Managing job policy rules

Job policy rules are used to control job parallelism, count of job targets, and job scheduling frequency. These rules are created when you install or upgrade to TrueSight Server Automation 20.02.01 and start the Application Server for the first time. By default, these rules are assigned to all the roles that are available in TrueSight Server Automation during rules creation. You cannot create, modify, and run jobs that do not comply with the rule definitions. If an execution override is set on a job, the rule will apply to the override role set for execution.  

The following table explains the rules behavior:

Parameter

Rules to control

Max parallel targets allowed

Max targets allowed

Job schedule time interval

Usage

Controls the number of targets that a job can run simultaneously.

Controls the number of targets that can be assigned to a job.

Controls the interval (in hours or minutes) at which jobs can be scheduled.

Default value

0 (zero) which indicates no restriction.

0 (zero) which indicates no restriction.

0 (zero) which indicates no restriction.

Rule evaluation

The rule is evaluated when a job is saved and run. Batch jobs and execution tasks do not have the job parallelism attribute.

The rule is evaluated when a job is saved and run.

  • When you select the targets defined in an execution task or a batch job, the count of unique targets in the execution task or batch job are evaluated.
  • When you select the targets from individual jobs, the total unique targets in the child jobs are evaluated.

The rule is evaluated when a job is saved and run. Batch jobs and execution tasks have their own scheduling capability. Hence, the schedule set in the child jobs is not considered.

By default, all the rules are disabled. If you define a rule condition, it is applied to all the roles. If you do not want to apply these rules to specific roles, you can exclude these roles from rule evaluations. For details, see excluding roles.

A user who is a member of the RBACAdmins role can grant access to other users to modify these rules. To grant access, assign one or more of the following authorizations to user roles:

  • JobPolicy.*
  • JobPolicy.Create
  • JobPolicy.CreateACL
  • JobPolicy.Delete
  • JobPolicy.Modify
  • JobPolicy.ModifyACL
  • JobPolicy.ModifyProperties
  • JobPolicy.Read

For more information about granting authorizations to roles, see Managing-access.

You can perform the following tasks to manage these rules:

Viewing the rules 

Do the following:

  1. Log in to the TrueSight Server Automation console as a member of the BLAdmins role or the user with access to view or modify the rules.
  2. Click Configuration > Infrastructure Management.
  3. Click Role Based Job Policy Rules.
    The rules summary is displayed.

    rules_summary.png

Excluding roles

You can exclude roles from evaluating the rule conditions. The rules are not applied to the excluded roles.

Do the following:

  1. Log in to the TrueSight Server Automation console as a member of the BLAdmins role or the user with access to modify the rules.
  2. Click Configuration > Infrastructure Management.
  3. Under Role Based Job Policy Rules, right-click a rule and select Include/Exclude Roles From Rule.

    add_remove_roles_from_rule.png

  4. Do one of the following:
    • To exclude all the available roles from the rule, click >>.
    • To exclude the selected roles from the rule, press Ctrl, select the required roles from the roles list in the left pane, and click >.
    • To include all the selected roles that were excluded from the rule, click <<.
    • To include the selected roles to the rule, press Ctrl, select the required roles from the roles list in the right pane, and click <.
  5. Click OK.
    The roles are excluded and displayed when you select the rule.

Viewing and editing rule properties 

Do the following:

  1. Log in to the TrueSight Server Automation console as a member of the BLAdmins role or the user with access to modify the rules.
  2. Click Configuration > Infrastructure Management.
  3. Under Role Based Job Policy Rules, right-click a rule and select Properties.

    modify_rule.png

  4. To edit the rule properties, do the following:
    1. On the Rule Definition tab, select the rule condition, click edit_button.png and change the condition value.
      Note: You cannot modify the definition of the rule condition.

      edit_rule_value.png

    2. On the Roles tab, add or remove the roles according to your requirement.
  5. Save the changes.

Troubleshooting

If you encounter any issues while running jobs, see the logs.

  • If a job is manually executed, view the logs that are added to the leader Application Server logs.
  • If a job is scheduled or routing rule is present for the job, view the logs on the Application Server where the job is run.
  • If a job is executed through the NSH script, view the logs on the server where the NSH script job is processed.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*