Product:

Planning Analytics Workspace

Microsoft Windows 2022 server

Issue:

Check if port is used by docker or other process?

Solution:

On the PAW server login and start the CMD prompt;

Enter below to check if port 53 (default port for docker is used)

 netstat -ano | findstr ":53"

the ‘LISTENING’ status means it’s in use, and the PID (Process ID) shows which application, which you then check with tasklist /fi “PID eq [PID_number]” to identify the service.

 

Ensure that all ports in paw.ps1 file is open in the local firewall on the PAW server to ensure smooth operation.

More information:

https://learn.microsoft.com/en-us/windows-server/networking/dns/network-ports

https://simpledns.plus/kb/47-error-message-could-not-start-dns-service-on-ip-address-port-53-udp-port-is-used

https://kb.synology.com/en-global/DSM/tutorial/Whether_TCP_port_is_open_or_closed

https://www.ninjaone.com/blog/how-to-find-dns-servers-used-in-windows-11/ 

Product:

Planning Analytics 2.1.14 workspace

Issue:

Why 404 error in the log file  D:\RUNNING\PAW2114\log\wa-proxy\WAproxy4.log   (the file name is increased with a number for each new log file)

You find this on a row
statusCode: 404,

 

Suggested solution:

If you check a few lines before the statuscode you see lines like this;

2025-12-08T13:10:12.023Z [3] – info: Incoming request: [xxx.xxx.xxx.xxx] GET /rolemgmt/v1/profiles/@me/avatar?t=17651941997 [37e3346000009af]
2025-12-08T13:10:12.029Z [3] – warn: Proxy: “GET http://user-admin:3333/rolemgmt/v1/profiles/@me/avatar?t=17651941997” : 404 (3 ms) [37e3346000009af]

Then the user that is accessing the PAW environment, have not created a “picture” of himself, and above error will be in the log file WAproxy.log as long he does not have set a “picture” for his user. Solution is for the end user to add a picture to her login profile in PAW:

Click on you name in the top right corner and select “profile and settings” from the dropdown menu.

Click on profile photo.

Click on upload photo and select a photo of you (that is saved on the computer in png format)
(or get a fun avatar from https://unsplash.com/ or https://www.pexels.com/)

Click Done.

Now you have a small picture in PAW – and there should be less error in the log file.

 

When in PAW open a book, you have in the URL the ID of the book, like http://servername.domain.com/?perspective=dashboard&id=237dd67d-f35-40a5-95a3-5e76c6e8289

This ID can be found in the log file WAproxy.log under your PAW installations log folder. Then you can on the line with this book ID, see who have open it.

 

If you open WAproxy.log file in Notepad++ and search in file for all occurrence of the text: c/v2/content/dashboard/

You will get a list of all books that have been open and by who – the login ID will be last on the line.

 

More Information:

404  – page or data not found

401 – unauthenticated, you have not logged in to access this page or data

200 – success – page or data loaded fine

304 – you already have the page cached in your web browser, no need to send it again

500 – A generic error message, given when an unexpected condition was encountered. Read the WAproxy file for more information and search IBM web site for an explanation.

https://www.siteground.com/kb/304-status-code/ 

https://en.wikipedia.org/wiki/List_of_HTTP_status_codes

https://www.canva.com/features/photo-effects/?utm_medium=partner&utm_source=pixabay&utm_campaign=canva_attribution 

 

Product:

Planning Analytics Workspace

Microsoft Windows 2022 server

Issue:

How record web activate to send to support to troubleshoot issues in the web application.

Solution:

Use a tool to catch the traffic between the Web Browser and the server, try like https://www.telerik.com/fiddler/fiddler-classic

or more network tools like https://www.wireshark.org/download.html ….

