How to create a tag, with ptclassname = "Classic" when mapping an output from an Analysis?

Hi

 

I've noticed that when mapping an output from an Analysis to a new attritbute, the tag that is created defaults to ptclassname of "base". When this happens, we lose traceability of who created the analysis. Is there a way to force it ptclassname of "classic"?

 

I've managed to this once, but can't recall the steps that led me to it.


image.png
 

Thanks.

N

  • I assume you are using the "Tag Creation" option for attributes. Just make sure you choose classic instead of base.

     


    image.png

  • No I haven't but have seen that dialog box with that option. Is it only available when creating a new attribute template? Also I assume I would have to create the attribute with its parameters/settings before mapping the output of the analysis. Is that the correct sequence?

     

    Thanks.

  • The issue having the points created is that some of the points are likely created by users clicking to "create or update PI Point" and others are create by the analysis service. For the creator column, connections using a PI Trust will use the trust identity, and connections using a mapping will use the windows principal.

    There is a good chance the analysis service is coming in using a PI Trust, which is configured to use "piadmin", and this is not a best practice. I don't know your architecture or your security model, but in general a mapping should exist to an identity that has least privileges.

     

    Also, if you do not want analysis to create points (maybe the quick resolution here) and want users to create the points you could solve this problem by unchecking the box below:
    image.png

    You can find it from the PI System Explorer>Management tab at the bottom>right click in the operations area on the right side>Edit Analysis Service Configuration.

     

    There are a lots of layers to your question,

     

  • Hi Dan,

     

    Thanks for the information. I suspected that the analysis was creating the point and is configured to us "piadmin". But I checked on SMT, and an AF Service Account is mapped to a PI Analytics Identity, not "piadmin". Where would I be able to find and check this? The architecture was built by a system integrator.

    I will try the quick fix. For now, I've also asked users to first create an attribute instead and then map the output of the analysis to it, as opposed to the analysis service creating and mapping to an attribute.

  • Sounds like a good idea, although I would suspect if the analysis service is using a mapping it should really be the identity of the analysis service. In terms of security, you could review the network manager statistics and see who is connecting via a PI Trust instead of using windows security.