NetIQ Aegis: Automated Workflow Magic Lab

Transcription

1 NetIQ Aegis: Automated Workflow Magic Lab NIQ11 Novell Training Services ATT LIVE 2012 LAS VEGAS

2 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page ( for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright 2012 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page ( and one or more additional patents or pending patent applications in the U.S. and in other countries. Novell, Inc. 404 Wyman Street, Suite 500 Waltham, MA U.S.A. Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page ( Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list ( Third-Party Materials All third-party trademarks are the property of their respective owners. 2 Copying all or part of this manual, or distributing such copies, is strictly prohibited. To report suspected copying, please call PIRATES. Version 1

3 Contents Contents...1 Lab: Reduce Your Event Management Work By Half...2 Event Information...3 Lab 1: Creating a Process...4 Lab 2: Creating a Trigger...5 Lab 3: Collecting Diagnostic Information...6 Lab 4: Adding Work Item Attributes...8 Lab 5: Notifying an Administrator...9 Lab 6: Making a Decision...10 Lab 7: Remediating the condition...11 Lab 8: Reporting results to the Administrator...12 Lab 9: Conditional Connectors...14 Lab 10: Executing the process...15 Contents

4 Lab: Reduce Your Event Management Work By Half This lab provides practice in performing a variety of tasks involved in automating a routine IT task. You will create a process, set it up to trigger from a known event, gather diagnostic information, send out an , and for a decision and remediate the condition (if instructed). This lab will take you approximately two and one-half hours to complete all exercises. Ensure the following virtual machines are powered on before beginning this lab: AegisVM The following account information will be used when interacting with the VM: Aegis Username: Administrator Aegis Password: password AppManager Username: sa AppManager Password: password ATT303-Reduce Your Event Management Work By Half-Lab - 2

5 Event Information The process you create through the course of this lab will be initiated by the following event information. ATT303-Reduce Your Event Management Work By Half-Lab - 3

6 Lab 1: Creating a Process 1. From the Process Folder View Tasks on the right side of the screen, click Create New Process 2. On the first page of the Process Creation Wizard, click Next 3. On the next, choose the Create a process with an empty workflow option then click Next ATT303-Reduce Your Event Management Work By Half-Lab - 4

7 4. On the Process Properties page, fill in the Process Name and Process Description as shown below then click Next Process Name: Respond to Service Down Event Process Description: This process will respond to and remediate a service down condition detected from AppManager. 5. On the Summary page, verify the details and click Finish Note: This will open the Workflow Designer ATT303-Reduce Your Event Management Work By Half-Lab - 5

8 Lab 2: Creating a Trigger 1. From the Basic Workflow Control (NetIQ) activity library, drag the Start of Workflow activity onto the designer grid 2. Switch to the Trigger tab of the Activity Properties dialog and click the Add button ATT303-Reduce Your Event Management Work By Half-Lab - 6

9 3. Click the Create New Trigger button 4. On the Create Trigger dialog, enter the Trigger Name and Description as shown below and do not click OK Trigger Name: AppManager Service Down Trigger Description: Trigger based on an AppManager event detecting a service unexpectedly down ATT303-Reduce Your Event Management Work By Half-Lab - 7

10 5. Click the New Template button and choose the expression template One event of a specific type and click OK 6. Click the <event type> link and choose Select Base Event Type of Named Event Definition ATT303-Reduce Your Event Management Work By Half-Lab - 8

11 7. Click Create New Named Event Definition 8. On the Create Triggering Event Definition dialog, enter the Triggering Event Definition Name and Description as follows and do not click OK Triggering Event Definition Name: AppManager Service Down Event Triggering Event Definition Description: Event received from AppManager indicating a service has gone down unexpectedly 9. Click the <event type> link and choose AppManager.Event then click OK ATT303-Reduce Your Event Management Work By Half-Lab - 9

12 10. Click the <event attribute> link and choose AppManager KS Name then click OK ATT303-Reduce Your Event Management Work By Half-Lab - 10

13 11. Click the is equal to link and choose contains 12. Click the <event attribute value> link and enter NT_ServiceDown then click OK 13. Click the + next to Has event type of and choose Expression ATT303-Reduce Your Event Management Work By Half-Lab - 11

