LogoLogo
LearnDocumentationSupportCommunity
Version 6.30
Version 6.30
  • Welcome
  • Nexthink V6
  • Overview
    • Software components
    • Collector
    • Finder
    • Engine
    • Portal
    • Nexthink Library
    • Digital Experience Score
  • Installation and configuration
    • Planning your installation
      • Overview of the installation process
      • Hardware requirements
      • Connectivity requirements
      • Software requirements
      • Reference architectures
    • Installing Portal and Engine Appliances
      • Installing the Appliance
      • Installing the Appliance on Azure
      • Installing the Appliance on AWS
      • Installing the Appliance on OTC
      • Managing Appliance accounts
      • Setting the names of the Portal
      • Setting the names of the Engines
      • Specifying your internal networks and domains
      • Federating your Appliances
      • STIG compliance in Web Console
      • Connecting the Portal to the Engines
      • Configuring session performance storage
      • Configuring device performance storage
      • Setting up a software license
      • Sending email notifications from the Appliance
      • Allocating resources for the Portal
    • Installing the Collector
      • Installing the Collector on Windows
      • Installing the Collector on macOS
      • Installing the Collector for a Proof of Value
      • Assigning Collectors to Engines
      • Assignment of roaming Collectors
      • Collector MSI parameters reference table
      • Nxtcfg - Collector configuration tool
      • Inspecting the connection status of the Collector
      • Querying the status of the TCP connection of the Collector
      • Reporting the URL of HTTP web requests
      • Auditing logon events
      • Viewing user interactions in virtualized and embedded environments
      • Engage notifications on macOS
      • Configuring Collector level anonymization
    • Collector remote connectivity
      • Redirecting and anonymizing Collector traffic
      • Redirecting the Collector TCP channel
      • Support for DirectAccess
      • Windows Collector proxy support
      • Mac Collector proxy support
    • Installing the Event Connector
      • Installing the Event Connector on Linux
    • Installing the Finder
      • Installing the Finder on Windows
      • Enabling Cross-Engine Finder features
      • Expanding the time frame of investigations in the Finder
      • Enabling Finder access to the Library
      • Finder proxy support
    • Updating from V6.x
      • Updating the Appliance
      • Content centralization when updating the Appliance
      • Updating the Collector
      • Viewing Collector deprecated fields
      • Updating the Finder
    • Security and user account management
      • Importing and replacing certificates
      • Hierarchizing your infrastructure
      • Adding users
      • Enabling SAML authentication of users
      • Just-In-Time provisioning of user accounts
      • Enabling Windows authentication of users
      • Multi-factor authentication for local accounts overview
      • Provisioning user accounts from Active Directory
      • Establishing a privacy policy
      • Disabling local accounts for interactive users
      • Setting the complexity and minimum length of passwords for local accounts
      • Protecting local accounts against brute force attacks
      • Preventing password saving in the Finder
      • Controlling session timeouts in the Portal
      • Security settings in the Appliance
      • Setting the Do Not Disturb periods between campaigns
    • Data retrieval and storage
      • Data retention
      • Increasing the maximum number of metrics
      • Establishing a data retention policy in the Engine
      • Storing Engine data in a secondary disk drive
      • Importing data from Microsoft Active Directory
      • Setting the locale in the Portal
      • Changing the Time Zone of the Portal
      • Time Zones and data collection
      • Changing the data collection time of the Portal
      • Nightly task schedules timetable
      • Changing the thresholds of High CPU warnings
      • Automatic restart of unresponsive Engine
    • Maintenance operations
      • Logging in to the CLI
      • Special operation modes for the Engine and the Portal
      • Changing the default ports in the Appliance
      • Centralized Management of Appliances and Engines
      • Monitoring the performance of the Appliance
      • Resizing partitions in Appliance
      • Configuring the system log
      • Examining the logs in the Portal
      • GDPR - Retrieving or anonymizing personal data
      • Finding out unlicensed devices
      • Removing devices
      • Installing third-party software in the Appliance
      • Installing VMware Tools in the Appliance
      • Operational data sent to Nexthink
      • Sending additional data to Support
    • Disaster recovery
      • Planning for disaster recovery
      • Web Console backup and restore
