PingIntelligence

Starting and stopping ABS

You can start and stop API Behavioral Security (ABS).

Stop ABS before performing any of the following tasks:

  • When deleting the ABS directory.

  • When deleting the data or metadata database.

  • When changing the user permissions.

Failure to do so will result in excessive logs in the MongoDB node.

  • Starting ABS

  • Stopping ABS

Starting ABS

Steps

  1. To start API Behavioral Security (ABS), run the start.sh script located in the /opt/pingidentity/abs/bin directory.

    To start ABS, you must accept the EULA. You can accept the EULA in two ways:

    • Scroll through the text on screen and enter yes to accept the EULA.

    • Use the --acceptLicense option with start.sh as shown in the screen output below:

      $ /opt/pingidentity/abs/bin/start.sh --acceptLicense
End-User License Agreement accepted
Starting API Behavioral Security Version 4.1...
please see /opt/pingidentity/abs/logs/abs/abs.log for more details

    After you accept the EULA, ABS creates a license.accepted file in the /opt/pingidentity/abs/config directory, which ABS checks for on subsequent starts.

  2. To verify that ABS has started, change the working directory to the data directory and look for two .pid files, abs.pid and stream.pid.

  3. Make sure that the newly added ABS node is connecting to MongoDB and has a heartbeat.

    Example:

    > use abs_metadata
switched to db abs_metadata
> db.abs_cluster_info.find().pretty()
 {
 "_id" : ObjectId("58d0c633d78b0f6a26c056ed"),
 "cluster_id" : "c1",
 "nodes" : [
 {
 "os" : "Red Hat Enterprise Linux Server release 7.1 (Maipo)",
 "last_updated_at" : "1490088336493",
 "management_port" : "8080",
 "log_port" : "9090",
 "cpu" : "24",
 "start_time" : "1490077235426",
 "log_ip" : "2.2.2.2",
 "uuid" : "8a0e4d4b-3a8f-4df1-bd6d-3aec9b9c25c1",
 "dashboard_node" : false,
 "memory" : "62G",
 "filesystem" : "28%"
 } ] }

Stopping ABS

Steps

  1. Stop API Security Enforcer (ASE) or turn off the ABS flag in ASE.

  2. If no machine learning jobs are processing, run the stop.sh script available in the bin directory.

    Example:

    # /opt/pingidentity/abs/bin/stop.sh
checking API Behavioral Security status
sending shutdown signal to ABS, please wait...
API Behavioral Security stopped

    If streaming or machines learning jobs are in progress, add the force parameter to kill running jobs and stop ABS:

    # /opt/pingidentity/abs/bin/stop.sh  --force
checking API Behavioral Security status
sending shutdown signal to ABS, please wait...
API Behavioral Security stopped