    • Wireshark: Open Wireshark, choose the network interface you want to monitor, and start the capture. You can use capture filters to narrow down the traffic you see (e.g., by IP address or port). Stop the capture and save the results in a .pcap file for later analysis.
  • Fiddler: This tool is excellent for capturing and inspecting both HTTP and HTTPS traffic from any browser or application. It allows you to filter, save, and replay traffic sessions.
  • tcpdump: A command-line utility that captures raw packets. You can specify an interface (-i) and write the output to a file (-w). For example, tcpdump -i wlan0 -w capture.pcap would capture traffic from the wlan0 interface to a file named capture.pcap
You can also use the network tool built inside the web browser, they save the collected data to a HAR file.
HAR files (“Http ARchive”) are  a JSON-formatted archive file format for logging a web browser’s interaction with a site.
  • Typically, they are useful in troubleshooting performance problems (and errors) when using web-based software (such as PAW).
The steps vary, depending on the web browser that the user is using.
Chrome
1.    Launch Google Chrome.
2.    In Chrome, go to the page where you are experiencing trouble
3.    Select the Chrome menu (⋮) at the top-right of your browser window, then select More Tools > Developer Tools.
4.    The Developer Tools will open as a docked panel at the side or bottom of Chrome. Click on the Network tab.
5.    Tick/select the option Preserve log (see below):
6.    The recording should autostart and you will see a red circle at the top left of the Network tab (see above).
If not, click the black circle, to start recording activity in your browser.
7.    Refresh the web page that you are on
– Perform the task which is causing the issue
– The goal is to reproduce the problem you’ve been experiencing while Google Chrome is recording activity.
8.    Once you have reproduced the problem (while recording), right-click within the Network tab and click Save as HAR with Content to save a copy of the activity that you recorded:
9.    Save the HAR file somewhere convenient.
10.  Now click the Console tab and right-click anywhere in the console log. Select the popup option “Save as…” and name the log file something sensible:
11.  Close the developer panel.

12. Typically, the customer will now upload the two files (especially the HAR file) into their support case.

Firefox
1.    Launch Firefox.
2.    In Firefox, go to the page where you are experiencing trouble.
3.    Select the Firefox menu (Three horizontal parallel lines) at the top-right of your browser window, then select Developer > Network.
4.    The Developer Network Tools will open as a docked panel at the side or bottom of Firefox. Click on the Network tab.

– Before starting the capture, be sure to enable the setting: Enable persistent logs in the Toolbox Options > Common Preferences (click on gear icon on the Toolbox toolbar to open the Toolbox Options pane)
– Click on the Network tab after setting the option.
5.    The recording will autostart once you start performing actions in the browser.
6. Refresh the web page that you are on

– Perform the task which is causing the issue
– The goal is to reproduce the problem you’ve been experiencing while Firefox is recording activity.
7.    Once you have reproduced the issue and you see that all of the actions have been generated in the Developer Network Panel (this should just take a few seconds), right-click anywhere under the “File” column and click on “Save All as Har
8.    Save the HAR file somewhere convenient and close the developer panel.
9.    Typically, the customer will now upload the HAR file into their support case.Internet Explorer (IE)
We shall use Microsoft F12 Developer Tools and the Network Tool to capture the browser headers. Then export the captured traffic as HAR file (or XML if using older version of IE).
1.    Launch Microsoft Internet Explorer.
2.    Press the F12 key on your keyboard. This should open the Developer Tools panel in IE. If not, find it on the browser menu: F12 Developer Tools
3.    In the Developer Tools panel, click the Network panel and then deselect the Clear entries on navigate option. (on by default).
4.    Click the Network panel/button and then the Start Capturing button (or press Ctrl + E). Note: the icon looks like a green triangle
5.    Click the IE Refresh button. The goal is to reproduce the problem you’ve been experiencing while IE is recording activity
6.    The Developer Tool panel should now show a list of the URLs that are included in the page you have in your browser.
7.    Click the Stop button when the issue has been reproduced (or press Ctrl + E). Note: the icon looks like a red square
8.    Click the Export captured traffic icon and save the file somewhere convenient (or press Ctrl + S). Note: the icon looks like a floppy disk.
9.    Typically, the customer will now upload the HAR file into their support case.
10.    Click on the Console tab and look for any errors/warnings reported. If errors are shown, please right-click on the console errors and select Copy all or send a screenshot of them.
11.    Close the Developer Tools panel.
More Information:

https://github.com/radekstepan/fetch-fiddler

https://www.telerik.com/fiddler/usecases/https-traffic-recording

https://www.wireshark.org/docs/wsug_html_chunked/

https://httptoolkit.com/

https://help.okta.com/oag/en-us/content/topics/access-gateway/troubleshooting-with-har.htm 

Apache Guacamole®

Product:

Planning Analytics 2.1.14 Tm1web

Microsoft Windows 2022 server

Issue:

In TM1WEB how see what application i have logged in to?