      • Engine backup and restore
      • Portal backup and restore
      • Rule-based assignment backup and restore
      • License backup and restore
      • PKI backup and restore
    • Branding
      • Branding the Portal
      • Branding of campaigns
  • User manual
    • Getting started
      • Logging in to the Finder
      • Logging in to the Portal
      • Enabling STIG in Webconsole
    • Querying the system
      • Searching the subject of interest
      • Executing an investigation
      • Creating an investigation
      • Editing the options of an investigation
      • Combining logical conditions in investigations
      • Navigating through the results of an investigation
      • Properties of users and devices
    • Visualizing system activity in the Finder
      • Getting a quick overview
      • Graphically observing the activity of users and devices
      • Observing service performance
      • Viewing network connections
      • Viewing web requests
      • Viewing executions
    • Monitoring IT custom metrics
      • Creating a metric
      • Examples of metrics
      • Session performance
      • Device performance
      • Following the evolution of a metric
      • Finding the visuals of a metric
    • Monitoring IT services
      • Analyzing service quality
      • Creating a service
      • Following the evolution of a service
      • Specifying URL paths of web-based services
    • Engaging with the end user
      • Getting feedback from the end users
      • Types of campaigns
      • Creating a campaign
      • Editing a campaign
      • Types of questions
      • Controlling the flow of questions
      • Translating a campaign
      • Triggering a campaign manually
      • Limiting the reception rate of campaigns
      • Scrutinizing the results of a campaign
      • Continuously measuring the satisfaction of employees
    • Rating devices and users with scores
      • Computing scores
      • Creating a score
      • Checking and comparing ratings
      • Computing potential savings
      • Score XML Reference
      • Documenting scores
    • Remotely acting on devices
      • Scenarios for remote actions
      • Creating a remote action
      • Executing remote actions
      • Triggering a remote action manually
      • Writing scripts for remote actions on Windows
      • Writing scripts for remote actions on Mac
      • Example of self-healing scenario
      • Example of self-help scenario
      • Application control and remote actions
    • Organizing objects with categories
      • Classifying objects of the same type
      • Creating categories and keywords
      • Tagging objects manually
      • Tagging objects automatically
      • Importing tags from text files
    • Getting notified by the system
      • Receiving Engage campaigns
      • Receiving email digests
      • Receiving alerts
      • Creating a service-based alert
      • Creating an investigation-based alert
    • Building web-based dashboards
      • Introducing dashboards in the Portal
      • Creating a dashboard
      • Examining metrics in depth
      • Documenting dashboards
      • Assessing license use
      • Computing dashboard data
      • Reusing dashboard content
    • Importing and exporting authored content
      • Methods for reusing authored content
      • Manually sharing Finder content
      • Importing a content pack
      • Conflict resolution
      • Exporting a content pack
  • Library packs
    • Compliance
      • Device Compliance
    • Configuration Manuals
      • Overview (Configuration Manuals)
      • Installing A New Version Of A Library Pack
    • Digital Employee Score (DEX score)
      • DEX Score Installation And Configuration
      • Detailed Library Pack Changelog
    • Device management
      • Reduce logon duration
      • Group Policy Management
      • Hardware Asset Renewal
      • Hardware Asset Renewal Advanced
      • Application Auto-Start Impact
    • Remote Employee Experience
      • Remote Worker Experience
      • Home Networking
      • Change Log And Upgrade Process
      • Remote Worker Vs Office Worker Device Category
      • Remote Worker Insights
      • DEX V2 Upgrade Of Remote Worker
    • Persona Insight
      • Persona Insight - Overview
      • Persona Insight - Library Pack
      • Persona Insight - Score Only Pack
      • Persona Insight - Without Campaign pack
      • Persona Insight - Getting Started and Upgrade Procedure
      • Persona Insight - Configuration Guide
      • Persona Insight - Troubleshooting - Multiple devices on multiple engines
      • Persona Insight - Reference Guide
      • Persona Insight - Example Pack
      • Persona Insight - Device Sizing
        • Persona Insight - Device Sizing Overview
        • Persona Insight - Device Sizing Configuration
      • Persona Insight - Application Sizing
        • Persona Insight - Application Sizing Overview
