Frequently asked questions about Exastro IT Automation (FAQ)
This page contains a list of commonly asked questions. Any answers that does not specify the version of Exastro IT Automation is specified for the latest version.
General
- Q1I want to upload and manage restricted files, such as PHP files, Share files and EXE files
- AFiles with the following extensions: 「.exe」「.com」「.php」「.cgi」「.sh」「.sql」「.vbs」「.js」「.pl」「.ini」「.htaccess」are restricted by default. It is possible to change those settings from the "Management Console">"System settings" menu. However, please keep in mind that there is a chance security holes will be created by doing this.
 
- Q2Does Exastro IT Automation have any Maintenance service?
- ASince Exastro IT Automation is an Open Source Software, there is no Maintenance service in the developer community. NEC is developing a/the Maintenance support service. (Japanese only) 『NECサポートポータル Exastro IT Automation 導入支援サポート・保守サポートご紹介』
 
- Q3Is it possible to import the form (Excel format) used in the existing project into Exastro IT Automation's CMDB (Parameter sheet)?
- AUnfortunately, you can't upload/download Excel file as it is in your existing project because the format of Excel to upload/download in Exastro IT Automation(ITA) is fixed.
 It is necessary to rewrite it to the format provided by ITA.
 
 Alternatively, you can use the machine interface (Rest API) function provided by ITA to code Excel used in existing project with VBA and synchronize information.
 For more information, please refer to this FAQ page.
 
- Q4I added CPU and memory, but the performance does not improve.
- AIt is necessary to tune the cofiguration values according to the machine specifications.
 Please refer to this document for tuning reference value.
 
- Q5What is the different between Exastro IT Automation and monitoring software (Zabbix, etc.)? How are the roles divided when both of them are used.
- AExastro is a tool aimed to improve the efficiency of system operation and construction.
 It is therefore different to monitoring softwares, such as Zabbix, as it does not
 come with Network device monitoring or alarm functions.
 
 It is possible to link Exastro and monitoring softwares.
 When linked, the workflow is as shown in the picture below.
 The monitoring software (marked with red) sends any incoming error messages to Exastro OASE
 where the error contents are compared to a rule list.
 If the error is an already known error, it will be sent to Exastro IT Automation where work arounds or solutions gets provided.
  
 
- Q6What is the different between Exastro IT Automation, Ansible and Terraform? How are the roles divided when both of them are used.
- AThe difference between Ansible and Terraform is as following.
 Ansible is a construction/management tool for Imperative IaC (Continuous)
 The main objective is construct and manage any app settings and software installations on the OS.
 It excells at performing the tasks in its intended order.
 
 Terraform is an orchestrating tool for declarative IaC(Declarative API) that improves the efficiency of infrastructure construction.
 
 For example,
 When creating EC2 on AWS, it excells at provisioning VM with Infraresources.
  
 As for the role divisions when the two softwares are linked,
 we expect that many will use Terraform to construct servers and Ansible to deploy apps.
 
 Additionaly,
 Exastro IT Automation can feed information from system parameters to both Terraform and Ansible, enabling centralized management of system information without being bound by automation software.
  
 
- Q7I want to join the Exastro IT Automation Developer community as a commiter.
- AYou can join Exastro-Suite from Github. 
 
 For any issues or requests, please create an Issue.
 New issues can be created by pressing the "New Issue" button in the following URLs.
 For Documents :
 For Code :
 If you want to modify the code after discussing it in the issue, please make a pull request to the target file linked with the issue.
 When doing so, please make sure to pull request on the latest version of the branch, not the master branch.
 
- Q8Can you use SAML Authentication with ITA?
- AThe only SSO authentication method supported is OAuth2. SAML authentication is not supported.
 If you want to use SAML authentication, please follow the instructions below.
 
 Put Redhat SSO(KeyCloak) between the AzureAd and Exastro authentication.
 Then. put Oath2 authentication between Exastro and Keycloak. You can then use SAML authentication between Keycloak and AzureAD.
 The SAML authentication will run from the KeyCloak screen when logging in to Exastro.
 
 For more information regarding SSO, please see "Exastro-ITA_System_Configuration_Enviroment_Construcion_Guide_SSO(Single_Sign-On)"
 
- Q9I want to deny HTTP access and only allow HTTPS Access to Exastro IT Automation.
- APlease follow the steps below to control/change HTTP/HTTPS access.
 
 1.Edit this file "/etc/httpd/conf.d/vhosts_exastro-it-automation.conf"
 ・To deny HTTP access, comment out (#) <VirtualHost *:80 > to </VirtualHost>.
 ・To deny HTTPS access, comment out (#) <VirtualHost *:443 > to </VirtualHost>.
 
 2. Restart Apache.
 
- Q10Where can I go to learn more about using Exastro IT Automation?
- AWe have a wide variety of documents and guides on the "Learn Page" on the Community site.
 For News regarding Exastro, please see the News room.
 For more detailed manuals on how to use the different functions, please see the Document page.
 
- Q11The process freezes if I try to upload a file with a size of over 128kb in advance when I am connected through HTTPS.
- AThis occurs when SSLCipherSuite is set in Apache's vhosts_exastro-it-automation.conf and SSLRenegBufferSize is not set.
 If these are not set, Apache mod ssl's default value (128kb) will be used, henced the error.
 Exastro IT Automation Version 1.5.0 and later does not use the default value, meaning that the error will not occur.
 
 In order to fix this, users can change the maximum upload file size by doing one of the solutions below in the Vhost setting file's "<VirtualHost*:443 >" settings.
 
 File :/etc/httpd/conf.d/vhosts_exastro-it-automation.conf
 1.configure SSLRenegBufferSize. (E.g. SSLRenegBufferSize 4000000000)
 2. Delete SSLCipherSuite (E.g.SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA)
 
- Q12Are there any sample codes for me to use in order to access the Exastro IT Automation Machine interface (Rest API)?
- AThe sample codes can be downloaded from the following URLs.
 
 VBA version(GitHub)
 Shell version(GitHub)
 
 Please see this FAQ page for the Ansible Playbook version.
 
- Q13What browser is recommended for using Exastro IT Automation?
- AFor information regarding different browsers and their requirements, please see Chapter "1.2 Client Requirements" in "Exastro-ITA_System_Configuration_Environment_Construction_Guide_Basic"
 
- Q14Where can I see the patch notes for each version?
- APlease see changelog file,CHANGELOG_en.md.
 Since the changelog is linked to issues, users can check the different issues for more detailed information regarding each change.
 
 ▼issue
 https://github.com/exastro-suite/it-automation/issues/xxx(←Replace "xxx" with desired issue number)
 
- Q15I can't open the Excel file downloaded from ITA.
- AThe current Spreadsheet module version you are using might not support ITA.
 Follow the steps below to fix it.
 
 ① Log into the ITA Server.
 
 ② Download phpspreadsheet v1.18.0。
 # /usr/bin/composer.phar require "phpoffice/phpspreadsheet":"1.18.0" 
 
 ※ Input "n" when you are asked the following:
 No composer.json in current directory, do you want to use the one at /work? [Y,n]? 
 
 ③ Take a backup of the vendor directory.
 # mv /usr/share/php/vendor [Free directory] 
 
 ④ Put the downloaded vendor directory (Step 2) under the /usr/share/php directory.
 # mv vendor /usr/share/php/ 
 
- Q16How do prohibit access to Exastro IT Automation via IP address, allowing only access by domain name?
- AFollow the steps below:
 
 ①Edit the "/etc/httpd/conf.d/vhosts_exastro-it-automation.conf" file.
 
 ・If you want to restrict HTTP access, add a <VirtualHost *:80> for prohibiting access before the existing <VirtualHost *:80>. Then make sure to change the existing <VirtualHost *:80>'s "Server name" to your desired domain name.
 
 E.g.
 #Add before the existing <VirtualHost *:80>. <VirtualHost *:80> ServerName any <Location /> Order Deny,Allow Deny from all </Location> </VirtualHost> <VirtualHost *:80 > ServerName exastro-it-automation.local #Desired domain name DocumentRoot /exastro/ita-root/webroot -Following is omitted-
 
 ・If you want to restrict HTTPS access, change the <VirtualHost *:443 >ServerName to your desired domain name and comment out(#) the ServerAlias.
 
 E.g.
 <VirtualHost *:443 > ServerName exastro-it-automation.local #Desired Doman name # ServerAlias exastro-it-automation * #Comment out DocumentRoot /exastro/ita-root/webroot -Following is omitted-
 
 ②Restart Apache.
 
