DashInsight Architecture [Insert Date Here]

1. DashInsight Architecture [Insert Date Here]

2. DashInsight Architecture Overview • DashInsight is built on a web-based service oriented (SOA) architecture that is designed for scalability, availability, and customization. • It uses platform independent, industry proven technologies, such as Java2 Platform Enterprise Edition (J2EE), Hypertext Markup Language (HTML), Extensible Markup Language (XML), and JavaScript Object Notation (JSON). • DashInsight architecture features a consistent, zero footprint, Web-based user interface for viewing, creating, and administering business portals and user communities. It also provides a single point of administration, as well easy to access and use Web-based management components. • DashInsight fully integrates with and leverages existing IBM Cognos, IBM SPSS and IBM Cognos TM1 content and capabilities. • DashInsight has a multi-tier architecture that includes gateway, app server, and data. It also supports dynamic load balancing and failover recovery.

3. DashInsight Multi-tiered Architecture The multi-tiered architecture includes 3 tiers: web server, applications, and data. The tiers are defined based on function, and are typically separated by network firewalls. This diagram illustrates a single-server DashInsight™ configuration. Multiple server configurations are supported as well

4. DashInsight Architecture Tiers Web Tier The web tier provides user session connectivity and interaction to DashInsight applications. The components that fulfill this role are referred to as DashInsight Gateway. DashInsight Gateway includes also a built-in Dispatcher component that performs the failover and load balancing of the requests that are sent to the application tier. For high availability and scalability multiple DashInsight Gateways can be deployed along with an external HTTP load-balancing router. Application Tier The application tier consists in a collection of services that handle the execution of specific tasks related to DashInsight capabilities (metadata and files management, user access and security, export and publishing, notifications and background tasks). The components that fulfill this role are referred as DashInsight Application Server. For high availability and scalability multiple DashInsight Application servers can be deployed with or without an external HTTP load-balancing router. Data Tier The database tier is represented by the DashInsight and IBM Cognos Content store databases.

5. DashInsight User Interfaces

6. DashInsight Web-based User Interfaces The zero foot print, DashInsight Web-based interfaces include the following components: DashInsight Client (DashInsight) The DashInsight Client provides a single access point to business portals and users communities. IBM Cognos BI, TM1 and IBM SPSS content can be accessed within the DashInsight business portals. Other business intelligence applications, and web applications can be also integrated into the DashInsight. DashInsight Designer The DashInsight Designer is a central interface that provides access to create and manage DashInsight content, such as : • Business Portals and User Communities • Themes and Permissions • Content Store Objects and Metadata

7. DashInsight Windows User Interfaces The DashInsight Windows interfaces includes the following components: DashInsight Configuration Client The DashInsight Configuration Client is an easy-to-use Windows application client to configure and validate the system preferences, such as server URLs, ports, content store database connections, log settings, notifications, and more. It also provides access to monitor, start and stop DashInsight services.

8. DashInsight Mobile User Interfaces The DashInsight Mobile interfaces includes the following components: DashInsightMobile for iOS devices A rich native iOS mobile application (for iPad and iPhone) for accessing the DashInsight™ business portals content. DashInsight Mobile for Android devices A rich native Android mobile application (popular Android-based tablets and phones) for accessing the DashInsight™ business portals content.

9. DashInsight Integration with IBM Cognos BI The DashInsight Gateway components integrate directly with the IBM Cognos Gateway and IBM Cognos Content Store database. This diagram illustrates a single-server DashInsight™ configuration. Multiple server configurations are supported as well

10. DashInsight Tiers Communication DashInsight components communicate with each other, and with the IBM Cognos components using different protocols and methods. User interfaces and DashInsight Gateway User interfaces communicate with DashInsight Gateway using HTTP requests. To secure the communication SSL is supported for use. DashInsight Gateway and DashInsight Application DashInsight Gateway components communicate with DashInsight Application using HTTP requests. To secure the communication data transport encryption and cryptographic nonce options are available for use. SSL is also supported for use. DashInsight Gateway and IBM Cognos Gateway DashInsight Gateway components communicate with IBM Cognos Gateway using HTTP requests. DashInsight Application and Data tier DashInsight Application components communicate with Data tier using JDBC.

