utility Appliance. |
pam-tibco | Service required to support the optional Tibco component (which is available as a patch that can be applied from Configuration, Utility, Patches.) | If the Tibco patch is deployed, one is required for each Utility Appliance.deployed, once per Utility Appliance. Each Utility Appliance needs their own. |
Config Map Tab
The
Config Map
tab displays the values of Config Map
objects (key-value pairs) which determine the behavior of the Utility Appliances in the Utility Group.
The data on the Config Map tab is read-only. Select the links in the following descriptions for information about how to change the settings.
- activemq-config: Displays the following configuration information that is related to ActiveMQ and other dependent components in the utility group:
- pam-config: The VIP address of the cluster.
- syslog-config: Syslog information that is used by the Event Forwarder component (only displayed when eventforwarder is enabled).
When the value of any Config Map object is updated, PAM recycles all services that use that value running on Utility Group members. Therefore, services on Utility Appliances always run with the latest configuration information.
)
)
)