Alteryx Server Ideas

Suggested information to be included in audit logs.

A secure audit record of all activities on the system:

1. General user access
2. User creates / modifies / archives / deletes data (ie: history on what the user did)
3. Administrator actions

At minimum the logs should include the following:

1. Unique user identifier
2. Unique data subject identifier
3. Function performed by the users
4. Date/time stamp of what was performed by user

I believe many customers could benefit from this type of audit logging, especially those who are required to obtain specific security certifications for their alteryx deployments.  From what I can see online there does not seem to be out of the box functionality for this. If anyone has implemented any type of audit logging like this please feel free to comment.

Thanks

-Vincent

In Gallery, I'd like to see the execution log in the workflow results, i.e. what you get if you run the workflow from Designer.  I'd like to see this whatever the status of the workflow completion.  Would be useful to assess warnings and the performance of components within the workflow.  Also would give me useful stats about records loaded etc.

For large implementations of Alteryx - you'd want to have a live control-center view that allows you to see:

- The state of health of all the server components

- the depth of the queue in the controller

- Jobs failing vs. succeeding.

While this can be done by running alteryx jobs, and by going and looking for problems - what we'd want is to have a heads-up control center view which is self-refreshing all the time so that administrators can be notified when there are issues.    And this should not be e-mail notification (it's too easy to miss an e-mail or an SNMP alert)

Think about a 40 inch monitor on a wall (like in a traffic control center)  that allows the server management team to see the state of health of the plant at a glance, and dive into issues without having to constantly be looking for them.    this is a critical capability for enterprise install-base and would be a very useful capability to add to the platform.

I would like the ability to add a workflow description on Alteryx server.  This step would be done after the workflow is published, this way future edits can be made without having to republish the workflow.  A checkbox to allow HTML content would also be appreciated.

Can we add an ability to manually adjust the order of workflows in a collection? I don't think we should have to go and click the column to sort each time if we want them in alphabetical order. It looks better for the end user to have everything nice an arranged when you have multiple processes in each collection.

For scheduled jobs, there should be an option to include performance profiling in output logs globally.  Basically we are looking at how we can understand which custom macros are in use, and in which workflows, and one way to do this would be to get the output logs into another tool (i.e., splunk), and then set up some queries there.  It would work, but I would have to tell N developers to go set performance profiling on, re-upload their workflows, ect.  

But why not have a switch on server / gallery that just turns this feature on globally for every scheduled workflow?  

Thank you for attending my TED talk on why performance profiling should have an option to be set globally. 

In the gallery you have the ability to replace a workflow with another, however when doing so the version history only indicates "Package Replaced" (see image below)

Would it be possible to change the default text and input something more meaningful, since in my case I use this field for version control/auditing so it would be good to know what changes came with the replaced version.

Second ask, but maybe not as important as the first.

Sometimes the package we are replacing with itself might have several versions, but these are completely lost when the files are combined.

Would it be possible to keep that version history when the package is replaced.

Eg. Original File is at Version 10. This will be replaced by a package that is at Version 3.

Possible solution would be to have the new version be Version 13 which includes the 10 versions from the original file and the 3 from the new. 

Thanks!

I have Designer Apps that work really well using the Browse tool to provide the outputs to display and download in the Apps.

This does not work when I push the Apps to Server.

I find this very restricting and would like to suggest that the Browse Tool be enable to generate its outputs in Server Apps.

I would like the Browser outputs to be enabled for download into Excel, PDF, etc as well so the Server Apps behave in a similar way to the same Apps in Designer.

Hey Alteryx Dev Gurus - 

I've got a situation wherein the user runs something in Gallery, and complains.  I have to log in as that user to view the output files that came back out.  As a super user, I should be able to have all seeing ability!  Thanks!

brian

Today in managing Alteryx server, we manually configure new connections using the front end.  However, this has some potential drawbacks as it makes it hard to easily track change history, or make bulk updates to multiple strings, and it also leaves room for user error on configuration.

In this case I'm pretty specifically looking to modify aliases on the server itself.  I'm not particularly concerned with distribution to a wider audience, and the usernames/passwords associated in this case should not be available for use locally by users.  As a part of this, I am trying to identify a method to reduce or eliminate the need for anyone (including the data connection manager) to need to know the password for the specified accounts.  As some of these accounts may be used by multiple systems, it would be significantly simpler to integrate this maintenance into existing automated processes, rather than have a manual step to update the Alteryx connection values on the Gallery.

This is specifically a challenge today with regards to specific usernames or passwords which need to be stored.  Alteryx saves these values using machine-level encryption, but that is difficult to generate automatically.  Having a supported method that would easily allow creation of this file with password-level information would greatly improve maintenance of the Alteryx Server, particularly from an IT automation perspective.

each canvas in our environment goes through initial dev; then a testing phase; then into production usage after completing testing & peer review.

Currently the server environment has no concept of progression or promotion so we have to set up our own Dev; UAT; and Prod gallery & server - this really is very clunky because assets have to be manually copied across.

What would be more effective is:

- Allow a single asset to have a lifecycle (like you do in GIT) - so that it can go through dev and testing as a branch of the main code

- Once ready - user then changes the lifecycle type to "testing" or "UAT" and pushes it to users

- Once signed off, the user then promotes this to a production flow, and it replaces the current production version

There are a few areas where we'd need to do some thinking (dependancy tracking; branching; changing connection details as you promote so that you can hit the prod data stores etc) - but fundamentally this would go a VERY long way towards eliminating much of the admin involved in running the gallery.