        • Persona Insight - Application Sizing Configuration
      • Legacy Persona documentation
        • Persona Insight - Library Pack (V.1.0.0.0)
        • Persona Insight - Base Pack
        • Persona Insight - Base Pack Advanced
        • Persona Insight - Customization Guide (V1.0.0.0)
        • Persona Insight - Configuration Guide (V1.0.0.0)
        • Persona Insight - Reference Guide (V1.0.0.0)
    • GSuite
      • GSuite: Health
      • GSuite: Services
      • GSuite: Sentiment
      • GSuite: Advanced Health
    • Support
      • Support: Level 1
    • Shadow IT
      • Shadow IT
    • Malware Protection
      • Malware Protection
    • Office 365 Health
      • Office 365 Health: Overview
      • Office 365 Health: Services
    • Office 365 OneDrive
      • OneDrive Summary
      • OneDrive Operations
      • OneDrive Advanced Health
      • OneDrive Migration
      • OneDrive Sentiment
      • OneDrive Management
      • OneDrive Advanced Operations
    • Office 365 Teams
      • Teams Overall Configuration
      • Teams - Migration
      • Teams - Health
      • Teams - Advanced Health
      • Teams - Adoption
    • Microsoft 365 Apps
      • Microsoft 365 Apps - Operate
    • Employee Self Service
      • Overview
      • Configuration
      • Usage
    • Onboarding Experience Management
      • OEM - Overview
      • OEM - Configuration
    • Office 365 Outlook
      • Outlook Troubleshooting
    • Virtualization
      • Virtualization: Operate
      • Virtualization: AVD - Advanced
      • Virtualization: Citrix Advanced
      • Virtualization: Project
      • Virtualization: Troubleshooting
        • Virtualization: Troubleshooting: Configuration
    • Windows
      • Win10: Configuration
      • Win10: Migration
      • Win10: Feature Update
      • Win10: Quality Update
      • Windows Defender Management
      • Administrators Management
    • Windows 11
      • Windows 11 - Readiness
      • Windows 11 - Migration Pilot
      • Windows 11 - Migration
      • Windows 11 - Operate
    • Webex
      • Webex Operate
    • Zoom
      • Zoom Operate
    • Remote Actions
      • Get Performance Monitor Data
      • Skype For Business
      • Restart Device
      • Upload Logs to S3 using PreSigned URLs
    • Software Asset Optimization
    • Collaboration Optimization
      • Collaboration Optimization - Solution Overview
      • Collaboration Optimization - Configuration
      • Collaboration Optimization - Usage / Troubleshooting
    • Systems Management
      • Manage Configuration Drift
      • MS ConfigMgr - Client Health
        • MS ConfigMgr - Client Health - Summary
        • MS ConfigMgr - Client Health - Configuration Guide
      • Intune
        • Intune - Health
          • Intune - Health - Summary
          • Intune - Health - Configuration Guide
    • Return to the office
      • Return to the office - Planning
      • Return to the office - Readiness
    • Green IT
      • Green IT - Overview
      • Green IT - Configuration Guide
    • Hybrid Working
      • Hybrid Working Experience
      • Hybrid Working Experience - Installation and upgrade procedure
  • Integrations
    • Nexthink ServiceNow Service Graph Connector
      • Overview
        • Roles and Permissions
        • Modules
      • Installation and Configuration Guide
        • Pre-requisites
          • Configure Identification Rules
          • Import and setup the CMDB categories in Finder
        • Setup
          • Configure the connection
          • Configure import properties
          • Configure additional engines
          • Set up scheduled import jobs
      • Data transformation and mapping by default
      • How to customize the behaviour of the Connector
      • FAQ
        • Why ServiceNow Service Graph Connector?
        • What about Nexthink CMDB Connector?
        • Why is the name the primary key for the devices?
      • Troubleshooting
        • IRE identification issues
          • [No Choice found in the sys_choice table for the target table](integrations/nexthink-servicenow-service-graph-connector/troubleshooting/ire-identification-issues/ no-choice-found-in-the-sys_choice-table-for-the-target-table.md)
          • Identification rules not created
          • Discovery_source choice not created
        • Timeout Errors
          • ECCResponseTimeoutException
          • HTTP 0 error
        • MID server issues
          • java.lang.NullPointerException
          • MID Server memory issues
          • Not trusted certificates in Quebec release
        • Configure credentials issues
          • [Not allowing update of property authentication_choice](integrations/nexthink-servicenow-service-graph-connector/troubleshooting/configure-credentials-issues/ not-allowing-update-of-property-authentication_choice.md)
          • Invalid username/password combo (HTTP 401/403)
        • Configure Engines Issues
