PingIntelligence

Performing health checks on ASE

About this task

You can use the following options to conduct a health check on ASE nodes:

Steps

  • To enable the ASE health check URL in the /pingidentity/ase/config/ase.conf file, set the enable_ase_health config property to true.

    The default value of enable_ase_health is false.

    1. If the configuration is modified on a running ASE node, restart the node after modifying the configuration.

      For more information, see Starting and stopping ASE.

    2. In a clustered ASE environment, stop the ASE cluster and update the ase.conf file of the primary node and restart the other ASE nodes.

      For more information, see Restarting an ASE cluster.

    3. When the enable_ase_health is set to true, go to the following URLs and do a health check:

      • http://<ase-hostname/ip>:<http_port>/ase

      • https://<ase-hostname/ip>:<https_port>/ase

    If ASE is receiving the traffic, the response is 200 OK.

  • To check the status of an ASE process, the running status of HTTP or HTTPS process, and port number, run the status command-line interface (CLI) command.

    $./bin/cli.sh status

    This command also gives basic configuration information.

  • To show the status of communication between ABS and all the ASE nodes in a cluster, run the following command:

    $ ./bin/cli.sh -u admin -p admin abs_info

    The abs_info command shows the last log upload and attack fetch information from ABS. If ASE is having any issues in uploading logs to ABS or connecting to ABS, it is reported in the output of the command.

  • If ASE is running as a systemctl service, use the following command to check the status of the service:

    $ systemctl status pi-ase.service