Hawk Agent Configurations
All the required configuration parameters are stored in HAWK_HOME
/bin/hawkagent.cfg
. Each section in this configuration file begins with “-M
” followed by the module name, such as –M Self
. Within each modular section, all the command-line options that can be configured are listed. These options are as follows:
Module |
Parameters |
-M Self |
-cluster < |
|
-agent_name < |
|
-agent_domain < |
|
-hawk_domain < |
|
-rvd_session < |
|
-tcp_session |
|
-tcp_key_store |
|
-tcp_trust_store |
|
-tcp_key_store_password |
|
-tcp_key_password |
|
-tcp_trust_store_password |
|
-tcp_ssl_protocol |
|
-tcp_enabled_algorithms |
-max_reconnect_attempts_during_connect | |
-max_reconnect_attempts_after_restart | |
|
-ems_transport < |
|
-ssl_ciphers < |
|
-ssl_no_verify_host |
|
-ssl_trusted < |
|
-ssl_expected_hostname < |
|
-ssl_identity < |
|
-ssl_private_key < |
|
-ssl_password < |
|
-use_thread_pool < |
|
-character_encoding < |
|
-hma_plugin_dir < |
-M RuleBaseEngine |
-rulebases < |
|
-config_path < |
|
-auto_config_dir < |
|
-repository_path < |
|
-repository_cache_dir < |
|
-variables < |
|
-email_smtp_server < |
|
-email_smtp_port < |
|
-email_smtp_auth_required < |
|
-email_smtp_tls_required |
-email_smtp_ssl_required <true or false> |
|
-email_smtp_tls_trust * | |
|
-email_smtp_user < |
|
-email_smtp_password < |
|
-email_from < |
|
-email_content_type |
-M AMIService |
-ami_rvd_session < |
|
-ami_tcp_session |
-M LogService |
-log_dir < |
|
-log_max_size < |
|
-log_max_num < |
|
-log_level |
|
-log_format < |
-M TIBProtocolAdapter |
-interval < |
|
-security_policy < |
-M Repository |
-repository_name < |
|
-repository_dir < |
-M LogFileMicroAgent |
-scan_rate < |
|
-block_size < |
|
-eval_rate < |
-M CustomMicroAgent |
None |
Each of the parameters listed above are explained in more detail, in the following table.
Property |
Mandatory |
Default Value |
Description |
||||||
-cluster |
No |
IP subnet address |
The name of the container in which the agent appears in the display by default. The display creates the container if it does not already exist. Allows for grouping of multiple agents. The cluster name must be enclosed within quotes, if the name contains spaces. |
||||||
-agent_name |
No |
Host Name of the computer |
Each agent being managed must have a unique combination of agent_name, agent_domain, and hawk_domain values. To use the host name as the agent name, comment this option. Note: Agent names with multiple words separated by dots are not supported. |
||||||
-agent_domain |
No |
“none” |
An agent domain must be specified when two computers within the same TIBCO Hawk domain have the same name but reside in different network domains. For example, you might specify this option as: -agent_domain pa.tibco.com. |
||||||
-hawk_domain |
No |
“default” |
As explained in Hawk Domain. |
||||||
TCP Transport for TIBCO Hawk (Default) |
|||||||||
-tcp_session |
Yes |
localhost:2551 localhost:2561 |
Specifies that the TIBCO Hawk Agent should use TCP Transport for TIBCO Hawk. The syntax of the property is: -tcp_session
where,
In case of multiple daemons, agents, or consoles running on the same instance, use different ports for creating unique socket address. For fault tolerance, you can specify multiple seed daemon’s socket addresses in a comma-separated list. -tcp_session
For more information of the Hawk Cluster Manager, see Hawk Cluster Manager Configurations. |
||||||
TCP Transport for TIBCO Hawk SSL Parameters The following TLS/SSL parameters are applicable to |
|||||||||
-tcp_key_store |
No |
- |
Path of the key store file |
||||||
-tcp_trust_store |
No |
- |
Path of the trust store file |
||||||
-tcp_key_store_password |
No |
- |
Password for the key store file |
||||||
-tcp_key_password |
No |
- |
Encrypted key password |
||||||
-tcp_trust_store_password |
No |
- |
Password for the trust store file |
||||||
-tcp_ssl_protocol |
No |
TLSv1.2 |
Protocol for a secure connection |
||||||
-tcp_enabled_algorithms |
No |
|
Algorithm to be used for the security protocol. You can specify multiple algorithms as comma-separated list without space. |
||||||
-max_reconnect_attempts_during_connect | No | 20 | Specifies the number of reconnect attempts made when the agent is unable to connect on first attempt | ||||||