          • [The client secret supplied for a confidential client is invalid](integrations/nexthink-servicenow-service-graph-connector/troubleshooting/configure-engines-issues/ the-client-secret-supplied-for-a-confidential-client-is-invalid.md)
        • No Cis imported and no errors found in the log
    • Nexthink ServiceNow Incident Management Connector (IMC)
      • Installation and configuration guide (IMC)
      • Troubleshooting Guide (IMC)
      • Domain separation installation (IMC)
    • Nexthink ServiceNow CMDB Connectors
      • Installation and Configuration Guide
      • Troubleshooting Guide
      • Field transformation and normalisation examples
    • Nexthink Event Connector
      • High level overview
      • Installation and Configuration Guide
      • Troubleshooting guide
      • RPM installation
      • Splunk specific documentation
        • Upgrading from Splunk Connector to Event Connector
        • Splunk add-on installation and usage
    • Nexthink Chatbot SDK
      • Introduction and concepts
      • Installation, configuration and update guide
        • Installation and configuration
        • Update to newer version
        • Uninstallation
        • Authentication
        • Topics configuration
        • Remote action configuration
        • Advanced configuration
        • Additional resources and references
      • Dimensioning guide
      • Troubleshooting
      • Technical solution description
      • Downloads and release notes
  • Glossary and references
    • Search and information display
      • Search in Finder
      • Keyboard shortcuts for column display selection
      • Campaign display compatibility
      • Real-time and consolidated service data
      • Service errors and warnings
      • Errors and warnings for devices and executions
      • Types of widgets
      • Widget compute state in charts
      • Errors in the execution of remote actions
      • Top results of Cross-Engine investigations
      • Engine data history
    • Tooltips in the user and device views
      • Alerts tooltips
      • Warnings tooltips
      • Errors tooltips
      • Activity tooltips
      • Services tooltips
    • Database information and organization
      • Maximum supported values
      • Local and shared content
      • Device Identification
      • Local IP address of devices
      • Timestamping of events
      • Boot and logon duration
      • Application startup duration
      • Application not responding events
      • Memory and CPU usage
      • Status of TCP connections
      • Status of UDP connections
      • Network and port scan conditions
      • Binary paths
      • Maximum number of Binaries
      • Package Executable Mapping
      • Metro apps
      • Investigation with packages
      • Portal aggregation and grouping
      • Focus time metric
    • Security
      • Access rights and permissions
      • Active Directory authentication
      • Canonical domain names for Windows authentication
      • System alerts
      • Audit trail
      • Appliance hardening
      • STIG hardening
      • FIPS 140-2 compliance
      • Security bulletins
        • Is Nexthink affected by Okta breach
        • Is Nexthink affected by SolarWinds breach
        • Nexthink and Log4j - Security bulletin
        • CVE-2022-22965 - Security Vulnerability Spring4shell - Spring Framework
        • Version 6.22.2.10: Security Vulnerability Maintenance Release
        • The Collector V6.27.X Release – Security Bulletin
    • References
      • Components of the Collector
      • Server support
      • Compatibility mode
    • Glossary
      • Activity
      • Alert
      • Application
      • Binary
      • Campaign
      • Category
      • Connection
      • Dashboard
      • Destination
      • Device
      • Domain
      • Entity
      • Event
      • Executable
      • Execution
      • Focus time
      • Hierarchy
      • Installation
      • Investigation
      • Keyword
      • Metric
      • Module
      • Object
      • Package
      • Platform
      • Port
      • Printer
      • Score
      • Service
      • Session
      • System boot
      • User
      • User logon
      • Web request
      • Widget
  • API and integrations
    • Integrating with Nexthink
      • Event Connector
      • Getting data through the NXQL API
      • Bidirectional integration with the Finder
      • Count metrics API
      • Software metering API
      • Services API
      • List Engines API
      • GetSID API
      • Triggering campaigns via their API
      • Triggering remote actions via their API
      • Audit trail API
      • Integrating investigation-based alerts
      • Downloads
    • NXQL API
      • Introducing the NXQL API
      • NXQL Tutorial
      • NXQL language definition
      • NXQL Data Model
    • Integrations
      • Excel integration with NXQL
      • Power BI
      • Azure Data Lake Storage Gen2
      • Splunk Event Connector
    • ServiceNow
      • CMDB Connector
      • Incident Management Connector
      • Event Management

