Start PATROL Agent

This topic provides an overview and instructions to use the workflow to enable triage and remediation for restarting the PATROL Agent. 

Overview

When an event specifying that the PATROL Agent service is down on a Windows or a Linux operating system appears in TrueSight Presentation Server, operators can launch an orchestration action, Start PATROL Agent, to restart the server. Relevant workflows in TrueSight Orchestration are triggered, which verify whether the service is down, and then restart the service. A post-remediation workflow confirms whether the service is restarted and send the notification back to the Presentation Server. The triage and remediation of the event is now complete.

You can automate the process of launching the orchestration action and performing the triage and remediation actions by enabling the Automate Orchestration Action option in the orchestration policy for the PATROL Agent. 

By default, TrueSight Orchestration does not create incidents. Incidents are created using TrueSight Operations Management integration with BMC Remedy IT Service Management (ITSM). TrueSight Orchestration only updates incidents during the event orchestration process. 

For restarting the PATROL Agent service, change integration is not required and is disabled by default. 

What do I need to get started? 

Requirements for TrueSight Presentation Server
  • Add TrueSight Orchestration as a component to integrate with Presentation Server.
  • Ensure that the user that you provide to integrate with TrueSight Operations Management is a part of the AoAdmin group in Remedy Single Sign-On.
  • Ensure that you have the permission to view and initiate Orchestration actions from events. This permission is governed by the Allow Orchestrator Actions permission on the Administration > Roles page.
  • (Optional) If you plan to integrate with BMC Remedy IT Service Management, ensure that Presentation Server 11.3.03 is integrated with BMC Service Resolution (BSR) or Proactive Service Resolution (PSR).

    Note

    The ability to set up and use Proactive Service Resolution will be available with the release of TrueSight Operations Management version 11.3.03.

  • (Optional) To automate the event orchestration process for restarting the server, see Managing Orchestration policies.

For more information, see Using Orchestration actions to enable triage and remediation of events.

Requirements for TrueSight Orchestration
  • Ensure that Event Orchestration runbook is installed on the compatible TrueSight Orchestration Platform.
    See Installing the Event Orchestration runbook.
  • Ensure that the following adapters and modules required for this use case are configured and enabled on the TrueSight Orchestration peer.

    • Adapters:
    • Modules:

      • AMP-AD-BMC-Remedy-ARS
      • AutoPilot-AD-Utilities
      • AutoPilot-OA-Applications_Utilities
      • AutoPilot-OA-BAOGridManagement
      • AutoPilot-OA-Common_Utilities
      • AutoPilot-OA-Credentials_Store
      • AutoPilot-OA-Errors
      • AutoPilot-OA-Event_Orchestration
      • AutoPilot-OA-File_Utilities
      • AutoPilot-OA-ITSM_Automation
      • AutoPilot-OA-Network_Utilities
      • BMC-SA-Event_Orchestration
      • BMC-SA-Event_Orchestration_Configuration
      • BMC-SA-Event_Orchestration_Service_Down
      • BMC-SA-Event_Orchestration_PatrolAgent_Down
        For more information, see Configuring modules in the Event Orchestration runbook

    Is there a way to configure and enable content in one go?

    Yes. You can configure and enable the adapters and modules from the installation wizard. After the installation is complete, the adapters and modules are already configured and enabled on the grid. You can only update the configuration if it is required for a use case.

    For more information, see Installing the Event Orchestration runbook.

  • Ensure that the <service name> specified in the BMC-SA-Event_Orchestration_Service_Down module configuration matches the process label provided in the orchestration policy for this use case.

How to restart the PATROL Agent?

To restart a service, you must launch an Orchestration action for a given event in TrueSight Presentation Server. 

  1. On the TrueSight Presentation Server console, go to the Monitoring > Events page.
  2. Click the action menu of the desired event and select Launch Orchestration Actions > Start PATROL Agent. 

    A status message indicating whether the action initiation was successful is displayed at the top of the page.

    Can I restart this service using the generic Restart Service action?

    Yes. However, BMC recommends that you initiate the action specific to an event type.

  3. To view the event orchestration process performed for this action, see the related events. 
    Related events describe the end-to-end process that starts with initiating triage and ends with the event orchestration completed status.

Where to go next?

You have successfully used the out-of-the-box workflow to restart the service. To add orchestration actions for events that match your requirements, see Adding a custom use case to enable Orchestration actions

Was this page helpful? Yes No Submitting... Thank you

Comments