11. DashInsight Database Connection Management DashInsight uses databases for two purposes: store DashInsight metadata and query IBM Cognos metadata. The DashInsight Database Management component creates new database connections as required, pools connections, and reuses existing connections when possible. It also maintains all database connections for the duration of the data management operations. DashInsight Content Store Database DashInsight business portals metadata (portals and user communities) as well user specific data (bookmarks, snapshots, discussion threads, insights, and notifications) are store in the DashInsight Content Store database. IBM Cognos Content Store Database Specific IBM Cognos information related to users and groups are pulled directly from the Cognos Content Store database. No updates are performed over this database, a database user with read access is required only.

12. DashInsight Authentication and Access DashInsight Gateway Request DashInsight authentication is integrated with IBM Cognos authentication. No user names and/or user passwords are store in DashInsight Content Store database. When using DashInsight, each user must be first authenticated within IBM Cognos before using any of the DashInsight services. Any user permissions and privileges defined within the IBM Cognos will be inherited by DashInsight application. Additional to IBM Cognos security settings, access to DashInsight content and capabilities can be defined in DashInsight Designer (Portals Management and Users Communities Management) When Cognos authentication occur, redirect back to DashInsight No Is User authenticated in IBM Cognos ? CognosAuthentication Handler Yes Execute DashInsight Gateway Request

13. DashInsight Security and User Permissions User access to DashInsight platform and business portals can be configured using the Users Management and Portals Management components. Users Management The Users management component is used to restrict the access to DashInsight platform, and - if needed, to restrict the access to specific features: • DashInsight (Web Designer, Web Client, and/or Mobile) • Create public/private bookmarks, snapshots, and discussion threads • Export content (PDF, Email, Excel, Presentations) • Access to IBM Cognos reporting tools Business Portals Management The Portals Management component is used to restrict access to portals and features. DashInsight Access / Features / Permissions DashInsight Portals Security / Features DashInsight Users Access / Permissions IBM Cognos Access / Permissions

14. DashInsight Installation Options • All components on one computer • Install both Gateway and Application components on the same server • Gateway component on a separate computer • Install Gateway component on one computer • Install Application components on other computers

15. Installing all Components on Same System

16. Installing the Application on a Separate System

17. Load Balancing Options • Built-in Dispatcher • Load balancing between DashInsight Gateway and Application Servers • Balancing options: First Available, Round Robin • External Load Balancing • Load balancing between Browser and DashInsight Gateway • Load balancing between DashInsight Gateway and Application Servers

18. DashInsight Application Servers Load Balancing

19. DashInsight Gateway & App Servers Load Balancing

20. DashInsight Deployment and Backup Deployment DashInsight business portals can be deployed from a source environment to a target environment using export/import capabilities included in the Portal Management system. Backup Backups of DashInsight content can be created using either the export feature within the Portal Management system or through standard database backup capabilities.

21. DashInsightLogs and Audit Logs DashInsight provides in depth logging capabilities through the DashInsight Logging system (log4j based). This system can be configured in a multitude of ways, each providing different levels of logging detail and performance, from lightly detailed and unhindered performance to heavily detailed with slower processing speeds Audit User interactions with the DashInsight server can be tracked using the DashInsight Audit system. This system tracks specific user actions in the DashInsight content store and can be enabled or disabled at any time through administration access. The collected data can later be used in reports or simply saved to know what happened and when it happened. Logs Log Files Audit Data

22. DashInsight Multi-language Support DashInsight provides support for multiple languages through its Language Handling system. Support for this Language System currently only exists for the DashInsight Client. If language files for a specific language do not already exist, they can be easily added to the system simply by translating the English text into the new language.

23. Installation Requirements - Hardware

24. Installation Requirements - Software