After deploying the Fort image on your compute instance, you are accessing the Fort Admin Console on your browser (http://<instance_IP>:3000/setup) in order to continue with the installation. 

The page returns:

 An error occurred fetching configuration

Environment

• Qlik Sense Enterprise SaaS 
• Qlik Forts

Resolution

Refresh the page until the error disappears and you are able to see the menus correctly on the admin console. This behaviour will be improved.

Before creating a Qlik Fort support case, please make sure you are collecting the relevant information for us, so we can quickly help you!

Environment

• Qlik Sense Enterprise SaaS 
• Qlik Forts

Basic Information

• Tenant/subscription details (if you cannot log in to your tenant, please provide the tenant URL and the license serial number) 
• User ID(s): ABC@yourdomain.com
• User role (Tenant Admin, Developer, or No Role)
• User access (Analyzer, Professional)
• IDP setup of your tenant - Qlik Account or Third-Party (Auth0, ADFS, Azure AD, or Okta)

Incident information

• Collect Fort support bundle
• Time/Date when the issue occurred (Local time & Time zone)
• Your Browser network traffic when the problem occurs: Save network web traffic (HAR/XML file) and console logs from the browser's developer tools 
• Cloud provider your Fort is installed on
• Virtual machine type from your cloud provider
• Screenshot of your Fort Console Status 
• The URL that the issue occurred on (https://<YourFortUrl>/sense/app/dbdbc449-dd79-4b81-b8ca-6d2239668479.. )
• App ID associated with the error (https://<YourFortUrl>/sense/app/dbdbc449-dd79-4b81-b8ca-6d2239668479.. )

Reproduction steps (if possible)

1. AAA
2. BBB
3. CCC

If possible a video recording showing your issue would be great to have!

Environment

• NPrinting Designer and Office

Symptom

1. When launching NPrinting Designer with an Office template, all the options on Office menu pane is grey out.

2. When dragging and dropping objects(table, image,etc) to the template, it is blocked. 

Resolution

Select "Public" on Office Sensitivity label

Cause [can be removed if not necessary]

Office may have Sensitivity label on.

Please see https://support.microsoft.com/en-us/office/apply-sensitivity-labels-to-your-files-and-email-in-office-2f96e7cd-d5a4-403b-8bd7-4cc636bae0f9

This Techspert Talks session addresses:

• What can Application Automation do?
• How does it work?
• Best Practices
• Troubleshooting common issues

Environment

• Qlik Sense Enterprise SaaS

00:00 - Intro

01:38 - What Qlik Application Automation can do

03:07 - Popular use cases

04:13 - Tour of Automation Editor

05:25 - Creating a Do Reload Automation

07:17 - Adding a Condition block

08:10 - Adding a Send Message block

10:26 - How to investigate an automation after it's run

11:30 - Example of a Teams Message

11:46 - Performance considerations

12:20 - Automations vs Orchestrations

13:31 - Overview of all Automations

14:22 - Triggering an Automation from an app

16:34 - Best Practices considerations

17:51 - Is it free?

18:36 - Salesforce/Teams Integration example

21:11 - YouTube Automation Playlist

21:37 - Qlik created Activities in Salesforce

22:21 - How to Troubleshooting the Automation

23:38 - Q&A

Resources:

Qlik Application Automation YouTube Playlist

Qlik Application Automation Community Forum

Qlik Application Automation How To Articles

Q&A:

Coming soon...

Transcript:

Hello everyone and welcome to the October edition of Techspert Talks! I’m Troy Raney and I’ll be your host for today's session. Today's presentation is exploring Qlik Application Automation with Jeffrey Goldberg. Jeff why don't you tell us a little bit about yourself?

Thanks Troy. For those of you who don't know me, I’ve been with Qlik now for almost two years on my second tour. I worked for Qlik for four and a half years in pre-sales. I focus now as a product manager. I’m certainly focused on Qlik Application Automation, but I’m really also focused on APIs, integration, identity management and anything that really has to do with enhancing the platform either through extensible components, extensions like visualization extensions, and the APIs that support those things. So, that's why Application Automation kind of falls into my realm because a lot of this is; while it's a no code tool which we'll talk about in a minute; is all driven by the APIs that are available in our platform; as well as other cloud platforms.

All right. Today, we're going to be talking about what Qlik Application Automation does; how it works; we'll get to see a little bit of a demo there; some best practices; and really we're going to be focusing a bit on how to troubleshoot common issues and what to do when things don't go as expected. Jeff, for those of us who aren't familiar, can you tell us a little bit more about what Application Automation can do from a high level overview?

Absolutely! The thing about Qlik Application Automation is it's not just a feature. It's actually its own unique product within the cloud platform; which is called an Integration Platform as a Service. And we've now integrated into Qlik Cloud. And what it enables you to do is: leverage analytics as part of an application integration experience. When we looked at Blendr, and brought it in and made it Qlik Application Automation, what we really wanted to do is: we talk about Active Intelligence, but how do we make it real? How do we help accelerate decision making and make it so that people can reach that state of Active Intelligence without having to do manual work?

So, it's kind of replacing a lot of scripting and tasks with visual blocks, so you can kind of see how it's mapped out.

Yeah. So, it's a great way of thinking about it. It's basically a visual way of scripting your daily workflow. There really hasn't been a good way without being a programmer to connect different applications that you use every day. So, you know using Hubspot and Salesforce to migrate or move contacts between the two systems. And you need to make sure that data stays in sync between the two of them.

Right.

This is where Application Automation can come into play, because it can take care of doing that work for you without having to involve someone from the IT organization or having to know how to code in order to facilitate that that kind of experience.

And what are some popular use cases for it?

A lot of what people are doing right now, since we've released Qlik Application Automation is analytics automation and the analytics operations, right? Sometimes this is called Passive Intelligence.

Okay.

So, there's really like four different types of use cases. What we want to get people to is that state of Dynamic Actions, right? Where you're leveraging analytics that drive data decision-making in an automated way, but recognizing that there's a good amount of upfront work that has to be done in order to make sure that you're processing that data and getting it to a state where you can go ahead and look at dimensions and measures, perform selections on that data using the blocks that then allow you to do the evaluations which enable you to then trigger the actions in the downstream business applications you're integrating with.

So, based on the data you get to actually trigger things and initiate workflows?

Correct.

Cool. How should someone get started using Qlik Application Automation?

Yeah. So, let's just jump right in, right? So, I’m on Qlik Cloud, and I am in the Analytics area of the platform. So, when I want to start building automations, I can just go to Add New, and choose New Automation. And then I can…

Give it a name.

And that brings you right into the Automation Editor. And the Automation Editor has three different sections. There's the Block Menu, which is on the left and you can see that there's a number of different connectors and block types there. So, we have basic blocks lists. We have some advanced blocks cloud storage blocks and then we have connectors and you can see it's showing the connectors that I use most often in my other automations.

Yeah, that's cool.

There's a number of other connectors down below that you can choose from. And we're adding new connectors on a monthly basis. And then when you want to access those connectors, you can just click inside, and that will bring you to the actual blocks that are available. And you can search for blocks through the search menu or you can use these different tags that are up at the top to filter the list and get started.

What's the center called?

The middle is the canvas. This is where you actually drag and drop the blocks. And then, when we drag and drop the blocks, on the right hand side, that's the block configurator.

Okay. Can you walk us through setting up a reload automation?

Yep. Type “Do” in the search, and I drag and drop Do Reload. First things first, you see the blue pulsing square? That just shows that when I let go of the mouse button, it's automatically going to attach to that point in the flow.

And the details of that on the right?

Yep. Now, because I’m using the Qlik connector here, I’m already authenticated to my Qlik Cloud tenant, so there's no need to provide any credentials.

Sure.

