Video Screencast Help

Installing and Configuring IT Analytics 7.1 with Symantec Endpoint Protection Pack

Created: 19 Sep 2012 • Updated: 16 Jan 2014 | 6 comments
Language Translations
dprager's picture
+16 16 Votes
Login to vote

This article will cover the basic procedure for installing and configuring IT Analytics 7.1 with the Symanted Endpoint Protection reporting content pack. This process assumes that you already have the Symantec Management Platform installed, and that server already meets the requirements for IT Analytics 7.1 SP2. For the complete list of software prerequisites for IT Analytics please refer to article HOWTO62383 on the Symantec Knowledge Base.

IT Analytics 7.1 SP2 and the various reporting content packs are available for install via the Symantec Installation Manager. These installation files can be downloaded directly to your server or you can create offline installation packages.

 

Installing IT Analytics and Content Packs

  1. Launch the Symantec Installation Manager.
  2. Click Install New Products.
  3. Change the filter from Suites to Solutions.
  4. Scroll down the list, and check Altiris IT Analytics 7.1 SP2 and the IT Analytics Symantec Endpoint Protection Pack.

  1. Click Next and select additional components to install (including documentation).
  2. Accept the end user license agreement and click Next and enter your contact information.
  3. Allow the Install Readiness Check to complete and install necessary prerequisites if needed.

  1. Review the installation details and click Begin install.

 

Configuring IT Analytics

Once IT Analytics has been installed, there are a few settings that will need to be configured to ensure a successful implementation.

  1. In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings.
  2. In the left pane, click Configuration.
  3. In the right pane, under Analysis Server, enter the host name of the Microsoft SQL Server Analysis Services. If you did not install SQL Server as the default instance, specify the following format: servername\instancename. Symantec recommends that you type the host name of the server on which Analysis Services reside. Using localhost as a host name restricts the access from the Symantec Management Console to the computer where Analysis Services resides. Note that this connection uses the Symantec Management Platform application ID credentials.

  1. Click Verify Connection, and confirm that the Analysis Server name has been verified and saved.
  2. Under Analysis Server Database, select an Analysis Server Database. For a new standard configuration, in the Create New Database box, accept the default to create a new Analysis Server Database with the IT Analytics name. If you select an existing database, note that the existing data sources are overwritten with the current Symantec Management Platform database settings.

  1. Click Save Database Settings.
  2. Under Reporting Server, in the Reporting Server Virtual Directory URL box, type the full URL of the Reporting Services ReportServer virtual directory. If you did not install SQL Server as the default instance, specify the virtual directory in the following format:

http://servername/ReportServer_InstanceName/ 

  1. Symantec recommends that you type the host name of the server on which Reporting Services reside. Using localhost as a host name restricts the access from the Symantec Management Console to the computer where Reporting Services resides.
  2. Click Verify Connection and confirm that the Reporting Server name has been verified and saved.
  3. In the Create new report folder text box, accept the default to create a new IT Analytics Report Folder.  If you select an existing folder, existing data sources are overwritten with the current Analysis Server Database settings. 

  1. Under Authentication Type, click one of the following options for accessing Reporting Services:
  • Stored Credentials - This explicitly defines the user credentials. It also automatically manages authentication across all application tiers because access to Reporting Services is always authenticated with the same rights for all users. However, Stored Credentials limits the granular control that you have over the information within the reports to which users have access.
  • Windows Integrated Authentication – This option allows the user's Windows credentials pass through to the Reporting Server. This method is recommended for restricting access to Reporting Services on a per-user basis. Windows Integrated Authentication allows a more granular control over the information in the reports to which you grant users access. However, additional configuration might be necessary to ensure that authentication is appropriately managed across all application tiers. 

  1. Click Save Security Settings and confirm that the Report Folder name is verified and saved. 

 

 

Configuring the Symantec Endpoint Protection Connections

Configure these connections before you install the IT Analytics Symantec Endpoint Protection cubes.

To configure Symantec Endpoint Protection connections:

  1. In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings.
  2. In the left pane, expand the Connections folder.
  3. Click Symantec Endpoint Protection.
  4. In the right pane, enter the information for each of the connection fields. 

  1. Click Apply.
  2. Note: The embedded database for Symantec Endpoint Connection Protection is not supported. This is a Sybase database and does not have an OLEDB connector. This prevents IT Analytics from creating the linked server connection required making it impossible to aggregate data from that database.        

 

Adding Additional Symantec Endpoint Protection Connections (Optional)

IT Analytics Server lets you add additional Symantec Endpoint Protection connections so their relevant data can be leveraged for reporting purposes. This provides a global reporting view across multiple SEP manager databases without the need to replicate large amounts of data.