- Q17An error (Fatal error:  Allowed memory size of 536870912 bytes exhausted) gets output to the backyard log/(ITAinstall directory)/ita-root/logs/backyardlogs/(Service name)_yyyymmdd.log)  What should I do?
 
 E.g.)
 Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 216651761 bytes) in /exastro/ita-root/webroot/menus/systems/2100020313/05_disp_taillog.php on line 263 
- AThis message says that there isnt enough php memory.
 
 The php memory is defined in /etc/php.ini > memory_limit. Change the memory limit value to your liking.
 
 php-fpm might be installed if you are using RedhatLinux.
 If that is the case, make sure to change the php_admin_value[memory_limit] in /etc/php-fpm.d/www.conf
 
 The changed values should take affect after php-fpm is restarted.
 
- Q17An error (Fatal error:  Allowed memory size of 536870912 bytes exhausted) gets output to the backyard log/(ITAinstall directory)/ita-root/logs/backyardlogs/(Service name)_yyyymmdd.log)  What should I do?
- Q18What kind of log does ITA output?
- APlease see here for a list of logs in Exastro-ITA. 
 Exastro-ITA_【reference】log list
 
- Q19What are the minimum specs for using Exastro IT Automation?
- AThe following specs are the minimum requirements:
 CPU= 2 Core CPU , Memory = 4GB, Storage space= 1GB.
 
- Q20Is there an easy way to register/edit a large number of records with pulldown selections using Excel?
- AThe pulldown selection items are written in the Excel file's "Master" sheet. We recommend that you copy/paste from there.
 
- Q21Are there any cron settings registered by ITA?
- AThe following are registered when installing ITA.
 
 01 00 * * * su - -c '[ITA installation directory]/ita-root/backyards/common/ky_execinstance_dataautoclean-workflow.sh' 02 00 * * * su - -c '[ITA installation directory]/ita-root/backyards/common/ky_file_autoclean-workflow.sh' 
 
 ・ky_execinstance_dataautoclean-workflow.sh
 Checks and cleans input operations.
 ・ky_file_autoclean-workflow.sh
 Checks and cleans files.
 
- Q22How does the Exastro IT Automation backup and restore function work?
- APlease see the following document.
 
 Exastro-ITA_【Reference】Backup/Restore_procedure
 
- Q23Is it possible to use a single Movement in both the Ansible and Terraform driver?
- AWhile it is possible to register a single Movement to multiple Playbooks, it is not possible to register them to multiple drivers.
 Note that if you are registering a single Movement to multiple Playbooks, you must specify it's Include orders.
  
 
- Q24The Menu icons wont display according to the "Display order" in the Management console > Menu group list.
- AIf any of the menus have been edited from the Main menu (Dashboard), the menu groups will be saved as such.
 This setting is saved per user.
 Onward, the "Display order" in the "Menu group list" will not be used and the menu groups will be displayed in the order specified in the Main menu (Dashboard). Any new menu groups will be added after the previous last menu group.
 If you want to revert the display order, you will need to reset the Main menu (Dashboard) edit.
 
- Q25How do I start/stop Exastro IT Automation's services?
- ANormally if ITA installed (online/offline) through the installer, you will not need to do anything special in order to start/stop it. If you want to stop the server, stop the Server OS.
 
 [Notes]
 ・Any scheduled operations and regularly executed operations will work normally after restart.
 ・Any stopped Movements will end with an "error" status.
 ・We cannot guarantee that any running Import operations will work normally if the server is stopped.
 
 If you need to run/stop the service manually, please run the following commands.
 
 ●Stop Exastro IT Automation
 ①Stop apache
 # systemctl stop httpd 
 ②Stop ITA service
 # cd /usr/lib/systemd/system # systemctl stop ky_* 
 ③Stop MariaDB service
 # systemctl stop mariadb 
 
 ●Start Exastro IT Automation
 ①Start MariaDB service
 # systemctl start mariadb 
 ②Start ITA service
 # cd /usr/lib/systemd/system # systemctl start ky_* 
 ③Start apache
 # systemctl start httpd 
 
- Q26Where can I see Exastro IT Automation's registered services?
- APlease see the following document for information regarding Exastro ITA's services.
 Exastro-ITA_[Reference]Registered_Service_list
 
- Q27Where can I see the user name and role of logged in users?
- AUsers can see their own user name and login id in the upper right corner after logging in to Exastro IT Automation.
 They can also press the "role" button under if they want to see what role they are in.
 
 If you want to see other users and their roles, go to "Management console > User list" and "Management console > Role/User link list" menus.
 
- Q28How do I apply SSL/TSL certificates after installing Exastro IT Automation?
- AIf you want to use a certificate different from the self signed certificate different from default one used by Exastro IT Automation, store the certificate and secret key files in /etc/pki/tls/certs/.
 
 For more information, please see the "Apache settings" section in【Appendix】ITA-Server_distrubuted_HA_configuration_installation_manual_8_(Web・AP)
 
- Q29I have read that Exastro IT Automation supports multiple user interfaces and that users can use Spreadsheets to operate it. What does that mean?
- AUsers can open and use Spreadhseets through Excel to operate Exastro IT Automation.
 Excel is the only supported Spreadsheet software. There is no guarantee that Exastro IT Automation will function properly if the user is using other Spreadsheet software(Google spreadsheet, WPS Office, etc.).
 For more information regarding the requirements, please see the "System requirements" chapter in "Exastro-ITA_System_Configuration_Environment_Construction_Guide_Basic".
 
Install
- Q1Are any RDBMS other than MariaDB usable?
- AMariaDB 10.3 or later can be used. Any other DBs are not guaranteed to work.
 
- Q2Can Exastro IT Automation be updated?
 Are there any restrictions? Are there any functions that stops working if I do so?
- AExastro IT Automation(ITA) can be updated to a newer version if it is version 1.4.0 or later. 
 Any ITA environments created from the All-In-One construction configuration can also be updated.
 Please see "IT Automation Version Up" for more information on how to update ITA.
 
- Q2Can Exastro IT Automation be updated?
- Q3Does the Exastro IT Automation All-in-One configuration Docker Containers support Kubernetes Autoscale/HA configurations?
- AThe Exastro IT Automation All-in-one configuration container image does not support Kubernetes autoscale configurations. therefore, make sure to only use 1 replica.
 If the number of replicas are 2 or over, Maria DB will run in each of the Pods. However, since these Maria DBs are not linked, an mismatch error will occur.
 
 Additionaly, if you want to build an HA configuration,
 you need to separate MariaDB, data relay storage, and other components into separate containers, but at the time of this question, we do not support seperate containers.
 We are currently planning to release Container images that supports Autoscaling and HA Configurations.
 
- Q4Can I Install Exastro IT Automation on CentOS8 now that it has no support?
- ACentOS8 with no support does not meet Exastro IT Automation's operation conditions.
 That being said, if you want to use CentOS8, you can do so by changing the repository settings file contents (Tested in 2022.2).
 
 Run the 2 commands below and specify the save location of the baseurl to a past repository. Doing so allows users to acquire the packages that the ITA installer needs, making it possible to install it.
 ※Note that the installation might take longer than normally and that the installer might time out.
 
 【Setting commands】
 # sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-* # sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g' /etc/yum.repos.d/CentOS-* 
 
- Q5How do I make data persistent in Exastro IT Automation All in one container?
- APlease see the url below for more information regarding persistent data.
 [URL]
 https://github.com/exastro-suite/it-automation-container/blob/main/README.en.md
 
 Item
 3.Data persistency
 Reference) Simplyfied Mount points
 
- Q6Is it possible to revert Exastro IT Automation to a previous version?
- ANo, it is not possible to downgrade Exastro IT Autoamtion to an earlier version.
 
- Q7When using an Exastro IT Automation all-in-one container environment, is it possible to have data imported when starting Docker/Kubernetes apps?
- AIt is not possible to have data automatically imported when the container starts.
 You will either have to import using the Exastro IT Automation interface or by using REST API.
 For more information regarding importing, please see the following manuals.
 
 Importing using Exastro IT Automation:
 Exastro-ITA_User_Instruction_Manual_Export_Import
 
 Importing using REST API:
 Exastro-ITA_User_Instruction_Manual_RestAPI
 
- Q8Is it possible to install additional drivers to an already installed Exastro IT Automation?
- AYes, it is possible to add drivers to Exastro IT Automation post installation.
 The procedure for doing so is almost the same as installing an Exastro IT Automation server.
 Make sure to specify your desired drivers in the installer in order to add them.
 
