Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Configuring the SEP Report Pack for IT Analytics

Created: 05 Sep 2012 | 13 comments
Language Translations
jjesse's picture
+3 3 Votes
Login to vote

 

IT Analytics provides cube based reporting for Altiris and other Symantec products.  Currently there are packs for SEP, Altiris, CSP, and DLP.

In order to install the report pack you need to meet the following pre-requisites (NOTE refer to the IT Analytics System Requirements and also the SMP Planning and Implementation Guide):

  1. Symantec Management Platform (SMP)
  2. SQL Reporting Services
  3. SQL Analysis Services

 

Configuring the IT Analytics Pack for SEP

There are also several fields we need to fill out in order for the connection to be complete once the installation is done.  In the SMP navigate to Settings -> Notification Server -> IT Analytics Settings.  There is a folder labeled "Connections" and in my case I have connections for all the products in my demo:

 

Select the Symantec Endpoint Protection connection and fill out the correct information needed to connect to the database.  NOTE:  This requires using SQL Authentication instead of Windows Authentication to the SEM5 (default name of the SEP database) database.  Information should look like the following:

 

Apply the changes and the connection should be created successfully.

Once the connection has been created the cubes need to be installed, click on the folder labeled "Cubes" and then navigate to the tab labeled "Available" and select the SEP Cubes and install them:

 

Once the cubes are selected, towards the bottom of the page there is a butto labeled "Install" click on that and wait for the cubes to be installed.

Configuring the SEP Cubes for Processing

One of the strengths of IT Analytics is the cubes are processed off hours from the normal reporting within the Symantec Management Platform and the reporting is then run off of SQL Analysis and Reporting Services instead of the SEP Database.  In order to process these cubes navigate in the IT Analytics section to the folder labeled "Processing"

As mentioned, these cubes process on a schedule, but by clicking on the "Run Now" button the cubes will be process immediately:

The following image is an example of an IT Analytics report written against my SEPM:

Comments 13 CommentsJump to latest comment

Srikanth_Subra's picture

How to integrate other Symantec databases in this?

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
jjesse's picture

Good afternoon,

Just curious as to what other products you are interested in and what does the term integration mean?  

 

There are other IT Analytics products out there, see the links in the post

 

Let me know if you need further help

 

Jonathan Jesse Practice Principal ITS Partners

0
Login to vote
Srikanth_Subra's picture

Hi,

Not some other SEP products we are having for SEPM running over all, currently i have added only one SEPM for remaining only i asked.

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
jjesse's picture

Hi,

 

Still not quite clear as to what you are asking... You have one SEPM that still needs to be added or you have multiple SEPMs that need to be added?

You can add multiple SEPMS as loong as you have the connection

Jonathan Jesse Practice Principal ITS Partners

0
Login to vote
LGL's picture

Hi,

I have problem when to configure the SEP connections.
I think it has somthing with the rights on some of the databases, I think its on the CMDB database.
I cant find any documentation about what kind of permissions the different accounts need. If somone know where to find that or can tell me I would be glad.

On the SQL CMDB the linked server is created but I got the included error.

 

 

0
Login to vote
Srikanth_Subra's picture

Hi,

Please login with the same login which u give access during creation of that DB or else it wont work.

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
LGL's picture

Hi,

Do you mean the CMDB database or the SEP database, I can only specify the SEP database account.

Best Egards // LGL

 

0
Login to vote
Srikanth_Subra's picture

Yes it is CMDB only iam talking about.

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
jjesse's picture

For adding a SEP database you need to use SQL Authentication to make sure the access is done correctly.

 

However the errror seems to be more Altiris related.  What security role are you in that you are trying to add the connection?  Is it Symantec Administrator or some other account?

On the Symantec Management Platform what role do you have?  Are you the admin?

once again make sure you ahve the SQL Authentication Account for accessing things

Jonathan Jesse Practice Principal ITS Partners

0
Login to vote
LGL's picture

Hi,
Im using SQL authentication for the SEP database. The account has not SA rights on the SEP database but database owner rights.

The CMDB database is on one other SQL box where I dont have SA right either but database owner rights.

I have the following ringhts in the account management on the SMP.

IT analytic users
NT Authority\Authenticated Users
Symantec Administrators
Everyone

The reason to why I dont have SA rights is that Im using SQL hotel where other customer have their databases too.

BR // LGL

0
Login to vote
jjesse's picture

For the SEP side of things you are correct

 

Symatnec Administrators should grant you full permission to configure the IT Analytics cubes so I'm not quite sure what is going on here.

It might be time to open up a support ticket w/ Symantec around this

 

The other thing you could try is delete the current connections and start from scratch?  But I would recommend going the Symantec Ticket route

Jonathan Jesse Practice Principal ITS Partners

0
Login to vote
LGL's picture

Hi,

I have a ticket open at Symantec, unfortunalty they didnt really know what the problem could be. Im waiting for more feedback from them during the time I was hopening that someone "out there" have seen the same error or know what the problem migth be.

Thansk for your feedback, if you come up on something please let me know.

Regards // LGL

0
Login to vote
kishorilal1986's picture

hi jjesee,

Nice article but I expect it in more detailed steps, I feel it short.

Still I appreciate ur effort.

0
Login to vote