PingIntelligence

Perform health checks on ASE

This section discusses the commands that can be used to check the health status of ASE. You can use the following options to conduct a health check on ASE nodes :

  • Health check URL

    Enable the ASE health check URL in the /pingidentity/ase/config/ase.conf file. To do this set the enable_ase_health config property to true. The default value ofenable_ase_health is false.

    If the configuration is modified on a running ASE node, restart the node after modifying the configuration. For more information, see Start and stop ASE. In a clustered ASE environment, stop the ASE cluster and update the ase.conf file of the primary node and restart the other ASE nodes. For more information, see Restart ASE cluster.

    Once the enable_ase_health is set to true, hit thhe following URLs and do a health check. If ASE is receiving the traffic, the response will be 200 OK.

    http://<ase-hostname/ip>:<http_port>/ase
https://<ase-hostname/ip>:<https_port>/ase

  • Status command

    Use the following CLI command to know the status of an ASE process, the running status of http or https process, and port number. It also gives basic configuration information.

    $./bin/cli.sh status

  • ABS Info command

    This command shows the status of communication between ABS and all the ASE nodes in a cluster. It shows last log upload and attack fetch information from ABS. If ASE is having any issues in uploading logs to ABS or connecting to ABS it will be reported in the output of the abs_info command.

    $ ./bin/cli.sh -u admin -p admin abs_info

  • Process status

    If ASE is running as a systemctl service, use the following command to check the status of the service.

    $ systemctl status pi-ase.service