Solution:

Add the TM1 instance name in the toolbar with you name.

Go to Tm1 web server

Go to folder D:\Program files\ibm\cognos\tm1web\webapps\tm1web\WEB-INF\configuration

Open file tm1web_config.xml

Change <add key=”TM1DatabaseLabel” value=”Y” />

Save the file

You do not need to restart the TM1WEB service (IBM Planning Analytics Spreadsheet Services) to see the effect.

Only logout and in to TM1WEB.

http://servername.domain.com:9510/tm1web

More Information:

<!– If “Y” or “1” is specified, then the name of the logged in Database will appear next to the logged in user name in the top right of TM1 Web. –>
<add key=”TM1DatabaseLabel” value=”Y” />

https://www.ibm.com/docs/en/planning-analytics/2.0.0?topic=ctwsas-tm1databaselabel-parameter

 

Product:

Power BI Workspace and dataflow

Issue:

New created Dataflow does not show up in PowerBi Desktop – when updating a connection.

Suggest solution:

The user credentials is not “refreshed” – you can not see the dataflow or you see the dataflow as a unique number only, instead of the name.

Go into PowerBI desktop – start Transform data.
Click on Data Source Settings.
See that dataflows are selected.
Click on Clear Permissions. Click OK to confirm.
Click on Edit Permissions.
Click on Edit button to login again against your company (active directory)
Click Save.
Click OK.
Try to change the connection to a new dataflow now with the navigation icon.

Here are the other reasons why your dataflow might not appear:

1. Workspace Connection

  • Make sure you are signed in to Power BI Desktop with the same account that has access to the workspace where the dataflow resides.
  • Check that the workspace is not a personal workspace if you are using organizational dataflows.

2. Dataflow Storage Mode

  • Dataflows must be stored in Power BI Service (not in external environments like Azure Data Lake unless properly linked).
  • If the dataflow uses Linked Entities or Computed Entities, you need Premium capacity or Premium per user (PPU) licensing.

3. Permissions

  • You need at least Contributor or Member access to the workspace to see and connect to its dataflows.
  • If you only have Viewer access, the dataflow will not appear in Power BI Desktop.

4. Refresh or Sync Issues

  • Sometimes the list of dataflows in Power BI Desktop does not refresh immediately. Try:
    • Sign out and sign in again in Power BI Desktop.
    • Go to Get Data → Power Platform → Dataflows and click Refresh.

5. Region Mismatch

  • If your Power BI Desktop is connected to a different tenant region than your workspace, dataflows will not show up.

 

More information:

https://learn.microsoft.com/en-us/power-bi/connect-data/refresh-data

https://guide.streambim.com/hc/en-us/articles/11493683018140-Data-Sources-Credentials-and-Automatic-Refresh-in-Power-BI

https://www.activityinfo.org/support/docs/integrations/powerquery/updating-your-credentials-in-power-bi.html

 

Product:

DB2 database

Issue:

How list only a few rows of data?

Solution:

In your SQL tool, enter something like this:

SELECT * FROM schemaname.tablename WHERE id = 1 FETCH FIRST 100 ROWS ONLY

 

More Information:

https://www.razorsql.com/articles/db2_limit_query.html

SQL FETCH: Retrieving Data In Database Cursors

https://www.dbvis.com/thetable/sql-limit-clause-complete-handbook/ 

https://www.w3schools.com/sql/sql_top.asp 

https://dbeaver.com/docs/dbeaver/Navigation/

Product:

Planning Analytics 2.1.11
Microsoft Windows 2022 server

Issue:

How many element in a dimension subset?

Solution:

Use the function SubsetMDXSet to get the number of elements in the selection, it will also convert the MDX subset to a static subset.

SubsetMDXSet applies a specified MDX expression to a public or temporary subset.

If the passed MDX expression is valid, the specified subset is saved as a dynamic subset defined by the MDX expression.

If the passed MDX expression is an empty string, the subset is converted to a static subset that contains the elements that are in place when SubsetMDXSet is executed.

