Data Server Administration Guide

Transcription

1 IBM StoredIQ Platform Version Data Serer Administration Guide SC

2

3 IBM StoredIQ Platform Version Data Serer Administration Guide SC

4 Note Before using this information and the product it supports, read the information in Notices on page 161. This edition applies to Version of (product number 5725-M86) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 2001, US Goernment Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

5 Contents How to send your comments..... Contacting IBM ii Contacting IBM StoredIQ customer support ix Understanding IBM StoredIQ Platform distributed architecture What is IBM StoredIQ Administrator? What is IBM StoredIQ Data Workbench? Supporting IBM StoredIQ Data Workbench... 4 What is IBM StoredIQ ediscoery? What is IBM StoredIQ Data Script? What Is IBM StoredIQ Policy Manager Understanding the user interface Naigating within IBM StoredIQ Platform Administration Folders Audit Web interface icons and buttons Performing IBM StoredIQ Platform administration Checking IBM StoredIQ Platform's status Restarting and rebooting IBM StoredIQ Platform.. 15 Performing system configurations Configuring IBM StoredIQ Platform Configuring system configuration options Configuring DA Gateway settings Configuring network settings Configuring mail settings Configuring SNMP settings Configuring notifications from IBM StoredIQ Platform Setting the system time and date Setting system backup configurations Managing users Logging in and out of the system Changing the administratie account Creating users Editing users Deleting a user's account Locking a user's account Unlocking a user's account Importing cncrypted NSF files from Lotus Notes 25 Configuring application configuration options Configuring harester settings Optical character recognition processing Configuring full-text index settings Specifying data object types Configuring audit settings Configuring hash settings Configuring desktop settings Downloading the IBM Desktop Data Collector installer from the application Upgrading the IBM Desktop Data Collector agent 31 Using the Encrypted File System recoery agent 32 Creating olumes and data sources.. 33 Volume indexing Configuring serer platforms Windows Share (CIFS) NFS Exchange serers Enabling integrated Windows authentication on Exchange serers Improing performance for IIS 6.0 and Exchange SharePoint Priileges required by user account Alternate-access mappings Documentum Enterprise Vault Discoery Accelerator Discoery Accelerator permissions Configuring security settings for Enterprise Vault serers Configuring Enterprise Vault NewsGator Configuring retention serers Creating Centera pools Configuring the Dell DX Object Storage Platform 41 Configuring Enterprise Vault (retention olumes) 42 Enabling remote DCOM Allowing DCOM traffic through the Windows firewall Configuring IBM Information Archie retention serers NetApp SnapLock Hitachi HCAP configuration requirements Configuring FileNet Configuring Chatter messages Creating olumes Creating primary olumes Configuring Exchange 2007 Client Access Serer support Adding Domino as a primary olume Special note: adding SharePoint olumes.. 54 Configuring primary olumes using Enterprise Vault About Editing Volume Definitions Creating retention olumes Adding a retention olume Configuring Enterprise Vault retention olumes Copyright IBM Corp. 2001, 2013 iii

6 Creating discoery export olumes Creating system olumes Exporting and importing olume data Volume data export to a system olume Volume data import to a system olume Deleting olumes Policy limitations for olume types Haresting data Understanding Harests Haresting properties and libraries Performing a lightweight harest Lightweight harest parameters Determining olume configuration settings.. 70 Determining harester configuration settings 71 Determining full-text settings Determining hash settings Configuring jobs Types of IBM StoredIQ Platform jobs Working with jobs Creating a job Creating a job to discoer retention olumes.. 75 Editing a job Starting a job Saing a job Running a predefined job Deleting a job Monitoring processing Deleting a olume cache Determining if a harest is stuck Utilizing desktop collection Desktop collection processes IBM Desktop Data Collector client installation.. 81 IBM Desktop Data Collector installation methods 82 Installing the IBM Desktop Data Collector in stealth mode Configuring IBM Desktop Data Collector collection 83 Using the delete policy with the IBM Desktop Data Collector: special notes Using Folders Understanding folder types Creating a folder Deleting a folder Moing a folder Renaming a folder Copying items to different folders Saing items into different folders Filtering items within the folder iew Using audits and logs Understanding harest audits Viewing harest audits Downloading harest list details Understanding import audits Viewing olume import audit details Understanding eent logs Working with eent logs Viewing eent logs Subscribing to an eent Clearing the current eent log Downloading an eent log Understanding policy audits Viewing policy audit details Viewing a policy audit by name Viewing a policy audit by olume Viewing a policy audit by time Viewing a policy audit by discoery export.. 97 Understanding the search audit feature Saing results from an audit Policy audit messages Appendix A. Supported file types Supported file types by name Supported file types by category SharePoint attributes Appendix B. Supported serer platforms and protocols Appendix C. Eent log messages ERROR eent log messages INFO eent log messages WARN eent log messages Notices Index i Administration Guide

