Insight powered by AppSense

Home 

Insight Agent

When installed on endpoints, the Insight Agent analyzes activity to provide data about users, profiles, and the endpoints.

In this Section:

Installed Files

The Insight Agent installs the following files to %Program Files%\AppSense\Insight on endpoints:

File Description
InsightService.exe Standalone executable that hosts a Windows service. This service captures the static and dynamic information and sends it to the service.
InsightUpload.dll A COM component that is instantiated from the service and is responsible for connecting to the server and sending the data.
InsightSenswrapper.dll A wrapper library for Windows SENS. This library is consumed by the service to allow it to receive system event notifications.
InsightLogging.dll A DLL responsible for debug logging to a log file and raising audit events to the Windows application event log.

Installed Services

The installation creates the AppSense Insight Service from the InsightService.exe executable file. This service should be set to Automatic start and run under the LocalSystem account.

Agent Installer

The Insight Agent installer comes in 32 and 64-bit formats.

  1. Double-click the MSI compatible with the endpoint you are installing it on; either 32 or 64-bit.

  2. Click Next.

    The License Agreement displays.

  3. If you accept the terms of the license agreement, select the checkbox and click Next. The install location displays.

    Insight_Install3_Location.png

  4. Browse to where you want to install the agent or use the default installation path: C:\Program Files\AppSense\Insight

    The Insight Agent Settings dialog displays.

    Agent Install Settings

  5. Enter your Insight hostname.

  6. Enter in the API key for your server. You can copy the key from the Settings area in the Insight console.

    For further details see API Keys.

  7. Click Install to start the installation.
  8. Click Finish to complete the installation.

Command Line Installer

The installer supports command line options used to configure the server and API key when deploying the agent to endpoints.

The command line options populate the HKLM\Software\Policies\AppSense\Insight key with the relevant values. The command line options are:

  • INSIGHT_SERVER
  • INSIGHT_KEY

Registry Key Settings

The Ivanti Insight software reads its settings from the HKLM\Software\Policies\AppSense\Insight registry key. The following table lists the configuration values:

Value Type Description
Logging DWORD If set to 1, all logging is enabled. The log file InsightDebug.log is located in “%PROGRAMDATA%\AppSense\Insight”. The last log file is kept with extension .old  
Server REG_SZ The name of the server to which the Insight data should be uploaded. The name should have the following format: nextgen.ivanti.com
ApiKey REG_SZ The API generated on the Insight console that allows the service to connect to the REST API.
WriteToFile DWORD If set to non-zero, collected data will write to the “InsightLocal.log” file in the “%PROGRAMDATA%\AppSense\Insight” folder instead of sending it to the server.
UploadFrequency DWORD The length of time, in milliseconds, between data uploads from clients to the server. If this value is not present the default period is 120000 ms (two minutes). The setting should not exceed 20 minutes.
MaxEvents DWORD The number of events that can be uploaded per poll. Any events beyond the set number are added to the next poll. The default value is 1000.
CertificateFlags


For use in test labs only.

 DWORD Suppress errors with the SSL Certificate for the target Ivanti Insight Server. This is useful for Test Labs where distribution of the SSL certificate is problematic, or for diagnosing issues with the SSL Certificate.

Apply the values as required:

  • 256 - Allow Untrusted Root Certificate Authority
  • 512 - Allow Invalid Invalid Certificate Usage
  • 4096 - Allow Invalid Common Name in Certificate
  • 8192 - Allow Invalid Certificate Date
  • 768 - Allow Untrusted Root CA & Invalid Certificate Usage
  • 4352 - Allow Untrusted Root CA & Invalid Common Name
  • 8448 - Allow Untrusted Root CA & Invalid Certificate Date
  • 4608 - Allow Invalid Certificate Usage & Invalid Common Name
  • 8704 - Allow Invalid Certificate Usage & Invalid Certificate Date
  • 4864 - Allow Untrusted Root CA, Invalid Certificate Usage & Invalid Common Name
  • 8960 - Allow Untrusted Root CA, Invalid Certificate Usage & Invalid Certificate Date
  • 12544 - Allow Untrusted Root CA, Invalid Common Name & Invalid Certificate Date
  • 12800 - Allow Invalid Certificate Usage, Invalid Common Name and Invalid Certificate Date
  • 13056 - Ignore all Certificate Errors

The default UploadFrequency and MaxEvents are recommended for environments with up to 4,000 users. For environments of between 4,000 and15,000 users, increase these settings to the values shown in the table below. For larger environments, where the UploadFrequency is increased to 20 minutes, it is recommended that your appliance has a minimum of 8 cores and 16GB of ram.

Users UploadFrequency MaxEvents
0 to 4,000 2 1,000
4,001 to 15,000 20 2,000

These recommended settings may require adjustment to get the optimum results for your particular environment.

Was this article useful?    

The topic was:

Inaccurate

Incomplete

Not what I expected

Other

Copyright © 2017, Ivanti. All rights reserved.

Terms of Use