 【Add drivers】
 ①Edit the Exastro IT Automation installer answer file (ita_answers.txt)
 ⇒Set the install_mode to "Install_Online",
 and change the drivers you want to install to "yes". Set the other items to "no". (※Make sure to set drivers that are already installed/you dont need to "no".)
 
 ②Run the install command "sh ita_installer.sh"
 ⇒If the "INFO : Installation complete!" message displays, the drivers should be installed.
 
Management Console
- Q1What kind of RBAC setting units can I use?
- AFor v1.6.0 and later, there are possible to configure RBAC in two different patterns. "Menu unit RBAC" and "Record unit RBAC".
 
 If you set RBAC for Menus, it will count for the whole menu.
 If you want to set RBAC for records within menus, use Record unit RBAC.
 
 For more information regarding Record Unit RBAC, please refer to "Exastro-ITA_User_Instruction_Manual_Role-based_access_control_for_data_records".
 
- Q2How can I see the User IDs and Passwords for all the ITA users?
- AUser IDs can be seen in the Management console > User list menu as long as the user is logged in as user with admin permission.
 Passwords are stored with irreversable encryption, meaning that they cannot be acquired.
 
- Q3It takes too long to display menu lists when there are large amounts of records.
- AThere are three possible solutions.
 
 【1】 Decrease the amount of records being displayed
 Go to Management console > Menu list > List/Update and press the "Update" button for the menu you want display items decreased for. Here you can use the "Maximum line count for web display" and the "Line count for comfirmation for web display" collumn to control the amount of records being displayed.
 ・Maximum line count for web display: Amount of items displayed in "List/Update".
 ・Line count for comfirmation for web display: Amount of items displayed in the confirmation dialogue before displaying "List/Update".
 
 For more information, please see "Exastro ITA User instruction manual - Management Console"
 
 【2】 Download excel file and see the items there.
 You can download an excel files with all the records listed and see them there.
 If there are too many items for Excel to handle, you can also download an SCSV file (CSV format for ITA)
 
 ※Download SCSV file
 Go to Management console > Menu list and input the max amount of items you want displayed in the target menu's "Maximum line output for Excel" Collumn.
 Go to the menu you want to download the file for and press "Download all" to download the file in SCSV format.
 For more information, please see "Exastro ITA User instruction manual - Management Console"
 
 【3】 Upgrade the Client device or tune ITA.
 The amount of records that can be displayed depends on the spec of the client PC. So you can either upgrade the specs or tune the ITA server.
 
 For more information, please see "(Reference) Configuration settings during installation"
 
- Q4How do I change the design of the ITA console?
- AUsers can change the design of ITA by accessing the following: Management console > System settings > Select screen design.
 By changing colors of the different ITA environments (e.g. Testing environment and production environment) users can tell them apart easier.
 
 Users can choose between the following designs.
 
 ・default(Default design. Based on the color blue.)
 ・red(Design based on the color red)
 ・green(Design based on the color green)
 ・blue(Design based on the color blue)
 ・orange(Design based on the color orange)
 ・yellow(Design based on the color yellow)
 ・purple(Design based on the color purple)
 ・brown(Design based on the color brown)
 ・gray(Design based on the color gray)
 ・coolDesign based on the cold colors)
 ・cute(Design based on the color pink)
 ・natural(Design based on nature)
 ・gorgeous(Design based on the colors red and black)
 ・oase(Design based on the OASE design)
 ・epoch(Design based on the EPOCH design)
 ・darkmode(Desgn with dark colors made to be easy on the eyes during low light)
 
- Q5Is it possible to make it so users are not required to change their password?
- AYes, it is possible. You can set this for either all users or for specific users. See the steps below .
 
 All users:
 Change the Password expiration date period to "0".
 Management console > System settings > Password expiration period(days)
 
 Single users:
 Check the Password expiration settings.
 Management console >User list > Password expiration settings
 
- Q6There is a record for a menu in the Menu list/Role menu link list, but the Menu is not displayed by default. 
 How do I display this menu?
- AGo to the Management Console > Role menu link list and filter "Abolished only" items. After you have found your role and menu, press the "Restore" button.
 
- Q6There is a record for a menu in the Menu list/Role menu link list, but the Menu is not displayed by default. 
- Q7Where can I see the version of the Exastro IT Automation I am using?
- AYou can see the version by going to Management console > Version.
 
- Q8Where can I see what drivers are installed to the Exastro IT Automation I am using?
- AYou can see what drivers are installed by going to Management console > Version.
 
- Q9Can I register multiple users with the same mail address in the Management consol > User list?
- AYes. You can register multiple users with one e-mail address.
 
- Q10When I changed the password by pressing the "Change password" button in the upper right corner, the "Last update date/time of password" in the "Management console > User list" menu is updated,
 but changing the password from the User list menu does not. How do I fix this?
- AThis happens if the Exastro IT Automation is running on version 1.8 or ealier.
 Version 1.9 comes with a setting that clears the "Last update date/time of password" item when updating the password from the "Management console > User list" menu.
 
- Q10When I changed the password by pressing the "Change password" button in the upper right corner, the "Last update date/time of password" in the "Management console > User list" menu is updated,
- Q11When using the Management console > Sequence list" menu and the "Setting value" is set to "1500" when the previous menus' Menu ID goes to 1000, will that mean that the next registered record's Menu ID will be 1500?
- AThat is correct.
 The "Setting value" in the Management console > Sequence list" menu decides the number of the next registered unique item (For example Menu ID).
 The "Setting value" is then automatically updated to include the previously registered record.
 
- Q12Is it possible to change the icons of Menu groups?
- AUsers can change the Menu group icons by changing the image files in the "Image for panel" items in the " "Management console > Menu group list".
 It is also possible to edit the images by using the "Panel image editor".
 
Basic Console
- Q1Is it possible to specify host port numbers and connect with SSH when executing an Ansible operation?
- AThe Default port number is set to number 22. If you want to assign a different number, please do the following: 
 Go to Basic console > Device list. In the "Ansible dedicated information" > "Inventory file Additional option" collumn, input "ansible_port: (PortNumber)"
 
 (Example) If you want to connect to port number 10022, input the following
 ansible_port: 10022
 
Export/Import
- Q1Can I use the Exastro IT Automation Export/Import function between different versions?
- AThe Exastro IT Automation(ITA) Export/Import function can not be used to transfer data between ITA systems on different versions.
 If you want to import to an ITA on a newer version, first create an ITA system with the same version as the ITA you want to import from.
 After you've imported, you can now update the ITA where the data got imported to.
 
 Please see "IT automation Version Up" for information on how to update ITA.
 
 ※Please note that system can only be updated to v1.5.0 or later, and that only systems on v1.4.0 or later can be updated.
 
- Q2Does files uploaded to menus such as "Template list" and "Playbook files" get exported when using the Excel bulk export function?
- AExcel bulk export/import does not export/import file collections. If you want to export them, use the normal "Menu export/Menu import" functions.
 
- Q3Is it possible to gather and register Excel files from/to multiple menus at the same time?
- AUsers can download and upload Excel files in bulks from/to multiple menus from the "Export/Import>Excel bulk export/Excel bulk import" menu.
 
- Q4What is the difference between the
 "Export/Import > Menu export, Menu import"
 and "Export/Import> Excel bull export, Excel bulk import" function?
- AMenu export, Menu import:
 This function allows users to move data registered to Exastro IT Automation (Parameter sheets, Conductors, Playbooks, etc.) to a different ITA server as menu units.
 
 E.g.)
 Move Data from ITA server A to ITA server B.(Move data between different servers.)
 
 
 Excel bulk export/ Excel bulk import:
 This functions allows users to select which menu they want to download/upload excels files from/to in bulks.
 
 E.g.)
 Download Excel files from ITA Server A , update the files and upload them back to ITA server A(Updating Server A with download/upload).
 
- Q4What is the difference between the
- Q5I got an "Unexpected error" while running an operation in Exastro IT Automation, resulting in the operation stopping.
 I was using the "Menu import" function while the operation was running.
- AAs importing menus will cause processes to stop, running Movement processes might be deleted.
 We highly recommend that you check that no movements are currently running while importing menus.
 
- Q5I got an "Unexpected error" while running an operation in Exastro IT Automation, resulting in the operation stopping.
- Q6If exporting/importing menus from Environment A to Environment B and one of the menus' Menu ID already exists in Environment B, would it be possible to change the Menu ID to a different Menu ID, effectively creating a new menu?
- AThe Menu export/import function uses the menu's unique items(Menu IDs and other items that are used to tell unique records apart) to move items.
 If the exported data's unique item overlaps with some of the already existing data in the import destination, the existing data will be overwritten.
 It is not possible to automatically change and add unique items.
 