14 14. Change the new expression as follows then click OK twice: Event Attribute: AppManager Event Severity Number Comparison: is equal to Event Attribute Value: Click the Append to Previous Work Item If tab ATT303-Reduce Your Event Management Work By Half-Lab - 12

15 16. Click the New Template button and choose Any event of a specific type from event source if this event initiated new work item then click OK 17. Click <event type> and choose Select Base Event Type or Named Event Definition ATT303-Reduce Your Event Management Work By Half-Lab - 13

16 18. Click AppManager Service Down Event and click OK ATT303-Reduce Your Event Management Work By Half-Lab - 14

17 19. Click <event source> and choose Computer ID then click OK twice to return to the workflow designer ATT303-Reduce Your Event Management Work By Half-Lab - 15

18 Lab 3: Collecting Diagnostic Information 1. From the Basic Workflow Control activity library, drag the Join activity out to the right of the Start of Workflow activity. 2. Click OK on the Activity Properties dialog ATT303-Reduce Your Event Management Work By Half-Lab - 16

19 3. From the NetIQ AppManager activity library, drag the Find Jobs activity to the right of the Join activity. 4. On the General tab, change the name of the activity Name: Find CPU Utilization Job ATT303-Reduce Your Event Management Work By Half-Lab - 17

20 5. On the Query tab, change to the Job tab and click the Create Filter button 6. On the Expression Editor, change the expression as follows and click OK twice to close the activity: Attribute: Knowledge Script Name Comparison: is equal to Attribute Value: NT_CpuLoaded 7. Right-click on the Find CPU Utilization Job activity and select Copy, then right-click and select Paste. Change the activity name as follows: Name: Find Memory Utilization Job ATT303-Reduce Your Event Management Work By Half-Lab - 18

21 8. On the Query tab, change to the Job tab and click the Edit Filter button 9. On the Expression Editor, change the expression as follows and click OK twice to close the activity: Attribute: Knowledge Script Name Comparison: is equal to Attribute Value: NT_MemUtil ATT303-Reduce Your Event Management Work By Half-Lab - 19

22 10. Move the new activity slightly below the other Find activity ATT303-Reduce Your Event Management Work By Half-Lab - 20

23 11. From the NetIQ AppManager activity library, drag the Find Performance Data Streams activity to the right of the Find CPU Utilization activity. 12. Change the activity name to Find CPU Performance Data. On the Values tab, click the Use Input Builder box next to the Job Locator field then click the wrench icon. 13. Click the New Input Element button and choose Activity Output Parameter ATT303-Reduce Your Event Management Work By Half-Lab - 21

24 14. Expand the Find CPU Utilization Job activity and select Object Locators. Click the Output Parameter Qualifiers tab and check the box titled Use Word then click the box to the right. ATT303-Reduce Your Event Management Work By Half-Lab - 22

25 15. Check the Use Word box, change the value to then click OK three times to return to the Activity Properties dialog. 16. In the Legend field enter then click OK to close the activity 17. From the NetIQ AppManager activity library, drag the Generate Chart from Data Stream activity to the right of the Find CPU Performance Data activity 18. Change the name to Generate CPU Chart. On the Values tab, change the values as follows: Data Stream Locators: Input Builder->Activity Output Parameter->Find CPU Performance Data->Data Stream Locators->Use Word 1 ATT303-Reduce Your Event Management Work By Half-Lab - 23

26 Base Time Point: Input Builder->Work Item Attribute->Start Time Minutes Before Base Time Point: On the Supporting Analysis tab, change the Subtitle to CPU Utilization and click OK to close the activity ATT303-Reduce Your Event Management Work By Half-Lab - 24

27 20. Copy and Paste the Find CPU Performance Data activity. Modify the new activity as follows and click OK to close the activity. Name: Find Memory Performance Data Job Locator: Find Memory Utilization Job->Object Locators->Use Word 2 Legend: *MemPhysUsage* 21. Move the activity in line with the Find CPU Performance Data and Find Memory Utilization Job activities ATT303-Reduce Your Event Management Work By Half-Lab - 25