I can go right into, and I can search for my apps here. I have this app called TC. You can see that I have the app grid here. And then I can say I want to wait for this reload to complete, or I can set it to run asynchronously. If I set it to run asynchronously, then what I can do is add another Do Reload. And I can go over to here and do another lookup, and I can look for my second app. Oops. I can do, I do look up and I can look for my second app. What happened just now is: you see that red box that's around App ID? The reason why that turned red is: I started typing and then I deleted. It's basically telling me: I can't run this flow without supplying an App ID. What's nice about the platform is it actually tells you intuitively when you've got errors in your configuration that you need to work through; and we'll show a couple more of those.

I actually love that part, that it kind of tells you right away the things that are missing.

It's really nice, right?

Before it creates an error. Yeah.

Yeah. So, I’m going to also do a start reload and continue here. And what this is going to do is: it's actually going to kick off the reloads for these two applications at the same time. And there's another block inside of here called Wait for Reloads to Complete. And you use this block to basically say “I want to wait for these two reloads to complete before I do anything else,” right? Another way that you could do it though; you could go back and; one of the things that's nice is: in the canvas you can just drag and drop. And whatever is not in the sequence doesn't get run. I can go ahead and I can go into the Basic Blocks here, and I can add a Condition.

Okay.

And if I switch this Do Reload to wait for the reload to complete, then I can go into the Condition. I can choose from the input, you'll see that there's the output from the Do Reload ready to use as data that I can use to drive the continued execution of the flow. So, in this case, that output from the Do Reload, you can see there's the App ID, and there's also the status, right? So, if the status equals Succeeded, that's when we want to run the second reload. And we'll also wait for this reload to complete. And if I want to I can add another Condition here to do something else or send a message to Microsoft Teams. Drop that in here. And I can also drop another one here at the bottom, and I can even change the flow, right? So, the editor is really nice and flexible. Let's say you want to just grab a hold of a whole chunk of an automation. Wherever, whatever block you click, and you disconnect from the flow. It's going to take all of the blocks below it.

That's a nice tip for how to use the canvas and mix it up.

Yeah.

So, once it's connected, how does the send message work?

Go into here, and you'll notice I already have a connection to Microsoft Teams, but I’m going to delete that and you can see immediately I already have this…

Red warning

And if I go ahead and I try to save this, it's basically throwing (before I even can save) an Invalid Block message. And it's telling me: you've got a problem with this block. This block doesn't have these fields filled out; because you don't have these fields filled out, it's not going to work. Now, I can go ahead and save it anyway.

It's nice to have that option.

Yeah. It's nice, right? But if I go and I go and run, and then you're going to get this error. And it's basically going to say “oh, I couldn't find Microsoft Teams, not either never existed or may have been deleted.” What you need to make sure that you do is: first you need to make sure that you have a connection for Teams. Specifically, sometimes you have to have different permission sets. When you choose to link, it will pop-up this box. It will ask you to pick an account and then it will connect. So, now that that connection's all set, you can see that it's there I can go into the inputs. And you can see, I’ve got the red that basically is telling me: I need to fill this out.

It's looking for what profile to use in Teams, I guess?

Yep, exactly. It's looking for the different team that you want to send the message to.

Okay.

And I want to send this to the output channel, and I want to say: the first reload completed successfully. Save that. And you can see, I still have an Invalid Block, because I have this Team's Message, but let's just go ahead and remove this one. And now you can see that it will save appropriately. And if I run this; if you go into the overview, you can see: what your last run was; you can see what your history is; and you can see we have our failed item. We have this one that's running, and once the automation finishes, you get this really great Per Block run. Which doesn't necessarily put the blocks in order, but you can go in and you can look at the execution; and you can see the information that was sent into the request, and then what came out of the request which is pretty cool when you're trying to troubleshoot different things that are going on.

Yeah. So, if something failed like one of the blocks, could you actually see where it broke down there?

Yep. Yep. So, what would happen is you would see in the Per Block if there was an error where it broke down, and you would also see that the error is here. But you're right; you could come back to the Per Block, or better yet you could go to the Chronologically tab. And what this will do is: it actually shows you the sequence of everything that was kicked off. So, and it will give you a preview as well. So, you can click on the drop down here, and you can also see the same information. So, I’d recommend using the Chronologically tab.

And can we take a look at what the message it's sent to you in Teams looks like?

Absolutely. I’ll move it over.

That's very simple, but yeah, it's nice to know what it looks like. Now, I understand there's a ton of possibilities with Teams and with Slack that we don't have time to go into today, but back to this reload: what can affect the performance of these reloads?

So, depending on the size of your applications, they may take a long time to reload depending on how much data you're actually reloading. But it could also be a result of the reload queue that sits inside of the cloud platform. Depending on when your request goes into that queue, that's when it's going to run. So, if you've got a lot of concurrent reloads happening at the same time, you may find that your load ends up running later on.

Okay, now I’ve heard the terminology and I’m hoping you could explain the difference between a task chain or automation and an orchestration?

It's a great question Troy. I actually don't see a whole lot of difference between a task chain per se and an orchestration.

Right.

But then it's about focusing on operational efficiency and productivity. There is aspects of data movement. It's really about moving small bits of transactional data in support of business processes. It's not about like bulk data movement. When people are talking about orchestration and orchestration of pipelines, they're talking about “we're moving data,” right? We're not just doing this. When we think about orchestration, right? It's directing automations within end-to-end processes, right? So, if you think of just an API call opposed to going to a screen and clicking three things in order to do something; it's very much event driven or dependency driven versus “oh, I’m just sick and tired of having to click five buttons at a time.” I think that's the way a lot of people think about the differences between the two things.

Now getting back to SaaS, suppose there are several automations built without those wonderful emails or Team messages/notifications. How can you view all of the automations have been created and see which ones might have issues?

Yep, great question. If we go out to the Management Console. Inside of the Management Console, you will see that there's an Automations tab. And you can go ahead and see from here all the automations that exist on your tenant. And you can see when the last run; whether the last run failed or not. So, if we go and say “oh we want to look at Icons.” So, let's back out here, go to the Catalog, Icons, right we can see here's our last run brings us right to the error. We can go into the Chronology. I only have one block in here. So, that's the, that's the issue. But I can then also look at the full history here. So, it's not that I have to go back to the Management Console; that's just one place that you can look at it from.

Okay, is there a way that users can manually trigger a flow from an app?

So, there are some different ways that people have done that. Using the Action Button can use the navigation to the website URL, and there the URL of the automation in there. And the way that you get that automation is by going into Run Mode here and choosing Triggered. There's an example here that represents the URL for this automation.

Okay.

When you use that website URL, it pops up another page. Now let me just go into my copy of Consumer Sales app. This is the app I use to test with.

So, I understand you've been improving the Action Button, since it's open source.

I’m working on updating this button, so that instead of going to navigation and choosing ‘open a website or email’ you can actually go into the button here, and you can choose Execute Automation. And then you'll see the list of automations that exist in your tenant.

So, it's picking up all the automations you've already created in your tenant there?

It's picking all of those up and so then you can choose: “Oh. I want to do Hot Dog Alert.” And you're also going to be able to choose “Oh, I want to Include My Selections.” So, if I go ahead and I do this, and then I do this, and I press this button, and then I click on this button, and then I go out to my hub, go and look at my hot dog alert; you should see that it started, right? Now, because I’m just testing this because this is still something that I’m making sure works properly; all I’m doing is passing inputs and we'll have videos once it comes out. But you can see I’m passing into this automation the App ID and the Bookmark ID. When you do that selection check box, it creates a bookmark. And now you can go ahead and reference that bookmark inside of the automation for that App ID, and now you have the starting point of your flow. So you can start working with different charts and stuff like that inside of the application, and getting the data that you need.

That's really awesome.

Yeah. To be clear: not out yet.

What are some best practices or details that admins should be aware of when managing automations to avoid potential issues?

Yep. So, automations today will only run for a maximum amount of one hour.

Okay.