© Nexthink

  • Privacy policy
  • Responsible Disclosure Policy
On this page
  • Overview
  • Specifying entities
  • Assigning entities in manual mode
  • Format of the CSV file for defining entities in manual mode
  • Priority of the entity assignment rules
  • Limit on the number of rules per entity
  • Creating a hierarchy
  • Adding hierarchy levels
  • Building the hierarchy tree by editing the entities
  • Editing a hierarchy
  • Cleaning up the hierarchy
  • Viewing hierarchies
  • Renaming levels and nodes
  • Exporting and importing hierarchies
  • Deleting a hierarchy

Was this helpful?

  1. Installation and configuration
  2. Security and user account management

Hierarchizing your infrastructure

Last updated 10 months ago

Was this helpful?

Overview

To manage the complexity of a big company or organization, you usually divide it into a set of hierarchical levels. You can build hierarchies according to different criteria. For instance, if a company is spread throughout several countries, it is possible to group parts of the organization according to their geographical location. You can then arrange the locations in a hierarchy of cities, regions, countries and even continents. Other possibility is to divide the company into functional departments, such as Research and Development, Human Resources, etc. and then divide each department into units, each unit into sub-units and so forth, until you are satisfied with the decomposition. Several hierarchies may be built for the same company and coexist within it at the same time.

Nexthink hierarchies let you arrange the devices in your IT infrastructure in a way that reflects the structure of your company, with the advantage of getting results from Nexthink that directly map into the existing structure. For instance, you can quickly detect if a problem impacted every device in your company or just the computers in the department of Human Resources. Break down results from investigations, dashboard widgets and IT services according to the defined hierarchies. In addition, use hierarchies to delimit scopes of visibility for users (view domains) and administration rights over parts of the company (administration domains).

Specifying entities

To organize your set of devices into a hierarchy, group your devices by entities. Entities are logical groups of devices that make up the first level of all hierarchies. Each device belongs to at most one entity, whose name is displayed in the special device field Entity.

Starting from V6.19, there are two ways to assign entities to each device:

  • Manual assignment mode (legacy).

  • Rule-based Collector assignment mode, which assigns devices to Engines in addition to entities.

Assigning entities in manual mode

To assign entities to sets of devices:

  1. Log in to the Portal as a central administrator.

  2. In the ADMINISTRATION menu, select Hierarchies under SYSTEM CONFIGURATION.

  3. Click the pencil icon in the top left corner of the Hierarchies panel, next to the total number of entities.

  4. In the dialog that shows up, click the button Choose file to pick the CSV file to import. Once you have chosen the file, the dialog displays a Preview field below that shows how your CSV file will be imported. If columns are not correctly detected, modify the fields described in the next steps.

  5. Specify the character that separates the columns in the CSV file in the Delimiter field. By default, the delimiter is the comma character.

  6. Choose the text encoding of the CSV file in the field Encoding. If you choose a UTF encoding, do not use an editor that creates a BOM header at the beginning of the file (e.g. Notepad). You can select one of the following text encodings:

    • ISO-8859-1 (Latin 1).

    • UTF-8.

    • UTF-16.

  7. In the field Text qualifier, specify the type of quotes that you used to delimit text in the CSV file, if necessary.

  8. Click Ok to import the CSV file and modify the entities. A summary of the changes carried out appears in a new dialog.

  9. Click Ok again in the summary dialog to finish the import.

Format of the CSV file for defining entities in manual mode

The CSV file that defines the entities must have five columns per line, or six columns if you add an optional comment as the last item. Either all of the lines or none must provide a comment, although the comment of a line may be an empty string in the former case. Each line in the CSV file defines an entity that is assigned to a set of devices in a particular Engine. The entities that you specify here are the basic building blocks of the hierarchies that you will build later; therefore, they are placed at the lowest level of the hierarchies, called the Entity level. The Entity field of devices gets a value according to the specified rules. Each line in the CSV file holds the following items, ordered below by their position:

  1. Engine name

  2. Entity name

  3. Entity assignment rule

  4. Type of rule

  5. Platform

  6. Optional comment

The rules for assigning entities to devices in the CSV file are simpler than the rules for categories that you can specify in the Finder. The CSV file supports four types of rules. Choose one of them in the column Type of rule. Each type of rule refers to the field of the device that must match the pattern specified in the column Entity assignment rule for the device to belong to the entity. See below the list of types of rules and their corresponding device field:

ip

Last IP address of the device.

name

The name of the device.

dn

collector_tag

The custom tag that identifies the Collector installed in the device.

