Ansible Analytics Security

FAQ

Red Hat® Ansible® Automation Platform is a foundation for building and operating automation at scale. Simple to adopt, use, and understand, Red Hat Ansible Automation Platform provides the tools needed to rapidly implement enterprise-wide automation, no matter where you are in your automation journey.

CAN I ACCESS AUTOMATION ANALYTICS AS AN ON-PREMISE TOOL SO THAT WE DO NOT HAVE TO SEND SYSTEM DATA OUT OF OUR NETWORK? 

Automation Analytics is an online service provided within the Red Hat Ansible Automation Platform. There is no on-premise version of the service planned at this time. 



WHAT DATA IS COLLECTED BY THE AUTOMATION ANALYTICS? 

Automation Analytics collects certain classes of data from Ansible Tower, including: 

  • Counts of automation resources (templates, inventories, credentials, etc)
  • Topology and status of the Tower environment and hosts
  • Job execution details (start time, finish time, success), and individual task success and modules used

No credentials, personal data, automation variables, or task output is gathered.

 



HOW CAN YOU VIEW WHAT DATA IS COLLECTED BY THE INSIGHTS SERVICE?

The customer controls whether their Ansible Tower data is sent to Automation Analytics or not. No data is sent to Red Hat unless an administrator explicitly opts in to data collection. The administrator can perform a sample collection and inspect the data if they so desire.



CAN YOU LIMIT WHAT DATA IS SENT BY THE INSIGHTS SERVICE?

Content sent is not yet configurable, but customers can perform a collection that is not sent to Red Hat to review your data that would be sent in advance.



WHAT IS THE IMPACT OF LIMITING THE DATA SENT TO THE AUTOMATION ANALYTICS?  

As of now, you can’t take advantage of the Automation Analytics feature to see across your automation estate if you don’t send us your data.  



IS DATA COLLECTED STATIC OR DYNAMIC?

Data collected is defined in Ansible Tower and can change with a future Ansible Tower update. Static per Ansible Tower release, doesn’t change the same way Red Hat Insights does. Consult the Ansible Tower docs for more information. 



HOW IS MY ANALYTICS DATA STORED?

All customer data is stored individually by account and encrypted with an account-specific key. 



HOW LONG WILL RED HAT RETAIN THE DATA COLLECTED?
 

By default, the Red Hat Insights client collects and uploads the data four times a day. Hence, the collected data will normally be kept for 24 hours. Data uploaded by previous runs will be discarded when the same client uploads new data as part of the daily run.

Computed analytics data is currently stored for up to a year. As we are building the product and surveying how much lookback time our customers want, this will affect how long data is held in the future.