IBM Tivoli Netcool/Impact V7.1.0 Fix Pack 17 (7.1.0-TIV-NCI-FP0017)

Before installing or upgrading IBM Tivoli Netcool/Impact 7.1.0.17, refer to the Following documentation:

• https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1
• Download attached package to review readme file. Review list of enhancements, pre-req,installation instruction, and known issues in IBM Tivoli Netcool/Impact 7.1.0 Fixpacks.
• Review Known Issues section in Fix Pack 17 release page.

For details of an individual APAR, go to https://www.ibm.com/support/home/ then enter the APAR name/# in "Search Support" then select search.

The following Netcool/Impact APARs are delivered with Fix Pack 17:

• IJ10379: IMPACT SCRIPTS NEED TO ALLOW LDAP FAILOVER CONFIG
• IJ12740:  'ISOINTERVAL' DEFAULTING TO STRING
• IJ13055: CUSTOM HELP URL FOR IMPACT SSD WIDGET
• IJ13278: ENSURE THREADS STARTED BY SNMPGET IN THE IBMSNMPCOMMUNICATOR CLASS ARE STOPPED
• IJ14649: OPTIMIZE SQL IN RBA_EVENTSPROCESSING POLICY
• IJ14904: NOI: FIRED STATS FOR GROUPS IN PATTERNS SHOULD SHOW NUMBERS
• IJ14916: EMAILREADER SOMETIME ENCOUNTERS PROBLEMS DECODING EMAIL BODY
• IJ15133: EVENT READERS ON SECONDARY MEMBER COMPLETELY STOPS WHEN IMPACT.SERVER.PREFERREDPRIMARY IS ENABLED
• IJ15381: CHANGING DISPLAY NAME IN TABLE CAUSES COLUMN TO BE EMPTY
• IJ15391: TBSM 6.2: PRIMARY SERVICES RESTARTS DURING SECONDARY SERVER STARTUP INCLUDING RADSERVICES WHICH SHOULDN'T BE ON THE LIST
• IJ15656: NETCOOL/IMPACT EMAILREADER UNABLE TO CONNECT TO SERVER VIA IMAP: 710SSL
• IJ16018: RE PATTERN REGROUPING EVENT ONCE PARENT EVENT IS DELETED
• IJ16059: NOI WITH ORACLE: SEASONAL HISTORICAL EVENTS ISSUE : TIMESTAMPLTZ TIMESTAMPTZ
• IJ16060: IMPACT 7.1 TOO MANY OPEN FILES
• IJ16294: SYNTAX CHECKER IS THROWING FALSE POSITIVES
• IJ16463: ALLOW CUSTOM URL FOR ORACLE CONNECTION IN EA WIZARD
• IJ16747: THERE'S A NEED TO HAVE $IMPACT_HOME/DSALIB FILES TO AUTOMATICALLY REPLICATE ACROSS CLUSTER MEMBERS
• IJ16903: IMPACT MWM EDITOR PANE ISSUES WITH REGULAR EXPRESSION CHARACTERS AND UPPERCASE LIKE OPERATOR
• IJ16908: NOI - DEFAULT EVENTTYPE INGORED IF OTHERS EXIST
• IJ16976: FIXPACK INSTALLER DOES NOT UPGRADES THE MWM POLICY
• IJ16987: EVENT READER SERVICE STILL ACCUMULATES PROCESSES FOR DELETED POLICIES. OOM
• IJ17097: COMMANDRESPONSE SESSION DISCONNECT DOES NOT CLOSE TCP CONNECTION ON HOST
• IJ17100: TBSM 62 WITH SSL ENABLED UNABLE TO FIND NAMESERVER.PROPS ON DASH
• IJ17156: DIRECTSQL NOT HANDLING DB2 SQL CORRECTLY WITH FP16
• IJ17237: IMPROVE PERFORMANCE OF RBA_EVENTSPROCESSING WITH NEW FUNCTION NOIQUERYDBFUNCTION
• IJ17322: DEPLOY() FUNCTION DOES NOT TRANSFER ALL POLICY PARAMETERS TO THE TARGET SERVER
• IJ18173: Regression Fix. COMMANDLINEMANAGER (CMDLINESERVICE) KEEPS ASKING FOR LOGIN IF PRIVILEDGE USER IS NOT SPECIFIED
• IJ18856:  Regression Fix: FIX PACK MAY FAIL TO INSTALL IF IMPACT.UIDATAPROVIDER.REFRESHRATE PROPERTY IS SET
• IJ19670: CANNOT UPGRADE TO IMPACT FP16 IF SSL -FIPS IS ENABLED
• IJ19799: DERBY UPGRADE IS NOT HAPPENING IN NETCOOL IMPACT 7.1 FP16. IT HAS DERBY VERSION OF 10.8 ONLY
• IJ19890: IMPACT FP16 CRASHING DUE TO BLOCKING THREADS
• IJ18575: LDAP USER WITH SLASH IN FIRST NAME NOT ABLE TO LOGIN TO IMPACT