The format of the pattern in the column Entity assigment rule depends on the type of rule that you specified to select devices:

  • For an ip rule, specify either a single IP address in dot-decimal notation, for example 192.168.0.10, or a subnet in CIDR notation, for example 192.168.0.10/24.

  • For a name or dn rule, give the name or the distinguished name of the device. You can use the wildcards ? and * as substitutes for one or several characters.

  • For a collector_tag rule, indicate the exact number used to tag the installation. Note that several Collectors can be installed in different devices using the same tag.

In the fifth column (the Platform), specify the kind of devices to which the rule applies. You can set it to * for the rule to apply to every kind of device. Otherwise, you can use the values windows, mac_os and mobile for the rule to apply only to Windows, Mac or mobile devices, respectively. If you want to apply a rule to a couple of platforms only, repeat the same rule using different platform values.

In a fresh installation of Nexthink, the default rule for assigning entities is the following:

  • "Nexthink";"other";"*";"name";"*";"Automatically generated default entity"

That is, the default rule assigns the entity other to every device of the Engine called Nexthink, which is the default name of the Engine. From there, you can replace the content of the entity rules as explained above.

Devices that do not match any entity assignment rule are assigned the empty entity, which is represented by a dash sign (-) in both the Finder and the Portal.

Priority of the entity assignment rules

The order of the definitions of entities in the CSV file determines the priority of their assignment rules. Devices that match the rules of several entities are assigned to that entity whose rule appears first in the CSV file.

This is similar to the auto-tagging order of keywords when editing categories in the Finder.

One entity per Engine limitation

A single entity cannot spread among different Engines. In the CSV file, you cannot have the entity GE on two Engines, so the following is not valid:

"Engine1";"GE";"172.16.1.0/24";"ip"; "*"

"Engine2";"GE";"172.16.4.0/24";"ip"; "*"

Limit on the number of rules per entity

The maximum number of rules that you can specify in the CSV file for a single entity is 1000.

If more than 1000 rules are specified for one entity, the rules for that particular entity are invalid and thus ignored. All the devices that do not match any subsequent valid rule of another entity are assigned the empty entity, represented by the dash sign (-).

Creating a hierarchy

Once you have specified the entities that form the base of the hierarchies, you can start building your own hierarchies by adding new levels on top of the entities.

To create a new hierarchy:

  1. Log in to the Portal as a central administrator.

  2. In the ADMINISTRATION menu, select Hierarchies under SYSTEM CONFIGURATION.

  3. Click the plus sign the icons displayed at the top right of the panel. The dialog to add a new hierarchy shows up.

  4. Type in a name for the new hierarchy in the Name field.

  5. Add levels to your hierarchy. See the next section for details.

  6. In the choice group Base hierarchy on, choose between all Engines to create a global hierarchy or selected Engines to create a hierarchy that applies to a set of Engines. Note that if you create a hierarchy that applies to a set of selected Engines, you can later promote it to a global hierarchy. On the other hand, if you create a global hierarchy, it is impossible to downgrade it to a hierarchy based on a group of selected Engines.

    • If you decided to create the hierarchy for a group of selected Engines, select your Engines as follows:

      1. Click the Add button below the table of Engines. A small dialog with a list of Engines shows up.

      2. Pick an Engine from the list and click Ok. Repeat from the previous step until you have selected all the Engines that you wish. The selected Engines are displayed in the table.

  7. Click Ok to finish the creation of the hierarchy.

Adding hierarchy levels

The levels of the hierarchy indicate the depth of the tree that graphically represents the hierarchy. In the example figure of the hierarchy above, there are three levels defined:

  1. Entity level: The lowest level in the hierarchy. It is composed of the names of entities. Each name represents the set of the devices assigned to the entity, according to the rules in the CSV file.

  2. Region level: Groups entities into different regions named after the four cardinal points (North, South, East and West).

  3. Department level: Divides the company into several departments that are located in one or several regions.

The Entity level is mandatory for all hierarchies. When you create a new hierarchy, you add levels on top of the Entity level. The root node of the hierarchy is always at the central administration level, which is never defined explicitly.