7 How to send your comments Your feedback helps IBM to proide quality information. Please share any comments that you hae about this information or other documentation that IBM Software Deelopment ships with its products. You can use any of the following methods to proide comments: Add comments by using the Comments pane at the bottom of eery page in the information center. Send your comments by clicking the Feedback link at the bottom of any topic in the information center. Send your comments by using the online readers' comment form at Send your comments by to Include the name of the product, the ersion number of the product, and the name and publication number of the information (if applicable). If you are commenting on specific text, please include the location of the text (for example, a title, a table number, or a page number). Copyright IBM Corp. 2001, 2013

8 i Administration Guide

9 Contacting IBM To contact IBM customer serice in the United States or Canada, call IBM-SERV ( ). To learn about aailable serice options, call one of the following numbers: In the United States: In Canada: For more information about how to contact IBM, see the Contact IBM web site at Copyright IBM Corp. 2001, 2013 ii

10 iii Administration Guide

11 Contacting IBM StoredIQ customer support For IBM StoredIQ technical support or to learn about aailable serice options, contact IBM StoredIQ customer support at this phone number: To IBM StoredIQ customer support, use this address: For more information about how to contact IBM, see the Contact IBM web site at Copyright IBM Corp. 2001, 2013 ix

12 x Administration Guide

13 Understanding IBM StoredIQ Platform distributed architecture Visualizing IBM StoredIQ Platform distributed architecture, its functions, and how the different components work together is key to understanding how the system works. IBM StoredIQ Platform Data Serer IBM StoredIQ Platform Data Serer is an inaluable tool in helping you to truly understand your company's data landscape. Using IBM StoredIQ Platform Data Serer, all unstructured data in a company's enterprise network is indexed. Indexing of unstructured data allows you to gain information about it. By indexing this data, you gain information about unstructured data such as file size, file data types, file owners. IBM StoredIQ Administrator IBM StoredIQ Administrator monitors and manages the IBM StoredIQ Administrator distributed infrastructure at a customer site. IBM StoredIQ Administrator sits between the IBM StoredIQ Platform interface and the applications and facilitates the transfer and communication of information. The IBM StoredIQ Platform Administrator understands and manages IBM StoredIQ Platform concepts such as olumes, indexes, harests, and configurations. At the same time, the Administrator is also concerned with application concerns such as infoset lifecycle and creation, data serer and olume configuration, and action and target set management. To this end, the Administrator is diided into two sections, platform and application, so Administrators hae a clear place to go in order to accomplish a task. IBM StoredIQ Data Workbench IBM StoredIQ Data Workbench is the tool that allows you to isualize this indexed data, helping you to identify potential red-flag issues, to know how much data you hae on different types of serers, and to alert people about potentially interesting or useful data. IBM StoredIQ Data Workbench helps you to ensure that your company's data is an asset, not a liability. IBM StoredIQ ediscoery IBM StoredIQ ediscoery is integral to the ediscoery process, helping you to discoer, identify, refine, presere, and collect data that is releant to legal matters. By using IBM StoredIQ ediscoery, you can perform ediscoery work more efficiently while ensuring that you'e captured the proper data. IBM StoredIQ Data Script IBM StoredIQ Data Script enables automated execution within IBM StoredIQ Platform, allowing you to script, automate, and monitor processes that would normally be a manual process run within IBM StoredIQ Data Workbench. IBM StoredIQ Data Script focuses on repeatable, understood, and approed processes for the purposes of culling and refining data in an approed manner. Copyright IBM Corp. 2001,

14 IBM StoredIQ Policy Manager IBM StoredIQ Policy Manager allows you to act on your data in an automatic fashion at scale, executing policies that affect data objects without requiring reiew. What is IBM StoredIQ Administrator? IBM StoredIQ Administrator helps you to manage global assets common to the distributed infrastructure behind IBM StoredIQ Platform applications. IBM StoredIQ Administrator proides at-a-glance understanding of the different issues that can crop up in the IBM StoredIQ Platform enironment. These iews are unique to the IBM StoredIQ Administrator application as they proide an oeriew of how the system is running, allow access to arious pieces of information that are being shared across applications or allow for the management of resources in a centralized manner. The Administrator is the person responsible for managing the IBM StoredIQ Platform. This indiidual has strong understanding of data sources, indexes, data serers, jobs, infosets, and actions. This list proides an oeriew as to how IBM StoredIQ Administrator works: Viewing data serers and olumes Using IBM StoredIQ Administrator, the Administrator can identify what data serers are deployed, their location, what data is being managed, and the status of each data serer in the system. Volume management is a central component of IBM StoredIQ Platform. IBM StoredIQ Administrator also allows the Administrator to see what olumes are currently under management, which data serer is responsible for that olume, the state of the olume after indexing, and the amount and size of information that is contained by each olume. Administrators can also add olumes to data serers through this interface. Creating system infosets System infosets that use only specific indexed olumes can be created and managed within IBM StoredIQ Administrator. Although infosets are a core component of IBM StoredIQ Data Workbench, system infosets are created as a shortcut for users in IBM StoredIQ Administrator. Managing users The user management area allows Administrators to create users and manage users' access to the arious IBM StoredIQ applications. Configuring and managing actions An action is any process that is taken upon the data that is represented by the indexes. Actions are run by data serers on indexed data objects. Any errors or warnings that are generated as a result of an action are recorded as exceptions in IBM StoredIQ Data Workbench. Note: Actions can be created within IBM StoredIQ Administrator and then made aailable to otheribm StoredIQ applications such as IBM StoredIQ Data Workbench. Managing target sets Proides an interface that allows the user to set the wanted targets for specific actions that require a destination olume for their actions. Managing concepts This feature allows you to relate business concepts to indexed data. Viewing data serers and adding olumes Creating system infosets Managing users 2 Administration Guide