 However, it is possible to change the items between Environment A and B so they dont overlap.
 Users can go to the Management console > Sequence list and change the number of the next used unique item.
 When importing menus exported with the "Time specification" set, data that are registered after doing to steps above will be imported without overlapping.
 If there is overlapping data, the exported data (new data) will be prioritized.
 
 For more information regarding the "Time specification" settings when importing/exporting, please see the manual below.
 Exastro-ITA_User_Instruction_Manual_Export_Import
 
- Q7What is the order of which files are imported when using the Excel bulk import function?
- AWhen using the Excel bulk export function, the user will recieve a zip file (ITA_FILES_YYYYMMDDhhmmss.zip) that contains a file called "MENU_LIST.txt". 
 The "MENU_LIST.txt" contains a list of files that are imported. The files are imported starting from the top.
 The file contains the MenuID and the File name of the files from when they were exported.
 
Conductor/Symphony
- Q1What is the difference between Symphony and Conductor?
- ASymphony is a function that allows users to combine multiple movements into job-flows and execute them in order. 
 Conductor is the supersedement of Symphony and can in addition do the following:
 ・Parallel execution: Execute multiple Movements at the same time. The amount of parallel executable Movements depends on the performance.
 ・Calling conductor: It is possible to call in a different Conductor.
 ・Appoint repair: It is possible to set all movements and such to be repaired after they`re finished.
 
- Q2What is an "Operation" and "Symphony/Conductor"?
- AIn Exastro IT Automation, we define the words as following:
 Movement: The smallest automated operation unit that ITA can create. A job.
 Symphony/Conductor: A jobflow made up by multiple Movements. When the first movement is finished, the next movement will automatically be executed. It is a very general procedure.
 For information on the difference between Symphony and Conductor, please refer to this page.
 Operation : A set of automated tasks created in ITA.
  
 All information related to the Symphony/Conductor operations and devices are linked and managed.
 
 Note: Once a Symphony/Conductor is created, it can be used multiple times in different operations.
 For example:
 The two operations (For Christmas) and (For New Years) are different, but they both use the same symphony.
  
 
- Q3How do I send data between Symphony movements?
- AIn Ansible or Ansible-Tower, files can be shared between each Movement by creating files under the Playbook's Symphony operation directory path.
 It is possible to have the Operation Directory path be treated as an ITA Reservation variable "__symphony_workflowdir__".
 For information on the Operation Directory Path, please refer to the "Symphony" Menu group -> "Symphony Interface Information" Menu.
 
 
 The following is a sample code used in Ansible Legacy.
 
 [Sender]
 - name: API Execution uri: url: http://sample.com/ method: GET status_code: 201 register: result ignore_errors: yes - name: Data opening local_action: module: copy dest: "{{__symphony_workflowdir__}}/data" content: "{{ result.content }}"
 
 [Receiver]
 - name: Load Data shell: cat "{{ __symphony_workflowdir__}}/data" register: data - debug: var=data
 
- Q4How do I send data between Conductor movements?
- AIn Ansible or Ansible-Tower, files can be shared between each Movement by creating files under the Playbook's Conductor operation directory path.
 It is possible to have the Operation Directory path be treated as an ITA Reservation variable "__conductor_workflowdir__".
 For information on the Operation Directory Path, please refer to the "Conductor" Menu group -> "Conductor Interface Information" Menu.
 
 
 [Sender]
 - name: API Execution uri: url: http://sample.com/ method: GET status_code: 201 register: result ignore_errors: yes - name: Data opening local_action: module: copy dest: "{{__conductor_workflowdir__}}/data" content: "{{ result.content }}"
 
 [Receiver]
 - name: Load data shell: cat "{{ __conductor_workflowdir__}}/data" register: data - debug: var=data
 
- Q5How can I execute a Movement with a different Operation in Conductor?
- AYou can configure what Movement and Operation you want to execute from "Operation select" when you are editing or executing the Conductor.
 
 【Conductor edit】
 Move to the "Conductor" > "Conductor class edit" menu.
 ①Drag and drop the Movement into the Canvas area.
 ②Select the Movement.
 ③Go into "Operation select" and select your Operation.
  
 
 【Conductor execution】
 Move to the "Conductor" > "Conductor execution" menu.
 ①Select Conductor and Operation.
 ②Select the Movement you want to run under "Conductor execution"
 ③Go into "Operation select" and select your Operation.
  
 
- Q6Is it possible to arrange/tidy up nodes when creating a Conductor in the Conductor > Conductor class edit menu?
- AUsers can select their desired nodes and modify their arrangement from the Node tab.
 Please see the steps below for more information.
 
 ①Select your desired nodes by either drawing an area while holding the left mouse button or by selecting indivisual nodes while holding the "shift" key.
 ②Go to the "Node" tab on the right side of the screen and select how you want to arrange the nodes.
  
 
 (E.g.)Pressing the "Align vertically to the center" button will arrange the nodes as follows:
  
 
- Q7What is the difference between 
 "Conductor > Conductor execution" and
 "Ansible-Legacy/Ansible-LegacyRole/Ansible-Pioneer > Execution" ?
- A"Conductor > Conductor execution":
 This function allows users to create Conductors by using single or combining multiple Movements.
 Users can run the conductors by selecting Conductor and Operation.
 
 "Ansible-Legacy/Ansible-LegacyRole/Ansible-Pioneer > Execution":
 This function allows users to select single Movements and Operations that they want to run.
 Users can also dry-run Movements.
 
- Q7What is the difference between 
- Q8Is it possible to have a Conductor run at a specified time?
- AIn the "Conductor > Conductor execution" menu > "Schedule" submenu, users can input a reservation date. Pressing the "Execute" button will then reserve the operation and run it at the specified time._
 Users can also manage Conductors they want to be run in a fixed period in the "Conductor > Conductor Regularly execution" menu.
 
 Please see the document below for more information.
 
 Exastro-ITA_User_Instruction_Manual_Conductor
 Conductor execution, Conductor regularly execution.
 
- Q9I ran a Conductor and successfully passed the first Movement, but failed the second Movement. 
 How can I run the same Conductor from the second Movement?
- AWhen selecting nodes in the "Conductor Execute" submenu in the "Conductor > Conductor execution" menu, you can choose to skip operations by ticking out the "Skip" box in the Movement tab.
 
- Q9I ran a Conductor and successfully passed the first Movement, but failed the second Movement. 
- Q10What happens if I update the target host while a Conductor is running?
- AIf the target host is changed right after the Conductor is executed, there will be no signigicant consequences as the operation will first gather any data used for the execution.
 Note that if a "Conductor call" node is run within a Conductor, the data from the the Conductor called by the "Conductor call" node will be gathered.
 
Host group management
- Q1What is host group?
- AA host group is a Host group that gathers logical units (functions and roles).
 By using the host group management function, it is possible to give work instructions to grouped hosts, making it easier to manage works in a large system environment with multiple hosts.
 Additionaly, by defining a parent-child relationship in host groups, it is possible to set succeeding parameters from the parent to the child host groups.
 
 For more information, check the Community site's Learn page's "Exastro IT Automation Host group management・Menu creation"
 
- Q2Is it possible to set priorities for the host groups?
- AUsers can define host group priorities in the Host group list > Host group list> Priority (Bigger is stronger).
 The parameters set to the host group with the biggest number will be used.
 
- Q3Can I execute an operation to a small group of hosts within a host group?
- AYes. Users can execute operations to a specific set of hosts within a host group by specifying the operation(s) when linking the host and host groups in the "Host group list> "host link list" menu.
 Note that it will only work for said specified operation.
 
Ansible-driver
- Q1How do I log in and set SSH in Windows server in Pioneer?
- AOur manuals contains description examples for Windows Server dialogue files. 
 For more information, please see "Exastro-ITA_User_Instruction_Manual_Ansible-driver"'s "Dialogue file (Ansible-Pioneer) description" chapter.
 
 The newline character of the command input to the construction target device by Pioneer mode is "LF".
 The newline charater for Windows is "CRLF", so make sure to add "/r" at the end of the input command input to the construction target device in the Dialogue file.
 
- Q2What is the difference between File management and template management?
- AFile management is used to register files used in each module defined in a playbook. 
 The file materials are static files that uses copy and file modules.
 
 Template management is used to register files used in Template modules and such defined in Playbooks.
 Files in Template management are written in a template language called Jinja2 and can dynamically create files, variables and conditional branches.
 