To add levels to a hierarchy from the dialog to create a new hierarchy:

  1. Click the Add button below the table of levels. A small dialog to edit the level shows up.

  2. Enter the name of the level.

  3. Click Ok to add the level to the table.

  4. Repeat from the first step to create as many levels as you need.

  5. Optional: Move the created levels up or down in the table by clicking the arrows that appear in the next column, to the right of the name of the level. Note that the Entity level is always the lowest level and that you cannot move it inside the table.

There is a special level that you can use directly above the Entity level called the Engine level. This level makes a first groupment of entities per Engine. To create the Engine level, click the icon with the small Nexthink logo and the plus sign that is placed to the right of the Entity level in the table of levels of the dialog to create hierarchies. The Engine level is automatically filled by the system, which detects the entities (keywords) that are present in each Engine. For that reason, keywords must not be repeated in different Engines. At the end of the process, a new node is created at the Engine level for each Engine found in your system. Similarly to the Entity level, this level cannot be moved upwards or downwards inside the hierarchy.

To manually create the nodes for the other non-special levels, read the following section.

Building the hierarchy tree by editing the entities

Once you have finished creating a hierarchy and its levels, you need to specify nodes for every level. Nodes in one level are used to group the elements of the level below to form the hierarchy. You add nodes to a level by editing the entities of the hierarchy.

To add nodes to the levels of a hierarchy:

  1. In the Hierarchies panel, select the entities that you want to group from the Entity table. Click the row that represents an entity in the table while holding the Ctrl or Shift keys down to select multiple entities.

  2. Click the button Edit selected entities below the Entity table. A dialog appears with a set of text fields, where each field holds the name of the node to which the set of selected entities belong. Since this is the first time that you edit the entities, the text fields are displayed empty.

  3. Type in node names for every level displayed in the dialog.

  4. Click Ok to group the selected entities below the specified nodes in the hierarchy.

  5. Click the floppy disk icon in the top right part of the Hierarchies panel to save your work on hierarchies.

Editing a hierarchy

To edit a hierarchy, click the pencil icon that you see at the top right of the Hierarchies panel. The dialogs and options for editing the hierarchy are identical to those used when you created the hierarchy.

When you edit the entities of an existing hierarchy, they may already belong to some of the nodes in the hierarchy. You can see the names of the nodes in the columns of the different levels in the Entity table. After selecting a group of entities and clicking the button Edit selected entities, you find the names of the nodes in the dialog that displays the levels of the hierarchy for the selected entities:

  • If the selected entities belong to only one node at a particular level, the text field for that level displays the name of the node.

  • If the selected entities belong to different nodes at a particular level, the text field for that level displays the value [multiple].

With the edition of entities, you can add or remove branches from your hierarchy tree or modify it in any other way you choose. Find below a couple of examples:

Be careful when editing a hierarchy that has been already used for aggregating results or for defining user domains. After the edition of an existing hierarchy, a dialog called Impact of changes displays all the elements in the Portal that got their associated domains invalidated because of the changes in the hierarchy. Click Continue to carry on with the changes anyway. Alternatively, click Cancel to revert the changes or to re-edit the hierarchy for reducing the impact.

If you edit a hierarchy, do not forget to save your changes by clicking the floppy disk icon at the top right of the Hierarchies panel.

Cleaning up the hierarchy

Eventually, a hierarchy may be based on entities that are no longer used. A couple of cases may bring up this situation:

  • The CSV file that defines the entities got some rules removed.

  • All the devices assigned to a particular entity were removed from an Engine.

  • An Engine became temporarily or definitively unreachable.

The entities that are no longer in use are not automatically removed from the system. Instead, they are represented in the Entity table with an exclamation mark ! at the beginning of the row. This indicates that the entity was not present in any Engine. You can redefine the entities and add the corresponding keywords to enable these entities again, or you can remove them if you no longer need them. To erase the unused entities:

  1. Click the broom icon in the top right part of the Hierarchies panel. A check list of the unused entities shows up.

  2. Check the box of every entity that you want to delete.

  3. Click the button Delete selected entities.

Note that if an entity is removed and then is detected in an Engine, it will appear again in the Entity table, though without any values for the nodes up in the hierarchy.

Viewing hierarchies

If you have created multiple hierarchies, the Hierarchies panel lets you select the hierarchy that you want to view. Pick the desired hierarchy from the list that is placed as the first element in the top heading of the widget, labeled by the word Hierarchy, before the other icons.