15 Configuring and managing actions Managing target sets Managing concepts What is IBM StoredIQ Data Workbench? This section proides a high-leel explanation of what IBM StoredIQ Data Workbench is and its potential uses. You hae a big data problem: SharePoint sites, wikis, , files, blogs, discussion threads, and attachments. Your company's information is its most aluable and potentially most dangerous asset. Big data is a perasie problem, not a one-time occurrence. Most companies willingly admit that big data is problematic, but quite often, they don't een know what problems they hae. This is one instance where out of sight definitely does not mean out of mind. Big data is all about the unknown, but the unknown cannot be off limits. Plausible deniability is a risky bet. IBM StoredIQ Data Workbench can help you learn about your data, to help you make educated decisions with your most aluable asset, and can help you turn your company's most dangerous risk into its most aluable asset. IBM StoredIQ Data Workbench is a data isualization and management tool that helps you to actiely manage your company's data. IBM StoredIQ Data Workbench helps you to determine how much data you hae, where it resides, who owns it, when it was last utilized, and so on. Then, once you hae a clear understanding of your company's data landscape, IBM StoredIQ Data Workbench helps you take control of and make informed decisions about your data and act on that knowledge by copying, copying to retention, or performing a discoery export. That once-risky data is now a legitimate company asset. Here are just some of the ways you could use IBM StoredIQ Data Workbench. Let's say that you need to find all company sent from or receied by Eileen Sideways (esideways@thecompany.com). You can use IBM StoredIQ Data Workbench to find all and then copy that data to a predefined repository. You could also use IBM StoredIQ Data Workbench to find all of the esideways@thecompany.com that occurred between specific dates and then make that aailable for reiew. As an administrator, you'd like to rid your networks and storage of unused data. You can use IBM StoredIQ Data Workbench to find all files that hae not been modified in more than fie years. You would like to find all image files created in Not only can IBM StoredIQ Data Workbench find all image files created in 2007, it can also tell you how much space they occupy on your network. A user needs to understand how data regarding Windows is being retained. Using IBM StoredIQ Data Workbench, you can proide that user with a isual oeriew of the number of objects retained and a breakdown of files per data source. Additionally, you can apply oerlays to show the user if those files contain forbidden information such as credit-card numbers or Social Security numbers. Understanding IBM StoredIQ Platform distributed architecture on page 1 Understanding IBM StoredIQ Platform distributed architecture 3

16 Supporting IBM StoredIQ Data Workbench IBM StoredIQ Platform is an inaluable tool in helping you to truly understand your company's data landscape. Using IBM StoredIQ Platform data serer, all unstructured data in a company's enterprise network is indexed. Indexing of unstructured data allows you to gain information about it. By indexing this data, you gain information about unstructured data such as file size, file data types, file owners, and so on. IBM StoredIQ Data Workbench is the tool that allows you to isualize this indexed data, helping you to identify potential red-flag issues, to know how much data you hae on different serers, and to alert people about potentially interesting or useful data. IBM StoredIQ Data Workbench helps you to ensure that your company's data is an asset, not a liability. What is IBM StoredIQ ediscoery? This section proides a high-leel explanation of what IBM StoredIQ ediscoery is, by whom it will be used, prerequistes, and its potential uses. IBM StoredIQ ediscoery is an end-user application that helps legal users during the initial phases of the ediscoery process. By helping you to capture needed electronic data, you can use IBM StoredIQ ediscoery to communicate easily with other users regarding the status and reiew process of work being done. IBM StoredIQ ediscoery does not drie the ediscoery process, but instead helps legal users to control and communicate those processes more effectiely. IBM StoredIQ ediscoery helps to address the left side of the Electronic Discoery Reference Model, as shown below. Here are just some of the ways you could use IBM StoredIQ ediscoery. Let's say that you need to find all electronic information regarding an upcoming personal-injury lawsuit. You can use IBM StoredIQ ediscoery to create a matter for the suit, and then create boxes to contain and reports regarding the case. As a legal user, you'd like to see the status of all currently actie matters. You can use the Matter Dashboard to isualize the different matters' states. 4 Administration Guide