28 22. Copy and Paste the Generate CPU Chart activity. Modify the new activity as follows and click OK to close the activity. Name: Generate Memory Chart Data Stream Locators: Click the Input Builder wrench o Click the Find CPU Performance Data link o Expand Find Memory Performance Data and select Data Stream Locators o On the Output Parameter Qualifiers tab, check the Use Word box then click the [ ] button o Enable the radio button next to Use Word and enter 1 in the numeric selector Supporting Analysis Subtitle: Memory Utilization 23. Move the activity in line with the Generate CPU Chart and Find Memory Performance Data activities 24. From the Basic Workflow Control activity library, drag a Join activity to the right of the Generate Memory Chart activity and click OK ATT303-Reduce Your Event Management Work By Half-Lab - 26

29 25. From the ribbon bar, click the Connect Activities Tool button 26. Drag a connector from the right of the Start of Workflow activity to the left of the first Join activity. Tip: Uncheck the box at the bottom of the Connector Properties dialog labeled Show Properties window when adding connectors to workflow 27. Draw connectors as follows: Join to Find CPU Utilization Job Join to Find Memory Utilization Job Find CPU Utilization Job to Find CPU Performance Data Find Memory Utilization Job to Find Memory Performance Data Find CPU Performance Data to Generate CPU Chart Find Memory Performance Data to Generate Memory Chart Generate CPU Chart to Join2 ATT303-Reduce Your Event Management Work By Half-Lab - 27

30 Generate Memory Chart to Join2 28. From the ribbon bar, click the Selection Tool ATT303-Reduce Your Event Management Work By Half-Lab - 28

31 Lab 4: Adding Work Item Attributes 1. Double-click on any blank area of the workflow design grid to open the Workflow Properties dialog, the switch to the Work Item tab. 2. Click the Add button to open the New Custom Work Item Attribute dialog. 3. Change the values as follows: ATT303-Reduce Your Event Management Work By Half-Lab - 29

32 Name: AffectedService Display Name: Affected Service Read Only in Operations Console: Checked Description: The Windows service reported down. Value: Choose the check box on the right side of the field to Use Input Builder, then click the wrench icon o Click New Input Element, and then click Event Attribute o Select AppManager.Event, and then click OK. o Click <Event Attribute>, and then click Event Detail Message. ATT303-Reduce Your Event Management Work By Half-Lab - 30

33 o On the Attribute Qualifiers tab, select the AppManager XML Data Selector check box and then click the more information [ ] button in the Value column. o In the Data Selector, specify Table 1, Column 1, Row 2, then click OK. o On the Qualifiers for Multiple Events tab, select Attribute Value of First Set, and then click OK three times to return to the Workflow Properties dialog. 4. On the Work Item tab, click the Add button to add a Custom Work Item Attribute. ATT303-Reduce Your Event Management Work By Half-Lab - 31

34 5. Fill in the Custom Work Item Attribute details as follows: Name: AdminAddress (note: no space allowed here) Display Name: Administrator Address (note: spaces are allowed here) Type: String Value: Description: address of the System Administrator Hidden in Operations Console: Checked 6. Click OK. 7. On the Work Item tab, click the Add button to add a Custom Work Item Attribute. 8. Fill in the Custom Work Item Attribute details as follows: Name: AegisAddress (note: no space allowed here) Display Name: Aegis Address (note: spaces are allowed here) Type: String Value: aegis@itpa.local Description: address of the Aegis account Hidden in Operations Console: Checked 9. Click OK twice to close the Workflow Properties dialog. ATT303-Reduce Your Event Management Work By Half-Lab - 32

35 Lab 5: Notifying an Administrator 1. From the and User Interaction activity library, drag the Send activity below the first Join activity 2. Change the Name to Notify Administrator of Event then switch to the Values tab. 3. Check the Use Input Builder box next to From, then click the wrench and add the following New Input Element then click OK Work Item Attribute: Aegis Address ATT303-Reduce Your Event Management Work By Half-Lab - 33

36 4. Check the Use Input Builder box next to To, then click the wrench and add the following New Input Element then click OK Work Item Attribute: Administrator Address 5. Check the Use Input Builder box next to Subject, then click the wrench and add the following New Input Elements then click OK Free Form Text: The (note: Include a space at the end of the word) Work Item Attribute: Affected Service Free Form Text: was detected down (note: Include a space prior to was ) 6. Uncheck Append Work Item ID to Subject 7. Check the Use Input Builder box next to Body, then click the wrench and add the following New Input Elements then click OK ATT303-Reduce Your Event Management Work By Half-Lab - 34