To add additional Symantec Endpoint Protection connections:

  1. In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings.
  2. In the left pane, expand the Connections folders.
  3. Click Symantec Endpoint Protection

  1. In the right pane, click New, and enter the information for each of the connection fields. Note that the New option is not displayed if you do not have at least one Symantec Endpoint Protection connection saved.
  2. Click Apply

 

Adding Cubes and Reports

Before IT Analytics cubes and reports can be viewed in the Symantec Management Console, they must first be installed from the content pack. You may choose to install all available cubes and reports or just some individually to meet your specific reporting needs.

Installing Cubes

  1. In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings.
  2. In the left pane, expand the Cubes folders. 

  1. In the Cubes page, click the Available tab.
  2. Check all the cubes that you want to install. To install all of the available cubes, in the header row of the table, click Install

  1. Click Save Changes.
  2. At the prompt, click OK to proceed with the installation.
  3. IT Analytics Event Viewer window displays the progress of each cube that was selected. Click Close when the process has completed. 

  1. Verify that the cubes were successfully created by clicking the Installed tab, and then review the list of cubes. 

 

Installing Reports

  1. In the left pane, expand the Reports folders. 

  1. In the Report Setup window, click the Available tab.
  2. Check all the reports that you want to install. To install all of the available reports, in the header row of the table, click Install

  1. Click Save Changes.
  2. At the prompt, click OK to proceed with the installation.
  3. IT Analytics Event Viewer window displays the progress of each report that was selected. Click Close when the process has completed.
  4. Verify that the reports were successfully installed by clicking the Installed tab, and then review the list of reports.

 

Configuring the Cube Processing Tasks

This task is essential for the solution to function properly because the cubes do not contain any data until the cube processing is complete.

You can create and assign processing schedules for all installed cubes. Your business needs to dictate how often the cubes should be processed. For a typical configuration, all cubes should be processed daily.

Multiple processing tasks can be used for more granular control of cube processing. More than one cube can share a dimension. In this case, the last processed date of all cubes that use that dimension updates to the last processed date of the shared dimensions. However, the actual data in the cubes is not processed until a processing task is run that is configured to process that specific cube.

To configure the cube processing tasks:

  1. In the Symantec Management Console, on the Settings menu, click Notification Server > IT Analytics Settings.
  2. In the left pane, expand the Processing folders. 

  1. Select the schedule that you want for the default processing tasks, and then check the Enabled box. Symantec recommends processing cubes no more than once a day, depending on the number of cubes and amount of data in your environment.
  2. Check the box for each available cube that you want to be processed on the current schedule. For a typical configuration, select all cubes.
  3. Click Save Changes and confirm that the Default Processing Task is saved. 

  1. Click Run Now. The selected processing tasks start asynchronously, which means that the task does not finish by the time that the page refreshes. This task can take several minutes to execute. The execution time depends on the number of the cubes that are selected and the size of data within the database. You can monitor its progress by viewing the events in the IT Analytics Event Viewer window while the manual processing task executes. 

 

Verifying Your Installation

You can verify your installation and ensure that all of your configuration steps complete successfully.

To verify your installation:

  1. In the Symantec Management Console, on the Reports menu, click All Reports.
  2. In the left pane, under IT Analytics, the following items should appear: If you experience pop-up dialog boxes while your cubes load, you need to remove the warning messages. See "Troubleshooting Browser Issues in IT Analytics 7.1" for more information.
  • Cubes
  • Dashboards
  • Reports

Comments 6 CommentsJump to latest comment

Srikanth_Subra's picture

Hi,

Very informative article..having one doubt can we include our other SEPMs also in this?

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
jjesse's picture

As shown in the article you can have multiple SEPMs reporting into IT Analytics  see the last section.

 

All you hae to do is add another connection

 

Drop me a note if you can't get it to work

Jonathan Jesse Practice Principal ITS Partners

0
Login to vote
TORB's picture

Scandinavian customers should also be aware that the Notification Server database that IT-Analytics runs on must be installed with Latin_General_CI_AS (or other supported Collations listed in link below). Installing with Norwegian_danish or any other collation will result in failed Processing.

http://www.symantec.com/business/support/index?pag...

 

Torb

 

0
Login to vote
jjesse's picture

Hi

This is a duplicate post, I created this one: https://www-secure.symantec.com/connect/articles/configuring-sep-report-pack-it-analytics on the 5th of September.  Also are posts on DLP + ITA and CSP and ITA

I created a blog post here on connect linkign to all of them

Jonathan Jesse Practice Principal ITS Partners

0
Login to vote
cs001's picture

Hi,

May I know if I could skip the Analysis Server configuration and just configure the Reporting Server directly?

Because I found when I go to the configuration page under IT Analytics, the Reporting Server is not available for configuration.

Thanks and regards.

0
Login to vote
David.Balsa's picture

hello,

I get an error when the conexion with SEP:

Exception: Statement(s) could not be prepared. Invalid column name 'IP_ADDR_TEXT'. OLE DB provider "SQLNCLI10" for linked server "ITANALYTICS_SEP_SYMANTEC_CMDB_FOS-3SI-SECT\SEP_SEP " returned message "Deferred prepare could not be completed.".

 

Thanks

0
Login to vote