Skip to content

Junk Drawer

Emergency Paging via PagerDuty

  • Paging Andrey: page-andrey-email.z5yf9c3i@cloudsharenoc.pagerduty.com
  • Paging Ofir: page-ofir-email.azt9aqoc@cloudsharenoc.pagerduty.com
  • Paging Tzvika: page-tzvika@cloudsharenoc.pagerduty.com

In Support and Need "Support"...?

  • https://cloudshare.atlassian.net/servicedesk/customer/portals

Don't Fall into the Trap [IMPORTANT]

  • https://xyproblem.info/
  • https://dontasktoask.com/ (just added since it's some good reading)

SSO Docs

  • SSO Intro
  • SSO Integration Examples Guide
  • SSO Technical Guide

Class SSO

Enable as below in "Old subscription page"; then hand back to customer.

SSO Errata

Azure

  • Azure SSO Provider Name / Login URL location: (stub — add link)

Windows Stuff I can Never Remember

  • How to configure Mic and Camera Access on Windows 8/10/11
  • Steal this response! — Mic Only
  • ARE THEY USING AIRPODS??? DON'T. JUST DON'T.
  • Network Level Authentication — Disable via: 
    reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-TCP" /v UserAuthentication /t REG_DWORD /d "0" /f
  • Get out of Safe Mode
  • Disable multiple RDP sessions via GPO
  • MOVE Windows recovery partition

Dev Tools Stuff I can Never Remember

  • Instructions for downloading Console Log and Network HAR

CloudShare Stuff I can Never Remember

  • Create Sub with new project
  • Disabling UAC for Cloud Folders / Misconfigured Users Error
  • WebConsole Keyboard Limitations
  • Migrate Main Disk to SSD (new tweaker instructions)
  • RDP Booster Internal Doc
  • View Non-Class / Instructor Environments "Over the Shoulder"
  • Change from Spark KEMP COGENT to Spark KEMP in Dynamic Config
  • Copy Snapshot from AMS / SING → MIA
  • Broadcast Not Working (error: serial group task Signaling was canceled due to subtask Signaling/Timeout15000ms once; WebSocket connection failed)
  • Accelerate pages load for root without any need for interaction:
  • To load the classic version add ?redirectToClassic=True to the experience /users endpoint URL
  • For faster MGID page loading, logs are now not loaded by default:
  • To view logs: remove &skipActions=True from the MGID URL
  • Note: &skipActions=(False|false) currently doesn't work
  • Enable new remote connection client
  • List of remote access gw subnets
  • Test Connection to our Aspera Server:
  • Open: https://aspera-connect-server.env.cloudshare.com/ 
    Test-NetConnection -ComputerName aspera-connect-server.env.cloudshare.com -Port 33001

Public Clouds

  • AWS Integration Types in CloudShare (Internal)
  • External Clouds FAQ
  • AWS SA Customer Side Setup (video)
  • Additional context: (stub — add link)
  • To find a CloudShare environment given an Azure Resource Group: log in to SQLPad and run a lookup query, then plug the answer into Id Look up
  • Process for moving from MA (ours or theirs) to SA:
  • Determine if they are already using MA (ours or theirs) and trying to move to SA
  • Clarify that the process can take a day, a week, or more — depending on what they are trying to do and how much back-and-forth there is
  • Ask if there is a deadline (should probably default to asking for all tasks)
  • Use the flow chart Ofir made... don't rely on current docs

Azure Terraform Errors Relating to Quotas and a Quota Increase

Step-by-step guide: https://app.screencast.com/YimJnrdt6Mx7j

Azure - Add Roles

To add more actions, go to the IAM role edit page for PaloAltoNetworks.Marketplace.Cloudngfw.Role.

Go to the JSON tab, click Edit, add the new action at the bottom, and don't forget to add a comma between the new action and the previous one.

Azure - Accelerate API Logging (prod-appinsights)

  1. Go to https://portal.azure.com
  2. Search for prod-appinsights and select it
  3. Navigate to Investigate > Search
  4. Set a Time Range and click "Apply"
  5. Optionally set Time Granularity
  6. Optionally set Time Zone
  7. Add your search query — typically it's enough to have:
  8. Endpoint
  9. Resource ID
  10. Time frame
  11. Timezone of the customer
  12. Click on the event to review
  13. Be sure to click the "prod-appinsights | Search" link to go back, or you will lose the page state

VMware Stuff I can Never Remember

  • Enable Time Synchronization:
  • Windows: 
    "C:\Program Files\VMware\VMware Tools\VMwareToolboxCmd.exe" timesync <status|enable|disable>
  • Linux:
    • open-vm-tools may install vmware-toolbox-cmd
    • Check: 
      # Check if open-vm-tools is installed (any status = installed)
systemctl status vmtoolsd.service

# Check if vmware-toolbox-cmd is available
which vmware-toolbox-cmd
    • If installed: 
      vmware-toolbox-cmd timesync <status|enable|disable>

SQL Queries for Support

  • https://sqlpad.cloudshare.com
  • Tag support: queries listed in format [Support] - ... — check out current queries and feel free to add your own
  • Tag sql-examples: for remembering specific TSQL (useful to everyone)
    • Format: [SQL Example] - <sql_version> - ...
    • Find MSSQL Server version: SELECT @@version
  • For linked queries to redirect properly you need to already be signed into SQLPad

Queries

  • Remote Connection Details — lets you see Viewer connection details

Splunk Queries for Support

  • TBD
  • Probably gonna take a while; if you want to dig in, check out these videos:
  • Google Drive
  • YouTube
  • Wayback Machine (slow)
    • Videos 11–15: learn search pipeline and syntax (skip the search app)
    • Videos 10–15: full coverage of searching
    • Videos 10–19: data models, pivots, visualizations, reporting and alerting
    • Using mpv at 1.95x speed these go by pretty fast
    • I personally can't stand the instructor's voice — but it seemed like the least BS and most complete playlist on YouTube based on a brief look-see
    • There are other Splunk classes / tutorials on Coursera and Udemy
      • The YouTube instructor is the same as the most popular Udemy Splunk course

API Stuff

V4 Logs in Azure

  • https://portal.azure.com/#@azurecloudshare.onmicrosoft.com/asset/AppInsightsExtension/ApplicationInsights/subscriptions/82ecc0b0-9c2d-4657-9745-f6de058cee84/resourceGroups/production-environment-kubernetes/providers/microsoft.insights/components/prod-appinsights
  • Investigate > Transaction Search