Documentation forDatabase Performance Analyzer

Configure the mail server used to send DPA emails

To send email messages (such as alert notifications or scheduled reports), DPA must be able to connect to a mail (SMTP) server. By default, DPA uses a third-party SMTP email service (AuthSMTP). Alternatively, you can choose to use:

  • An embedded mail server that runs inside of DPA.

    In some environments, this server might be blocked from sending email by firewalls or other SMTP restrictions.

  • Your company's mail server.

Microsoft Exchange Online users: Configure Azure to send DPA emails

To use Microsoft Exchange Online to send email messages from DPA, DPA must be able to authenticate using OAuth 2.0. Before you configure email settings in DPA, you must configure Azure to grant the required permissions to DPA. You must also retrieve the information that you will need to configure the email server in DPA.

  1. In the Azure Portal, create a new app. (See the Azure documentation for details.)

  2. Record the following information:

    • Client ID
    • Tenant ID
    • Client Secret
    • Client Secret ID
    • Object ID

  3. Grant the following application permission to the app:

    Mail.Send

Configure the email server in DPA

To change the mail server or update connection information, complete the following steps.

  1. Log in to DPA as a user with administrative privileges.

  2. From the DPA menu in the upper-right corner, click Options.

  3. Under Administration > Configuration, click Configure Mail Server.

    The Mail Server Configuration page opens.

  4. Under Choose a Mail Server, select the mail server you want DPA to use.

  5. Enter the From and Reply To addresses to be used for DPA emails.

  6. If you selected Company Mail Server, select Other Mail Servers or Microsoft Exchange Online.

    • For Other Mail Servers, enter the connection information for the mail server.

    • For Microsoft Exchange Online, enter the connection information that you gathered from Azure in the previous task.

    If DPA is configured to use credentials stored in CyberArk, the connection information displays a field for the CyberArk credentials query instead of the user name and password fields (for Other Mail Servers) or the Client Secret value field (for Microsoft Exchange Online).

    The Client Secret is stored as a password object in the CyberArk vault, and DPA uses the CyberArk credentials query to retrieve it. For example, the CyberArk credentials query could look like this:

    &safe=test&object=oauth2clientsecret

    In this example, test is the safe name, and oauth2clientsecret is the password object name. So, this oauth2clientsecret object will be created under the test safe in the CyberArk vault. The safe name and object name can be anything.

    This CyberArk query is appended to the base URI (base.uri) defined in the cyberark.properties file. The base.uri contains the common portion of the request URL. For example, if:

    base.uri=https://cyberark.prod.com/AIMWebService/api/Accounts?AppID=DPA

    DPA constructs the following URL to retrieve the Client Secret from CyberArk:

    https://cyberark.prod.com/AIMWebService/api/Accounts?AppID=DPA&safe=test&object=oauth2clientsecret

  7. Click Send Test E-mail to test the settings.

  8. Click Save.

You do not need to restart DPA after you configure the mail server.