37 Free Form Text: The (note: Include a space at the end of the word) Work Item Attribute: Affected Service Free Form Text: was detected down. (note: Include a space prior to was ) New Line New Line Free Form Text: Please visit the Aegis Operations Console for more information. New Line New Line 8. Click OK to close the activity ATT303-Reduce Your Event Management Work By Half-Lab - 35

38 Lab 6: Making a Decision 1. From the and User Interaction activity library, drag the Collect Input from User activity to the right of the Notify Administrator of Event activity. 2. On the General tab, change the name of the activity Name: Approve Service Restart ATT303-Reduce Your Event Management Work By Half-Lab - 36

39 3. On the Input Form tab, click the Edit button 4. On the Welcome page, click the Next button 5. On the General page, click the checkbox next to Title then click the wrench. Add the following New Input Elements then click OK Free Form Text: Restart (note: include a space after the word) Work Item Attribute: Affected Service Free Form Text:? 6. Click the checkbox next to Description then click the wrench. Add the following New Input Elements then click OK Free Form Text: The (note: include a space after the word) Work Item Attribute: Affected Service ATT303-Reduce Your Event Management Work By Half-Lab - 37

40 Free Form Text: service has stopped unexpectedly. (note: include a space before the first word) New Line New Line Free Form Text: Please review the diagnostic information on the Supporting Analysis tab. New Line New Line Free Form Text: Would you like to restart the service? 7. Click Next twice 8. On the Form Buttons page, with the submit button selected, click the Edit button 9. On the Button Properties dialog, change the Parameter Name and Value as follows then click the OK button Parameter Name: Yes Value: Yes ATT303-Reduce Your Event Management Work By Half-Lab - 38

41 10. Click the Add button and select Submit 11. On the Button Properties dialog, change the Parameter Name and Value as follows then click the OK button Parameter Name: No Value: No 12. Select the second Submit button and click the Move Up button ATT303-Reduce Your Event Management Work By Half-Lab - 39

42 13. Click the Finish button then OK to close the activity ATT303-Reduce Your Event Management Work By Half-Lab - 40

43 Lab 7: Remediating the condition 1. From the NetIQ AppManager activity library, drag the Create Job activity below the Notify Administrator of Event activity 2. On the General tab, change the Name of the activity Name: Restart Service 3. On the Knowledge Script tab, click the checkbox next to Computers, click the wrench then add the following New Input Element Event Attribute: AppManager.Event.Computer Name 4. On the Knowledge Script drop-down, select the AppManager Repository AEGISVM##QDB ATT303-Reduce Your Event Management Work By Half-Lab - 41

44 5. Click the + next to NTAdmin and select RestartService and click OK 6. Uncheck the box next to Create event if service is disabled? 7. Uncheck the box next to Create event if service is shut down normally? 8. Check the Use Input Builder box next to Service list, click the wrench and add the following New Input Element Work Item Attribute: Affected Service ATT303-Reduce Your Event Management Work By Half-Lab - 42

45 9. On the Schedule tab, select Run Once then click OK to close the activity. ATT303-Reduce Your Event Management Work By Half-Lab - 43

46 10. From the NetIQ AppManager activity library, drag the Wait for Job to Finish activity to the right of the Restart Service activity 11. On the General tab, change the Name of the activity Name: Wait for Service to Restart 12. On the Message tab, click the funnel next to Event Filter ATT303-Reduce Your Event Management Work By Half-Lab - 44

47 13. Click the <event attribute> link and choose AppManager Job ID then click OK 14. Click the <event attribute value> link and choose Use Input Builder 15. On the Input Builder dialog, click the New Input Element button and choose Activity Output Parameter 16. Expand Restart Service and select AppManager Job ID ATT303-Reduce Your Event Management Work By Half-Lab - 45