We've confirmed with @KevinP that the Alteryx Gallery / Server API does not currently support downloading canvasses in unzipped data-stream format. (https://community.alteryx.com/t5/Alteryx-Server-Discussions/Server-API-Download-packages-for-surveil...)

Please can we add an API end-point that allows the following:

• Connect to the gallery and download a canvas; along with all of its sub-canvasses and helper macros. 
• Format required:
  • Plain XML (not zipped)
  • Provided in a data stream so that we can perform analytics and surveillance on this data
  • Fields required
    
    • Canvas filename
    • Application ID
    • Some unique ID per macro / sub-macro
    • XML for the canvas
    • Last run date
    • Last changed date
    • Environment (this is important once Server actually allows a Dev; UAT; Prod progression cycle - so we can see which environment people are in)
    • User details who uploaded
    • User details who are marked as the owners
    • Any other meta-tags on the canvas (important once server allows for meta-tagging of canvasses for categorisation)

Current API only allows this to be downloaded to a zipped file; which then needs to be unzipped; and then loaded back into a data stream.

Thank you

S

CC: @revathi @AshwiniChezhiyan @LizaNemchynova 

Hi there,

Currently, when we download a version of Alteryx - we need to download a very large number of binaries across many different download locations.    Once we get these in, they need to go through InfoSec audits; then be packed for deployment etc.     this creates a very large admin overhead in that folk need to check for updates across multiple binaries and also create a significant number of different installs which then need to be rolled out across hundreds of workstations.

The request would be to change the approach to downloads for enterprise customers:

- Admin logs into the download portal

- They then select the components which they need (Designer; predictive; CREW macros; Microsoft starter pack; Tableau starter pack; JIRA connector from the gallery; additional predictive tools from the gallery)

- this then becomes the defined selection set.

- When any of these items are updated - the admin is notified

- When they download - these are then all built into a single installer binary which we can then download and roll out to all our workstations.

Many thanks

Sean

cc: @dataMack @adrianloong

In order for us to manage the large number of canvasses on our server - we need to add the ability for Admin teams to require additional attributes on every canvas:

For us, these mandatory attributes would be:

- Which team do you belong to (dropdown)

- What business process does this serve (dropdown - multiselect)

- Primary & secondary canvas owner (validated kerberos)

For the ones that have dropdown lists - we can provide the master data into a drop location or into a manually configured list on the server.

I just underwent an exercise of recovering my controller in the event of a catastrophic failure. One of the steps is to recover the DCME keys (DCM Encryption keys) - which is documented here: https://help.alteryx.com/20221/en/server/install/server-host-recovery-guide/dcme-keys-to-backup.html...

This DCME recovery needs to be revisited. This document assumes that the previous controller is running. In a disaster recovery situation, this is not possible. What, if any, can be done to recover the DCME keys if the host has is completely irrecoverable?

For context, having an irrecoverable host has happened. Complete hard drive failure (showing my age), nuked virtual machine and its backups (no one paid attention to the notices that the data center was shutting down), and fire.

It would be beneficial to be able to add a description to collections to explain the purpose of the collection, i.e. the types of content contained within or even a waiver stating "use of the contents in this collection is at your own risk, please ensure you validate the results are accurate" sort of thing.

Currently, we see the Districts and Collections now compressed into a list view. 

Previously, the Server had the widgets feature which really showcased the self-service nature of the Sever. Losing that just made decreased the emphasis on user experience. 

It would be great to allow Server Admins to decide whether they want lists or widgets to be available toggles as a design feature for both districts and collections will be of great help.

In addition, regardless of the option, the image size and wording size should be much larger - easier for people to see. Right now, we have to zoom to 150% to make it easier for ourselves to see. Having the ability to control font size, font control with bolds, italtics, etc. will be very helpful as well.

Hello!

Currently one of the pain points when looking at integrating Alteryx Server into an organisation, is the role of a Curator, and who should be given that role. Of course, from an IT perspective, they want governance and control over data connections, users, and configuration - as it is important that users aren't simply able to change the default role to Curator and give all users access to the Administration portal, for instance. On the other hand, a Super User is typically given Curator access to allow for adjustments to all other sections of the Administrator Portal, that IT quite frankly don't care about.

What would be useful, is for a new role to be created, elevated from Curator. Let's call them 'Super Curator'. These 'Super Curators' (or, User-Curators, for a less exciting name) have access to all of the Admin portal as usual. 'Curators', would now only have access to the following (Highlighted yellow for Curator access):

This would aid the conversation from an IT perspective, allowing them to take control of user, data connection, and credential administration, whilst leaving the rest of the control to the other Curators. As this wouldn't always be a requirement, it would be useful to allow for a toggle of this setting within the Configuration on the Gallery. This would also not effect pre-existing setups of curators, as in the update of implementation, all current Curators should be adapted into 'Super Curators'.

Thanks,
TheOC

Hi,

 We need a way to figure out at which tool alteryx workflow is currently at (i.e., workflow execution progress log) when the workflow is running on the alteryx server scheduler.

This is very useful especially if you have analytical workflows that take long time to run (say 4-6 hours) and at the moment there is NO WAY to figure out at which stage the execution is at from the scheduler.

We can't open the log file on the server as the workflow is IN PROGRESS (we get the standard The process cannot access the file because it is being used by another process) . We can't see the underlying progress log under Scheduler Queue tab either.

It will be useful to capture that information in MongoDB or somewhere so that we can read the In progress log in the real time..

 Thanks,

Sandeep.