You can't create a runaway automation that just runs forever. Now there are some other types of execution that have some potential consequences; and you want to make sure that when you're building your automations, you're thinking about it, right? In the case of something like this automation where we're using a triggered web hook, right? It's great that we're using a triggered webhook URL, but let's say I’m putting it someplace where it gets called a lot.

Okay.

You're going to queue up a lot of automations, and they're all going to run. Now, automations don't run simultaneously. Automations always will run one at a time. The thing is if you have like a really small automation like this one which runs for like one second; and you are triggering this URL like crazy, then you're going to hit your threshold of available automations. Because the way that we offer this is a number of automation runs per month. So, as you're building your automations. you want to be cognizant of the use case.

Yeah, and let's address one issue you brought up there. Is Qlik Application Automation free?

There is a free tier for Qlik Sense Enterprise SaaS customers.

Okay.

And Hybrid Data Delivery customers. The free tier gives you 5000 runs per month currently with the ability to run 5 automations simultaneously. That's what we call concurrency. But we do have 3 different offerings that you can purchase that expand your capacity. So, you can buy more what we call “automation runs.” So, you can go from 5,000 to 20,000 or 60,000 or a 100,000 and you can contact sales to get more information about the pricing of those.

That's great. Can you show us another example of what's possible with Qlik Application Automation?

I would love to. In fact, what I want to do is show how you can take advantage of analytics to compel action in other systems.

Okay.

Let's say I’ve got a Qlik Sense app. I’m looking at sales data, and I’m also looking at this Account and Opportunities detail. You can see I’ve got these Marketo scores and I’ve got these Hug ranks. What the Marketo score is reflecting is the interest that someone has in the materials that we're sending them. What the Hug rank does is it shows how we (you know fictional company) are engaging with you.

So, a high Marketo score means a highly engaged customer, and the Hug score shows how well engaged the company is with that customer. So, this helps identify sales opportunities?

Exactly. I know that there's a certain threshold combination between the Marketo score and the Hug rank where it’d be cool if I could actually make automatically the sales person gets an activity inside of Salesforce that they have to act upon?

So, I see you've completed a flow would you walk us through how this works?

Yep, absolutely. I’m using an event which is App Reload Finish. So, I can go over to my Run Mode and I choose App Reload Finished. And then, the first thing I’m doing is I’m making sure that this is equal to the app that I’m looking at which is my Sales Pipeline Analysis which it is.

Okay.

And I can start selecting Stage, and I’m looking for accounts and opportunities that are in champion stage.

Okay.

Once I have that, I want to get the straight table data from this table. Now, I’m selecting that field value first is to reduce the amount of data that I have. The get straight table data only will bring back a 100,000 cells, right? And that's a limitation inside of Qlik Engine. You wanna definitely make sure you have an understanding of the selections you wanna make on the data. If you try to grab something that's going to have a million cells, automation's going to fail.

That's a good troubleshooting tip.

Once you have your straight table data, you add another Condition, right? And this is where you can add your Thresholds. So, in here I’m saying: well, if the Marketo scores equal to 110, and the hug rank is equal to 9 (and this is just for the sake of demo), I want to create a task. And inside of that task, there's specific fields that have to be filled out; like the What ID, the Subject of the task.

Yeah, all those fields and Salesforce that are necessary.

And you can see I can actually use data that I’m grabbing from the straight table in the message that I want to put inside of Salesforce. And then, I’ll also send a Hero Card to basically say “Hey, you've got these records. Do you want to go and look at them?” And we can actually embed the links so that they just click the button.

Yeah, that's so convenient.

Yeah. We have a playlist looking at how we construct this in real time. And you can see inside, there's this Active Intelligence Salesforce walkthrough.

That's a great resource for learning more. By the way, the link to this playlist and more will be included with the recording of this session.

And when that application reloads, it does all of this automatically now.

So, that lets people easily take action on those insights which means a lot less manual work. How does all look from the application side?

When this automation runs, it actually creates these activities right here and I can go into the task and I can basically see “Oh, Jeremy Webb from Tristique Associates has a Marketo score greater than 100, but a hug rank less than 15. Contact them and engage them about our new Application Automation capability and Qlik Cloud.”

And that was created by the automation?

Yep. And we can confirm that it worked because we can go into the automation here. And we can see this is what we sent. And then we can see here's the out, which is a Success=True.

Can we see again what that looks like in Teams?

You can see that it's created these items. There's that Active Intelligence. But one of the nice things is as you're actually building this there's ways that you can actually troubleshoot your flow by moving blocks around, right? So, if you do find yourself in a situation where you have to do some troubleshooting, you have a lot of flexibility in the editor to move blocks around to kind of troubleshoot what's going on.

I see running the test runs of individual blocks as well. That's really cool.

Yeah. Test blocks are really nice as well because they basically give you back sample data. So, like let's say: you're doing something for the first time. You don't want to have to do a full run. You can do a test run on a block based on information. So, if I go and I hit “Do this test run” here, what it will do is: it will run everything. So, let's go ahead and grab this out. You can see it didn't like my Condition because didn't get the App Reload Finished. So, we'll switch this back to Manual Mode, right? But if I do a test run, it will only run to the block that I’ve done the test run at.

Okay.

So, in this particular case, it labels the output as a Test Run, and it basically says that it made the selection. And then, I can also do the test run here. It will go ahead and it will show “Oh, yeah okay. So, it brought back that test run information.”

Great! Now, it's time for Q&A. Everyone please submit your questions to the Q&A panel on the left side of your On24 console. First question: is there a function to allow developers to request application promotion from one environment to another?

Oh, that's a good question. We are getting a lot of - we are receiving a lot of feedback about things like “Oh, I want to do app promotion. I have two tenants and I want to basically say: this is where I do my development. This is where I do production.” Right? In a lot of cases, we have customers that use the same tenant, right? And they have different spaces. But in the event that you really do have two tenants, currently with Application Automation you notice (and I mentioned this at the beginning) when we first… Let me go back to the - you'll recall when we earlier - when I talked about the use of the Qlik Blocks. One of the nice things is: you don't have to worry about setting up your credentials because it's bound to the tenant that you're actually working with. Now, that's really nice because you don't have to do that; but what right now we don't have the ability for you to connect to another tenant like with an API key using the same set of blocks. So, what you can do is: you can use the call URL block (as an example). And say let's say: you're going to run this automation on your production tenant as the as a solution that's going to perform the app promotion, right? You could use the call URL block with an API key to contact that the development tenant; reference the app; export it to base; and then import it as base into the production tenant. So, that is one of the ways that you can do app promotion. We are looking at a number of different ways to streamline that process. Either through automation or through the core cloud UI. Stay tuned for those updates as time goes on, and we learn more about how our customers use Application Automation.

That's great. Next question was: what happens if a flow fails? Is there a way to trigger an alert email to the admin?

Yes, actually. If we look at this example right? So, we have succeeded, but if it didn't succeed you can easily go ahead and use something like the Mail Block, right ? If you wanted to send a mail (an email), you could use a Mail Block. And you do have to configure that with your own SMTP server. It doesn't use the SMTP server of what's  in the Management Console. So, you do have to specify that again. But you could also send a message with Slack. You could send a message with Teams just like we did previously, right? I can copy this block and I can paste this block, and I can drag it into here.

It's great that there's so many options available for communicating.

Yeah, exactly. And that was one of the things we wanted to make sure of is; that there's so many different ways, right? You can use if you subscribe to Mailchimp, you can use Mailchimp. If you subscribe to SendGrid, you can use SendGrid to send messages. Out there's lots of different ways that you can go ahead and produce messages based on whether or not your automations are succeeding or failing. The other thing that you can do is: there is an Error Block, right? And when you put the Error Block in, this will actually create the message. And you can choose to stop the automation or continue the automation. And by doing that, that's what's going to show that will show up, right? If I come back out into the overview, if we look at things like the Chronologically or the Per Block, and you have an error; you can actually specify setting up that error.

