Configure ESM Server Settings Using the DB Configuration Tool

The DB Configuration Tool is a command-line interface (CLI) that provides an alternative to managing basic server settings through the ESM Console. Examples of settings that you can change include the ninja mode password, active directory caching, and number of logs included in the ESM Tech Support file. For the full list, see Customizable ESM Server Settings.
You can access the DB Configuration Tool using a Microsoft MS-DOS command prompt that you run as an administrator. The DB Configuration Tool is located in the Server folder on the ESM Server.
All commands you run using the DB Configuration Tool are case sensitive.
  1. Open a command prompt as an administrator in either of two ways:
    • Select
      Start
      All Programs
      Accessories
      . Right-click
      Command prompt
      , and then select
      Run as administrator
      .
    • Select
      Start
      and, in the
      Start Search
      box, type
      cmd
      but do not press
      Enter
      , yet. Then, to open the CLI command window as an administrator, press
      Ctrl
      +
      Shift
      +
      Enter
      .
  2. Navigate to the folder that contains the DB Configuration Tool:
    C:\Users\Administrator>
    cd C:\Program Files\Palo Alto Networks\Endpoint Security Manager\Server
  3. View the existing server settings:
    C:\Program Files\Palo Alto Networks\Endpoint Security Manager\Server>
    dbconfig server show
    PreventionsDestFolder = InventoryInterval = 284 HeartBeatGracePeriod = 4200 NinjaModePassword = Password2 BitsUrl = http://CYVERASERVER:80/BitsUploads MaxActions = 1000 BitsUploadTimeoutInterval = 360 BitsUploadTimeout = 720 KeepAliveTimeout = 0 ExternalAddress = VdiHeartbeatGracePeriod = 25 UseDnsForAddressResolution = True TaskTimeout = 30 SqlDateTimeFormat = yyyy-MM-dd HH:mm:ss TaskOverrideInMinutes = 30 EnableStatistics = True ActiveDirectoryPathUpdateInterval = 1440 ActiveDirectoryGroupsUpdateInterval = 1440 EnableADCaching = True ContentVersion = 6-472 ContentUpdateTimeoutMinutes = 30 SupportFileCollectionTimeout = 10 SupportFileAggregationTimeout = 20 MaxCollectedIisLogs = 100 MaxCollectedNlogLogs = 1000 MaxCollectedDbRows = 100000 UseContentProductionKey = True
  4. (
    Optional
    ) Configure or change any of the ESM Server settings, as needed. For usage guidelines and default values, see Customizable ESM Server Settings. For example, to specify the allowable grace period, in seconds, for an endpoint that is not responding (range is 300 to 86,400; default is 4200):
    C:\Program Files\Palo Alto Networks\Endpoint Security Manager\Server>
    dbconfig server HeartBeatGracePeriod <value>
    For example, a value of 300 means that if the ESM Server does not receive any communication from the endpoint within five minutes (300 seconds), the Endpoint Security Manager reports the endpoint status as disconnected.

Related Documentation