Connector Configuration

Confluence Configuration

Confluence Instance Settings

Configuration Options related to establish connection to the target Confluence instance.

Name Property Key Description

URI

raytion.connector.agent.confluence
.instance.uri

URI of the confluence instance to connect to.

Enable Basic Authentication

raytion.connector.agent.confluence
.instance.enableBasicAuthentication

Toggles the usage of a Basic Authentication against Confluence.

Custom Default Headers

raytion.connector.agent.confluence
.instance.customHeaders

Default Headers to be added to HTTP requests to Confluence.

Enable SSL Authentication via KeyStore

raytion.connector.agent.confluence
.instance.enableKeyStoreAuthentication

Activates configuration options allowing the configuration of a KeyStore that is used to authenticate against the configured Confluence Instance via SSL.

Basic Authentication

Name Property Key Description

Username

raytion.connector.agent.confluence
.instance.basicAuthentication.username

Username to connect to Confluence. This user must be able to log into Confluence and be registered with the Raytion Confluence Plugin.

Password

raytion.connector.agent.confluence
.instance.basicAuthentication.password

Password for the user to connect to Confluence. Encryption is recommended.

SSL Authentication

Configuration options for authenticating the Connector against Confluence via SSL with the help of a KeyStore.

Name Property Key Description

KeyStore File

raytion.connector.agent.confluence
.instance.sslAuthentication.keyStoreFile

A KeyStore to use when connecting to Confluence.

KeyStore Type

raytion.connector.agent.confluence
.instance.sslAuthentication.keyStoreType

The type of the KeyStore-file given. We strongly recommend using PKCS12, as JKS may be deprecated in a future update.

KeyStore Password

raytion.connector.agent.confluence
.instance.sslAuthentication.keyStorePassword

The password to access the keystore.

Key Alias

raytion.connector.agent.confluence
.instance.sslAuthentication.keyAlias

The alias from the KeyStore to use. You can leave this empty if the KeyStore only contains one alias.

Key Password

raytion.connector.agent.confluence
.instance.sslAuthentication.keyPassword

The password to access the Key Alias within the KeyStore.

Confluence Connection Settings

Configuration Options related to fine-tuning the connection to the Confluence instance.

Name Property Key Description

Socket Timeout

raytion.connector.agent.confluence
.connection.socketTimeout

An inactive connection will be treated as terminated after this duration.

Connection TTL

raytion.connector.agent.confluence
.connection.connectionTimeToLive

Unused connections of the pool will be discarded after this duration.

Requests per second

raytion.connector.agent.confluence
.connection.rateLimit

Maximum amount of requests which are started towards the Confluence instance.

Connection Pool Size

raytion.connector.agent.confluence
.connection.poolSize

Maximum number of parallel requests to Confluence.

Batch Size

raytion.connector.agent.confluence
.connection.batchSize

Number of items that are requested in one request.

Confluence Space Filter Settings

Configuration options determining which Confluence Spaces to crawl.

Name Property Key Description

Included Space Keys

raytion.connector.agent.confluence
.filter.space.includeList

Only the Spaces with keys defined here will be crawled.

If no include filters are defined, all keys are included.

Excluded Space Keys

raytion.connector.agent.confluence
.filter.space.excludeList

Spaces with a key in this list will not be crawled.

This overrides the key being allowed by Included Space Keys.

Included Space Categories

raytion.connector.agent.confluence
.filter.space.includeListCategories

Only the Spaces with at least one category defined here will be crawled.

However, no include filters being defined is synonymous to all categories being included.

Excluded Space Categories

raytion.connector.agent.confluence
.filter.space.excludeListCategories

Spaces with a category in this list will not be crawled.

This overrides the Space being included through Included Space Keys or Included Space Categories.

Confluence Hierarchy Cache Settings

Configuration Options determining how much and long to cache hierarchical data of Spaces and Pages.

Name Property Key Description

Cache Time To Live

raytion.connector.agent.confluence
.cache.maxTtl

Maximum age of cache entries. Larger improves performance and requires more memory.

Maximum Cache Weight

raytion.connector.agent.confluence
.cache.maxWeight

Maximum cache size. Spaces and Pages weigh more the more entries they have. Larger improves performance and requires more memory.