Security related APARs:

• IJ16387: SECURITY APAR: UPGRADE TO LATEST WAS LIBERTY IN IMPACT 710 FP17
• IJ16396: SECURITY APAR: UPGRADE TO LATEST IBM SDK 8 IN IMPACT 710 FP17
• IJ16406: SECURITY APAR: UPGRADE TO LATEST APACHE CAMEL IN IMPACT 710 FP17
• IJ17708: SECURITY APAR: FIX JQUERY VULNERABILITY CVE-2019-11358 IN IMPACT 710 FP17
• IJ17917: SECURITY APAR: FIX APACHE ACTIVEMQ VULNERABILITY CVE-2018-11775 IN IMPACT 710 FP17
• IJ17927: SECURITY APAR: PEN TEST CLICKJACKING IN IMPACT 710
• IJ18472: HTTP UNAUTHENTICATED REQUEST RECIEVES VERBOSE ERROR DATA : 710
• IJ18513: IMPACT 7.1 OPVIEW SECURITY VULNERABILITY
• IJ18822: SECURITY VULNERABILITY DUE TO  JQUERY LIBRARY FILE – CVE-2015-9251

List of Impact APARs that have documentation updates or have additional information:

• IJ10379: IMPACT SCRIPTS NEED TO ALLOW LDAP FAILOVER CONFIG
• IJ13278: ENSURE THREADS STARTED BY SNMPGET IN THE IBMSNMPCOMMUNICATOR CLASS ARE STOPPED
• IJ13411: NETCOOL/IMPACT FIX PACK 15: MULTI-TENANCY POLICY RETURNS EMPTY RESULT FOR STRING PARAMETERS
• IJ15326: UNABLE TO COMPILE WDSL IN WS WIZARD ON SPLIT SYSTEM
• IJ15603: INCORRECT SNMPTRAPACTION SAMPLE
• IJ16128: CLUSTERING OVERVIEW NEED TO INCLUDE FIXPACK
• IJ16204: HOW TO SET IMPACT TO HANDLE ORACLE ENCRYPT THE CLIENT CONFIGURATION
• IJ16463: ALLOW CUSTOM URL FOR ORACLE CONNECTION IN EA WIZARD
• IJ16477: UPDATE STATING THAT ONLY IPL POLICIES ARE SUPPORTED WITH OPERATOR VIEWS
• IJ16587: TBSM FUNCTION TOPIC CLEAN UP - UI Policy - Insert Function menu is missing the TBSM function
  The UI part of Impact APAR IJ16587 is included in fix pack FP17. However the backend part fix has been moved from nci.jar to ncs.jar, that is moved from Impact to TBSM. So the TBSMShell function fix is in TBSM FP2.
  Therefore customer will require Impact FP17 and TBSM FP2 for running TBSMShell function policy, if the policy is of "IPL" type.
  If customer is using policy of JavaScript type, then the fix will be in Impact FP18.
• IJ16903: IMPACT MWM EDITOR PANE ISSUES WITH REGULAR EXPRESSION CHARACTERS AND UPPERCASE LIKE OPERATOR
• IJ17100: TBSM 62 WITH SSL ENABLED UNABLE TO FIND NAMESERVER.PROPS ON DASH
• IJ17156: DIRECTSQL NOT HANDLING DB2 SQL CORRECTLY WITH FP16
• IJ17237: IMPROVE PERFORMANCE OF RBA_EVENTSPROCESSING WITH NEW FUNCTION NOIQUERYDBFUNCTION

To check the APARs that were part of the previous FixPack (7.1.0.16), check this link:
https://www.ibm.com/support/pages/ibm-tivoli-netcoolimpact-v710-fix-pack-16-710-tiv-nci-fp0016

2.0  New support and features

2.1  Additional Support added in  Fix Pack 17

Browser:
    Firefox ESR 68
    Microsoft Internet Explorer 11
    Microsoft Edge 44
    Google Chrome 74 – 76
    Safari 12 and 13
Database:
    Oracle 18c, 19c
    MS SQL 2017
Operating Systems:
    Windows Server 2016, 2019
    RHEL 7.7, RHEL 8
JazzSM 1.1.3.0 DASH 3.1.3.5

2.2 Component Updates
    Java has been updated to version 1.8.0_221 (8.0 SR5 FP40)
    WebSphere Application Server Liberty has been updated to version 19.0.0.8
    IBM Installation Manager version 1.8.9
    Derby 10.14.2.0