The SubsetMDXSet returns the number of elements that the subset contains.

In below example the subset becomes static as we use ” as parameter.

We can use the number of elements, to count them and add them to a new dimension, with a total element first.

 

DimensionElementInsertDirect( tDim, '', 'Total', 'C');
sSubset = 'temp_Account';
sMDX = '{TM1FILTERBYLEVEL(TM1SUBSETALL([Account]) , 0)}';
SubsetCreatebyMDX(sSubset, sMDX, 1 );
vNumElems = SubsetMDXSet( tDim, sSubset, '' );
i = 1;
while (i<=vNumElems);
vElem = SubsetGetElementName( tDim,sSubset, i );
DimensionElementComponentAdd( tDim, 'Total',vElem, 1 );
i = i +1;
end;

More Information:

SubsetMDXSet – IBM Documentation

Slow MDX Subsets? Best Practice Guide to Maintain Sets in TM1

Wim‘s Excel, TM1 & soccer site

User Guide > Using the Manager with TM1 > Managing MDX Library

TM1 subset trick: client-specific dynamic selections and sums with one single subset | GMC² GmbH – intelligent entscheiden

How to order/sort data in cube view used as a data source in Turbo Integrator (TI)? – Ever Analytics

Product:

Planning Analytics Workspace 2.1.14
Cognos Analytics 12.0.3

Microsoft Windows 2022 server

Issue:

Sometimes we can not login, but it work if we start a different web browser on your computer. Try EDGE instead of CROME.
Note that PAW and TM1WEB looks like it use different whys to handle cookies at login.

CA may time out and throw one of the following errors:

  • Unexpected Server Response
  • HTTP Error 431
  • Unable to Load Requested View
  • Cannot read properties of undefined (reading ‘perspective’)
  • DPR-ERR-2107 The User Capabilities Cache cookie cannot be decoded.

Solution:

  1. Clear cache and cookies from the affected browser. See KB 15 (Michigan State University) for details.
  2. Close completely out of all browser windows.
  3. Open an incognito/InPrivate browsing window and use that to access Cognos. See KB 1203 (Michigan State University) for details.
  4. Check you go to correct start page ( https://XXXXX.planning-analytics.cloud.ibm.com ) – exchange with your local server name.
  5. Check that your local network is working – try a different physical location for your laptop.

There can be other solutions or explanations of this errors – hopefully you can find them at IBM site.

How to retrieve the content of the CAM_passport and userSessionID from cookie?

In Browser window after you log in to the Cognos Connection Portal type any of the following in the address bar of the browser:

  • javascript:document.cookie
  • javascript:document.write(document.cookie)
  • javascript:alert(document.cookie) – This script will popup a window on which it will show up cam_passport and userSessionid
  • Or maybe have a look in your user directory under  “C:\Users\yourname\AppData\Local\Microsoft\Edge\User Data\Default” or “C:\Users\yourname\AppData\Local\Google\Chrome\User Data\Default” .. or where the files are stored in modern browsers.

 

Easier to view cookies in Chrome, perform the following steps:

Open Chrome settings. Right-click on your browser window.
Choose Inspect to enter the Chrome Developer Tools.
Choose the Applications tab. Depending on the size of your screen, you may need to expand your tab options at the top by clicking on the >> symbol:
Open application.
Under the Storage tab, select Cookies to view cookies in Chrome.
You will see all the available websites. Select the website you want to see cookies in Chrome.
Check the domain column, if you have different values here for same cam_passport (cookie) then you can get above errors.  Should only be ONE domain name for the same cookie name.

Name. The cookie’s name.
Value. The cookie’s value.
Domain. If the domain name corresponds with the website you are browsing, it means that these cookies are First-party cookies. If the domain name is different- these cookies are third-party cookies.
Path. The URL that must exist in the requested URL in order to send the Cookie header.
Expires / Max-Age. The cookie’s expiration date or maximum age. This field shows which are session cookies and which are persistent cookies, that operate for a certain duration of time.
Size. The cookie’s size, in bytes.
HttpOnly. If true, this means that it is a HTTP cookie. JavaScript modification is not allowed.
Secure. If true, this means that the cookie is sent to the server only over a secure, HTTPS connection.
SameSite. The SameSite cookie attribute is used by browsers to allow or block cookies based on attribute. It could contain Strict or Lax SameSite attributes.
Partition Key. A cookie’s partition key is the scheme and registrable domain of the top-level URL the browser was visiting at the start of the request to the endpoint that set the cookie.
Priority. It is used with deprecated cookie priority attribute. Could contain Low, Medium (default), or High priority.