- Q3Why do I have to set the variables manually in Template management?
- A(In the case of Ansible-Legacy and Ansible Pioneer)
 If done in Ansible, an unexpected error will occur in ITA.
 
 (In the case of Ansible-LegacyRole)
 Ansible will be executed.
 If the specific values in Default/Main.yml( or other files) are defined, those values will be executed. If not defined, an error will occur when those variables are being used.
 
- Q4If the variables inside a playbook (VAR_XXX) are executed without any specific values set to them, at what timing will an error occur?
- A(In the case of Ansible-Legacy and Ansible Pioneer)
 If done in Ansible, an unexpected error will occur in Exastro IT Automation.
 
 (In the case of Ansible-LegacyRole)
 Ansible will be executed.
 If the specific values in Default/Main.yml( or other files) are defined, those values will be executed. If not defined, an error will occur when those variables are being used.
 
- Q5The specific values in Parameter sheets wont show correctly in the substitute value management menu when using the substitute value automatic registration.
- ACheck the definition information in the substitute value automatic register settings.
 Abiding the automatic registering settings,
 the function that automatically register parameter sheets values into substitute values will not update if the last changer is any other function.
 
- Q6I executed Legacy work to all the hosts set to users in Device list(expect for Root Users),
 but an error occurs in the Ansible Command
- AIn the case of executing a ansible command in Exastro IT Automation, set the default sudo parameters to "yes".
 Set Sudo authority to all the corresponding work target host users.
 If you don’t need a sudo authority, please input the following information into the Header section in the register screen in "Ansible-driver > Movement list .
 - hosts: all remote_user: "{{ __loginuser__ }} " gather_facts: no become: no
 
 For more information regarding the Default header section, please see this FAQ page.
 
- Q6I executed Legacy work to all the hosts set to users in Device list(expect for Root Users),
- Q7I executed work to the host set to telnet in Device list protocol, but an error occurs when connecting to the work target host.
- AA common cause for errors is that the password in the file or in the password prompt is incorrect, so please make sure it is correct.
 
 As an example, Let`s write the expect module and the exec module to use the passwords below when connecting to telnet.
 △△-△expect:△’Password’
 △△△△exec:△itapassword
 ※△=space
 
 (possible errors)
 ・The password that should be put in Expect should be password, and not Password
 ・The password was not itapassword
 
- Q8I tried executing Orchestra work to a host with public key set as authentication method in the device list, but an error occurs when connecting to the target host.
- APlease check if a public key is registered to the target host side in Ansible/AnsibleTower server`s .ss/known_hosts.
 
 Logging in with a corresponding host name or ip address in the ssh command from the server written above will register a public key.
 
- Q9I tried executing Orchestra work to a host with password authentication as authentication method in the device list, but an error occurs when connecting to the target host.
- APlease check if password authorization is allowed in the SHH settings for the target host.
 
- Q10I specified the Host specification format in the Movement list and executed each orchestrator, but an error occurs when connecting to the target host.
- AThe following can be thought of being the problem.
 【1.The Name resolution is not available/ there is no Name resolution.】
 You can either set up a Name resolution or specify an IP Address.
 ・DNS Server-> Set an DNS Server (IP Address) to /etc/resolv.conf
 ・Host File-> Insert the address resolution settings for the Host name to /etc/hosts
 
 If you're specifying an IP Address, make sure that the Host specification format parameter is set to "IP Address" when registering in the Movement list.
 
 【2.Public key is not configured to the host name】
 If SSH Connection is used, make sure that the public key for the target host side is registered in the "known_hosts" in the Ansible and AnsibleTower server with the corresponding host name.
 
- Q11The /tmp file shown in the playbook isnt created.
- AThe PrivateTmp fucntion is added from RHEL7.
 The Apache installed in Exastro IT Automation(ITA) activates the PrivateTMP function.
 All playbook executions from ITA goes through Apache, so/tmp is bound to a different directory.
 It is therefore recommended that access to /tmp files from playbooks in ITA is refrained.
 
- Q12I cant connect to the Windows server from Ansible
- AOpen up Powershell as an administrator in the windows server and execute the command below
 C:\User\User> Enable-PSRemoting -Force
 ↓
 C:\User\User> Set-NetConnectionProfile -InterfaceAlias (Get-NetConnectionProfile - IPv4Connectivity Internet).InterfaceAlias -NetworkCategory Private
 ↓
 C:\User\User> winrm set winrm/config/service/auth '@{Basic="true"}'
 ↓
 C:\User\User> winrm set winrm/config/service '@{AllowUnencrypted="true"}'
 
 If you`re yousing Ansible-Legacy/Role, make sure the WinRM connection between device list and Movement list is enabled.
 
- Q13How do I make Role files(zip) for Ansible-Legacy Role mode?
- AWe explain the process of using Ansible Role files in Legacy role in the Learn page's "Exastro IT Automation Ansible Driver Practice" document (Chapter 2, Ansible-LegacyRole). 
 Please see it for more information.
 
- Q14What is the difference between the 3 Ansible-Driver modes?
- AThe 3 Ansible-Driver modes have different use-cases and should be used accordingly. 
 ・Ansible Legacy Mode is good at reusing Playbooks.
 ・Ansible-Legacy Role allows the user to use Ansible-Role.
 ・Ansible Pioneer mode can handle various situations with the use of its original dialogue files.
 
 For more information, please see the "Exastro IT Automation Ansible Driver Lecture" Document from the Learn site.
 
- Q15What is the different between Exastro IT Automation and Ansible Tower? How are the roles divided when both of them are used.
- AThe difference between AnsibleTower and Exastro IT Automation(ITA) is as following.
 ITA manages and gathers setting data.
 Ansible creates any config files and directories necessary to execute operations.
 
 AnsibleTower securely executes and communication between clusters and can control
 different versions of Ansible Engine(The engine that executes Ansible Playbooks).
 
 Combining ITA, AnsibleTower and AnsibleEngine makes up an automatically constructed system that
 takes advantage of the features of all the different modes.
  
 
- Q16Is it possible to link multiple Exastro IT Automations to one AnsibleTower?
- AYes. It is possible to link miltiple ITAs to one AnsibleTower. 
 However, in order to avoid data conflicts, please make sure that the following settings are different for each ITA.
 
 ・Ansible operation number
 "Management Console" menu → Sequence list.
 C_ANSIBLE_LNS_EXE_INS_MNG_RIC
 C_ANSIBLE_LRL_EXE_INS_MNG_RIC
 C_ANSIBLE_PNS_EXE_INS_MNG_RIC
 C_SYMPHONY_INSTANCE_MNG_RIC
 C_CONDUCTOR_INSTANCE_MNG_RIC
 
 ※For Exastro IT Automation earlier than ver1.10, make sure to configure the following settings listed below.
 
 ・Data storage path (For both Symphony and Conductor)
 "Ansible Common" menu → Interface Information
 Symphony Instance Data relay Storage path (Ansible)
 Conductor Instance Data relay storage path (Ansible)
 
- Q17How can I import information retrieved from Ansible or other systems into a parameter sheet in Exastro IT Automation?
- AIt is possible to use the "Collect" function to import information to a parameter sheet.
 The "Collect" function automatically registers values to the parameter sheet based on the results of previously executed Ansible operations in Exastro IT Automation (source files output in a specific format).
 You can create parameter sheets and connect it to the source file in advance.
 
 For more information regarding the Collect function, please click here(Japanese only).
 ・Learn Documents
 ・User Manual
 
- Q18How can I acquire information from AWS?
- AWe recommend using Ansible's AWS module. 
 As an example, we've listed an example of a Playbook that acquires EC2 lists below.
 
 ※It is possible to assign variables (VAR_○○○○) from Exastro IT Automation
 ※By using Exastro IT Automation's API, it is possible to update/register the acquired information to Exastro IT Automation's Parameter sheet. (Please refer to this FAQ page for more information)
 
 - name: get VM list ec2_instance_info: aws_access_key: "{{ VAR_aws_access_key }}" aws_secret_key: "{{ VAR_aws_secret_key }}" region: "{{ VAR_region }}" validate_certs: no filters: "tag:Name": "{{ VAR_tagName }}*" "instance-state-name": [ "running" ] register: ec2_info_from_aws
 Refer to this FAQ page for Azure.
 
- Q19How can I acquire information from Azure?
- AWe recommend installing the Azure module from "Ansible-Collections" and using it.
 