-max_reconnect_attempts_after_restart | No | 1000 | Specifies the number of reconnect attempts to be made when the agent gets disconnected from the Daemon | ||||||
TIBCO Rendezvous Transport |
|||||||||
-rvd_session |
No |
7474; tcp:7474 |
Comment this option if you are using TCP Transport for TIBCO Hawk or TIBCO EMS as the primary transport. The format is -rvd_session <service> <network> <daemon>. If you use this option, all three parameters must be present and separated by white space. Use a semicolon (;) to indicate a null value, or use an empty string, for example: -rvd_session 7474; tcp:7474 |
||||||
TIBCO EMS Transport |
|||||||||
-ems_transport |
No |
|
Comment this option if you are using TCP Transport for TIBCO Hawk or TIBCO Rendezvous as the primary transport. Specifies location of the EMS server. For example:
NOTE: If EMS is configured as Transport, ami_rvd_session parameter should be configured. |
||||||
TIBCO EMS SSL Parameters (In case EMS Server is configured for SSL communication). |
|||||||||
-ssl_vendor |
No |
j2se |
The name of the vendor of the SSL implementation. The valid choices are
|
||||||
-ssl_ciphers |
No |
- |
Cipher suite name |
||||||
-ssl_no_verify_host |
No |
- |
Indicate not to verify the EMS server |
||||||
-ssl_trusted |
No |
- |
File name of the server certificates. The file should be accessible locally/ shared drive |
||||||
-ssl_no_verify_hostname |
No |
- |
Indicates not to verify the name in CN field of the server certificate |
||||||
-ssl_expected_hostname |
No |
- |
If the -ssl_no_verify_host is not specified, the option -ssl_trusted has to be used. Along with the option-ssl_trusted specify either -ssl_no_verify_hostname or -ssl_expected_hostname. |
||||||
-ssl_identity |
No |
- |
Digital certificate |
||||||
-ssl_private_key |
No |
- |
Private key |
||||||
-use_thread_pool |
256 |
Optimizes the number of threads the agent creates for every microagent it discovers. It is advisable to turn this option On if the agent is going to discover over 100 microagents. This value is OS dependent and should be set to the maximum number of threads allowable per process. |
|||||||
-character_encoding |
No |
UTF-8 |
Character encoding to be used across the configured transport |
||||||
-hma_plugin_dir |
No |
CONFIG_FOLDER/plugin |
Specify the plug-in directory path. |
||||||
-rulebases |
No |
- |
List of .hrb files to be loaded at the startup |
||||||
-config_path |
No |
CONFIG_FOLDER/config |
The list of directories to use as configuration sources. Used in the case of manual configuration. The delimiter for path entries is a colon (:). If -config_path is used, comment the -auto_config_dir, -repository_path, and -repository_cache_dir options. |
||||||
-auto_config_dir |
No |
CONFIG_FOLDER/autoconfig |
The directory to auto-load Rulebases at the startup. If this option is present, the agent runs in an automatic configuration mode. Specify the directory from which the Rulebase and schedule configuration objects are loaded at the startup. The default directory, HAWK_HOME/autoconfig, is used if a value is commented. If you use automatic configuration, comment the following options: -config_path, -repository_path, -repository_cache_dir, -rulebases |
||||||
-repository_path |
No |
- |
List of repositories to use as configuration sources. If repository configuration mode is used, specify the path to be searched for repositories. The delimiter for path entries is a colon (:). The default used if this option is commented is the current working directory. If -repository_path is used, comment the -auto_config_dir and -config_path options. |
||||||
-repository_cache_dir |
No |
CONFIG_FOLDER/cache |
If repository configuration mode is used, all configuration objects loaded from the repository may be cached in a local directory, specified in this option. This cache is used if a repository fails, and also to minimize network traffic. If -repository_cache_dir is used, comment the -auto_config_dir and -config_path options. |
||||||
-variables |
No |
- |
Properties file to specify variables file. The variables file can pass data to define external variables to be passed to rules for use in Rulebase configurations. |
||||||
Email configuration options are used to send the notification email. |