That's kind of interesting. Next question: referencing Qlik Data Transfer can trigger a reload of an app. Is there any plan to trigger an automation instead when the data is synced?

I’m not sure about Qlik Data Transfer. We are working with the data integration team for Hybrid Data Delivery to create APIs and events that will turn into blocks inside of Application Automation that will respond to events based on data changes. We also are looking at when you're landing data inside of data files which is what the Qlik Data Transfer tool does. There should be APIs and events that that we can hook on to. So, I’d say stay tuned. Stay tuned for that.

Is it possible to write data to Qlik Cloud?

In terms of writing data to Qlik Cloud specifically; certainly you can go ahead and grab data from different data sources like SQL Server, like Hubspot, like any of these connectors. They're all producing data. You could do something like writing a load script manually inside of here because there is the possibility to set a load script inside of an app. But if you're looking to move like data files, currently there's no way to move data files in the Application Automation tooling similar to Qlik Data Transfer. That may be changing in the near future. It's all - it's a matter of making sure that the APIs are public and guidelines compliant. But there's numerous different ways you can bring data into the cloud through APIs. And you don't even need to use Qlik Blocks in order to do that, right? You can just go ahead and use APIs to create files or move files and move data around to different sources and targets if you're trying to integrate Application Automation to do non-Qlik things (which is a totally perfectly fine use case).

Where can I find an overview of all the automations I’ve created?

Yeah. So, in terms of the overview, right? The best place to go is the Hub. All automations that you create are in your personal space. So, if you go over to the Catalog, you can click on all filters and you can choose Automations, because automations are first-class citizens just like apps or your monitored charts. And you can see them and then you can go ahead and you can look at your list if you need to see what their performance is if you've got access to the Management Console. The Management Console gives you access to look at that list. We have had some feedback come from customers as well as the field saying it would be good to have a mechanism for supporting that in this UI as well. So, that people can see what they've got running and have more of an overview. So, something we're thinking about.

How can you tell which app the automation is for from the editor?

Ah, yeah. So, you really can't. Because automations aren't necessary (like I just said) they're first-class citizens, right? So, they're this they kind of operate at the same level as an app. They're not child object of an app like a chart or a story or anything like that. Because an automation doesn't even need to interact with Qlik Sense. It can interact with Hubspot, and Salesforce, or Marketo in Salesforce, or ServiceNow. Based on other information that's coming into the system (either through another data connection that you're making to) like a SQL data source or from another application in your Enterprise portfolio. So, it's important to understand that if you are trying to associate automations with the apps that they're tied to, your best bet is to go into the edit of an app, and add tags, right? So, you could add a tag that aligns this; like I’ll just align this with GMS. And now, if I go ahead and do a search on all things with tag GMS, you're going to see I’ve got copy of Consumer Sales and then I also have my first automation. And that would be…

That's a smart way to do it.

That would be the way that I would organize it.

Okay, last question: I’m looking for a way to send ‘task fails/success emails’ to specific users. Is there a way that can be done through automation?

Absolutely. If you go back to using with Slack and Teams a little harder because the way that they're structured, you typically will send information to channel. Although you can send in Slacks to (I believe) to specific users. If you're sending an email, it's just a matter of knowing the email address of the person that you want to send it to. And it could be that you're, let's say you've got Section Access inside of an app. If you leverage the Users Table, let's say you're an admin on that that app. You're going to see everything. I would use the Section Access table and use the email as your user identification field. And that way, you could pull that email address out; and you could send emails that way. Or you could have a list that you sideload either through a text file or Excel or a database should do that.

That's really smart. Well, thank you very much, Jeff. This has been great.

Troy, it's been an absolute pleasure to spend some time with you today and go over the platform. I know we showed a demonstration of some Active Intelligence, and then we also went over some different places where you're going to spot errors, and stuff like that. There is a tremendous amount of content that we've actually produced so far. You saw the YouTube channel. There's also our community. We have an Application Automation and integration forum on community. And then we also have a number of how-to articles so that you can learn how to use the different patterns and blocks, and you can go ahead and upload those patterns directly into the editor so that you can save yourself some time. Thanks for the time today to chat.

Thank you everyone. We hope you enjoyed this session. Thank you to Jeffrey for presenting. We appreciate getting experts like Jeff to share with us. Here's our legal disclaimer. And thank you once again. Have a great rest of your day.

Some of the master dimension in the Qlik Sense app cannot be seen in the selection tool.
Calculated dimension are not be displayed by design, and this is a current product limitation, but you can expect that a Master Dimension with a single field as expression would be displayed.

Environment

• Qlik Sense Business 
• Qlik Sense Desktop 
• Qlik Sense Enterprise SaaS 
• Qlik Sense Enterprise on Windows 

Cause:

The problem occurs when a Master Dimension is created using the left bar of Qlik Sense app. In this case, Sense will automatically add the '=' sign to the field you import.
So the master dimension is considered as a calculated dimension and not shown by the selection tool

Resolution:

It is necessary to avoid the "=" in the master dimension.
Here are the steps to follow. 

1. Go to  Assets panel, Master items, Dimensions, "Create new" .
2. Find the "Create new dimensions" window.
3. Select a field in the list. Qlik Sense suggest a dimension with his field and name 
4. Click on Add dimension. The dimension is added  without "=" .

When the Service Account Owner (SAO) set up the tenant and try to access the hub, they see the below message:

Environment:

• Qlik Sense SaaS

Resolution:

Assign a PROFESSIONAL license allocation for the SAO profile to resolve the issue

Cause:

When the SAO sets up the tenant for multi-cloud license and users are imported from the On-Prem installation IDP. So the licenses are allocated to the IDP profile. If access is needed for email login, then a separate license allocation is required for the SAO profile.

Related Content:

• Managing identity providers
• Assigning user allocations

Summary

• Step-by-step instructions for implementing Azure AD identity provider connectivity in Qlik Sense Enterprise SaaS.
• Configuring an App registration in Azure AD.
• Configuring group support using MS Graph permissions.

Prerequisites

Please make sure to have the following before starting this process:

• Microsoft Azure account
• Microsoft Azure Active Directory instance
• Qlik Sense Enterprise SaaS tenant
• BYOIDP feature in your Qlik license is set to YES. Contact customer support to find out if you are entitled to bring your own identity provider to your tenant.

Helpful vocabulary

Throughout this tutorial, some words will be used interchangeably.

• Qlik Sense Enterprise SaaS: Qlik Sense hosted in Qlik’s public cloud
• Microsoft Azure Active Directory: Azure AD
• Tenant: Qlik Sense Enterprise SaaS tenant or instance
• Instance: Microsoft Azure AD
• OIDC: Open Id Connect
• IdP: Identity Provider

Tutorial sections

This is a long tutorial with many clicks. It’s broken up into sections to make it easier to skip the desired set of instructions:

Considerations when using Azure AD with Qlik Sense Enterprise SaaS 

Introduction 

Configure Azure AD

Create the app registration
Create the client secret
Add claims to the token configuration
Add group claim
Collect Azure AD configuration information

Configure Qlik Sense Enterprise SaaS IdP

---------------------------------------------------------

Considerations when using Azure AD with Qlik Sense Enterprise SaaS

• Qlik Sense Enterprise SaaS allows for customers to bring their own identity provider to provide authentication to the tenant using the Open ID Connect (OIDC) specification (https://openid.net/connect/)

• Given that OIDC is a specification and not a standard, vendors (e.g. Microsoft) may implement the capability in ways that are outside of the core specification. In this case, Microsoft Azure AD OIDC configurations do not send standard OIDC claims like email_verified. Using the Azure AD configuration in Qlik Sense Enterprise SaaS includes an advanced option to set email_verified to true for all users that log into the tenant.

