Skip to content
CA Network Flow Analysis - 9.3.6
Documentation powered by DocOps

Converting From a Three-Tier to a Two-Tier Architecture

Last update June 18, 2018

CA Network Flow Analysis 9.3.6 does not support a three-tier architecture. Before upgrading to 9.3.6, convert a CA Network Flow Analysis 9.3.3 three-tier deployment to a two-tier deployment.

Prerequisites

DSA

On each DSA:

  1. Download the CA Network Flow Analysis three-tier to two-tier conversion tool and extract the contents of the zip file.
    3TConverter.zip
    Copy the 3TConverter.ps1 script to a directory on the DSA.
  2. Determine the Windows PowerShell version.
    1. Open the Windows PowerShell command window.

    2. Enter the following command to set the execution policy:

      Set-ExecutionPolicy RemoteSigned

      Enter Y at the prompt to change the execution policy.

    3. Enter the following command to determine the version:

      $PSVersionTable.PSVersion

      Windows Server 2008 R2 systems typically have PowerShell 2.0, while Windows Server 2012 R2 systems have PowerShell 3.0 or 4.0.

    4. Close the Windows PowerShell command window.
  3. Download and install MySQL Connector/Net, mysql-connector-net-<version>.msi.
    PowerShell 2.0:
    https://dev.mysql.com/get/Downloads/Connector-Net/mysql-connector-net-6.7.9.msi
    PowerShell 3.0 or 4.0:
    https://dev.mysql.com/get/Downloads/Connector-Net/mysql-connector-net-6.9.9.msi
  4. If there are Harvesters running on Linux in the three-tier architecture, download and install the most recent version of PuTTY 64-bit (version 0.69 at the time of writing). It is easiest to use the MSI Windows Installer version.
    http://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html
    Select to add PuTTY to the PATH, if necessary.

Windows Harvesters

On each Windows Harvester:

  1. Share the install_path\Netflow\datafiles\ReaperArchive15 directory with "Administrators" or users with Administrative rights.
    1. Navigate to install_path\Netflow\datafiles.
    2. Right-click the ReaperArchive15 directory and select Properties.
    3. Select the Sharing tab and click Share.
    4. Select Administrators from the list and click Share.
  2. Verify that there is enough disk space to copy the ReaperArchive15 files from the DSA systems to the Harvester. The amount of required disk space could be as much as is currently configured on a single DSA.

Linux Harvesters

On each Linux Harvester:

  1. Verify that all Linux Harvester hosts have the same user and password with read/write access. The conversion script uses a single user/password combinations to access all Linux Harvesters.
  2. If the Harvester is not installed in the default installation directory (/opt/CA/NFA), create a symbolic link from /opt/CA/NFA to the installation directory.
    For example, if the Harvester is installed in /home/NetQoS:

    ln -s /home/NetQoS /opt/CA/NFA
  3. Verify that there is enough disk space to copy the ReaperArchive15 files from the DSA systems to the Harvester. The amount of required disk space could be as much as is currently configured on a single DSA.

Convert the DSAs

  1. Stop all NFA services on the Console, each DSA, and each Harvester. DO NOT stop the MySQL service.
    Console:
    • CA NFA File Server
    • CA NFA RibSource
    • CA Performance Center SSO
    • NetQoS Reporter Manager Service
    • NetQoS Reporter/Analyzer General Services
    • NetQoS Reporter/Analyzer Pump Service
    • NetQoS Reporter/Analyzer Query Services
    • NetQoS Reporter/Analyzer Watchdog
    • NetQoS ReporterAnalyzer Report Service
    Harvester:
    • CA NFA Collection and Poller Webservices
    • CA NFA Data Retention
    • CA NFA DNS/SNMP Proxies
    • CA NFA File Server
    • CA NFA Harvester
    • CA NFA Poller
    • CA NFA Reaper
    DSA:
    • CA NFA Data Retention
    • CA NFA DSA Loader
    • CA NFA Pump
  2. On each DSA, open a Windows PowerShell command window and browse to the directory containing the 3TConverter.ps1 script.
    Execute the script with the following arguments:

    ./3TConverter.ps1 -nfaconsole <nfa_console_ip> -installDir <install_path> [-linuxInstallDir <linux_install_path>] [-numDays <number_of_days_to_copy>]

    The optional -numDays parameter specifies the most recent number of days of 15-minute data to copy to the Harvesters. If this parameter is not set, all data is copied. We recommend setting the parameter to a low number so that the system can be brought back up in less time. After the system is back up, you can execute the script again to copy the remainder of the historical data while the system is receiving new flow data.

    1. If there are Linux Harvesters in the configuration, you are prompted for a user and password.

    2. Enter y to accept the rsa key when prompted.

    For example:

    .\3TConverter.ps1 -nfaconsole 10.2.0.15 -installDir C:\CA\NFA -linuxInstallDir /opt/CA/NFA -numDays 1

    Wait for the script to finish executing.

  3. Restart all NFA services.
  4. If the script was previously run with a -numDays parameter, execute the script again (on each DSA) without the -numDays parameter to convert the remaining 15-minute data.

  5. After all 15-minute data are copied, stop sharing the install_path\Netflow\datafiles\ReaperArchive15 directory on each Windows Harvester.
    Note: On Windows Server 2008 R2 systems, sharing leaves a lock on the ReaperArchive15 directory. To remove the lock:
    1. Right-click ReaperArchive15 and select Properties.