17 As a data expert, you know that you need to respond to users in a timely fashion. Using IBM StoredIQ ediscoery, people can you directly from the application regarding a matter's questions. Proactie ediscoery consists of identifying and cataloging data or types of data that may eentually be responsie to legal matters, collecting and retaining the data, then producing that data in a way that matches accepted/required legal practices. Within IBM StoredIQ ediscoery, the user is a non-technical end user who needs to obtain certain pieces of data in order to complete a legal process. The IBM StoredIQ ediscoery user has the knowledge of the information or parameters for what kinds of data they want, but does not always hae knowledge of how to obtain that data. Before using IBM StoredIQ ediscoery, ensure that prerequisites are met: The IBM StoredIQ Platform must be deployed, configured, and ready for use. IBM StoredIQ ediscoery is dependent upon other IBM StoredIQ applications such as IBM StoredIQ Data Workbench and IBM StoredIQ Administrator. Understanding IBM StoredIQ Platform distributed architecture on page 1 What is IBM StoredIQ Data Script? IBM StoredIQ Data Script enables automated execution, allowing you to script, automate, and monitor processes that would normally be a manual process run within IBM StoredIQ Data Workbench. IBM StoredIQ Data Script focuses on repeatable, understood, and approed processes for the purposes of culling and refining data in an approed manner. Through the IBM StoredIQ Data Script interface, you can monitor each of the steps as they are executed and then iew any defined outputs, such as reports, infosets, or exports that are generated as a result. By running IBM StoredIQ Data Workbench workflows, the user can reapply processes that hae been reiewed and approed to apply to a wide ariety of different data problems. Understanding IBM StoredIQ Platform distributed architecture on page 1 What Is IBM StoredIQ Policy Manager IBM StoredIQ Policy Manager enables policy execution at scale. IBM StoredIQ Policy Manager allows users to run mature policies and processes at scale across a wider range of data. What makes IBM StoredIQ Policy Manager so powerful is that it lets users define and execute systemwide policies, focusing on the execution of the process rather than understanding or reiewing affected data objects. Additionally, IBM StoredIQ Policy Manager's reports lets you record what actions were performed, when they were performed, and what data was affected by the policy's execution. IBM StoredIQ Policy Manager is an extremely powerful tool in managing your data effectiely. Understanding IBM StoredIQ Platform distributed architecture 5

18 6 Administration Guide

19 Understanding the user interface This section proides an introduction to the IBM StoredIQ Platform Web interface. It outlines the features within each tab and proides references to sections where you can find additional information on each topic. Naigating within IBM StoredIQ Platform Primary tabs and subtabs found within the user interface allow you to access data-serer functionality. Primary Tabs IBM StoredIQ Platform users perform most tasks using the Web interface. The menu bar at the top of the interface contains three primary tabs that are described in this table. This table describes the primary tabs. Name Description Administration Folders Audit Allows Administrators to perform arious configurations on these subtabs: Dashboard, Data Sources, and Configuration. Create folders and jobs; run jobs. Examine a comprehensie history of all harests, executed policies, imports, and eent logs. Web interface icons and buttons on page 9 Administration This topic proides descriptions of the Administration tab as well as its subtabs: Dashboard, Data Sources, and Configuration. Dashboard The Dashboard subtab proides an oeriew of the system s current, ongoing, and preious processes as well as its current status. This table describes Administrator-leel features and descriptions. Page refresh Today s job schedule Choose from 30-, 60-, or 90-second interals to refresh the page. View a list of jobs scheduled for that day with links to the job s summary. Copyright IBM Corp. 2001,

20 System summary Jobs in progress Harest statistics Eent log Appliance status View a summary of system details, including system data objects, contained data objects, olumes, and the dates of the last completed harest. View details of each job step as it is running, including estimated time to completion, aerage speed, total system and contained objects encountered, harest exceptions, and binary processing information. Reiew the performance oer the last hour for all harests. Reiew the last 500 eents or download the entire eent log for the current date or preious dates. Proides a status iew of the appliance. Reboot or restart the appliance through the about appliance link. View cache details for olumes and discoery exports. Data Sources The Data sources subtab is where Administrators define serers and olumes. These can be places that are indexed or copied to. A ariety of serer types and olumes can be configured for use in managing data. Administrators can add Enterprise Vault sites, Centera pools, Dell DX Storage Clusters, Celerra, NetApp, and FileNet serers through the Specify serers area. Volumes are configured and imported in the Specify olumes section. Configuration The Administrator configures system and application settings for IBM StoredIQ Platform through the Configuration subtab. Settings System DA Gateway settings Network settings Mail serer settings SNMP settings System time and date Manage users Lotus Notes user administration Description Configure the DA Gateway host or IP address. Configure the priate and public network interfaces. Configure what mail serer to use and how often to send . Configure Simple Network Management Protocol (SNMP) serers and communities. Set the system time and date on the appliance. Add, remoe and edit users. Add a Lotus Notes User. Application 8 Administration Guide