• The Azure AD configuration in Qlik Sense Enterprise SaaS includes special logic for contacting Microsoft Graph API to obtain friendly group names. Whether those groups originate from an on-premises instance of Active Directory and sync to Azure AD through Azure AD Connect or from creation within Azure AD, the friendly group name will be returned from the Graph API and added to Qlik Sense Enterprise SaaS.

   

Introduction

This document will guide the reader through adding the necessary application configuration in Azure AD and Qlik Sense Enterprise SaaS identity provider configuration so that Qlik Sense Enterprise SaaS users may log into a tenant using their Azure AD credentials.

Read the Considerations section to understand the limitations of Azure AD group claims or want to learn more about the OIDC specification. Steps with pictures will provide the instructions above the picture.

Configure Azure AD

Create the app registration

1. Log into Microsoft Azure by going to https://portal.azure.com.

2. Click on the Azure Active Directory icon in the browser. The overview page for the active directorywill appear.

3. Click on the App registrations item in the menu to the left.

4. Click the New registration button at the top of the detail window. The application registration page appears.

5. Begin by adding a name in the Name section to identify the application. In this example, the name of the hostname of the tenant is entered along with the word OIDC.

6. The next section contains radio buttons for selecting the Supported account types. In this example, the default – Accounts in this organizational directory only – is selected.

7. The last section is for entering the redirect URI. From the dropdown list on the left select “web” and then enter the callback URL from the tenant. Enter the URI https://<tenant hostname>/login/callback.

Warning! The tenant hostname required in this context is the original hostname provided to the Qlik Enterprise SaaS tenant.

Using the Alias hostname will cause the IdP handshake to fail.

8. Complete the registration by clicking the Register button at the bottom of the page.

9. Click on the Authentication menu item on the left side of the screen.

10. On the middle of the page, the reference to the callback URI appears. There is no additional configuration required on this page.

---------------------------------------------------------

Create the client secret

11. Click on the Certificates and secrets menu item on the left side of the screen.

12. In the center of the Certificates and secrets page, there is a section labeled Client secrets with a button labeled New client secret. Click the button.

13. In the dialog that appears, enter a description for the client secret and select an expiration time. Click the Add button after entering the information.

14. Once a client secret is added, it will appear in the Client secrets section of the page. Copy the value of the client secret and paste it somewhere safe. After saving the configuration the value will become hidden and unavailable.

---------------------------------------------------------

Add claims to the token configuration

15. Click on the Token configuration menu item on the left side of the screen.

16. The Optional claims window appears with two buttons. One for adding optional claims, and another for adding group claims. Click on the Add optional claim button.

17. For optional claims, select the ID token type, and then select the claims to include in the token that will be sent to the Qlik Sense Enterprise SaaS tenant. In this example, ctry, email, tenant_ctry, upn, and verified_primary_email are checked. None of these optional claims are required for the tenant identity provider to work properly, however, they are used later on in this tutorial.

18. Some optional claims may require adding OpenId Connect scopes from Microsoft Graph to the application configuration. Click the check mark to enable and click Add.

19. The claims will appear in the window.

---------------------------------------------------------

Add group claim

20. Click on the API permissions menu item on the left side of the screen.

21. Observe the configured permissions set during adding optional claims.

22. Click the Add a permission button and select the Microsoft Graph option in the Request API permissions box that appears. Click on the Microsoft Graph banner.

23. Click on Delegated permissions. The Select permission search and the OpenId permissions list appears.

Note: email, openid, and profile should be checked in this window when it appears. If they aren't, check them now.

24. In the Select permissions search, enter the word group. Expand the GroupMember option and select GroupMember.Read.All. This will grant users logging into Qlik Sense Enteprise SaaS through Azure AD to read the group memberships they are assigned.

25. After making the selection, click the Add permissions button.

26. The added permissions will appear in the list. However, the GroupMember.Read.All permission requires admin consent to work with the app registration. Click the Grant button and accept the message that appears.

Warning! Failing to grant consent to GroupMember.Read.All may result in errors authenticating to Qlik using Azure AD. Make sure to complete this step before moving on.

--------------------------------------------------------- 

Collect Azure AD configuration information

27. Click on the Overview menu item to return to the main App registration screen for the new app. Copy the Application (client) ID unique identifier. This value is needed for the tenant’s idp configuration.

28. Click on the Endpoints button in the horizontal menu of the overview.

29. Copy the OpenID Connect metadata document endpoint URI. This is needed for the tenant’s IdP configuration.

---------------------------------------------------------

Configure Qlik Sense Enterprise SaaS IdP

29. With the configuration complete and required information in hand, open the tenant’s management console and click on the Identity provider menu item on the left side of the screen.

30. Click the Create new button on the upper right side of the main panel.

31. Select Interactive from the Type drop-down menu item, and select ADFS from the Provider drop-down menu item.

32. Scroll down to the Application credentials section of the configuration panel and enter the following information:

a. ADFS discovery URL: This is the endpoint URI copied from Azure AD.

b.Client ID: This is the application (client) id copied from Azure AD.

c. Client secret: This is the value copy and pasted to a safe location from the Certificates & secrets section from Azure AD.

d. The Realm is an optional value used if you want to enter what is commonly referred to as the Active Directory domain name.

33. Scroll down to the Claims mapping section of the configuration panel. There are five textboxes to confirm or alter.

33a. The sub field is the subject of the token sent from Azure AD. This is normally a unique identifier and will represent the UserID of the user in the tenant. In this example, the value “sub” is left and appid is removed. To use a different claim from the token, replace the default value with the name of the desired attribute value.

33b. The name field is the “friendly” name of the user to be displayed in the tenant. For Azure AD, change the attribute name from the default value to “name”.

33c. In this example, the groups, email, and client_id attributes are configured properly, therefore, they do not need to be altered.

Note: In this example, I had to change the email claim to upn to obtain the user's email address from Azure AD. Your results may vary.

34. Scroll down to the Advanced options and expand the menu. Slide the Email verified override option ON to ensure Azure AD validation works. Scope does not have to be supplied.

35. The Post logout redirect URI is not required for Azure AD because upon logging out the user will be sent to the Azure log out page.

36. Click the Save button at the bottom of the configuration to save the configuration. A message will appear confirming intent to create the identity provider. Click the Save button again to start the validation process.

37. The validation procedure begins by redirecting the person configuring the IdP to the login page for the IdP.

38. After successful authentication, Azure AD will confirm that permission should be granted for this user to the tenant. Click the Accept button.

39. If the validation fails, the validation procedure will return a window like the following.

40. If the validation succeeds, the validation procedure will return a mapped claims window. If the validation states it cannot map the user's email address, it is most likely because the email_verified switch has not been turned on. Go ahead and confirm, move through the remaining steps, and update the configuration from step 34. Re-run the validation to map the email.

41. After confirming the information is correct, the account used to validate the IdP may be elevated to a TenantAdmin role. It is strongly recommended to do make sure the box is checked before clicking continue.

42. The next to last screen in the configuration will ask to activate the IdP. By activating the Azure AD IdP in the tenant, any other identity providers configured in the tenant will be disabled.

43. ‘nuff said.

44. Please log out of the tenant and re-authenticate using the new identity provider connection. Once logged in, change the url in the address bar to point to https://<tenanthostname>/api/v1/diagnose-claims. This will return the JSON of the claims information Azure AD sent to the tenant. Here is a slightly redacted example.

45. Verify groups resolve properly by creating a space and adding members. You should see friendly group names to choose from.

--------------------------------

Recap

While not hard, configuring Azure AD to work with Qlik Sense Enterprise SaaS is not trivial. Most of the legwork to make this authentication scheme work is on the Azure side. However, it's important to note that without making some small tweaks to the IdP configuration in Qlik Sense you may receive a failure or two during the validation process.

