This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.
Prerequisites to Publish Statistics
Following are the prerequisites that should be fulfilled, in order for the Analytics Dashboard to publish the data processed by WSO2 IS.
Step 01: Download WSO2 IS Analytics
You can either download and build the source code or download the WSO2 IS binary distribution.
The binary distribution contains the binary files for both MS Windows and Linux-based operating systems.
Follow the steps below to download WSO2 IS Analytics binary distribution.Â
- Go to the WSO2 IS Analytics download page.
Download the WSO2 IS Analytics pack.
To download the pack with updates, click SIGN-IN & DOWNLOAD. Â
- To download the pack without updates, click DOWNLOAD.Â
The installation prerequisites for WSO2 IS Analytics is as same as for WSO2 Stream Processor (WSO2 SP). Therefore, for detailed information about the supporting applications you need to install, see WSO2 SP Installation Guide.
Step 02: Enable Analytics in WSO2 IS
Follow the steps below to enable event publishing in WSO2 IS.
- Open the Â
<IS_HOME>/repository/conf/identity/identity.xml
  file. Enable the following listeners.Â
Listener org.wso2.carbon.identity.data.publisher.application.authentication.AuthnDataPublisherProxy
Purpose - This is the common event listener for all the types of analytics supported in WSO2 IS.Â
- This listener captures all the statistics sent to WSO2 IS Analytics as events, and redirects them to the relevant listener based on their type.Â
- This listener is required to enable both session analytics and login analytics.
Configuration <EventListener type="org.wso2.carbon.identity.core.handler.AbstractIdentityMessageHandler" name="org.wso2.carbon.identity.data.publisher.application.authentication.AuthnDataPublisherProxy" orderId="11" enable="true"/>
Listener org.wso2.carbon.identity.data.publisher.application.authentication.impl.DASLoginDataPublisherImpl
Purpose - Enable this listener, only if you want to analyze statistics relating to logins attempted via WSO2 IS.
- For more information about this type of analytics, see Analyzing the Local Login Attempts.
Configuration <EventListener type="org.wso2.carbon.identity.core.handler.AbstractIdentityMessageHandler" name="org.wso2.carbon.identity.data.publisher.application.authentication.impl.DASLoginDataPublisherImpl" orderId="10" enable="true"/>
Listener org.wso2.carbon.identity.data.publisher.application.authentication.impl.DASSessionDataPublisherImpl
Purpose - Enable this listener, only if you want to analyze statistics for specific sessions in WSO2 IS Analytics.
- For more information about this type of Analytics, see Analyzing Session Statistics.
Configuration <EventListener type="org.wso2.carbon.identity.core.handler.AbstractIdentityMessageHandler" name="org.wso2.carbon.identity.data.publisher.application.authentication.impl.DASSessionDataPublisherImpl" orderId="11" enable="true"/>
Step 03: Configure Event Publishers
In a fresh WSO2 IS pack, you can view all the event publishers related to WSO2 IS Analytics in the <IS_HOME>/repository/deployment/server/eventpublishers
 directory.
The required configurations described below are available by default. Thus, follow this section to understand the analytics-related configurations used in the process and do any modifications if required.
WSO2 Analytics presents the login and/or session data published by WSO2 IS. For this, you need to configure the event publishers.
Follow the steps below to configure the event publishers:
Configure the login analytics and session analytics using the following files.
- Login analytics:Â
<IS_HOME>/repository/deployment/server/eventpublishers/IsAnalytics-Publisher-wso2event-AuthenticationData.xml
Session analytics:
<IS_HOME>/repository/deployment/server/eventpublishers/IsAnalytics-Publisher-wso2event-SessionData.xmlÂ
The configurations for login analytics and session analytics are almost the same except for event streams. This is because the format in which the events are captured for the two analytics are different. For more information event streams, see WSO2 SP Quick Start Guide.
The event streams that are specified for publishers should not be modified as that would cause errors in the default configuration.
The common properties that can be configured for event publishers in the files mentioned above are as follows. Â
Adapter Property Description Configuration File Example Receiver URL This captures the target receiver
URL
to which the WSO2 IS-related information are sent as events.Format:
tcp://<HOSTNAME>:<THRIFT_PORT>
- When specifying the thrift port, the default port offsets done for WSO2 IS Analytics should be considered, e.g., if WSO2 IS Analytics was started with a port offset of
1
, the thrift port should be7612
instead of7611
. For high availability scenarios, multiple analytics receivers can be defined by configuring multiple pipe-separated URLs with the format.
