可为各种 Workspace ONE Access 组件监控列出的 URL 端点,以确保环境功能正常。某些端点还可用于负载均衡器,以确保服务已启动并可正常通信。
负载均衡器的运行状况检查
组件 | 运行状况检查 | 预期返回 | 备注 |
---|---|---|---|
Workspace ONE Access 服务 | /SAAS/API/1.0/REST/system/health/heartbeat |
字符串:ok Http:200 |
频率为每 30 秒 |
Android 移动 SSO - Certproxy: |
Http:200 | 频率为每 30 秒 | |
iOS 移动 SSO - KDC: |
连接 | 频率为每 30 秒 | |
证书适配器:
|
字符串:ok Http:200 |
频率为每 30 秒 | |
20.01 之前的 Workspace ONE Access Connector | /hc/API/1.0/REST/system/health/allOk |
字符串:true Http:200 |
频率为每 30 秒 |
Workspace ONE Access Connector 20.01 及更高版本 | https://hostname:portnumber/eks/health
注: 负载均衡器不适用于目录同步服务或用户身份验证服务。如果配置了 Kerberos 身份验证服务,则它将是您需要在负载均衡器后面配置的唯一企业服务。要监控 Kerberos 身份验证服务,请使用上述端点,其中
portnumber 是主机端口号的占位符。默认端口号为 443。
|
字符串:true Http:200 |
频率为每 30 秒 |
负载均衡器的运行状况检查会返回简单的值,以供网络设备轻松解析。
要监控的其他运行状况检查
此处列出的运行状况检查可由能够解析数据和创建仪表板的监控解决方案使用。请将频率设置为每 5 分钟。
Workspace ONE Access 服务监控和运行状况
URL 调用:/SAAS/jersey/manager/api/system/health
或
/SAAS/API/1.0/REST/system/health
原始输出:
{ "AnalyticsUrl":"unknown", "OpensearchServiceOk":"true", "EhCacheClusterPeers":"unknown", "OpensearchMasterNode":"unknown", "OpensearchIndicesCount":"unknown", "OpensearchDocsCount":"unknown", "AuditPollInterval":"0", "AnalyticsConnectionOk":"true", "EncryptionServiceVerified":"unknown", "FederationBrokerStatus":"unknown", "ServiceReadOnlyMode":"false", "OpensearchUnassignedShards":"unknown", "AuditWorkerThreadAlive":"true", "BuildVersion":"3.3.0.0 Build xxxxxxx", "AuditQueueSize":"0", "DatabaseStatus":"unknown", "HostName":"unknown", "OpensearchNodesCount":"unknown", "EncryptionStatus":"unknown", "FederationBrokerOk":"true", "EncryptionConnectionOk":"true", "EncryptionServiceImpl":"unknown", "ClusterId":"22f6e089-45df-41ab-9c8a-77f3e4589230", "EhCacheClusterDiagnostics":"unknown", "OpensearchNodesList":"unknown", "DatabaseConnectionOk":"true", "OpensearchHealth":"unknown", "StatusDate":"2018-08-06 19:14:40 UTC", "ClockSyncOk":"true", "MaintenanceMode":"false", "MessagingConnectionOk":"true", "fipsModeEnabled":"true", "ServiceVersion":"3.3.0", "AuditQueueSizeThreshold":"null", "IpAddress":"unknown", "AuditDisabled":"false", "AllOk":"true" }
"AllOk" | "true","false" | 汇总运行状况检查以监控 Workspace ONE Access 服务的整体运行状况 |
"MessagingConnectionOk" | "true","false" | 验证所有消息生成者和使用者是否均已连接到 RabbitMQ |
"DatabaseConnectionOk" | "true","false" | 验证与数据库的连接 |
"EncryptionConnectionOk" | "true","false" | 验证与加密服务的连接是否正常以及主密钥存储是否正常 |
"AnalyticsConnectionOk" | "true","false" | 验证与分析服务的连接 |
"FederationBrokerOk" | "true","false" | 验证嵌入式身份验证适配器以确保其子系统正常 |
注: 输出中的标签 "unknown" 指示信息受到限制。默认情况下,将会隐藏敏感信息,如 IP 地址和主机名。要显示此信息,请参阅
在 Workspace ONE Access 运行状况检查 API 中显示其他信息。
URL 调用:/catalog-portal/services/health
此运行状况检查专门针对 Workspace ONE Access 的用户界面部分。
原始输出:
{ "status": "UP", "uiService": { "status": "UP" }, "apiService": { "status": "UP" }, "eucCacheEngine": { "status": "UP" }, "cacheEngineClient": { "status": "UP" }, "persistenceEngine": { "status": "UP", "database": "Microsoft SQL Server", "hello": 1 }, "tenantPersistenceEngine": { "status": "UP", "database": "Microsoft SQL Server", "hello": 1 }, "diskSpace": { "status": "UP", "total": 8460120064, "free": 4898279424, "threshold": 10485760 } }