 【How to install Azure modules from Ansible-collections】
 # curl https://raw.githubusercontent.com/ansible-collections/azure/dev/requirements-azure.txt > requirements-azure.txt # pip3 install -r requirements-azure.txt # ansible-galaxy collection install azure.azcollection -n 
 
 As an example, we've listed an example of a Playbook that acquires public IP address information below.
 ※It is possible to assign variables (VAR_○○○○) from Exastro IT Automation
 ※By using Exastro IT Automation's API, it is possible to update/register the acquired information to Exastro IT Automation's Parameter sheet. (Please refer to this FAQ page for more information)
 
 - name: get Public IP Address info azure_rm_publicipaddress_info: subscription_id: "{{ VAR_azure_subscription_id }}" tenant: "{{ VAR_azure_tenant_id }}" client_id: "{{ VAR_azure_client_id }}" secret: "{{ VAR_azure_secret }}" cert_validation_mode: "ignore" resource_group: "{{ VAR_azure_resource_group }}" register: vm_info_from_azure
 Refer to this FAQ page for AWS.
 
- Q20I want to access Exastro IT Automation from Ansible Playbook.
- AIt is possible to use Exastro IT Automation's API in Ansible Playbook to access Exastro IT Automation. 
 【Example】
 ・Reference/Register/Update/Delete/Revive Parameter sheets etc.
 ・Executing Conductor
 
 As an example, we've listed a playbook that allows users to reference Exastro IT AUtomation's "Device list".
 ※For "VAR_exastro_user_pswd_base64", use the Exastro IT Automation Username/password to set the encoded value of the "user:password" string.
 
 - name: Refer "Device list" uri: url: "https://{{ __loginhostname__ }}/default/menu/07_rest_api_ver1.php?no=2100000303" validate_certs: no method: POST headers: Host: "{{ __loginhostname__ }}:443" Authorization: "{{ VAR_exastro_user_pswd_base64 }}" Content-Type: "application/json" X-Command: "FILTER" body_format: json body: "1": "NORMAL": "0" register: device_list_from_exastro
 
 Please see this FAQ page for the VBA and Shell version.
 
- Q21What are the default header section settings?
- AThe default header section is as follows.
 
 If the header section in the Movement list registration screen (in the Ansible-driver menu) is blank, the following will be automatically configured.
 
 If you want to change the settings, please enter the following text in to the header field and rewrite the places you want to change.
 - hosts: all remote_user: "{{ __loginuser__ }} " gather_facts: no become: yes
 
- Q22How is the priority of Ansible-LegacyRole's Default/main.yml, itareadme and Parameter sheets?
- AFor more information regarding the Parameter priorities, please see the following chapters in the "User Instruction Manual Ansible Driver".
 ・Role package list (Ansible-Legacy Role)
 ・Describe ITA readme and Substitution table (Ansible-Legacy Role only)
 
- Q23A Python warning message gets displayed in the error log when running an operation.
- AThe Exastro IT Automation(ITA) Installer installs the necessary python packages in order to use Ansible, but if the dependance relationship of the Python module and a part of the OS breaks or is failing, the following warning messages will be output when running an operation.
 
 The following python package are installed by the ITA Installer.
 ・pexpect pywinrm boto3 paramiko boto 
 
 Output warning message.
 /usr/lib/python3.6/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.26.4) or chardet (3.0.4) doesn't match a supported version! RequestsDependencyWarning) 
 
 If this warning message gets output, follow steps 1-5 to fix the Python module dependance.
 
 1.Install the command ,"pipdeptree" that checks the Python module dependancy.
 # pip install pipdeptree
 
 2.Use the "pipdeptree" command do check the Python package's dependancy
 # pipdeptree
 
 3.Check the dependancy
 urllib has dependancy with boto3 and pywinrm, but since it contradicts with the version it is expecting, Python outputs a warning that the urllib3 url is not within the range of what is expected in the pywinrm dependency requirements.
 ・boto3: - urllib3 [required: >=1.25.4,<1.27, installed: 1.26.4]
 ・pywinrm: - urllib3 [required: >=1.21.1,<1.25, installed: 1.26.4]
 
 Dependencies output by pipdeptree(excerpt.)
 Warning!!! Possibly conflicting dependencies found: * requests==2.20.0 - urllib3 [required: >=1.21.1,<1.25, installed: 1.26.4] ------------------------------------------------------------------- boto3==1.17.53 - s3transfer [required: >=0.3.0,<0.4.0, installed: 0.3.7] - botocore [required: >=1.12.36,<2.0a.0, installed: 1.20.53] - jmespath [required: >=0.7.1,<1.0.0, installed: 0.10.0] - python-dateutil [required: >=2.1,<3.0.0, installed: 2.6.1] - six [required: >=1.5, installed: 1.11.0] - urllib3 [required: >=1.25.4,<1.27, installed: 1.26.4] pywinrm==0.4.1 - requests [required: >=2.0.0, installed: 2.20.0] - chardet [required: >=3.0.2,<3.1.0, installed: 3.0.4] - idna [required: >=2.5,<2.8, installed: 2.5] - urllib3 [required: >=1.21.1,<1.25, installed: 1.26.4] 
 
 4.Recover the dependency with the "pip" command.
 Upgrade the Requests.
 # pip install --upgrade requests
 
 5. Use the "pipdeptree" command again to check the python package dependancy.
 By upgrading the requests, both urllib3 will have its version corrected to the one expected by boto3 and pywinrm.
 ・boto3: - urllib3 [required: >=1.25.4,<1.27, installed: 1.26.4]
 ・pywinrm: - urllib3 [required: >=1.21.1,<1.27, installed: 1.26.4]
 
 Dependencies output by pipdeptree(excerpt.)
 boto3==1.17.53 - s3transfer [required: >=0.3.0,<0.4.0, installed: 0.3.7] - botocore [required: >=1.12.36,<2.0a.0, installed: 1.20.53] - jmespath [required: >=0.7.1,<1.0.0, installed: 0.10.0] - python-dateutil [required: >=2.1,<3.0.0, installed: 2.6.1] - six [required: >=1.5, installed: 1.11.0] - urllib3 [required: >=1.25.4,<1.27, installed: 1.26.4] pywinrm==0.4.1 - requests [required: >=2.0.0, installed: 2.25.1] - certifi [required: >=2017.4.17, installed: 2020.12.5] - chardet [required: >=3.0.2,<5, installed: 3.0.4] - idna [required: >=2.5,<3, installed: 2.5] - urllib3 [required: >=1.21.1,<1.27, installed: 1.26.4] 
 
- Q24I linked a parameter sheet with the value "YES" to Ansible-Driver and input a substitute value to the Playbook Variable, but when running Ansible, it gets recognized as True, meaning that I cannot use YES for String.
- A"YES" is an Ansible specification and will be automatically changed to True (boolean).
 Therefore, you cannot use it as a String.
 
 The following will be changed to "True/False", irregardless of capitallized and small letters.
  
 
 If you want to use YES or NO for Strings, enclose YES in double or single quotations for the item in the corresponding parameter sheet.
 
- Q25Are there sample codes for the Collect Function?
- AFor more information regarding sample codes, please see "Exastro-ITA_User_Instruction_Manual_Collect_Function"'s "Appendix" > "References".
 
- Q26Something goes wrong when I try to upload Playbook files.
- AThere might be something wrong with the contents of the Playbook.
 Please see the points below.
 
 ・The character code must be set to "UTF-8 Without BOM".
 ・The file extension must be "YAML" format.
 ・The indents inside the Playbook file are doubled.
 
 For more information regarding the coding format for Playbooks, please see the official Ansible manual.
 
- Q27How can I change the service startup cycle?
- AUsers can use the file below in order to change the run cycles.
 
 【Guide】
 ① Log in to the ITA server with SSH.
 
 ②Modify the following file:
 
 File path:/usr/lib/systemd/system/ky_xxxxx.service
 Update the area marked with red. The smallest unit is 1 second.
 
 (Example)For Ansible-Legacy Substitute value auto-registration:
 [Unit] Description=ky_legacy_varsautolistup-workflow After=syslog.target network.target mysqld.service [Service] EnvironmentFile=/etc/sysconfig/ita_env ExecStart=/bin/sh ${ITA_ROOT_DIR}/backyards/common/ky_loopcall-php-procedure.sh /bin/php /bin/php ${ITA_ROOT_DIR}/back yards/ansible_driver/ky_legacy_varsautolistup-workflow.php ${ITA_ROOT_DIR}/logs/backyardlogs 10 ${ITA_LOG_LEVEL} > /de v/null 2>&1 ExecReload=/bin/kill -HUP $MAINPID ExecStop=/bin/kill $MAINPID [Install] WantedBy=multi-user.target
 
 ③Restart service
 Restart the "ky_xxxxx.service" process.
 