To see a graphical representation of your hierarchy, click the View current hierarchy button. The Portal opens a new window that displays the nodes of the hierarchy as rounded boxes with their names inside organized in a tree-like structure that shows the defined levels. Depending on your browser and your security settings, you may need to enable the pop-ups for the Portal to open the new window.

Otherwise, once you select a hierarchy, you see the levels of the hierarchy with the list of nodes for each level in the upper part of the panel. In the lower part, you see the Entity table, with the names of the entities and the nodes that they belong to. The entities shown in the entity table are filtered by the nodes that you select in the list of nodes of the hierarchy levels. To view all the entities, select the special keyword All from the list of nodes of every level. The keyword All means that you want to see the entities of all the nodes at that level.

Additionally, you can select the Overview mode. In this mode, you just see a big Entity table where the columns include the levels of all the hierarchies at the same time. This mode lets you quickly view all the nodes to which an entity belongs in any of the defined hierarchies.

Renaming levels and nodes

When viewing a particular hierarchy in the Hierarchies panel, note that there is a clickable text to the right of every level labeled (rename). This text also appears to the right of the Entity level in the Entity table. Renaming a level as described below has no impact on the computed metrics, it only changes the displayed names when navigating the hierarchy levels in the dashboards.

To rename a level in your hierarchy:

  1. Click the (rename) word to the right of the level. A small dialog to edit the name of the level shows up.

  2. Type the new name for the level. The new name must not conflict with the name of any other level in the hierarchy.

  3. Click Ok to actually rename the level.

Below the list of nodes of every level, you also find a piece of clickable text labeled rename node (except for the nodes of an Engine level, because these have the names of the Engines and you are not allowed to change them). Beware that renaming a node is equivalent to replacing the existing node by a new one, so all the results of the metrics grouped by the renamed node and its descendants are cleared.

To change the name of a node:

  1. Select the name of the node inside the list of the level.

  2. Click rename node. A small dialog to edit the name of the node shows up.

  3. Type the new name for the node. The new name must not conflict with the name of any other node in the same level.

  4. Click Ok to actually rename the node. Only the nodes that are part of the filter to view the hierarchy are renamed (see previous section).

Remember that:

  • Renaming nodes clears the results of metrics grouped by hierarchies.

  • Renaming levels does not modify any result.

Exporting and importing hierarchies

To backup and restore a hierarchy, you can export it to a CSV file or import it from a CSV file from the Hierarchies panel.

To export a hierarchy to a CSV file:

  1. Select the hierarchy that you want to export in the list of hierarchies of the widget (the list at the top part labeled Hierarchy).

  2. Click the icon with the arrow down and the initials CSV at the top right part of the widget to download the hierarchy as a CSV file.

  3. Follow the instructions of your web browser to save the CSV file in the local filesystem.

To import a hierarchy from a CSV file:

  1. Click the icon with the plus sign and the initials CSV at the top right part of the widget. The dialog to import the hierarchy shows up.

  2. Click on the button Browse to select the CSV file to import from your local filesystem. A preview of the CSV to import is displayed according to your import options.

  3. For the other options in the dialog, select the semicolon as separator character, UTF-8 as text encoding and the double quotes as text identifier if your file was generated by the Portal. Otherwise, use your own custom settings.

  4. Click Ok to import the hierarchy.

Deleting a hierarchy

Deleting a hierarchy has a direct impact on all objects that depend on that hierarchy. Be sure to know what you are doing before deleting a established hierarchy. The following may happen when you remove a hierarchy from the system (not an exhaustive list):

  • Administrators whose administration domain is based on the hierarchy are not be able to log in to the Portal.

  • Objects in a view domain based on the hierarchy are visible to central administrators only.

  • User accounts with a view domain based on the hierarchy see nothing because they no longer have access rights.


RELATED TASKS

RELATED CONCEPTS

In both cases, you write a Comma Separated Value (CSV) file that specifies the names of entities and how to assign each entity to groups of devices. The format of the CSV file for manual assignment is described in the next section. See the section about for more information about the format of the CSV file in that mode of operation. Once rule-based assignment is activated, manual mode is overridden.

The distinguished name of the device (an value).

rule-based Collector assignment
Active Directory
Creating categories and keywords
Assigning Collectors to Engines
Hierarchy
Category
Example of a hierarchy built with mixed functional and location criteria
Example of creating a branch
Example of moving a branch