立即与支持人员聊天
与支持团队交流

Foglight APM for Real User Experience 5.9.9 - Administration and Configuration Guide

Getting started Configuring traffic capture
Managing Sniffers Managing Archivers Managing capture groups Managing sessionizing policies Managing monitored ports Managing monitored IP addresses Managing monitored subnets Managing identifiers for virtual addressing schemes Managing private keys Managing web services and SOAP operations
Configuring traffic analysis Configuring analyzers Capturing traffic outside the network Configuring advanced options Integrating Foglight APM with other products Maintaining and troubleshooting Appendix: Building regular expressions in Foglight Appendix: Traffic analysis processing
Understanding the traffic analysis workflow Stage 1: Run hit analysis Stage 2: Run sequence analysis Stage 3: Finalize stopped sequences Stage 4: Finalize the session Example of interdependent analyzers Online-Only Topics
Removing items from a table Defining extraction expressions Adding, copying, and editing archivers Testing archivers Configuring archiver database shard settings Adding, copying, and editing sniffers Testing sniffers Adding and editing capture groups Testing capture groups Adding and copying sessionizing policies Editing sessionizing policies Selecting session identifiers from a discovery list Adding and editing session identifier variables Organizing session identifiers Selecting user name variables from a discovery list Adding and editing username rules Selecting URL prefixes from a discovery list Adding or adding URL prefixes Selecting ports from a discovery list Adding or editing monitored ports Selecting IP addresses from a discovery list Adding or editing monitored IP addresses Looking up host names for all monitored IP addresses Associating private keys with IP addresses Selecting subnets from a discovery list Adding and editing monitored subnets Adding identifiers Editing identifiers Finding IP addresses in HTTP headers Configuring a custom HTTP header using Microsoft IIS Manager Adding and editing local private keys Adding and editing HSM private keys Exporting keys using Microsoft Management Console Adding or editing web services Importing WSDL files to define web services Managing custom fields and metrics Adding, copying, and editing custom fields Removing custom fields Editing custom metrics Removing custom metrics Managing sensitive data Adding, copying, and editing sensitive hit detail policies Adding, copying, and editing sensitive content expression policies Modifying members of pivot categories Selecting aliases from a discovery list Adding, copying, and editing domain rules Adding, copying, and editing large hit details Adding, copying, and editing URL classifiers Reviewing rules for browser category, browser, and operating system hit details Adding user-defined user agent rules Adding and editing additional parsed response types Adding and editing captured request body types Adding, copying, and editing scripts Removing scripts Referencing configuration objects in a script Testing regular expressions Syntax for test data Adding simple hit analyzers using the Setup Wizard Adding simple sequence analyzers using the Setup Wizard Adding analyzers Copying analyzers Editing analyzers Adding and editing conditions Creating a simple Boolean expression Creating a complex Boolean expression Disabling standard metrics generated by a hit analyzer Adding custom metrics Editing custom metrics Selecting pivot categories Breaking out metrics into dynamically-named topology objects Publishing metric timeslices for the Geographical Perspectives dashboard Changing SLA thresholds Adding custom field updates Editing custom field updates Adding scripts to an analyzer Editing scripts Creating new scripts on the fly Adding hit storage restrictions Editing hit storage restrictions Adding sequence events Editing sequence events Adding static page elements Editing static page elements Viewing resource files defined by static page elements Adding and editing subnet filters Exporting configurations Exporting encrypted configurations Restoring a previous configuration Importing saved configurations Importing hit analysis configurations from Foglight Experience Viewer Using the Import Configuration Wizard

Monitoring secure web traffic

HTTPS hits are not displayed in the search results because the Sniffer does not have access to the information necessary to decrypt your secure web traffic. To display information about HTTPS hits, you need to register secure ports (if using a non-default port), provide the private keys used to encrypt the web traffic, and associate the port and key with the IP address of the server hosting the web site or application. For more information, see Monitoring secure (HTTPS) web traffic.
 
* 
TIP: If you do not immediately have access to the private keys, you may want to complete Step 1 and Step 2 now, and finish this procedure when you have access to the keys.
Monitoring secure web traffic requires the following steps:
Step 1: Registering secure ports
Step 2: Specifying monitored IP addresses
Step 3: Providing private keys
Step 4: Associating ports and keys with monitored IP addresses

Step 1: Registering secure ports

Port 443 is registered by default. If you need to register other HTTPS-enabled ports, see Adding missing ports.

Step 2: Specifying monitored IP addresses

You can use the Discovery tool to detect traffic on IP addresses currently in use in live web traffic. You can then select the IP addresses that carry the secure traffic you want to monitor. If an IP address is currently inactive, you need to add it manually. For more information, see Managing monitored IP addresses.
To discover and add IP addresses:
1
Click APM > Configure > Traffic Capture > Monitored IP Addresses.
2
Click Discover.
The IP Discovery dialog box appears and begins displaying IP addresses in use in the monitored environment. You can use the Search field to narrow the results.
3
When you see IP addresses using the HTTPS-enabled ports you registered, click Stop.
4
Click the Ports column heading to sort IP addresses by port numbers.
5
Select the check boxes beside the HTTPS-enabled ports you registered.
6
Click Add.

Step 3: Providing private keys

Private keys can be stored locally on Foglight APM Appliances or accessed from an HSM appliance. For more information, see Managing private keys.
 
* 
IMPORTANT: If you use SafeNet HSM appliances to secure your private keys, you need to integrate Foglight with each HSM. For more information, see Integrating with SafeNet Hardware Security Modules.
To add a local private key:
1
On the navigation panel, under Dashboards, click APM > Configure > Traffic Capture > Private Keys.
2
Click Add Local Key.
3
In the dialog box, complete the options. For help with options, see Defining local private keys.
4
Click Save.
The key appears in the Private Keys table.
5
If your web server supports multiple domains from the same IP address and TCP port number, specify the domain that requires this key.
a
In the Domains column, click the monitored IP address’ Click to add domains link.
b
In the Domains dialog box, click Add.
c
Specify the domain name, and click Save.
The domain appears in the table.
d
Repeat to add any other domains that require this key.
e
Click Save.
The dialog box closes. The domains appear in the Private Keys table.
To add an HSM private key:
1
On the navigation panel, under Dashboards, click APM > Configure > Traffic Capture > Private Keys.
2
Click Add HSM Key.
3
In the dialog box, complete the options. For help with options, see Defining HSM private keys.
4
Click Save.
The key appears in the Private Keys table.
5
If your web server supports multiple domains from the same IP address and TCP port number, specify the domain that requires this key.
a
In the Domains column, click the monitored IP address’ Click to add domains link.
b
In the Domains dialog box, click Add.
c
Specify the domain name, and click Save.
The domain appears in the table.
d
Repeat to add any other domains that require this key.
e
Click Save.
The dialog box closes. The domains appear in the Private Keys table.
6
Repeat to add other private keys.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级