21 Settings Harester settings Full-text settings Data object types Audit settings Hash settings Desktop settings Description Set basic parameters and limits, data object extensions and directories to skip, and reasons to run binary processing. Set full-text search limits for length of word and numbers and edit stop words. See Configuring full-text index settings on page 28. Set the object types that appear in the disk use by data object type report. Configure how long and how many audits will be kept. Configure whether to compute a hash when haresting and which kind of hash. Configure the desktop collection serice. Creating olumes and data sources on page 33 Naigating within IBM StoredIQ Platform on page 7 Folders The Folders tab is where users create and manage application objects. Naigating within IBM StoredIQ Platform on page 7 Using Folders on page 85 Audit The audit feature allows you to reiew all actions taken using the data serer. Administrators can reiew harests and examine the results of actions. Using audits and logs on page 89 Web interface icons and buttons This section describe the icons and buttons used throughout IBM StoredIQ Platform Web interface. Understanding the user interface 9

22 IBM StoredIQ Platform icons and buttons These icons and buttons are seen within the IBM StoredIQ Platform dashboard. Icon or Button Name Description User account Inbox Help The User account icon accesses your user account, proides information regarding ersion and system times, and logs you out of the system. For more information, see Logging In and Out of the System. The inbox link allows you to access PDF audit reports. Clicking the Help icon loads IBM StoredIQ technical documentation in a separate browser window. By default, the technical documentation is loaded as HTML help. Folders icons and buttons The table describes the different icons and buttons seen within the Folders tab. Icon or Button Name Description New button Action button Job Folder The New button enables you to add jobs and folders. The Action button allows you to take action on Workspace objects, including the ability to moe, and delete jobs and folders. Jobs tasks such as haresting are either a step or a series of steps. For more information, see Types of IBM StoredIQ Platform Jobs. Folders are a container object that can be accessed and used by Administrators. For more information, see Using Folders. 10 Administration Guide

23 Icon or Button Name Description Folder Up Folders are a container object that can be accessed and used by Administrators. By default, you iew the contents of the Workspace folder; howeer, by clicking this icon, you moe to the parent folder in the structure. For more information, see Using Folders. Audit icons and buttons There are no specialized icons or buttons used on the Audit tab. Understanding the user interface on page 7 Understanding the user interface 11

24 12 Administration Guide

25 Performing IBM StoredIQ Platform administration This section proides procedural information regarding IBM StoredIQ Platform administration. Checking IBM StoredIQ Platform's status This topic proides procedural information regarding how to check IBM StoredIQ Platform's status. To check the status of IBM StoredIQ Platform: 1. Go to Administration > Dashboard > Appliance status. 2. Click About appliance to open the Appliance details page. The Appliance details page shows the following information: Node Harester processes Status Software ersion View details link 3. Click the View details link for the controller. This table defines appliance details data and describes the data proided for the node. Option View appliance details Application serices Description Shows software ersion and details of harester processes running on the controller for the appliance. Shows a list of all serices and current status, including: Serice the name of each serice on the appliance component PID the process ID associated with each serice Current memory (MB) the memory being used by each serice Total memory (MB) total memory being used by each serice and all child serices CPU percentage the percentage of CPU usage for each serice. This alue is zero when a serice is idle. Status the current status of each serice. Status messages include Running, Stopped, Error, Initializing, Unknown. Copyright IBM Corp. 2001,

26 Option System serices Description Shows a list of basic system information details and memory usage statistics. System information includes: System time current time on the appliance component GMT Offset the amount of ariance between the system time and GMT. Time up the period of time the appliance component has been running since the last reboot, in days, hours, minutes and seconds System processes the total number of processes running on the node Number of CPUs the number of CPUs in use on the component Load Aerage (1 Minute) the aerage load for system processes during a one-minute interal Load Aerage (5 Minutes) the aerage load for system processes during a fie-minute interal Load Aerage (10 Minutes) the aerage load for system processes during a ten-minute interal Memory details include: Total total physical memory on the appliance component In use how much physical memory is in use Free how much physical memory is free Cached amount of memory allocated to disk cache Buffered the amount of physical memory used for file buffers Swap total the total amount of swap space aailable (in use plus free) System serices Swap in use the total amount of swap space being used Swap free the total amount of swap space free Database Connections Configured Actie Idle Network interfaces Up or down status for each interface 14 Administration Guide

27 Option Storage Controller and compute node status Description Storage information for a controller includes: Volume Total Space Used space Percentage Indicator lights show component status: Green Running Yellow The node is functional but is in the process of rebuilding; performance may be degraded during this time. Note: The rebuild will progress faster if the system is not in use. Red not running Expand the node to obtain details of the appliance component by clicking the image. Performing IBM StoredIQ Platform administration on page 13 Restarting and rebooting IBM StoredIQ Platform This topic proides procedural information regarding how to restart and reboot the IBM StoredIQ Platform. Note: The Web application is temporarily unaailable if you restart or reboot. To restart serices or reboot IBM StoredIQ Platform: 1. On Administration > Dashboard > Appliance status. On the Appliance status page, you hae two options: Click the Controller link. Click About Appliance. 2. The Restart serices and Reboot buttons appear at the bottom of the window. These buttons are aailable on the View details page and on each of the tabs. Click either of these options: Restart serices to restart all system serices running on the node. Reboot to reboot the IBM StoredIQ Platform components. The Web application is temporarily unaailable if you restart or reboot. Performing IBM StoredIQ Platform administration on page 13 Performing IBM StoredIQ Platform administration 15