{tcp://<HOSTNAME>:<PORT>|tcp://<hostname>:<PORT>,...}
- As per the above configuration, events are published to all the defined receivers. For other ways of configuring the receiver URLs, see Collective Events.
receiverURL
For a single analytics receiver:
tcp://localhost:7612
For multiple analytics recievers:
<property name="receiverURL">tcp://al.km.wso2.com:7614|tcp://al.km.wso2.com:7615</property>
- This captures the
URL
of the authenticator. Format:
ssl://<HOSTNAME>:<SSL_PORT>
- When specifying the SSL port, the default port offsets done for WSO2 IS should be considered, e.g., if WSO2 IS was started with a port offset of
1
, the SSL port should be7712
instead of7711
. This parameter is not included in the
<IS_HOME>repository/deployment/server/eventpublishers/IsAnalytics-Publisher-wso2event-AuthenticationData.xml
file by default. When it is not included, the authenticator URL is derived by adding 100 to the thrift port.
authenticatorURL
User Name This captures the user name of the listener.
If the
EnableEmailUserName
property in the<IS_HOME>/repository/conf/carbon.xml
is set to true, define the user name with the tenant domain.
Example:<property name="username">admin@wso2.com@carbon.super</property>
For more information, see Using Email Address as the User Name.
username
wso2event-user
Password This captures the
password
of the listener.
password
wso2event-password
Protocol This captures the
communication protocol
that is used to publish events.
protocol
thrift/binary
Publishing Mode This captures the
event publishing mode
.- Non-blocking: This refers to asynchronous publishing.
- Blocking: This refers to synchronous publishing.
publishingMode
non-blocking/blocking
Publishing Timeout This captures the
timeout
for the non-blocking publishing mode that is denoted as a positive integer.
publishTimeout
0
- Login analytics:Â
Step 04: Change the Admin Password
Follow the steps below to change the admin password.
Navigate to theÂ
<IS_HOME>/repository/deployment/server/eventpublishers/IsAnalytics-Publisher-wso2event-AuthenticationData.xml
 configuration file and update the admin password.In a fresh WSO2 IS pack the password will appear in plain text. Once you restart the pack the password gets automatically encrypted.
Example:
<eventPublisher name="IsAnalytics-Publisher-wso2event-AuthenticationData" statistics="disable" trace="disable" xmlns="http://wso2.org/carbon/eventpublisher"> <from streamName="org.wso2.is.analytics.stream.OverallAuthentication" version="1.0.0"/> <mapping customMapping="disable" type="wso2event"/> <to eventAdapterType="wso2event"> <property name="username">admin</property> <property name="protocol">thrift</property> <property name="publishingMode">non-blocking</property> <property name="publishTimeout">0</property> <property name="receiverURL">tcp://localhost:7612</property> <property encrypted="true" name="password">kuv2MubUUveMyv6GeHrXr9il59ajJIqUI4eoYHcgGKf/BBFOWn96NTjJQI+wYbWjKW6r79S7L7ZzgYeWx7DlGbff5X3pBN2Gh9yV0BHP1E93QtFqR7uTWi141Tr7V7ZwScwNqJbiNoV+vyLbsqKJE7T3nP8Ih9Y6omygbcLcHzg</property> </to> </eventPublisher>
If you want to change the admin password, include the new password in plain text in WSO2 IS event publishers.
If you created a new keystore for WSO2 IS Analytics, import the
public certificate
of that keystore to theclientÂ-truststore.jks
of the WSO2 IS using the following command.Âkeytool -import -alias <alias> -file <file_name> -keystore client-truststore.jks -storepass wso2carbon
Step 05: Run the Servers
Follow the steps below to run WSO2 IS and WSO2 IS Analytics.
- Run WSO2 IS. For detailed instructions, see Running the Product.
Run the WSO2 IS Analytics profiles.
- If you are using geolocation-based statistics, do the necessary configurations prior to the restart. For more information, see Enabling Geolocation Based Statistics.
- If you are running WSO2 IS Analytics in a clustered setup, see WSO2 Stream Processor Deployment Guide.
Run the Worker node of WSO2 IS Analytics. For detailed instructions, see WSO2 SP - Starting Worker Node.
Run the Dashboard node of WSO2 IS Analytics. For detailed instructions, see WSO2 SP - Starting a Dashboard Node.Â