2.3 Enhancements in Fix Pack 17

• Derby Database Encryption supported.
  With Netcool/Impact 7.1.0.17, comes the ability to encrypt the internal Impact Derby DB. See the Impact documentation on how to encrypt Derby DB in Impact. If you need to rollback version of Impact, then you must un-encrypt Derby DB before executing rollback https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1?topic=server-decrypting-impact-derby-database

• Derby Database SSL supported
  With Netcool/Impact 7.1.0.17 comes the ability to enable SSL communication for the internal Impact Derby DB. Please see the Impact documentation on how to enable SSL for Derby. If you need to rollback a version of Impact, then SSL Derby DB communication must be disabled, before executing rollback. https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1?topic=server-how-use-derby-database-in-ssl-mode
• Optimize feature in Event Readers now include restriction fields:

Impact's Event Readers supports the ability to select specific database fields when processing events. This can be used to streamline the reader by excluding unused fields during processing of events. To assist this process, the Omnibus Event Reader supports an 'Optimize' button which automatically selects 'required' database fields. The 'Optimize' feature has been improved to include the field names from the restriction clauses for policy, defined under Event Mapping Table, alongside fields required by the policy.

• Custom URL option provided for Oracle Historical Database

Within the Event Analytics wizard, the ability to connect to an Oracle Historical Database. using a custom URL, has been added. Previously Oracle connections in the EA Wizard for Oracle Connection were only possible using SID or Service Name. To connect to Oracle using a custom URL, select "Custom URL" instead of Standard in the Connection Details section of "Configure historical event database" page.  Enter the username and password, as before, and enter the custom URL.. i.e. hostname:port:server i.e. myhost.ibm.com:1521:XE. Note: For RAC servers see additional information here: https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1?topic=sources-connecting-oracle-rac-cluster

• NOI: FIRED STATS FOR GROUPS IN PATTERNS SHOULD SHOW NUMBERS

The following relates to Related Events for Event Analytics: new functionality has been added to display data for the Times Fired, Times Fired in Last Month and Last Fired columns for Groups allocated to patterns. Previously the group statistics were only updated for unallocated groups; they not updated for groups allocated to a pattern. The statistics represents the sum of occurrence of events in 'Active', 'Watched' and 'Expired' status. 'Times Fired' value increments every time there is an event matching the Event Identifier of a deployed group. 'Times Fired in Last Month' is the sum of Events received in last 30 days. This value is zeroed after increment of 30 days. 'Last Fired' is the timestamp of last time such event was received. This statistics is suppressed by default. It can be enabled by turning on 'timesfired_group_stats_enable' property. 

To enable it:
-- Export current default NOI property values to a file, by executing ./nci_trigger <Cluster_Name>  <impactadmin_user_name>/<impactadmin_user_pwd>  NOI_DefaultValues_Export FILENAME <path/filename> Change the 'timesfired_group_stats_enable' value from 'false' to 'true' in <path/filename>
-- Import the changed properties file back ./nci_trigger <Cluster_Name>  <impactadmin_user_name>/<impactadmin_user_pwd>  NOI_DefaultValues_Configure FILENAME <path/filename>

• IMPACT SCRIPTS NEED TO ALLOW LDAP FAILOVER CONFIG

An additional LDAP server can be configured for failover. To configure failover, two extra properties must be added to the impactdap.properties before running the confAuth4Ldap.sh script. These two properties are, LDAPFailOverHost and LDAPFailOverPort.

• Dedicated TIBCO EMS data source Integration for Netcool Impact

To enable this new functionality, perform the following actions:
1. Setup TIBCO to accept SSL messages with replication monitor factors: Parent --> connect to sub cluster
2. Add TIBCO SSL jars to $IMPACT_HOME/lib3p or $IMPACT_HOMEdsalib directory
3. Create a data source and configure it from the backend terminal to add additional properties similar to the dsa file
4. The backend also has to have the property: tibco.ssl.authentication
    TIBCOJMSDSA.JMS.DSPROPERTY.<index>.NAME=tibco.ssl.authentication
    TIBCOJMSDSA.JMS.DSPROPERTY.<index>.VALUE=true 
    (to enable the TIBCO JMS authentication using SSL certificates instead of the username and password.)
5. Send messages to the JMS Queue
6. Configure the JMS listener to receive those messages with a policy to print the incoming messages like:
Log("JMS SSL Messages");
Log("JMS ID: " + EventContainer.JMSProperties.JMSMessageID);
Log("JMSMessage: " + EventContainer.JMSProperties.field);

• Substantial improvements to the processing rate of events in IBM Impact/Runbook Automation integrations were made. These were achieved by code changes made in APAR IJ17237.