 ※Please note that the lower time set, the bigger load it will be on the server.
 
- Q28Can I make the Ansible log output more detailed information?
- AYes. You can change the levels of how detailed you want the information output in the log to be.
 
 In order to do so, please follow the following steps.
 Enter the desired detail leven in one or both of the options below.
 The output levels goes from "-v" to "-vvvvv", where the more "v"s contains more detailed information.
 If input in both of the options, the process will add both of the values together.
 
 【Ansible common > Interface information】
 The default value "-v" is pre-set in the record's "Option parameter" collumn. Change it to the desired level.
 
 【Ansible-Legacy/Ansible-LegacyRole > Movement list】
 Use this method if you want to have different output levels for each Movement.
 When registering a Movement, use the "Option parameter" to control the detail level. It is blank by default.
 
 If you have configured option parameters for both the "Interface information" and the "Movement list" menu, only one of the parameters might be activated or both of them will be combined together depending on the parameter type.
 For more information, please see the "Option parameter list" chapter in the "Exastro-ITA_User_Instruction_Manual_Ansible-driver" manual.
 
- Q29The standard output text corrupted when I ran a shell using Pioneer mode. What should I do?
- AThe default encoding for the Pioneer mode uses UTF-8, so the text might corrupt when the encoding settings for the target devices are different.
 
 Users can select character encoding in the "LANG" settings in the register screen in "Basic console"> "Device list"
 If nothing is input, UTF-8 will be used.
 
 Note that due to the characteristics of the communication control "pexpect module" UTF-8 decoding process, the dialog file might not be processed correctly if the "LANG" settings are set to "euc" or "shift_jis". Please see the points below.
 
 ・Some full-width characters(such as(①②) cannot be used with UTF-8. Characters that cannot be decoded will be displayed as "??".
 ・Some full-width characters (-) causes prompts to time out if the "LANG" is set to "euc/shift_jis" if they are in prompts such as "expect". This will not happen if the "LANG" is set to UTF-8.
 
- Q30If nothing is set to the Execution user item in the Ansible common interface information, what will the user be?
- AIf nothing is set, the root user will be used.
 If you want to specify execution user, you need to have sudo permission in the Ansible server.
 
- Q31What do I need to do if I want to run my own Ansible module?
- ANo configurations is needed for Exastro IT Automation.
 However, you will need to do one of the following:
 
 ①Set the ansible.cfg library parameters to a free directory and put your own module there.
 ②Put it under the ansible.cfg library parameter's default value: ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'].
 
- Q32I accidently directly edited a substitute value registered using Ansible-driver's "Substitute value auto registration" function from the Substitute value list menu.
 Because of that, the record is no longer linked with the Substitute value auto registration menu. How do I fix this?
- AThe link will revert if you abolish the record and then restore it again. 
 If you are auto registering substitute values using parameter sheets, make sure to not update the record from the substitute value list, but make it possible to edit the parameter sheet value.
 
- Q32I accidently directly edited a substitute value registered using Ansible-driver's "Substitute value auto registration" function from the Substitute value list menu.
- Q33The progress log in the Ansible-Pioneer> Execution status confirmation menu outputs too much information, resulting in everything not being displayed.
 How can I change the amount of displayed lines?
- AGo to the Ansible common > Interface information and edit the "Number of rows to display progress status" item.
 
- Q33The progress log in the Ansible-Pioneer> Execution status confirmation menu outputs too much information, resulting in everything not being displayed.
- Q34Can I run Ansible through a jump server?
- AIt is possible to SSH access through a jump server by using Ansible's functions.
 The process will look like this:
 Exastro IT Automation → Ansible → Jump server →Target device
 
 【Settings】
 ① Move to Basic console > Device list.
 ② Enter the execution host's host name, ip address, password, ssh secret key and other required connection information.
 ③Input the options needed to access through a jump server in the 【Connection option settings contents】 field under the "Connection option" item.
 (You will need to change the host name, ip address , login user, ssh secret key path to their correct values.)
 ④ Register the record.
 
 【Connection option settings contents】
 The setting contents is different depending on if you are accessing through a proxy server or not when accessing the jump server from an Ansible server
 
 If not accessing through a proxy server:
 
 -o ProxyCommand=""""ssh -W %h:%p -i <Jump server secret key path> <Jump server login user name>@<Jump server host name or ip address> 22 -o 'StrictHostKeyChecking=no'""""
 
 (Example)
 -o ProxyCommand=""""ssh -W %h:%p -i /root/.ssh/bastion-server-1 user1@192.0.2.1 22 -o 'StrictHostKeyChecking=no'"""" 
 
 If accessing through a proxy server:
 
 -o ProxyCommand=""""ssh -W %h:%p -i <Jump server secret key path> <Jump server login user name>@<Jump server host name or ip address>:22 -o 'StrictHostKeyChecking=no' -o ProxyCommand='ncat --proxy-type http --proxy <Proxy server host name or IP address> <Jump server host name or IP address.> 22'""""
 
 (Example)
 -o ProxyCommand=""""ssh -W %h:%p -i /root/.ssh/bastion-server-1 user1@192.0.2.1:22 -o 'StrictHostKeyChecking=no' -o ProxyCommand='ncat --proxy-type http --proxy proxy-server.co.jp:8080 192.0.2.1 22'"""" 
 
 [Notes]
 The Basic console > device list: "Connection option" item is used to configure options for when SSH connecting.
 SSH connects to the jump server(or proxy server) inside """"ProxyCommand""""
 """"StrictHostKeyChecking=no""""is a setting that ignores messages that pops up when connceting to the host for the first time,or when the destination host's fingerprint changes.
 The jump server's ssh secret key must be put in the specified path.
 
 (Example)
 Jump server/IP address: 192.0.2.1
 Jump server/Login user name: user1
 Jump server/ssh secret key path: /root/.ssh/bastion-server-1
 Proxy server/Host name: proxy-server.co.jp
 Proxy server/Port number: 8080
 
- Q35Can I run sudo in Ansible after I have logged into the target server as a normal user?
- AYes, users can do so by registering the following to the  Basic console>Device list's "Event file additional options" .
 
 ansible_become_pass: <sudo password>
 
- Q36How can I hide values input in the Basic console>Device list's "Inventory file additional options"?
- AUsers can hide values written in the Basic console > Device list's "Inventory file Additional options" by converting them into variables.
 Users can then link them to password locked specific values in Ansible-Legacy/LegacyRole/Pioneer > Substitute value auto registration settings, resulting in the values being hidden.
 Please see the following document for how to do it.
 
 Exastro-ITA_User_instruction_manual_Ansible-driver
 "Table Registration screen item list (Device list)" > "Inventory file Additional options"
 
- Q37What is the difference between "Value type" and "Key type" when registering substitute auto registration settings?
- AValue type and Key type are different types of methods used to link Parameter sheet values and Playbook variables.
 There are in total 3 different types.
 
 Value type:
 Links Parameter sheet values with Playbook variables.
 
 Key type:
 Links Parameter sheet column names with Playbook variables.
 
 Key-Value type:
 Links both the Parameter sheet column names(Key) and the values inside the Parameter sheet(Value) to the Playbook variables.
  
 
- Q38What does a Dry-run do in the "Ansible-Legacy/Ansible-LegacyRole/Ansible-Pioneer > Execution" menu?
- AA Dry-run is a test that is done before the execution to check that there are no errors.
 Clicking the "Dry-run" button will check the Movement without starting any running any operations to the target device.
 The behaviour of the Dry-run function differs depending on the mode it is run in. See below for more information.
 
 Ansible-Legacy:
 Ansible-Playbook Checks commands, specifies parameters and runs Playbook.
 
 Ansible-LegacyRole:
 Ansible-Playbook Checks commands, specifies parameters and runs role.
 
 Ansible-Pioneer:
 Checks connection to target device.
 
- Q39The files in the directory below are taking up a lot of disk space. 
 (ITA installation directory)/data_relay_storage/ansible_driver/legacy/rl
 Will there be any problems with deleting some of the files?
- AWhile ITA will run any operations normally, the "Ansible-Legacy>Execution list" menu will not be able to display any logs anymore.
 
 Exastro IT Automation contains a function that regularly deletes unnecessary files automatically.
 Users can change the settings in the Management console > Operation delete list, where the default logical deletion period is set to 3600 days, and the physical deletion is set to 7200 days.
 