    2. Select the Security tab, then click Advanced.

    3. Select the Administrators group, then click Change Permissions.

    4. Select Include inheritable permissions from this object's parent, then click Apply.

    5. Exit from the Properties dialog.

Troubleshooting Conversion Issues

3TConverter.ps1 is Not Recognized

Error:

The term ‘.\3TConverter.ps1’ is not recognized as the name of a cmdlet, function, script file, or operable program…

Solution:

cd to the directory that contains the 3TConverter.ps1 script and rerun the script.

All Directories Have Been Previously Copied

The 3TConverter.ps1 script creates and updates a file with the list of all DSA ReaperArchive15 directories that have been successfully copied. This file is located in each DSA's installation directory, named copiedArchive15Folders.txt. If all files have already been copied, this message displays and the script exits.

If for some reason you need to recopy the files, delete the copiedArchive15Folders.txt file and delete the directories on the Harvester that need to be recopied, then rerun the script.

Execution of Scripts is Disabled

Error:

File 3Tconverter.ps1 cannot be loaded because the execution of scripts is disabled on this system. Please see "get-help about_signing" for more details.

Solution:

  1. Enter the Windows PowerShell command:

    Set-ExecutionPolicy RemoteSigned
  2. Enter Y when prompted.

Specified Install Directory Does Not Exist

Solution:

Locate the NFA installation directory for the DSA and provide the full path to the directory in the -installDir argument. By default, the DSA is installed in C:\CA\NFA.

Unable to Query for Routers

Error:

Unable to query for routers: … Exception: Cannot find type [MySql.Data.MySqlClient.MySqlConnection]: verify that the assembly containing this type is loaded.

Solution:

Download and install MySQL Connector/Net.

Unable to Query for Routers

Error:

Unable to query for routers: … Exception: Exception calling “Open” with “0” argument(s): Unable to connect to any of the specified MySQL hosts.

Solution:

  • Verify that the IP address specified for the -nfaconsole argument matches the IP address of the NFA Console for this configuration.
  • Verify that the “CA MySql” service is running on the NFA Console.

Unable to Access Linux Harvester

Error:

Unable to access Linux Harvester: … Exception: The term ‘pscp.exe’ is not recognized as the name of a cmdlet, function, script file, or operable program…

or

Unable to access Linux Harvester: … Exception: The term ‘plink.exe’ is not recognized as the name of a cmdlet, function, script file, or operable program…

Solution:

  • Download and install PuTTY.
  • Ensure that PuTTY is added to the PATH.
  • Close and reopen Windows PowerShell to refresh the environment.

Access Denied or Unable to Access Linux Harvester

Solution:

Verify that the provided user and password are correct and have read/write access on all Linux Harvester systems.

Unable to Copy Files to Windows Harvester

Solution:

Verify that that all Windows Harvesters have their ReaperArchive15 directories shared with “Administrators”.

Unable to Make ReaperArchive15/ Directory

Solution:

Verify that the provided Linux installation directory is correct and the same for all Linux Harvesters. Otherwise, verify that all necessary symbolic links have been created.

No Flow Data, Historical or New, on Windows Harvesters

Solution:

  1. Verify that all NFA services are up on the Harvester and the Console.
  2. Open a Remote Desktop session on the Windows Harvester.
  3. Open the File Explorer and look for a “lock” icon on the ReaperArchive15 directory. To remove the lock:
    1. Open the folder Properties.
    2. Select the Security tab, then click Advanced.
    3. Select the Administrators group, then click Change Permissions.
    4. Select Include inheritable permissions from this object’s parent and click Apply.
    5. Click Ok several times to exit from the Properties dialog.
  4. Verify the reporter and harvester database settings.
    reporter Database Settings
    harvester Database Settings

No Flow Data, Historical or New, on Linux Harvesters

Solution:

  1. Verify that all NFA services are running on the Harvester and the Console.

  2. Verify that the owner and group of the ReaperArchive15 directory and subdirectories are set to "nfa". If not, run the command:

    chown -R nfa:nfa <linuxInstallDir>/Netflow/datafiles/ReaperArchive15/*
  3. Verify the reporter and harvester database settings.
    reporter Database Settings
    harvester Database Settings

  reporter Database Settings (Console)

Table Parameter Value
agent_definitions DataServerID '0'
agents_aggregate DataServerID '0' or no data
agents_virtual DataServerID '0' or no data
parameter_descriptions reporterArchitecture 'TwoTiers'
parameter_descriptions dsaSettingsLastDeployed 'NULL'
parameter_descriptions dsaSettingsLastModified 'NULL'
system_settings reporterArchitecture 'TwoTiers'
system_settings dsaSettingsLastDeployed '0'
system_settings dsaSettingsLastModified '0'
database_servers No entries.

harvester Database Settings (Harvester)

Table Parameter Value
parameter_descriptions enableArchive15 'Y'
parameter_descriptions enableRollup 'Y'
Was this helpful?

Please log in to post comments.

  1. Christopher Walsh
    2017-12-07 03:51

    Some helpful tips for any issues you may run into with this utility can be found in the links below: https://support.ca.com/us/knowledge-base-articles.TEC1715503.html https://support.ca.com/us/knowledge-base-articles.tec1174458.html https://support.ca.com/us/knowledge-base-articles.tec1449613.html