Addendum

For many of you, adding Azure AD means you potentially have a bunch of clean up you need to do to remove legacy groups. Unfortunately, there is no way to do this in the UI but there is an API endpoint for deleting groups. See Deleting guid group values from Qlik Sense Enterprise SaaS for a guide on how to delete groups from a Qlik Sense Enterprise SaaS tenant.

Migrating NodeGraph 3 to 4

Note: Upgrading to version latest - 3.1.13 is mandatory before upgrading to Qlik NodeGraph Version 4.x

Environment

• NodeGraph 4.x

GENERAL

Default installation folder has changed from "C:\Program Files\techlab10\nodegraph" to "C:\Program
Files\nodegraph".
Default "Program Data" folder has changed from "C:\Program Data\techlab10\nodegraph" to
"C:\Program Data\nodegraph"

Uninstall NodeGraph 3 before installing 4.

LICENSE

Due to changes in the licensing model, request a new license for NodeGraph 4 through the partner
portal before upgrading.

RUNNING NODEGRAPH 3 AND 4 ON THE SAME MACHINE

Before uninstalling NodeGraph 3, make a copy of "C:\Program Files\techlab10\nodegraph".
ProgramData will not be removed and NodeGraph 4 will not overwrite it.
NodeGraph 3 can be started manually or manually registered as a service.

SETTINGS MIGRATION TOOL

It is recommended to set up NodeGraph 4 as a clean installation.
The Setup Migration Tools can be used to convert existing settings and creating default connectors
to Qlik to be used as a starting point when setting up NodeGraph 4.

The tool can be downloaded from:

NodeGraphUpgradeTool_1.0.4.0 

The information in this article is provided as-is and to be used at own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution below may not be provided by Qlik Support.

Related Content

Qlik NodeGraph Upgrade Documentation to Version 3.x 

NodeGraph 4.5.6 Setup File 

NodeGraph Support Information Version 4 or later 

Upgrade Qlik NodeGraph to Version to 3.x from previous versions

Environment

• NodeGraph 3.x

1.Upgrading instructions

The information in this article is provided as-is and to be used at own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution below may not be provided by Qlik Support.

Related Content 

NodeGraph Version 3.x Upgrade Documentation

Qlik NodeGraph Upgrade Documentation to Version 4.x 

After changing the Qlik Sense DBserviceuser password (see How-to reset forgotten PostgreSQL password in Qlik Sense), the Qlik Sense log files log password errors for qliksenserepository user.

The C:\ProgramData\Qlik\Sense\Log\Repository\Trace\*_System_Repository log will have a WARN message with this information:

There was an error contacting the license service. Keep retrying... (1 failed requests) GET /v1/licenses/overview StatusCode: InternalServerError Response: .    Could not connect to the license service

The C:\Program File\Qlik\Sense\License log may register an Error message with this information:

*failed to create service: pq: LDAP authentication failed for user \"user\"*

The Qlik Sense C:\ProgramData\Qlik\Sense\Log\AppDistributionService\Trace\*_AppDistributionService_* logs read:

Failure creating schema. 28P01: the authentication password fails for user "qliksenserepository"

Waiting for Message Queue to start. Error 28P01: the authentication password fails for user "qliksenserepository"

Retry attempt: 1/10. Previous result: 28P01: the authentication password fails for user "qliksenserepository"

The Windows Event log reads:

The description for Event ID '0' in Source 'PostgreSQL' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:
FATAL:  the authentication password fails for user "qliksenserepository"
DETAIL:  The password does not match for the user«qliksenserepository».
   The connection coincided with the line 80 de pg_hba.conf: «host    all             all             127.0.0.1/32            md5»

Environment:

• Qlik Sense Enterprise on Windows, all versions

Cause:

The old password is still cached and needs to be updated.

C:\ProgramData\Qlik\Sense\AppDistributionService\config.params
C:\ProgramData\Qlik\Sense\QseEventProcessor\config.params
C:\ProgramData\Qlik\Sense\HybridDeploymentService\config.params
C:\ProgramData\Qlik\Sense\Licenses\config.params

Resolution:

After testing with qliksenseUtil that the repository.exe.config had the right password and configuration, but the errors are still logged. 

This can be caused by .params files cashing the old password, still encrypted. These files need to be manually updated. 

Look for the below files in your installation. If a file in the list does not exist, it is version dependent. Skip it.

C:\ProgramData\Qlik\Sense\AppDistributionService\config.params
C:\ProgramData\Qlik\Sense\QseEventProcessor\config.params
C:\ProgramData\Qlik\Sense\HybridDeploymentService\config.params
C:\ProgramData\Qlik\Sense\Licenses\config.params

With PowerShell

To update the password in these files, take a backup of the param files below and open an (run as administrator) elevated Powershell command prompt. It may be necessary to change temporarily the ExecutionPolicy.  If so, either following these steps below or scroll down for two other alternatives.

Check the current Policy setup: Get-ExecutionPolicy -list

If restricted run: Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope LocalMachine

Type 'yes' and Enter

After running the commands below, set it back to restricted:

Set-ExecutionPolicy -ExecutionPolicy Restricted -Scope LocalMachine

Type 'yes' and Enter.

Run the following commands:

cd "C:\Program Files\Qlik\Sense\QseEventProcessor"
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

cd "C:\Program Files\Qlik\Sense\AppDistributionService"
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

cd "C:\Program Files\Qlik\Sense\HybridDeploymentService" 
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

cd "C:\Program Files\Qlik\Sense\Licenses" 
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

cd "C:\Program Files\Qlik\Sense\NotifierService" 
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

cd "C:\Program Files\Qlik\Sense\MobilityRegistrarService" 
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

cd "C:\Program Files\Qlik\Sense\PrecedenceService" 
.\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

After each execution of Configure-Service.ps1 an output will be written that the service has been configured, unless it does not apply to the current version or deployment of Qlik Sense.

Example:

Reading the settings file.
Saving the modified settings.
Exporting the copy of the invocation parameters.
AppDistributionService configuration successful.

Alternative:

The alternative to find all the PowerShell files programmatically:

# Set the Installation Directory for Qlik Sense
$installDir = 'C:\Program Files\Qlik\Sense\'
# Specify the new password for the qliksenserepository account
$password = 'MyNewPassword'
$files = Get-ChildItem -Path $installDir -Include Configure-Service.ps1 -Recurse
foreach ($file in $files) {
    $ScriptToRun=$($file.FullName)
    &$ScriptToRun localhost 4432 qliksenserepository $password
}

Without PowerShell

If powershell cannot be run to update the password then it must be applied in plain-text. 

e.g: For the command:
cd "C:\Program Files\Qlik\Sense\Licenses" .\Configure-Service.ps1 localhost 4432 qliksenserepository YourNewPassword

Follow directions below:

Locate C:\Program Files\Qlik\Sense\ServiceDispatcher\services.conf and find the service {License}

[licenses]

Identity=Qlik.licenses
DisplayName=Licenses service
ExePath=..\Licenses\licenses.exe



[licenses.parameters]
-qsefw-mode
-app-settings="..\Licenses\appsettings.json"

Change to:

[licenses.parameters]
-qsefw-mode
-app-settings="..\Licenses\appsettings.json"
-plain-password

Locate C:\Program Files\Qlik\Sense\Licenses\appsettings.json  Update to include password. 

"licenses": {
    "host": "FQDN",
    "port": 4432,
    "dbName": "Licenses",
    "user": "qliksenserepository",
    "password": "Password in plain text",
    "sslMode": "disable"

  },

  "messageQueue": {
    "host": "FQDN",
    "port": 4432,
    "dbName": "QSMQ",
    "user": "qliksenserepository",
    "password": "Password in plain text",
    "sslMode": "disable"

 Restart the services. 

An integrated version control systems always have been among the frequent questions, often reported in RFx. The following article is going to show a step-by-step guide on how to set an Application Automation to push QCS apps, without data, to a github repository when they are published on a (production) space.

