Skip to content

Accops Reporting Server version 2.0

Last Updated: 7 October 2024

Introduction

The document outlines the changes and enhancements in ARS version 2.0, which is now based on OpenSearch instead of Elasticsearch.

  1. Upgrade of ELK component to OpenSearch and OpenSearch Dashboard

    • In the earlier ARS version 1.08, Elasticsearch, Logstash, and Kibana versions ran on 6.8.23. Now, ARS runs on OpenSearch, OpenSearch-Dashboard (version 2.15.0), and Logstash (version 7.16.3). OpenSearch is an open-source community offering some basic security features without paid licenses.

  2. Authentication and Encryption between OpenSearch and Clients

    • Authentication is enabled by default in OpenSearch.
    • OpenSearch as a database server only accepts data from all the clients having privileges to ship data to OpenSearch with valid credentials.
    • The OpenSearch cluster contains built-in roles and users. The admin user is the whole cluster’s superuser, possessing all privileges, such as read and write access.
    • All clients interacting with OpenSearch directly must provide their respective usernames and passwords.

    The Following Clients communicate with OpenSearch:

    • Logstash
    • Metricbeat
    • OpenSearch Dashboard
    • AUEM & DVM

  3. Dashboard & Visualizations

    In ARS version 2.0, the following new dashboards and visualizations have been added:

    • Core utilization HySecure

    • Core utilization HyWorks

    • Authentication

    • Average Logon Duration

    • RTT Details

    • Resource Utilization Of VDI

    • Session State Details of users

    • CPU/Memory Utilization of each user

  4. Alerts: New alerts have been configured in ARS 2.0, including security and critical service down alerts.

    1. 1FA Failure

      If there are 'n' 1FA failure events (incorrect username or password) occurring within a given configurable timestamp, then an alert can be sent.

    2. MFA Failure

      If there are 'n' number of MFA failures (invalid OTP) occurring within a specified timestamp (configurable), then an alert can be sent.

    3. CPU/Memory/Disk

      If the CPU, memory, or disk utilization of HySecure, HyWorks, or VDI exceeds the defined threshold, an alert can be triggered.

    4. RTT (Round Trip Time)

      If the value of RTT goes above the mentioned threshold then an alert can be generated.

    5. HyWorks Controller Status

      If HyWorks controller status is unreachable then an alert can be generated.

    6. HyWorks License Expiry

      Alerts can be generated to notify users of upcoming license expirations, allowing for reminders a certain number of days in advance.

    7. Connector Status

      If the connector provider, such as ASPL or AWS, loses connectivity to the HyWorks controller, an alert can be generated.

    8. Authentication Server

      If the authentication server is unreachable by the HyWorks controller, an alert can be triggered.

  5. Inbuild Installation of Services

    Email Reporting services are installed and configured by default.

  6. Session summary of user with logout and login time in a single report

    Session usage summary reports having login time, logout time, total session time, total active time, total disconnected time, and total disconnection count with username and machine name fields in a single report can be generated.

  7. User/Role-Based Workspace Access

    Role-based access control in OpenSearch Dashboards is based on the application privileges provided by OpenSearch. This feature enables OpenSearch Dashboards to specify the privileges it wants to grant to users, assign those privileges to the appropriate users through roles, and then authorize users to perform specific actions.

    Configuring different roles and their privileges is explained in the role-based access document.

  8. CSV Reports download from the reporting tab

    CSV and PDF reports can be downloaded directly from the reporting tab, rather than accessing the discover/dashboard tab for downloads. To do this, you simply need to schedule a report, which will be generated at the specified time. You can then download the report anytime according to your requirements.