- Q39The files in the directory below are taking up a lot of disk space. 
- Q40What modules can be used from Playbooks?
- AAny modules that are installed by default together with Ansible are usable with the Exastro IT Automation's Ansible driver.
 You can see what Modules can be used on your own Exastro IT Automation server with the following command.
 
 $ ansible-doc -l 
 ※Make sure to follow each module's requirements and install any required dependency packages.
 
- Q41What is the difference between the different Movement execution statuses? ("Completed", "Completed (Error) and "Unexpected error")
- APlease see below for information regarding the differences between the different statuses.
 
 Completed:
 When the return code "0 (Normal)" is returned after running Ansible.
 
 Completed (Error):
 When a return code different from "0 (Normal)" is returned after running Ansible.
 
 Unexpected error:
 When an error, such as missing settings information, was found when trying to run Ansible.
 
- Q42Is it possible to change Ansible Driver's execution engine to Ansible Automation Platform 2.x?
- AExastro IT Automation Ver1.9 and earlier versions does not support using the Ansible Automation Platform 2.x as execution engine.
 Exastro IT Automation Ver1.10 and later versions allows users to use Ansible Automation Platform 2.x(Ansible Automation Controller) as execution engine.
 
- Q43Is it possible to restrict the amount of paralell Movement executions?
- AUsers can restrict the number of parallel executions by doing the following:
 
 Restricting Parallel movement executions:
 Configure the "Number of parallel executions" item in the "Ansible common > Interface information" menu.
 
 Restricting Parallel executions for target hosts:
 Legacy/LegacyRole:
 Go to Ansible common > Interface information or
 Ansible-Legacy/LegacyRole > Movement list and set "--forks=X" in the option parameter.
 ※Since this is an option for Ansible, see Ansible's documentation for more information.
 
 Pioneer:
 Change the "Number of parallel executions" item in the Ansible-Pioneer > Movement list menu.
 
- Q44I got an error telling me "Ansible-vault encryption failed" What should I do?
- AIn Exastro IT Automation, Connections to Ansible are done through RestAPI (HTTP/HTTPS) so Ansible can be constructed on different servers.
 Ansible-vault is used to encrypt the communications, meaning an error will be output not only when an encryption fails, but also when the connection itself fails.
 RestAPI (HTTP/HTTPS) is run to the Host, Protocol and Port input in the Ansible common > Interface information" menu, meaning that said RestAPI connection might have failed.
 
 Please check the connection status again and check for the following:
 Is the host name resolution configured?
 Is the access hindered by softwares such as a firewall?
 Is the client authentication settings configured?
 
- Q45Where is the ancible.cfg file referenced when running Ansible in Exastro IT Automation?
- AAccording to Ansible's behaviour, the ansible.cfg file used is decided by the following order.
 
 ・ANSIBLE_CONFIG (environment variable if set)
 ・ansible.cfg (in the current directory)
 ・~/.ansible.cfg (in the home directory)
 ・/etc/ansible/ansible.cfg
 
 For more information, see the official Ansible documents.
 
 In Exastro IT Automation, users can manage the ansible.cfg settings by accessing the "ansible.cfg" item in Ansible-[Legacy | Legacy Role | Pioneer] > Movement list.
 
Terraform-driver
- Q1The following error appears in the log when running Terraform driver operations.
 > "[API Error]Failed to acquire Module file upload URL.
- AYou may have set the wrong token type for "User Token" in "Interface Information".
 There are three types of tokens that can be issued from Terraform: "User Token", "Team Token", and "Organization Token", but the only token that can be used by Exastro IT Automation is "User Token".
 Use the token issued from the Terraform administrator screen by following the steps below.
 Click [User Settings] > [Tokens] > [Create an API token].
 
- Q1The following error appears in the log when running Terraform driver operations.
- Q2What is a Plan check in the "Terraform> Execution" menu?
- AA "Plan check" checks the contents of any Modules before they are run.
 Terraform runs the following actions in order: Plan→PolicyCheck→Apply.
 Clicking the "Plan check" button will run the specified operation without the "Apply" step.
 Please see below for information regarding the different steps.
 
 Plan:
 Checks that the Module descriptions are valid and looks for any changes from last time.
 
 PolicyCheck:
 Checks that the Module contents fits the conditions defined by the Policy.
 
 Apply:
 Runs Module.
 
Documents
- Q1I want to see documents for earlier versions.
- APlease see the following URLs for earlier documents.
 (Change the "vx.x.x" in the URL with the version you want to see)
 
 Japanese:https: //github.com/exastro-suite/it-automation-docs/tree/vx.x.x/asset/Documents_ja
 English: https://github.com/exastro-suite/it-automation-docs/tree/vx.x.x/asset/Documents
 
Others
- Q1Are there any menus or logs where users can see login history for Exastro ITA?
- AThe Web operation logs are output to the following directory.
 (ITA installation directory)/ita-root/logs/webaplogs
 
 For more information, please see "Exastro-ITA_[Reference]Log_list.pdf".
 
- Q2What do I need to do in order to use the Playbook Collection in Exastro IT Automation?
- AFirst, you will need to download the Playbook Collection zip file from the GitHub page.
 After that, you will need to construct the necessary menus, jobs, etc in Exastro IT Automation (ITA) and start configuring parameters.
 After doing so, you can then start the roles.
 
 See this URL for more information.
 
 Normally in order to use role packages in ITA, you will need to create an ITA readme file and define a couple of variables.
 However, the Playbook Collection comes with an ITA readme file prepared, meaning that users will not have to define any variables.
 
 See this page for more information. (Japanese only)
 
- Q3Are there any documents that can tell me how to use Exastro IT Automation more efficiently?
- AWe recommend that you read the Exastro System Operation and Construction Efficiency Guide, a guide that uses Exastro IT Automation and Ansible to show the readers how to use Exastro IT Automation more efficiently.
 It may be useful to use it as a chart when implementing ITA.
 
 Exastro System Operation and Construction Efficiency Guide
 
- Q4I accidentaly started the disabled Exastro IT Automation service when updating it. What should I do?
- AWhen Exastro IT Automation is being updated, all of it's services will start.
 Any "disabled" settings will not change to "enable", so we ask you to run the command below after ITA has been updated in order to stop the services once the OS has restarted.
 
 【Command】
 systemctl stop [Service name] 
 
- Q5Is it possible to check the Exastro IT Automation access log to see if Reference type / Update type actions were performed?
- AIf done from the Web UI, a log will be output to the following directory:
 /(ITA install directory)/ita-root/logs/webaplogs/webap_yyyymmdd.log
 For information regarding the log format, please see "Exastro-ITA_【Reference】Log_list"
 
 There might be cases where multiple actions are output to the same log, but both reference and update type actions will be output in the places specified in the document above.
 ("Table Weap function operation / Proccess result log file output contents" > "Output contents: Free log".)
 
 Mix2_1_registerTable,RESULT:SUCCESS
 ・Display Menu
 ・"Register"Pressed Submenu's "Start registration" button
 ・"Register"Pressed "OK" on the dialog window after pressing the Submenu's "Return" button
 ・"Register"Pressed "OK" on the dialog window after pressing the Submenu's "Register" button
 
 Mix1_1_updateTable,RESULT:SUCCESS
 ・"List/Update "Pressed Submenu's display list's "Update" button
 ・"List/Update" Pressed "OK" on the dialog window after pressing the Submenu's "Update" button
 
 Mix1_1_deleteTable,RESULT:SUCCESS
 ・"List/Update" Pressed "Abolish" in the Submenu's display list
 ・"List/Update" Pressed "OK" on the dialog window after pressing the Submenu's "Abolish" button
 ・"List/Update" Pressed Submenu's Display list's "Restore" button
 ・"List/Update" Pressed "OK" on the dialog window after pressing the "Restore" button
 
 Filter1Tbl_recCount,RESULT:SUCCESS
 Filter1Tbl_printTable,RESULT:SUCCESS
 ・"Display filter" Pressed Submenu's "Filter" button
 ・"Display filter" Pressed "OK" on the dialog window after pressing the Submenu's "Clear filter" button
 ・"List/Update" Pressed "OK" on the dialog window after pressing the Submenu's "Return" button
 ・"List/Update" Pressed "OK" on the dialog window after pressing the Submenu's "Return" button
 ・"List/Update" Pressed "OK" on the dialog window after pressing the Submenu's "Return" button
 
 As actions performed using RESTAPI are output to the free log, you will not be able to differantiate Reference type and Update type actions.
 
 E.g.) FUNCTION:ReSTCommandDeal,RESULT:SUCCESS [RESPONSE:200]
 