Confluence Type Filter Settings

Configuration Options related to which types of search targets should be generated

Name Property Key Description

User Profiles

raytion.connector.agent.confluence
.filter.type.extractUserProfiles

User Profile pages will become search targets, if this value is enabled.

Labels

raytion.connector.agent.confluence
.filter.type.extractLabels

Labels will become search targets, if this value is enabled.

Page Contributors

raytion.connector.agent.confluence
.filter.type.extractAllModifiers

In addition to the creator and the last modifier of a page or blogpost, all other modifiers are queried, too. This is an expensive operation.

Comment Handling

raytion.connector.agent.confluence
.filter.type.commentSyncType

NONE: Comments will not be indexed.

INDEX_WITH_PARENT: Comments will be indexed with the parent page or blog post.

INDEX_SEPARATELY: Comments will be indexed separately in an individual document.

Drafts of Pages and Blog Posts

raytion.connector.agent.confluence
.filter.type.extractDraft

Pages and Blog Posts in draft status will be indexed.

Deleted Pages and Blog Posts

raytion.connector.agent.confluence
.filter.type.extractTrashed

Pages and Blog Posts in deleted status will be indexed.

Maximum Attachment Size

raytion.connector.agent.confluence
.filter.type.maxAttachmentSize

Attachments with a larger size will not have their content indexed.

Ignore content file extensions

raytion.connector.agent.confluence
.filter.type.ignoreContentForFileExtension

Attachments with a file extension from this list will not have their content indexed but only their metadata. Entries will automatically be converted to lowercase with US locale.

Microsoft Search Configuration

Connector Product Settings

Configuration Options related to specifying the product which is going to connect to the Microsoft Search.

Name Property Key Description

Connection ID

raytion.connector.backend.microsoft-search.product.connectionId

Connection ID of the connector product which is registered with Microsoft Search.

Microsoft Services Authentication Settings

Configuration Options related to authentication for the Microsoft Search.

Name Property Key Description

OAuth2.0 client ID

raytion.connector.backend.microsoft-search.authentication.clientId

OAuth2.0 client ID for the Microsoft Search Authentication.

OAuth2.0 client secret

raytion.connector.backend.microsoft-search.authentication.clientSecret

OAuth2.0 client secret for the Microsoft Search Authentication.

Tenant ID

raytion.connector.backend.microsoft-search.authentication.tenantId

Tenant ID of OAuth2.0 Token URI for the Microsoft Search Authentication.

Microsoft Search Connection Settings

Configuration Options related to establish a connection and sending requests to Microsoft Search.

Name Property Key Description

API endpoint

raytion.connector.backend.microsoft-search.connection.endpoint

Microsoft Search API endpoint including version specifier.

Requests per Second

raytion.connector.backend.microsoft-search.connection.requestsPerSecond

Maximum number of requests per second.

Connect Timeout

raytion.connector.backend.microsoft-search.connection.connectTimeout

Determines the timeout in milliseconds until a connection is established. A timeout value of zero is interpreted as an infinite timeout. A negative value is interpreted as undefined (system default if applicable).

Socket Timeout

raytion.connector.backend.microsoft-search.connection.socketTimeout

Defines the socket timeout in milliseconds, which is the timeout for waiting for data or, put differently, a maximum period inactivity between two consecutive data packets. A timeout value of zero is interpreted as an infinite timeout. A negative value is interpreted as undefined (system default if applicable).

Use Poxy

raytion.connector.backend.microsoft-search.connection.useProxy

If enabled, the connection to Microsoft Graph API will be established through a HTTP/HTTPS proxy.

Proxy Endpoint

raytion.connector.backend.microsoft-search.connection.proxy.uri

Target proxy URL including protocol, host and port.

Proxy Authentication

raytion.connector.backend.microsoft-search.connection.proxy.authentication

If enabled, the connector uses the specified credentials to authenticate towards proxy.

Proxy Username

raytion.connector.backend.microsoft-search.connection.proxy.username

Proxy authentication username.

Proxy Password

raytion.connector.backend.microsoft-search.connection.proxy.password

Proxy authentication password. The value will be stored encrypted by the connector.

Microsoft Search Principal Mapping Settings

Configuration Options related to mapping source system principals to Microsoft Search AzureAD users.