48 17. On the Output Parameter Qualifiers tab, select the Use Word checkbox then click the [ ] button 18. Check the box next to Use word # and click the OK button five times to close the activity 19. From the NetIQ AppManager activity library, drag the Find Events activity to the right of the Wait for Service to Restart activity 20. On the General tab, change the Name of the activity Name: Find Restart Event 21. On the Query tab, on the Event tab click the Create Filter button ATT303-Reduce Your Event Management Work By Half-Lab - 46

49 22. Click the <attribute> link and select AppManager Job ID 23. Click the <attribute value> link and choose Use Input Builder. Add the following New Input Element and click OK four times to close the activity. Activity Output Parameter: Restart Service.AppManager Job ID 24. From the NetIQ AppManager activity library, drag the Get Event Details activity to the right of the Find Restart Event activity ATT303-Reduce Your Event Management Work By Half-Lab - 47

50 25. On the Values tab, check the Use Input Builder box next to Event Locator then click the wrench. Add the following New Input Element. Activity Output Parameter: Find Restart Event.Object Locators.Use Word Click OK twice to close the activity. ATT303-Reduce Your Event Management Work By Half-Lab - 48

51 Lab 8: Reporting results to the Administrator 1. From the and User Interaction activity library, drag the Send activity to the right and above the Get Event Details activity 2. On the General tab, change the Name of the activity Name: Send Restart Succeeded 3. On the Values tab, check the Use Input Builder box next to From, then click the wrench. Add the following New Input Element then click OK twice. Work Item Attribute: Aegis Address ATT303-Reduce Your Event Management Work By Half-Lab - 49

52 4. Check the Use Input Builder box next to To, then click the wrench. Add the following New Input Element then click OK twice. Work Item Attribute: Administrator Address 5. Check the Use Input Builder box next to Subject, then click the wrench. Add the following New Input Elements then click OK to return to the Activity Properties. Free Form Text: The (Note: include a space after the word) Work Item Attribute: Affected Service Free From Text: service was restarted successfully (Note: include a space prior to the text) 6. Uncheck Append Work Item ID to Subject 7. Check the Use Input Builder box next to Body, then click the wrench. Add the following New Input Elements then click OK to close the activity. Free Form Text: The (Note: include a space after the word) Work Item Attribute: Affected Service Free Form Text: service was restarted successfully. (Note: include a space prior to the text) New Line New Line Free Form Text: Please visit the Aegis Operations Console for more information. New Line New Line ATT303-Reduce Your Event Management Work By Half-Lab - 50

53 8. From the and User Interaction activity library, drag the Send activity to the right and below the Get Event Details activity 9. On the General tab, change the Name of the activity Name: Send Restart Failed 10. On the Values tab, check the Use Input Builder box next to From, then click the wrench. Add the following New Input Element then click OK twice. Work Item Attribute: Aegis Address 11. Check the Use Input Builder box next to To, then click the wrench. Add the following New Input Element then click OK twice. Work Item Attribute: Administrator Address 12. Check the Use Input Builder box next to Subject, then click the wrench. Add the following New Input Elements then click OK to return to the Activity Properties dialog. Free Form Text: The (Note: include a space after the word) Work Item Attribute: Affected Service Free From Text: service failed to restart (Note: include a space prior to the text) ATT303-Reduce Your Event Management Work By Half-Lab - 51

54 13. Uncheck Append Work Item ID to Subject 14. Check the Use Input Builder box next to Body, then click the wrench. Add the following New Input Elements then click OK to close the activity. Free Form Text: The (Note: include a space after the word) Work Item Attribute: Affected Service Free Form Text: service failed to restart. (Note: include a space prior to the text) New Line New Line Free Form Text: Please visit the Aegis Operations Console for more information. New Line New Line 15. From the Basic Workflow Control activity library, drag the End of Workflow activity to the right of the Get Event Details activity. Click OK to close the activity. ATT303-Reduce Your Event Management Work By Half-Lab - 52

55 16. Add the following connectors Join2 to Notify Administrator of Event Notify Administrator of Event to Approve Service Restart Approve Service Restart to Restart Service Approve Service Restart to End of Workflow Restart Service to Wait for Service to Restart Wait for Service to Restart to Find Restart Event Find Restart Event to Get Event Details Get Event Details to Send Restart Succeeded Get Event Details to Send Restart Failed Send Restart Succeeded to End of Workflow Send Restart Failed to End of Workflow 17. From the ribbon bar, click the Selection Tool ATT303-Reduce Your Event Management Work By Half-Lab - 53