|||||||||
-email_smtp_server |
No |
- |
Specifies the hostname of the SMTP server. |
||||||
-email_smtp_port |
No |
25 |
Specifies the port at which the SMTP server is listening. |
||||||
-email_smtp_auth_required |
No |
false |
Specifies whether authentication is required for the SMTP server. The default value is |
||||||
-email_smtp_tls_required |
No |
true |
Specifies whether TLS encryption is required for the SMTP server. If set to |
||||||
-email_smtp_ssl_required | No | true | Specifies whether the SMTP server requires implicit SSL/TLS. | ||||||
-email_smtp_tls_trust | No | - | Skips certificate validation of SMTP server. If set to "*", all hosts are trusted hosts. If set to a whitespace separated list of hosts, those hosts are trusted. Otherwise, trust depends on the certificate the server presents. | ||||||
-email_smtp_user |
No |
- |
Specifies the sender’s user name for the SMTP server authentication. The field is mandatory if the authentication option ( |
||||||
-email_smtp_password |
No |
- |
Specifies the sender’s password for the SMTP server authentication. The field is mandatory if the authentication option ( |
||||||
-email_from |
No |
- |
Specifies the sender’s email address for sending the email. The default is the current system user, for example, |
||||||
-email_content_type |
No |
text/html |
Specifies the content type of email. The email application interprets the text characters in the body of the email based on this property. |
||||||
Configuration for AMI communication |
|||||||||
-ami_rvd_session |
No |
|
Configures the agent with a RVD session to be used to communicate with applications implementing the TIBCO Hawk Application Management Interface. Multiple -ami_rvd_session parameters may be specified. If none are specified, the RV session used for AMI is the primary session of the Self Module. # Note: When using TIBCO EMS transport for communication, 127.0.0.1 should be used as the network parameter. For example: -ami_rvd_session 7474 127.0.0.1 tcp:7474 If you are using TCP Transport for TIBCO Hawk then uncomment this option, so that Hawk Agent can communicate with Hawk Microagent using the TCP-RV bridge. Same value must be used in the Hawk Microagent configuration ( |
||||||
-ami_tcp_session |
No |
localhost:2571 |
Configures the Hawk agent with a TCP session to be used to communicate with applications implementing the TIBCO Hawk Application Management Interface. If this parameter is not specified while using TCP Transport for TIBCO Hawk, the default value ( The syntax of the property is: -ami_tcp_session
where, |
||||||
Logging |
|||||||||
-log_dir |
No |
CONFIG_FOLDER/log |
The directory in which to store log files generated by the TIBCO Hawk Agent. |
||||||
-log_max_size |
No |
10240 |
The maximum size of a rotating log files in Kbytes. |
||||||
-log_max_num |
No |
10 |
The maximum number of rotating log files |
||||||
-log_level |
No |
7 |
Specifies the level of diagnostic information stored in the logs. The following are the logging levels: 4 - Indicates error level trace messages should be enabled. 6- Indicates warning level trace messages should be enabled. 7 - Indicates information level trace messages should be enabled. 8 - Indicates debug level trace messages should be enabled. 16 - Indicates AMI level trace messages should be enabled. A value of zero turns all tracing off. A value of -1 turns all tracing on. |
||||||
-log_format |
No |
“default” |
The format for trace log messages |
||||||
TIBCO Protocol Adapter |
|||||||||
-interval |
No |
30 seconds |
The heartbeat interval in seconds. |
||||||
-security_policy |
No |
- |
The fully qualified name of the Java class which implements the security policy. For more information refer to TIBCO Hawk Security Model. |
||||||
Rulebase Repository |
|||||||||
-repository_name |
No |
- |
The name of the Rulebase Repository |
||||||
-repository_dir |
No |
- |
The location of the Repository |
||||||
Logfile MicroAgent |
|||||||||
-scan_rate |
No |
10 seconds |
The rate at which log files are scanned. |
||||||
-block_size |
No |
16 KB |
The maximum number of kilobytes to read on each scan. |
||||||
-eval_rate |
No |
300 seconds |
The rate at which all the log files being monitored are re-evaluated. |