3.0 Troubleshooting Netcool Impact 7.1 >‎ General issues

You now can (if needed) reset the Derby DB to a default state (in a NOI installation); by using the following steps:

1.    Find appropriately named ImpactDB_NOI_FP17.zip file located in $IMPACT_HOME/install/dbcore.
2.    Stop all ImpactServers in the cluster (primary and secondary that run Derby DB).
3.    Backup/Remove the existing ImpactDB directory structure in $IMPACT_HOME/db/<ServerName>/derby.
4.    Copy the zip file found in step 1 to $IMPACT_HOME/db/<ServerName>/derby and unzip it.
5.    Start Impact Server primary, let it fully initialize and start, and now start secondary server and let it re-sync from the primary.

4.0 Known Issues in Fix Pack 17

• Search for Help (69452)      Symptom: The search function for the local help documentation unavailable. The search attempt fails with an error, "org.apache.jasper.JasperException: Unable to load class for JSP". 

     Resolution: Documentation search is available online in the IBM Documentation https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1

• Reports not working (69459)
  Symptom: All reports show "No Report Data Available" regardless of whether data is present or not. The impactgui.log file shows below error:
  port: Failed to getSoapOrgNodeMementos for REPORT_ActionEfficiency
  java.lang.IndexOutOfBoundsException: Index: 0, Size: 0 at java.util.ArrayList.rangeCheck(ArrayList.java:668) at java.util.ArrayList.get(ArrayList.java:444) at com.micromuse.response.client.soapclient.reports.AbstractEfficiencyReportServlet.getReport(AbstractEfficiencyReportServlet.java:262)at com.micromuse.response.client.soapclient.reports.AbstractEfficiencyReportServlet.doGet(AbstractEfficiencyReportServlet.java:178)at javax.servlet.http.HttpServlet.service(HttpServlet.java:575) at javax.servlet.http.HttpServlet.service(HttpServlet.java:668) at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper can find something like this in impactgui.log4:52:04 PM
  Root Cause: An uplift to jars with WebSphere Liberty Profile upgrade from 17.0.0.3 to 18.0.0.1 in 7.1.0 FP13 caused this issue.
  Resolution: The issue is being investigated with the WebSphere Liberty Profile team and a fix will be provided as soon as possible.
• The following applies only to Netcool/Impact Clients with  Netcool Operations Insight (NOI) - and only for those with Existing configurations:
  After upgrading to Netcool/Impact 7.1.0 FP13 (and above), run through the Wizard; confirm, verify & save the configuration. Refer to: Event Analytics Configuration
  1. It is a known issue that custom rollup changes to properties and params files are overwritten. Running through the wizard will repair these.
  2. Also for seasonality View, it is advisable to run through the Wizard to make sure the right columns are displayed.  Refer to the following link for appropriate actions: Migration of rollups in Netcool/Impact v7.1.0.14
• The EventReader service for Seasonality Events is called "ProcessSeasonalityEvents" and it does not (by default) read updated or de-duplicated events. "Get updated events" is not selected (by default) in the UI for the "ProcessSeasonityEvents" Service, on the Event Mapping tab.
  The reason for this is due to the wide Filter for the "ProcessSeasonityEvents" Event Reader service. By default, the filter is set to "1=1". With this wide filter, if "Get updated events" was enabled, and Seasonality rules fired, this could lead to an infinite loop. i.e. Seasonality Rules updating events which in turn get read by the reader and fire the Seasonality Rules again.
  The solution is for the Event Mapping Filter to be set, in such a way, as to avoid already processed events. i.e. if the Seasonality rules are setting the Service field to "something" then the Event Mapping Filter could be set to restrict these.
• NOI: Impact Event Isolation and Correlation page does not load if non-default cluster name is used (such as NCICLUSTER_Z )
  To resolve this issue, perform the following actions:
  Copy or rename the file with the correct cluster name. For example:
  cp $IMPACT_HOME/opview/displays/NCICLUSTER-EIC_configure.html  $IMPACT_HOME/opview/displays/NCICLUSTER_Z-EIC_configure.html
  Restart the Impact GUI server $IMPACT_HOME/bin/startGUIServer.sh
  Stop the Impact GUI server $IMPACT_HOME/bin/stopGUIServer.sh
  Go to the Event Isolation and Correlation page and confirm the page is displayed without the errors.
• NOI 1.5: The Event Analytics Configuration wizard reports an Unexpected Token error when the Impact GUI server under the Turkish locale
  Symptom:When loading the Event Analytics configuration page, an "Unexpected token: E" error is reported. Configuration cannot continue.
  Resolution: Switch to a different locale and restart the Impact GUI server
  Root Cause: When the Impact GUI server is running under the Turkish locale, the GUI server is unable to find the contents of the uiproviderconfig directory.
• For other Known Issues, review Fix Packs release page section.