56 Lab 9: Conditional Connectors 1. Double-click the connector between the Start of Workflow activity and the Join activity 2. Change the Name of the connector Name: Initial Event 3. Click the Only traverse this connector when the following conditions are met radio button 4. Click the Create Expression button 5. Click the New Template button then click Parameter Expression 6. Click the <parameter name> link, expand Start of Workflow and select Trigger Activation Reason then click OK ATT303-Reduce Your Event Management Work By Half-Lab - 54

57 7. Click the <parameter value> link and select Enter Simple Value ATT303-Reduce Your Event Management Work By Half-Lab - 55

58 8. Select Initiated then click OK twice to close the connector properties 9. Double-click the connector between the Approve Service Restart activity and the End of Workflow activity 10. Change the Name of the connector Name: Restart Not Approved 11. Click the Only traverse this connector when the following conditions are met radio button then click the Create Expression button 12. Click the New Template button then click the Parameter Expression 13. Click the <parameter name> link, expand Approve Service Restart and select Submit Value then click OK 14. Click the <parameter value> link and select Enter Simple Value. Then select No and click OK three times to close the connector properties. ATT303-Reduce Your Event Management Work By Half-Lab - 56

59 15. Double-click the connector between the Approve Service Restart activity and the Restart Service activity 16. Change the Name of the connector Name: Restart Approved 17. Click the Only traverse this connector when the following conditions are met radio button then click the Create Expression button 18. Click the New Template button then click the Parameter Expression 19. Click the <parameter name> link, expand Approve Service Restart and select Submit Value then click OK 20. Click the <parameter value> link and select Enter Simple Value. Then select Yes and click OK three times to close the connector properties. 21. Double-click the connector between the Get Event Details activity and the Send Restart Succeeded activity 22. Click the Only traverse this connector when the following conditions are met radio button then click the Create Expression button 23. Click the New Template button then click the Parameter Expression 24. Click the <parameter name> link, expand Get Event Details and select AppManager Event Severity Number then click OK ATT303-Reduce Your Event Management Work By Half-Lab - 57

60 25. Click the <parameter value> link and select Enter Simple Value. Enter 25 and click OK twice to close the Expression Editor. 26. Uncheck the box next to Show Label then click OK to close the connector properties. 27. Double-click the connector between the Get Event Details activity and the Send Restart Succeeded activity 28. Click the Only traverse this connector when the following conditions are met radio button then click the Create Expression button 29. Click the New Template button then click the Parameter Expression 30. Click the <parameter name> link, expand Get Event Details and select AppManager Event Severity Number then click OK 31. Click the <parameter value> link and select Enter Simple Value. Enter 5 and click OK twice to close the Expression Editor. 32. Uncheck the box next to Show Label then click OK to close the connector properties. ATT303-Reduce Your Event Management Work By Half-Lab - 58

61 ATT303-Reduce Your Event Management Work By Half-Lab - 59

62 Lab 10: Executing the process 1. From the Ribbon, save the workflow then close the workflow editor. 2. In the Aegis Configuration Console, on the Workflow Revisions tab, right-click on Revision 1 and select Put Revision into Production 3. Click OK to put the revision into production ATT303-Reduce Your Event Management Work By Half-Lab - 60

63 4. Within the VM, from the Services control panel, stop the Print Spooler service 5. Open Mozilla Thunderbird and click the Get Mail button until you receive an ATT303-Reduce Your Event Management Work By Half-Lab - 61

64 6. Click on the link in the to visit the Aegis Operations Console 7. Enter the username and password, then click the Log In button 8. Click the Supporting Analysis link on the left to view diagnostic information ATT303-Reduce Your Event Management Work By Half-Lab - 62

65 9. Browse the charts 10. When ready, click the Approve Service Restart icon under Current Activity 11. Click Yes to restart the Print Spooler service. ATT303-Reduce Your Event Management Work By Half-Lab - 63

66 12. Return to Mozilla Thunderbird and wait for a results ATT303-Reduce Your Event Management Work By Half-Lab - 64