"status" | "UP","DOWN" | 汇总运行状况检查以监控 Workspace ONE Access 用户界面 (User Interface, UI) 的整体运行状况 |
"uiServer.status" | "UP","DOWN" | 如果主 UI 服务正在运行,则为 UP |
"apiService.status" | "UP","DOWN" | 如果主 UI API 服务正在运行,则为 UP |
"eucCacheEngine.status" | "UP","DOWN" | 如果 Hazelcast 集群引擎正在运行,则为 UP |
"cacheEngineClient.status" | "UP","DOWN" | 如果 UI 的 Hazelcast 客户端正在运行,则为 UP |
"persistenceEngine.status" | "UP","DOWN" | 如果主数据库 (SQL) 正在运行,则为 UP |
"tenantPersistenceEngine.status" | "UP","DOWN" | 如果主数据库 (SQL) 正在运行,则为 UP |
"diskSpace.status" | "UP","DOWN" | 如果可用磁盘空间大于配置的阈值 (10 MB),则为 UP |
"diskSpace.free" | 字节 | 装有 Workspace ONE Access UI 的分区中的可用空间(以字节为单位) |
Workspace ONE Access Connector 监控和运行状况
以下 URL 调用适用于 20.01 之前的 Workspace ONE Access Connector。
URL 调用:/hc/API/1.0/REST/system/health
原始输出:
{ "HorizonDaaSSyncConfigurationStatus": "", "AppManagerServiceOk": "true", "DomainJoinEnabled": "false", "XenAppEnabled": "true", "ViewSyncConfigurationStatus": "", "ThinAppServiceOk": "true", "ThinAppSyncConfigurationStatus": "unknown", "Activated": "true", "XenAppServiceOk": "false", "DirectoryServiceStatus": "Connection test successful", "BuildVersion": "2017.1.1.0 Build 5077496", "ThinAppServiceStatus": "unknown", "XenAppServiceStatus": "A problem was encountered Sync Integration Broker", "HostName": "hostname.company.local", "NumberOfWarnAlerts": "0", "JoinedDomain": "true", "XenAppSyncConfigurationStatus": "Sync configured (manually)", "DirectorySyncConfigurationStatus": "Sync configured (manually)", "NumberOfErrorAlerts": "0", "DirectoryServiceOk": "true", "HorizonDaaSTenantOk": "true", "ThinAppDirectoryPath": "", "StatusDate": "2017-06-27 10:52:59 EDT", "ViewSyncEnabled": "false", "ViewServiceOk": "true", "HorizonDaaSEnabled": "false", "AppManagerUrl": "https://workspaceurl.com/SAAS/t/qwe12312qw/", "HorizonDaaSServiceStatus": "unknown", "DirectoryConnection": "ldap:///ldapcall", "ServiceVersion": "VMware-C2-2017.1.1.0 Build 5077496", "IpAddress": "169.118.86.105", "DomainJoinStatus": "Domain: customerdomainname", "AllOk": "false", "ViewServiceStatus": "unknown", "ThinAppEnabled": "false", "XenAppSyncSsoBroker": "integrationbrokersso:443 / integrationbrokersync:443" }
"AllOk" | "true","false" | 汇总运行状况检查以监控 Workspace ONE Access Connector 服务的整体运行状况。 |
"ViewServiceOk" | "true","false" | 如果与 View Broker 的连接成功,则为 True。如果停用了 View 同步,此属性将为 True。 |
"HorizonDaaSTenantOk" | "true","false" | 如果与 Horizon Cloud 的连接成功,则为 True。如果停用了 Horizon Cloud 同步,此属性将为 True。 |
"DirectoryServiceOk" | "true","false" | 如果与目录的连接成功,则为 True。如果停用了目录同步,此属性将为 True。 |
"XenAppServiceOk" | "true","false" | 如果与 Citrix 服务器的连接成功,则为 True。如果停用了 Citrix 服务器,此属性将为 True。 |
"ThinAppServiceOk" | "true","false" | 如果与 ThinApp 打包应用程序服务的连接成功,则为 True。如果停用了打包应用程序,此属性将为 True。 |
"AppManagerServiceOk" | "true","false" | 如果能够对 AppManager 正确进行身份验证,则为 True。 |
"NumberOfWarnAlerts" | 0 - 1000 | 在此连接器实例上触发的警告警示数量。它们在连接器同步日志中记录为“备注”。它们可以指示某个已同步的资源中包含 Workspace ONE Access 中所没有的用户或组。这可能是特意设计的,具体取决于配置。计数器会在每次同步时持续递增,直到警告和错误警示数量等于 1000 并且管理员清除警示为止。 |
"NumberOfErrorAlerts" | 0 - 1000 | 在此连接器实例上触发的错误警示数量。它们在连接器同步日志中记录为“错误”。它们可以指示同步失败。计数器会在每次同步时持续递增,直到警告和错误警示数量等于 1000 并且管理员清除警示为止。 |