28 16 Administration Guide

29 Performing system configurations This section proides procedural information regarding system configurations. Related reference: Appendix B, Supported serer platforms and protocols, on page 129 Configuring IBM StoredIQ Platform This topic lists what an Administrator can configure from the Application and Network areas when configuring IBM StoredIQ Platform. The Configuration subtab (Administration > Configuration) is diided into System and Application sections. System Section In the System section, an Administrator can: Configure the DA gateway. For more information, see Configuring DA Gateway settings. View and modify network settings, including hostname, IP address, NIS domain membership, and use. See Configuring network settings. View and modify settings to enable the generation of notification messages. See Configuring mail settings. Configure SNMP serers and communities. See Configuring SNMP settings. Manage notifications for system and application eents. See Configuring notifications from IBM StoredIQ Platform on page 21. View and modify date and time settings for the IBM StoredIQ Platform. See Setting the system time and date. Setting backup configurations. See Setting system backup configurations on page 22. Manage users. See Managing Users. Upload Lotus Notes user ids so that encrypted NSF files can be imported into IBM StoredIQ Platform. See Importing Encrypted NSF Files from Lotus Notes. Application Section In the Application section, an Administrator can: Specify directory patterns to exclude during harests. See Configuring Harester Settings. Specify options for full-text indexing. See Configuring Full-text Index Settings. View, add, and edit known data object types. See Specifying Data Object Types. View and edit settings for policy audit expiration and remoal. See Configuring Audit Settings. Specify options for computing hash settings when haresting. See Configuring Hash Settings. Specify options to configure the desktop collection serice. See Configuring desktop settings on page 31. Copyright IBM Corp. 2001,

30 Configuring system configuration options This topic lists all System configuration options. Configuring application configuration options on page 25 Configuring IBM StoredIQ Platform on page 17 Performing system configurations on page 17 Configuring DA Gateway settings This topic proides procedural information regarding how to configure the DA Gateway. To configure DA Gateway settings: 1. Go to Administration > Configuration > System > DA Gateway Settings. 2. In the Host text box, enter the gateway host. For example, enter mgmt.example.com or Click OK. Serices must then be restarted. Configuring system configuration options Related tasks: Restarting and rebooting IBM StoredIQ Platform on page 15 Configuring network settings This topic proides procedural information regarding how to configure arious network settings. 1. Go to Administration > Configuration > System > Network settings. 2. Click Controller Settings. Set or modify the following options. Option Description Primary Network Interface IP type Set to stic or dynamic. If set to dynamic, the IP address, Netmask, and Default Gateway fields are disabled. IP address Enter the IP address if specifying the address manually. Netmask Enter the network mask of the IP address. Default gateway Enter the IP address of the default gateway. Hostname Enter the fully qualified domain name assigned to the appliance. Ethernet speed Select the Ethernet speed. Aailable ports Indicate the aailable ports. Separate network for file/ serers Specify the additional subnet for accessing file/ serers. Select this check box if you are using the Web application from one subnet and haresting from another subnet. 18 Administration Guide

31 A system restart is required for any primary network interface changes to take effect. See Restarting and Rebooting the Appliance. Option Description DNS Settings DNS search order Enter the DNS search order for multiple DNS serers. Nameserer 1 Set the IP address of the primary DNS serer for name resolution (required). Nameserer 2 Set the IP address of the secondary DNS serer for name resolution (optional). Nameserer 3 Set the IP address of the tertiary DNS serer for name resolution (optional). DNS settings take effect after they hae been saed. Changes to the serer's IP address take effect immediately. Because the serer has a new IP address, you must reflect this new address in the browser address line before continuing. 3. Click OK. 4. Click Serer name resolution. Set the following for the data serer: Windows Share (CIFS) file serer name resolution These settings take effect upon saing. Option Windows Share File Serer Name Resolution Description LMHOSTS Enter the IP hostname format. WINS Serer Enter the name of the WINS serer. NIS (for NFS) These settings take effect upon saing. Option Description NIS (for NFS) Use NIS Select this box to enable NIS to perform UID/GID to friendly name resolution in an NFS enironment. NIS Domain Specify the NIS domain. Broadcast for serer on local network Select this box if the NIS domain serer is located on the local network and can be discoered by broadcasting. This option does not work if the NIS domain serer is on another subnet. Specify NIS serer If not using broadcast, specify the IP address of the NIS domain serer here. Actie Directory These settings take effect upon saing. Option Actie Directory Description Actie Directory serer Enter the name of the Actie Directory serer. Doc broker settings (for Documentum) Performing system configurations 19

