Monitoring PassPort operating events: Overview

About Sentinel monitoring of PassPort

You can use Sentinel to collect information about targeted PassPort operating events. Sentinel enables you to generate graphic representations of these events (Dashboards) that you can view, analyze and respond to.

Sentinel provides you with tools that help you create pre-programmed automatic responses to specified network conditions. Using these tools, you can configure Sentinel to act immediately to handle exceptional and/or abnormal events that occur in PassPort. You can also configure Sentinel to respond to a programmed event that fails to occur.

How Sentinel monitors PassPort

PassPort processing

A Sentinel monitoring agent resides natively on PassPort. When an event occurs in PassPort (for example when a user logs on, or modifies a PassPort object) the agent generates a Tracked-Event Message that contains data about the event. The agent then sends the Tracked-Event Message to the Sentinel Server environment.

Sentinel processing

Tracked Objects

Sentinel contains two Tracked Objects dedicated to recording PassPort events:

• PassPort Audit
• View PassPort Audit attributes

  • Agent IP address
  • Agent IP port
  • Cycle ID
  • Internal state
  • Event date
  • Event ID
  • Event time
  • GMT diff
  • Is alert
  • Is archived
  • Is end
  • Is exception
  • Object ID
  • Product IP address
  • Product name
  • Product OS
  • Return code
  • Return message
  • Severity
  • State
  • Test label
  • User child ID
  • User name
  • User object ID
  • User parent ID
  • Date Tia
  • Time Tia
  • User Tia
  • Date ack
  • Time ack
  • User ack
  • Comment ack
  • Dst event ID
  • Update label
  • Product
  • Severity class
  • Rec time
  • Rec date
  • Session ID
  • Msg group
  • Msg code
  • Calling product
  • Server name
  • Obj type
  • Obj version
  • Obj name
  • Details
  • Category
  • Subcategory
  • Partner name
  • Service name
  • Contact name
  • Entity name
  • Cert alias
  • Public key alias
  • Status
  • Domain
  • Component
  • Subject ID
  • Transaction ID
  • Parent ID
• PassPort Audit Summary
• View PassPort Audit Summary attributes

  • Agent IP address
  • Agent IP port
  • Cycle ID
  • Internal state
  • Event date
  • Event ID
  • Event time
  • GMT diff
  • Is alert
  • Is archived
  • Is end
  • Is exception
  • Object ID
  • Product IP address
  • Product name
  • Product OS
  • Return code
  • Return message
  • Severity
  • State
  • Test label
  • User child ID
  • User name
  • User object ID
  • User parent ID
  • Date Tia
  • Time Tia
  • User Tia
  • Date ack
  • Time ack
  • User ack
  • Comment ack
  • Dst event ID
  • Update label
  • Product
  • Severity class
  • Rec time
  • Rec date
  • Session ID
  • Msg group
  • Msg code
  • Calling product
  • Server name
  • Obj type
  • Obj version
  • Obj name
  • Details
  • Category
  • Subcategory
  • Partner name
  • Service name
  • Contact name
  • Entity name
  • Cert alias
  • Public key alias
  • Status
  • Domain
  • Component
  • Transaction ID
  • Category
  • Sub category

Each of these Tracked Objects define a database table that holds values describing PassPort events.

Tracked-Event Messages originating from PassPort contain a field that indicates that either the PassPort Audit Tracked Object or the PassPort Audit Summary Tracked Object is to be associated with that message. Sentinel extracts the data from the fields of the Tracked-Event Message, and writes the data to the correct table in the Sentinel Tracking Database.

When the data has been recorded in the Tracking Database, you can then use the full array of Sentinel tools for monitoring PassPort operations.

Predefined Requests

Sentinel uses sets of executable SQL instructions known as Requests to retrieve data from tables in the Tracking Database. The PassPort package for Sentinel provides a set of predefined Requests that you can use in Sentinel to facilitate retrieval of data about PassPort events:

Sentinel Monitoring extensions

PassPort also ships with Sentinel Monitoring configurations to enable linking of sub-searches and lifecycle views of the two PassPort Tracked Objects. See Configuring Tomcat for Sentinel Monitoring for more details.

Required products

To operate PassPort and Sentinel together, you require the following Axway products:

• PassPortAxway PassPort provides three distinct sets of services for the Axway 5 Suite: Identity and access management for Axway products; Partner management for message exchanges; Certificate and key management for message exchanges. You can manage each of these sets of services through a single PassPort user interface.
• Sentinel and Sentinel MonitoringSentinel is a monitoring product that provides you with a set of tools for viewing and reacting to events that occur in your network applications and platforms.
• Composer and the Sentinel Composer EnablerComposer is the centralized management product for the Axway 5 Suite. Via Composer, you design, manage and deploy your configuration.

Related topics

PassPort event monitoring: General implementation procedure