About the default scheduled jobs
Bravura Security Fabric creates some jobs automatically.
This job runs the cleansessdata
utility to removed session files older than the greater of DEFAULT_EXPIRY_SECONDS or DEFAULT_API_SESS_EXPIRY_SECONDS. If neither system variable is set, it will use the DEFAULT_EXPIRY_SECONDS default, which is 600.
See cleansessdata for command-line usage.
This job runs the dashboardstats
utility to calculate cached data for dashboards. By default it is scheduled to run daily at 11:00 pm on the primary Bravura Security Fabric server.
You can modify the Job to run to suit your environment. A separate scheduled job must be created if the dashboardstats
utility is run more than once a day.
See dashboardstats for command-line usage.
This job runs the psupdate
program, which initiates and controls the auto discovery process. By default, this job is scheduled to run daily at 1:30 am. Bravura Security Fabric automatically creates the psupdate
job when you add your first target system, and configures it to run on the server from where you added the target system. You cannot delete this job, nor can you modify the Job to run or Directory to run job in settings.
In a replicated environment, it is automatically set to run only on the first server on which auto discovery is run. It should never be run on two servers at the same time. Before running, psupdate
will check whether it is scheduled to run on some other node, and will abort if so. Psupdate cannot be reassigned to other nodes while auto discovery or persistent listing are currently running.
The psupdate
program also executes the autores -all -submit
command. The command will calculate the automatic assignment for configured roles and groups and submit requests based on results.
You can change the server that the psupdate
job is run on; however, do not configure it to run on multiple servers.
See psupdate for command-line usage and examples.
This job runs the pwdconflicts
utility to list accounts with passwords in conflict. By default it is scheduled to run weekly at 01:00 am on Sunday on the primary Bravura Security Fabric server.
See pwdconflicts for command-line usage and examples.
This job executes the idmlogsvc -rotatelog
command. This command performs a backup and rotation of the Logs directory. That is, it appends .<yyyy>-<mm>-<dd>-<hhmmss>.<SerialNo>
to the old directory name and creates a new directory with the original name. See About the Bravura Security Fabric Log for more information about log files.
This job only rotates the logs on the Bravura Security Fabric server. Proxy logs are rotated by the rotatelog-proxy scheduled job.
By default, this job is scheduled to run daily at 12:30 am on all Bravura Security Fabric servers. It is automatically created when you install Bravura Security Fabric . If scheduled rotation fails, an email is sent to the Bravura Security Fabric administrator. The job may fail if another program has opened the log file.
You cannot delete this job, nor can you modify the Job to run or Directory to run job in settings.
In addition to the fields described in Adding new jobs and Selecting a server to run a job on , the following fields appear on the schedule programs page for the rotatelog
job:
Number of rounds to keep – You can change the number of copies to keep by modifying this setting (default is 7).
Directory to be rotated – You can view, but you cannot modify this field. Its value is determined by the PSTempDir system variable (Maintenance > Options).
See Logging Service (idmlogsvc) for information about the Logging Service (idmlogsvc
) and its -rotatelog
command.
The psdonechk
program checks the PSQ_DONE and PSL_DONE compliance tags for all users. This program is automatically scheduled to run once when you modify:
The minimum number of accounts each user must have across target systems.
This is set by Manage the system > Modules > Attach other accounts (PSL) > PSL MIN ACCOUNTS.
The minimum number of security questions that a user must answer from internal question sets.
This is set by Minimum number of answered questions per user for each question set in the Manage the system > Policies > Question sets menu.
By default, the program is scheduled to run once at 2.30 am the following day.
See psdonechk for command-line usage.
This job executes the psproxy -rotatelog
command. This command performs a backup and rotation of the Logs directory on each proxy server. That is, it appends .<yyyy>-<mm>-<dd -<hhmmss>.<SerialNo>
to the old directory name and creates a new directory with the original name.
See About the Bravura Security Fabric Log for more information about log files.
By default, this job is scheduled to run daily at 12:40 am on all Bravura Security Fabric proxy servers. It is automatically created when you configure a target to use a proxy. If scheduled rotation fails, an email is sent to the Bravura Security Fabric administrator.
In addition to the common scheduled job fields, the following fields appear on the schedule programs page for the rotatelog job:
Number of rounds to keep – You can change the number of copies to keep by modifying this setting (default is 7).
Directory to be rotated – You can view, but you cannot modify this field. Its value is determined by the PSTempDir setting (Maintenance > Options).
See Proxy Service (psproxy) for information about the psproxy
and its -rotatelog
command.