32 Option Description Doc Broker Settings (for Documentum) Enter Host name for doc broker. Documentum global registry: Registry name User Password 20 Administration Guide 5. Click OK. Configuring system configuration options on page 18 Configuring mail settings This topic proides procedural information regarding how to configure mail settings. To configure mail settings: 1. Go to Administration > Configuration > System > Mail Serer settings. 2. In Mail serer, enter the name of the SMTP mail serer. 3. In From address, enter a alid sender address. Some mail serers reject if the sender is inalid. A sender address also simplifies the process of filtering notifications based on the sender's Click OK to sae changes. Configuring system configuration options on page 18 Configuring SNMP settings You can both configure the system to make Object Identifier (OID) alues aailable to Simple Network Management Protocol (SNMP) client applications, as well as to receie status information or messages about system eents in a designated trap. For information about enironmental circumstances monitored by IBM StoredIQ Platform, see the table below. To configure SNMP settings: 1. Go to Administration > Configuration > System > SNMP settings. 2. To make OID alues aailable to SNMP client applications, in the Appliance Public MIB area: Select the Enabled check box to make the MIB aailable (that is, to open port 161 on the controller). In the Community field, enter the community string that the SNMP clients will use to connect to the SNMP serer. To iew the MIB, click Download Appliance MIB. This document proides the MIB definition, which can be proided to an SNMP client application. 3. To capture messages containing status information in the Trap destination area: In the Host field, enter the common name or IP address for the host. In the Port field, enter the port number. Port number 162 is the default. In the Community field, enter the SNMP community name. 4. To modify the frequency of notifications, complete these fields in the Enironmental trap deliery area: Send enironmental traps only eery minutes.

33 Send enironmental traps again after minutes. 5. Click OK. Enironmental traps monitored by IBM StoredIQ Platform are described in the table below. Option siqconsoleloglinetrap siqraidcontrollertrap siqraiddisktrap siqbbutrap siqcachebittrap siqnetworktrap siqdbconntrap siqfreememtrap siqswapusetrap siqcputrap siqtzmismatchtrap Description This is a straight conersion of a console log line into a trap. It uses these parameters: messagesource, messageid, seerity, messagetext. Sent when the RAID controller status is anything but normal. Refer to the MIB for status code information. It uses this parameter: nodenum. Sent when any attached raid disk's status is anything but OK. It uses this parameter: nodenum. Battery Backup Unit (BBU) error on the RAID controller detected. It uses this parameter: nodenum. Caching indicator for RAID array is off. It uses this parameter: nodenum. Network interface is not UP when it should be. It uses this parameter: nodenum. Deliered when the actie Postgres connection percentage exceeds an acceptable threshold. It uses this parameter: nodenum. Deliered when aailable memory falls too low. It uses this parameter: nodenum. Sent when swap use exceeds an acceptable threshold. Often indicates memory leakage. It uses this parameter: nodenum. Sent when CPU load aerages are too high. It uses this parameter: nodenum. Sent when a node s time zone offset does not match that of the controller. It uses this parameter: nodenum. Configuring system configuration options on page 18 Configuring notifications from IBM StoredIQ Platform You can configure the system to notify you using or SNMP when certain eents occur. For a list of eents that can be configured, see Eent Logs. To configure notifications from IBM StoredIQ Platform: 1. Go to Administration > Configuration > System > Manage notifications. 2. Click Create a notification. 3. In the Eent number: field, search for eents by clicking Browse or by typing the eent number or sample message into the field. 4. Select the eent leel by clicking the ERROR, WARN, orinfo link. Performing system configurations 21

34 5. Scroll through the list, and select each eent by clicking on it. The selected eents appear in the create notification window. To delete an eent, click the delete icon to the right of the eent. 6. In the Destination: field, select the method of notification: SNMP, or address, or both. If you choose address, enter one or more addresses in the address field. If you choose SNMP, the messages will be sent to the trap host identified in the SNMP settings window, with a trap type of siqconsoleloglinetrap. 7. Click OK. 8. To delete an item from the Manage notifications window, select the check box next to the eent, and then click Delete. You can also request a notification for a specific eent from the dashboard s eent log. Click the Subscribe link next to any error message and a prepopulated edit notification screen containing the eent is proided. Configuring system configuration options on page 18 Setting the system time and date This topic proides procedural information regarding how to set the system's time and date. Note: A system restart is required for any changes made to the system time and date. See Restarting and Rebooting the Appliance. To set the system time and date: 1. Go to Administration > Configuration > System > System time and date. 2. Enter the current date and time. 3. Select the appropriate time zone for your location. 4. Enable Use NTP to set system time to use an NTP serer to automatically set the system date and time for the data serer. If NTP is used to set the system time, then the time and date fields set automatically. Howeer, you do need to specify the time zone. 5. Enter the name or IP address of the NTP serer. 6. Click OK to sae changes. Configuring system configuration options on page 18 Setting system backup configurations To prepare for disaster recoery, you can back up the configuration of a data serer to a gateway. This will back up olume definitions, discoery export records, and data-serer settings. This will not back up infosets, data maps, or indexes. The gateway must be manually configured to support this backup. For additional information, configure the gateway in the util menu. This can done by contacting your serice representatie. To initiate the run-configuration back up: 1. Go to Administration > Configuration > System > Backup configuration. 2. Press Start backup. To better understand this button and its functionality, please contact your serice representatie. 22 Administration Guide