Name Property Key Description

Principal ID Attributes

raytion.connector.backend.microsoft-search.principal-mapping.principalIdProperties

AzureAD attributes to match principal ids against. Maps a principal id to all AzureAD user objects where one of the specified attributes values matches the principal id.

General Configuration

Database Configuration

Setting Description

URL

JDBC URL for the target database. Out of the box, the connector will use H2 file database. For productive usage, use PostgreSQL specifying the URL in format: jdbc:postgresql:<host>:<port>/<database>

Username

Database Username to read and write to database.

Password

Database Password for the specified user

Traversal Configuration

Setting Description

Traversal History Length

Max. number of traversals to store in the history. Once the limit is exceeded, the connector will automatically remove oldest entries in the history. (default: 100)

Number of Traversal Workers

Number of workers to execute the traversal in parallel. Increasing this value might improve the performance, but will footprint higher memory consumption. It is recommended to keep the default value. (default: 10)

Traversal Job Poll Interval

Interval between the workers to be triggered to fetch and process the next tasks. (default: 10ms)

Completion Timeout

If the search engine indexes the items asynchronously, there might be some processing still in-flight during the completion process of a traversal. This value specifies the timeout value until all asynchronous callbacks are expected to return before completing the traversal. (default: 10m)

Principal Aliaser Configuration

Principal Aliasing is applied on user information as part of Content ACL processing during Content Synchronization and Principal processing during Principal Synchronization. It’s purpose is to map external source system user to the corresponding user in search engines domain. You can configure a list of aliasers in the connector which will be applied in sequence and in order on user ACEs and user principals. The Connector supports following custom aliasing mechanism.

Custom Aliaser Disabled

If the Custom Aliaser checkbox is not selected, the connector will process user information on ACE and user principals unchanged to Search Engine. If all relevant users in the source system can be found with the same identifier in the search engine, this setup is sufficient to reflect the same secure search experience in the search engine as defined by the policy in the source system. The connector uses this option as default to process user information.

Custom Aliaser Enabled

If custom aliasing is enable then there are four types of aliaser avaialble:

Simple XML Table Aliaser

Static mapping table which can be uploaded as XML file. The connector uses the uploaded file as lookup table to map a user in the source system to a user in the search engine. Users missing a record in the file will be dropped from the ACE and during Principal Synchronization. This option is only recommended for environment with a manageable amount of users as for each user the corresponding mapping entry needs to be specified in the file.

Setting Description

XML Mapping File

Browse and upload or drag and drop.

Sample XML mapping file:

<?xml version="1.0" encoding="UTF-8"?>
<storeddata>
    <entry keyValue="user1">user1@raytion.com</entry>
    <entry keyValue="user2">user2@raytion.com</entry>
    <entry keyValue="user3">user3@raytion.com</entry>
</storeddata>
Regex Replacer Aliaser

Regex Replacer Aliaser computes aliases based on a regular expression. Principals that match the regular expression are replaced by the Substitution String.

Setting Description

Pattern

The regular expression to match, this is the part that will be replaced. If braces (…​) are used in the pattern then the matched value can be retrieved using $1

Substitute String

String to replace the matching part of the find string. Matched value is accessed by employing $1

Regex Extractor Aliaser

Regex Extractor Aliaser computes aliases based on a regular expression. Principals that match the regular expression are inserted into the Insert-Into String.

Setting Description

Pattern

The regular expression to match, this is the part that will be inserted into the new value. If braces (…​) are used in the pattern then the matched value can be retrieved using $$

Insert-Into String

String to replace the matching part of the pattern. Matched value is accessed by employing $$

LDAP Aliaser

Ldap Aliaser searches for an LDAP entry with the requested name in the input value and returns the specified output attribute.

Setting Description

Host

Fully Qualified Domain Name of an LDAP server

Port

Port to use for LDAP connection, defaults are 389/636 or (recommended) 3268/3269 for simple/SSL

AccountDN

AccountDN for bind to LDAP

Password

Password part of credentials

Input Field

The Active Directory attribute name for this equality filter

Search Root DN

Distinguished Name of the subtree which is searched. The smaller the subtree the better the performance but the higher the chance of encountering principals which are not part of this subtree

Output Field

Attribute that should be returned in result entries