Environment

• Qlik Sense Enterprise SaaS 
• Qlik Application Automation 
  • Qlik Cloud Service Connector
  • Github Connector
  • Email Connector
  • Microsoft Teams Connector (optional)
• Github Repository

This guide does not cover

• Basic use of Qlik Sense Enterprise SaaS
• How to connect Qlik Application Automation Connectors 
• How to create a GitHub Repo

What we are going to achieve

We are going to create a github repository containing all the published apps organized in folders, where the folder name mirror the published space. Since spaces are used to manage the softwer lifecycle and the different environments (Develop, Test, Performance, Production), we wants only applications published to the production spaces get saved and versioned on the github repository.

Set the Qlik Sense Enterprise SaaS environment

First of all, since we don't want push every published application up to the git repo, we have to define the production spaces. In this guide we explicitly use the word "Production" in the space description. 

From within a space, click the cog icon on the top right corner and select Edit space

Space setting options

In the Edit Space dialog window make sure to add the word Production in the description.

Edit Space Dialog window

Github repository

Create a new github repository, it can be private or public. In either way the Github connector needs to be authenticated with write permission.

Create automation

From your tenant web hub, click on Add new --> New Automation. Give it a name and description, optionally select the more appropiate icons, then click Save.

Create New Automation

The Start Block

We want trigger this automation every time someone publish an app. In the Start Block select:

• Run Mode:  Webhook
• Connector: Qlik Cloud Service
• Event:  App Published

Start Block Properties

In the Test Payload copy/paste this JSON:

{
  "cloudEventsVersion": "0.1",
  "source": "com.qlik/engine",
  "contentType": "application/json",
  "eventId": "dbce978f-17cd-4588-bfde-481544b7eb58",
  "eventTime": "2021-09-06T18:31:10Z",
  "eventTypeVersion": "1.0.0",
  "eventType": "com.qlik.v1.app.published",
  "extensions": {
    "spaceId": "<YOUR SPACE ID>",
    "tenantId": "KuGA12XZN0c7A7MUGHTkJuXGx3QVwrdo",
    "userId": "5-dSP_g22ekR3CivrMwXl-IeM-2h0-AD"
  },
  "data": {
    "attributes": {
      "id": "<YOUR ATTRIBUTE ID>",
      "name": "Sample data app",
      "owner": "<OWNER>",
      "originAppId": "<YOUR ORIGINAL APP ID>"
    }
  }
}

Anytime an app will be published to a space, Qlik Cloud Service connector will pass all the informations about the published app in the JSON format above. Those informations can be used by downstream blocks. It is not convenient continuosly publish apps to test the process, especially during the build phase. For this reason the Payload Test is used when we hit the RUN button, therefore just replace:

• <YOUR ATTRIBUTE ID> with the app id we want to emulate for a publish action
• <YOUR ORIGINAL APP ID> for the purpose of this guide you can set this as app is as well.
• <YOUR SPACE ID> with the target space id we want emulate for the publish action

because the downstream blocks are going to use only those three pieces of information, we don't need to change other attributes.

Get Space Info

From the Qlik Cloud Service Connector drag and drop in the canvas the Get Space block and attach it to the Start block. Under the Input select App Published > Data > Space Id as Space Id

Get Space Block

This block is in charge of getting all the informations giving the published space id.

Make it Parametric

Static contents such as the Repository Owner and Name can be used in more blocks. It may be convenient to set variables with static content and use variables in the downstream blocks. Variables make this automation easier to mantain.

On the left hand-side menu click on Basic under BLOCKS and in the submenu select Variable block. Drag it into the canvas under the Get Space block

Variable Block properties

On the variable Input section click on  the Manage Variables button, the variable dialog window will open. Add two new variables (owner and repo, optianally branch) and select type string for both, then click Save.

Variables dialog window

You need to use one variable block to set each variable, thuse you need to use two variable blocks chained one after the other to set the Github Owner and Repo.

Condition Block

We want only production spaces app are backed up and versioned on the github repository and this is the right moment to check it.

On the left hand-side menu click on Basic under BLOCKS, in the submenu select Condition block, move it into the canvas under your last variable block. 

Condition Block properties

In the IF statement, click on the little down arrow icon and select the Get Space  block, then Description. Next select Contain and in the last box just write Production. This statement will return true when the target space description will contain the word Production.

Get App Information

We need some information about the published app to use later downstream in the process. From the Qlik Cloud Service Connector, select the Get App Information block and drop it in the YES branch under the Condition block. In the App Id box select App Published > Data > Attributes > id.

Get App Information properties

Export App

Next step is to export the published app. From the Qlik Cloud Service Connector, select the Export App to Base 64 Encoded File block and drop it under the previous block. In the App Id select:

App Published > Data > Attributes > Original App Id

Export App to Base 64 Encoded File

Move to Github

Now we are ready to move the file into GitHub repo created earlier. In case of file update, we need to get the SHA signature of the file being replaced, for this reason we need to use the Get Repository Content block. This block return several informations giving the file name, we are only interested in the SHA signature.

From the GitHub Connector, select the Get Repository Content block and drop it under the previous block. In the input section fill the fields as follow. 

• User: Variable Owner
• Repo: Variable Repo
• Path: Get Space > Name / Get App information > Info > Attributes > Name .qvf

Get Repository Content

As you can see from the above image, the path was built using the space name as folder name and the app name as file name. We also added the slash (/) between the folder and file name, and the file extension (.qvf).

The first time we push a new App, the related file does not exist yet on the Github repo, thuse this block will return an error, but we don't want to block the whole process. For this reason we want to just raise a warning.

In the Settings section select Warnings as On Error action, as showed in the following image.

On Error action

We are ready now to push the file up to the GitHub repository. From the GitHub Connector, select the Create or Update  File Contents block and drop it under the previous block. Under the Input section fill the properties as follow:

• Owner : Get it from the variable
• Repository: Get it from the variable
• Message : Get App Information > Info > Attributes > Description
• Path: Get Space > Name / Get App information > Info > Attributes > Name .qvf
• Base 64 File Content: Get it from the previous block
• Branch: Main (or use a variable)
• File Sha: Get Repository Content > Sha

IMPORTANT : If you map the Message field, then you must set a message on the the publish action or the automation will fail. You can optionally avoid mapping the message field. Thanks to @Alvaro_Palacios  for the find

Create or Update File Contents

Alert

So far so good, we have the app saved into GitHub repo, the next three bloks are used to alert the App owner and users interested in a new published version. Let's start getting the user e-mail.

From the Qlik Cloud Service Connector, select the Get User  block and similarly as already done so far, in the User Id fields select

App Published > Extensions > User Id

Next attach the Send Mail block and fill the fields as reported in the following image. This block will send some useful information to the app owner.

Send Mail PropertiesThe last step is send a message on a pre-defined Microsoft Teams Channel alerting a new version of the app has been published and available. 

From Microsoft Teams Select Send Message block and fill the fields as showed in the following image

Send Message Properties

And this is how the alert message in the Team channel looks like.

Message in teams

Import Process

Going through all these steps is the best way to getting start with the Qlik Application Automation logic, but if you are in a hurry and just need this process to work, all you need to do is download the attached JSON, right click on an empty space in the canvas and select upload workspace. 

Upload process

Once uploaded, remember to authenticate all the involved connectors and change the variables value.

Update

September 23: Thanks to some of you who have tested this automation, it turns out the Get Repository Content Block have an hard limit on the file size, leading the automation to fails updating file greather then 1Mb. That block can easly replaced by the Get Repository Content and filter the file we are interested in.

 Here attached the Fixed version.

The information in this article is provided as-is and to be used at own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution below may not be provided by Qlik Support.

Qlik Sense Mobile shows a blank screen while opening the hub and no app is listed here

Environment

• Qlik Sense Mobile for iOS

Resolution

- Try upgrading to the latest version of the Qlik Sense Mobile
- Try opening the hub URL using a browser (Safari) if it works then the issue has to be with the Content Security Policy.