35 Configuring system configuration options on page 18 Related reference: Contacting IBM StoredIQ customer support on page ix Managing users When managing users, you can log in and out of the system and perform arious account administration tasks. Configuring system configuration options on page 18 Logging in and out of the system The system comes with a default administratie account named admin, the default password for which is admin. For security purposes, IBM StoredIQ Platform recommends that this password be changed as soon as possible. To log into or log out of the Web application: 1. Open a browser and in the address line, enter the URL for your system. 2. On the Login page, enter admin for the address and admin for the password the first time you log in. 3. Click Log In to enter the system. Note: Database Compactor If someone tries to log in while the appliance is performing database maintenance, the Administrator can oerride the maintenance procedure and use the system. For more information, see Types of IBM StoredIQ Platform Jobs. 4. To log out of the application, click in the upper right-hand corner, and then click the Log out link. Managing users Changing the administratie account To change the admin account: 1. On the Administration > Configuration tab, click Manage users. 2. From the list, select The Administrator account, and then select Change the admin password. 3. Enter a new password, and then click OK to sae the change. Administering Accounts Managing users Creating users To create a user: 1. Go to Administration > Configuration > Manage users, and then click Create new user. 2. In the First name field, enter the user's first name. 3. In the Last name field, enter the user's last name. 4. In the address field, enter the user's address. 5. For Authentication, select Actie Directory or Local. Performing system configurations 23

36 6. In the Actie Directory principal, enter the name of the Actie Directory principal. 7. To receie Notification of reports by , select either Yes or No. 8. Select the Administrator button to select the Role. 9. Select the View data objects in the iewer check box if you would like to see data objects in the iewer. 10. Click OK to create the user. Managing users on page 23 Editing users To edit a user: 1. Go to Administration > Configuration > Manage users, and then click the name of the user that you would like to edit. 2. Click Edit User and edit the fields as needed. 3. Click OK to sae your changes. Managing users on page 23 Deleting a user's account To delete a user account: 1. Go to Administration > Configuration > Manage users, and then click the name of the user that you would like to delete. 2. Click Delete, and then click OK. Administering Accounts Managing users on page 23 Locking a user's account To lock a user account: 1. On the Administration > Configuration page, click Manage users. 2. In the list, select the user name of the account you wish to lock. 3. Click Lock user account to disable the account. A padlock icon appears next to the account name in the list, indicating that the account is now locked. The user cannot log in to the account while it is locked. Administering Accounts Managing users on page 23 Unlocking a user's account To unlock a user account: 1. On the Administration > Configuration page, click Manage users. 2. In the list, select the user name of the account you wish to unlock. 3. Click Unlock account to re-enable the account. Administering Accounts 24 Administration Guide

37 Managing users on page 23 Importing cncrypted NSF files from Lotus Notes IBM StoredIQ Platform can decrypt, import, and process encrypted NSF files from IBM Lotus Domino 7. The feature works by comparing a list of user.id/key pairs that hae been imported into the system with the key alues that lock each encrypted container or . When the correct match is found, the file is unlocked using the key. Once the s or containers hae been unlocked, IBM StoredIQ Platform analyzes and processes them in the usual fashion. This topic proides procedural information regarding how to import encrypted NSF files from IBM Lotus Notes. These use cases are supported: Multiple unencrypted s contained within a journaling database that has been encrypted with a single user.id key Multiple unencrypted s contained in an encrypted NSF file Multiple encrypted s contained within an unencrypted NSF file Multiple encrypted s, using the same or different user.id keys, contained in an encrypted NSF file Encrypted s from within a journaling database To import encrypted NSF files from IBM Lotus Notes: 1. On the primary data serer, go to Administration > Configuration > Lotus Notes user administration. 2. Click Upload a Lotus user ID file. a. In the dialog that appears, click Browse, and naigate to a user file. b. In the Lotus Notes password: field, type the password that unlocks the selected file. c. (Optional) In the Description: field, enter a description for the file. d. Click OK. Repeat until the keys for all encrypted items hae been uploaded. Note that once the list has been compiled, you can add new entries to it later. e. To delete an item from the list, from the Registered Lotus users screen, select the check box next to a user, and then click Delete. Inthe confirmation dialog that appears, click OK. Note: After uploading user ids, you must restart serices. Configuring system configuration options on page 18 Configuring application configuration options This topic lists all Application configuration options. Configuring system configuration options on page 18 Configuring IBM StoredIQ Platform on page 17 Performing system configurations on page 17 Performing system configurations 25