TAS Inventory file for distributed deployment (TAS 8)

There are two levels of distributed deployment. Each deployment level includes standard and high-availability configurations.

The inventory file for distributed deployment is divided into two parts:

  • The first section includes generic settings which must be customized according to the customer's topology. All the settings in this section are mandatory.

  • The second section includes advanced settings which MUST not be changed.

The inventory file is compatible by default with SSL environments. The communication mode for TAS must be identical to that of WFO.

For non-SSL environments, set the parameter secure_gateway_ssl_enabled as mentioned in the table.

Distributed deployment inventory file settings

The table describes the settings in the generic section of the inventory file for distributed deployments. Unless otherwise specified, the settings are relevant for both standard and high-availability configurations.

All servers require the fully qualified domain names (FQDNs), in the format <fqdn_server_name>.<domain>.com. For example, srv3.tas.mycompany.com.

If machines have both external and internal FQDNs, use the external ones.

Inventory file setting

Description

[app]

APPLICATION_SERVER_HOSTNAME zoo_id=1

The list of TAS Application servers that host the application services under [app].

For standard distributed deployments (without high-availability), the TAS application services are installed on a single server.

The FQDN of the TAS server hosting the application services.

Each TAS Application server must have an entry for the ZooKeeper with a unique ID.

[db]

DATASTORE_SERVER_HOSTNAME 

The list of TAS Datastore servers that host the database services under [db].

For standard distributed deployments (without high-availability), the TAS datastore services are installed on a single server.

The FQDN of the TAS server hosting the Text Datastore (Solr) index.

[lba]

tagger_lba=TAGGER_LBA_HOSTNAME

easolr_lba=EASOLR_LBA_HOSTNAME

easerch_lba=EASEARCH_LBA_HOSTNAME

config_lba=CONFIG_SERVICE_LBA_HOSTNAME

model_editor_lba=MODEL_EDITOR_LBA_HOSTNAME

vta_lba=VTA_LBA_HOSTNAME

kafka_lba=KAFKA_ZK_LBA_HOSTNAME

Required only in high-availability environments.

The FQDN of the LB associated with the TAS service.

  • tagger_lba: The FQDN of the LB associated with the Tagger Service.

  • easolr_lba: The FQDN of the LB associated with the Text Indexing Service.

  • easerch_lba: The FQDN of the LB associated with the Search Service.

  • config_lba: The FQDN of the LB associated with the Configuration Service.

  • model_editor_lba: The FQDN of the LB associated with the Model Management Service.

  • vta_lba: The FQDN of the LB associated with the Coordinator Service.

  • kafka_lba: The FQDN of the LB associated with the Kafka service.

[wfo_host]

WFO_APP_SERVER_HOSTNAME 

The FQDN of the WFO Application Server that hosts the Text application.

If there is more than one WFO Application Server, add the FQDN of the WFO LB associated with the WFO Application Server.

[management]

MANAGEMENT_SERVER_HOSTNAME 

The list of TAS Management servers used for installations and upgrades under [management]. Usually, a single TAS server is designated as the Management server.

The FQDN of the TAS server that is designated as the Management server used to deploy the Docker images during installation and upgrade.

local_dns=DNS_IP

Applicable to automated server preparation.

The IP address of the DNS used by the Docker engine.

[docker_repository]

DOCKER_REGISTRY_REPOSITORY_SERVER_HOSTNAME 

The FQDN of the TAS server that hosts the Docker repository. This server is usually the same server designated as the TAS Management server.

wfo_passphrase=

The token generated for the Security Token PassPhrase in WFO. The token is the passphrase for the Coordinator Service.

users_deploy=true

Applicable to automated server preparation.

Determines if to create TAS users as part of the automated server preparation, or create users manually before completing automated server preparation.

  • true: Default. Creates TAS users with the IDs defined for the parameters below.

  • false: Does not create TAS users.

    In this case, create the TAS users manually by performing these tasks described in Workflow: Manual TAS server preparation: Mount RPM ISO and install Verint repository, Install RPMs for TAS servers, and Create TAS user group and TAS user accounts.

tas_group_name=tas

tas_group_id=5000

 

tas_user_name=tas_app

tas_user_id=5001

 

tas_app_advanced_user_id=5004

The group and user names, and IDs for the TAS service accounts. To be modified only if the default names and IDs are to be changed.

  • tas_group_name: The name of the TAS user group that controls access to TAS folders, and includes all TAS service accounts.

  • tas_group_id: The ID of the TAS user group, by default 5000.

  • tas_user_name: The Application Management service account that manages the container's data volumes and mounts.

  • tas_user_id: the ID of the Application Management service account, by default 5001.

  • tas_app_advanced_id: The ID of the Advanced Application Management service account, by default 5004.

tas_installation_user_name=tas_inst

The name for the TAS installation user, and is by default tas_inst. To be modified if the default user name must be changed.

users_login_pass=USERS_PASSWORD

Applicable to automated server preparation.

The shared hashed user password fortas_maint andtas_inst users created using Python crypt function.

data_dir=/opt/app/data

The data directory for TAS.

To be defined only if the customer requires a different data directory for TAS.

snmp_host

snmp_port

Required to enable viewing SNMP alarms.

  • snmp_host: The host name of the NMS server to which the TAS sends SNMP alarms.

  • snmp_port: the port on the NMS server to which the TAS sends the SNMP alarms.

ISO_package_installation=true

Indicates if the customer used the RPM provided to install third-party products used by TAS servers.

  • true: The default, indicates that the provided RPM is used.

  • false: Indicates that the provided RPM is not used. In this case, the customer must install the required third-party components detailed in TAS server requirement matrix by server type, and the required versions as detailed in the Technology Map.

ca_password

The password defined for the ca.pem certificate. 

The CA password is also used as the solr_ssl_keystore_password and solr_ssl_client_keystore_password for access to the Text Indexing Service.

kafka_security_mode=Normal

 

The security mode configured for communication with Kafka. Normal is the lowest level of security, without authentication and without SSL.

[Secure Gateway]

secure_gateway_ssl_enabled=true (SSL) false (Non-SSL)

 For non-SSL environments only, set the parameter secure_gateway_ssl_enabled=false