Here is a simple test that could help you conclude if this is happening because of the Content Security Policy.

1) On an iOS device that has the problem launch Mobile Safari
2) navigate to https://www.websocket.org/echo.html
3) Press 'Connect' then 'Send' to confirm that the WebSocket works
4) now navigate to http://www.websocket.org/echo.html (insecure http://)
5) Press 'Connect' then 'Send' to see if the WebSocket works

If step 5 fails then the issue is with the Content Security Policy on the device. Please contact your internal IT team to check on the enforced Policies

Advanced search and object layout is currently not supported in exported data in QlikView in Qlik Sense SaaS. 

Exports of data from QlikView apps in Qlik Sense SaaS may not apply all current selections or layout options. The exported results may in these cases contain more data than currently selected or have a different object layout than what the user has applied. 

The issue can be observed during data export; 

• User triggered export from QlikView objects
• Qlik NPrinting reports based on data from QlikView in Qlik Sense SaaS

Affected exports may differ from sheet objects;

• Selections are not applied in the exported data
• Exported results are different, due to missing selection
• Straight table column order is lost in the exported object
• Pivot table layout is not preserved in exported object
• Export of cyclic group only contains the first value

Environment

• QlikView in Qlik Sense SaaS
• NPrinting with QlikView in Qlik Sense SaaS

Resolution

Information provided on this defect is given as is at the time of documenting. For up-to-date information, please review the most recent Release Notes, or contact support at support.qlik.com with the ID QV-22598  for reference.

Workaround:

• Selecting field value instead of applying advanced search string may be a workaround for missing selection in exported data

• There is no current workaround to preserve layout for exported objects

Fix Version:

• Support for advanced search and object in export is expected in Q4 2021. 

Cause

• Product Defect ID: QV-22598

Related Content

• Qlik Help: QlikView Advanced Search 

In the windows event logs and repository logs you will see:

The description for Event ID '0' in Source 'PostgreSQL' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'ERROR: duplicate key value violates unique constraint "ix_sensemq_target_topic_messageid"
DETAIL: Key (target, topic, messageid)=(AppDistributionService, app.update, 7e7abe2a-4c24-4d95-9ad9-75cba8d7157d) already exists.
STATEMENT:
INSERT INTO sensemq (id, messageid, messagetype, createddate, expirydate, source, target, topic, data)
VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)

Environment

• Multi-node Qlik Sense older than May 2021 Patch 2

Resolution

Best solution is to upgrade to Qlik Sense May 2021 Patch 2 and beyond, where R&D made an improvement for conflict handling when adding a message to the QSMQ queue.

If an upgrade would take some time, implement the workaround listed here. This workaround only works if no Qlik Sense SaaS services are used in combination with Qlik Sense Enterprise

1. Edit C:\Program Files\Qlik\Sense\ServiceDispatcher\services.conf
2. Modify it with following (notice second line):

[resource-distribution]
Disabled=true
Identity=Qlik.resource-distribution
DisplayName=Resource Distribution
ExePath=Node\node.exe
Script=..\ResourceDistributionService\server.js

3. Restart Qlik Sense Service Dispatcher.

If you are not using any Qlik cloud-based products but only Qlik Sense Enterprise, its safe disable following services by adding Disabled=true under these sections:

[hybridsetupconsole]
[hybriddeploymentservice]
[appdistributionservice]
[resource-distribution]
[deployment-based-warnings]

Cause

Updates form multi nodes in this index will lock the database in a locked state.

A user has been given permissions to a section of the Management Console with a new security rule (example: Apps or Streams), but when they access the console, all sections remain grayed out.
 

To give a user access to the different sections in the QlikSense Management Console, seperate rules need to be added to allow access to QMC Section Resources. 

The following filters are used to grant access to the different sections. A user with access to a QMC section can open that section, but will only see objects according to the user's access rights.

QMC section resources

Resource filter Filter will target

Related Content:

• Security Rule Example: License Management only access in the Qlik Sense Management Console (QMC) 
• Qlik Sense Management Console sections grayed out and cannot be accessed 
• Available resource filters 

Historically, in order to load users member from multiple Active Directory Domains was not possible with a single User Directory Connector. It was required to create one User Directory Connector per domain making the Active Directory administration more complex for the IT Team. 

Starting from Qlik Sense September 2020, it is now possible to achieve this with Advanced LDAP. 

Environment

• Qlik Sense Enterprise on Windows, September 2020 and higher

Click Here Video Transcript

Requirement(s):

• Make sure there full trust between the different Active Directory Domains in the same forest.

Steps:

1. In one of the domain, create an Active Directory Universal Security group and add the list of users from multiple domains you want to sync into Qlik Sense.
2. Then go to QMC -> User Directory Connector and create an Advanced LDAP Connection
3. Provide a name and user directory name
4. Uncheck the box “Sync user data for existing users” so that we can import new users into Qlik Sense
5. In the host section, you will need to point to the Global Catalog port which is 3268 for LDAP and 3269 for LDAPS by default so that the sync can capture user through the entire forest.
6. Add a username and password to connect to the Global Catalog.
7. The base DN here is important as it needs to refer to the forest name in order to navigate through the child domains.
8. You can then add an LDAP filter to load the user member of the group you created earlier. Make sure that the rootAdmin accounts used to manage Qlik Sense are not excluded by the new LDAP filter. More information under How to avoid the RootAdmin(s) from becoming inactive  
9. And finally you will need to change in the Directory entry attributes the User identifier from “inetOrgPerson” to “person”. This is specific to Active Directory. 

It is now time to run the synchronization and check that your users are imported.

The information in this article is provided as-is and to be used at own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution above may not be provided by Qlik Support.

Related Content 

• Qlik Sense on Windows: Configuring and testing LDAP filters for User Directory Connector 
• User directory connectors Advanced LDAP properties - Qlik Sense for administrators
• Qlik Sense : Example of a LDAP filter to sync users in a group

Qlik-Cli (https://github.com/ahaydon/Qlik-Cli) is a PowerShell module that provides a command line interface for managing a Qlik Sense environment. The module provides a set of commands for viewing and editing configuration settings, as well as managing tasks and other features available through the APIs.

The Qlik Sense repository service (QRS) contains all data and configuration information for a Qlik Sense site. The data is normally added and updated using the Qlik Management Console (QMC), but it is also possible to communicate directly with the QRS using its API. This enables the automation of a range of manual QMC based tasks.

The QRS API is delivered as a Representational State Transfer (REST) web service that contains a number of paths (also referred to as endpoints) that are used to execute various functions. To communicate with these paths, HTTP calls that contain GET, POST, PUT, or DELETE requests are made.

IMPORTANT: Qlik CLI is distributed as an open-source solution through GitHub, and is not supported by Qlik. Please see license file in GitHub project for the current license agreement of Qlik CLI. For a fully supported version use the Qlik-CLI for SaaS editions. For support information see Qlik CLI support and compatibility 

Here are the commands show in the video above:

$PSVersionTable.PSVersion
Set-ExecutionPolicy RemoteSigned
cd 'C:\Program Files\WindowsPowerShell\Modules'
Set-Location "C:\Program Files\WindowsPowerShell\Modules\Qlik-Cli"; Get-ChildItem -Recurse | Unblock-File
Import-Module Qlik-Cli
Import-Module .\Qlik-Cli.psd1

Related Content:

• Qlik CLI support and compatibility 
• How to install and start using Qlik-CLI for SaaS editions of Qlik Sense 
• Download Qlik-Cli (GitHub)
• Installation of Qlik-Cli (GitHub)
• Qlik-Cli Modules (GitHub)
• Establishing a connection with Qlik-Cli (GitHub)
• Basic Usage of Qlik-Cli (GitHub)
• Advanced Usage of Qlik-Cli (GitHub)