 

More information:

https://kinsta.com/blog/http-error-431/ 

https://privacysandbox.google.com/cookies/basics/cookie-tools 

https://developer.chrome.com/docs/devtools/application/cookies 

https://tdx.msu.edu/TDClient/32/Portal/KB/ArticleDet?ID=998 

https://www.w3schools.com/js/js_cookies.asp 

https://commandlinefanatic.com/cgi-bin/showarticle.cgi?article=art013

https://cookie-script.com/blog/chrome-cookies 

 

By default the cookie path is the root path to Cognos.

This value can be me modified in Cognos Configuration using the steps below.

1. Open Cognos Configuration.
2. Click Actions–> Edit Global Configuration

3. Go to the General tab and Modify the cookie settings:

4. Modify the path and other information as required.

5. Click OK and save.

Stop and restart the Cognos Service.

https://www.ibm.com/docs/en/cognos-analytics/11.2.x?topic=settings-customizing-cookie 

Product:

Microsoft Windows 10

Issue:
What anti-virus software should i use on my old laptop?

Suggested solution:

Windows Defender is good, but when there are no more updates, you can consider to use a separate Anti-Virus software product.

You have to yourself decide what to use (and if you need it) as the software market for anti-virus program is lucrative, program that was good for 10 years ago is maybe not the best today.

Consider:

  1. Is the software easy to understand for me? Can i setup schedule scans in a easy way?
  2. What is the price the second year? Most software will give you a 50% discount the first year. Check if you can get a family price for 3-5 computers. Review sites have often links to good offers.
  3. Does the software take a lot of CPU when running or does it do the scan in the “cloud” ?  Check more than one review to see if the program will slow down your PC.
  4. Check more than one review of the software – most top teen listings are only trying to sell you a special anti-virus software where they get most money from.
  5. Do you trust the company behind the program?  Check WIKI pages about what country the software comes from.

https://en.wikipedia.org/wiki/Malwarebytes 

https://en.wikipedia.org/wiki/VIPRE

https://en.wikipedia.org/wiki/Bitdefender

https://en.wikipedia.org/wiki/ZoneAlarm

As of January 2006, ZoneAlarm was reportedly[6] sending data to the company’s servers in a covert fashion. A developer dismissed allegations that ZoneAlarm was spying on its clients, saying that it was an issue related to software updates and that it would be fixed.[7]

In December 2007, a browser toolbar was shipped with ZoneAlarm as an opt-out, which was not well received.[8] This was removed in later versions of the software.

On September 2, 2010, the free version of ZoneAlarm started showing a “Global Virus Alert” popup as a scareware tactic to get users to switch to their paid security suite.[9] The popup was turned off by ZoneAlarm marketing team after an uproar from disgruntled users, many of whom uninstalled the software.[10][11]

These program have a free version (that you can test):

https://www.bitdefender.com/en-us/consumer/free-antivirus 

https://www.malwarebytes.com/solutions/virus-scanner 

https://www.zonealarm.com/software/free-antivirus

the free version is maybe not the same program as the full version of the program. Check what engine is inside the anti-virus program.

You can also try the more expensive ones:

https://vipre.com/home/vipre-antivirus-plus/ 

https://www.gdatasoftware.com/antivirus-windows

We tested the Bitdefender windows version on Windows 10.

We run a deep scan, and it found things in old TM1 files, version 2.1.5, Trojan.GenericKD is Windows-only malware, as far as I know, so it’s highly likely that these detection’s are false positives, as it looks like many anti-virus software can find them in different files.

If there where issues, this are solved now. IBM sends out updates regularly. We checked the latest version PAL 2.1.14, and there where no issues there.

https://www.ibm.com/support/pages/node/7246602 

https://www.ibm.com/support/pages/security-bulletin-ibm-planning-analytics-workspace-affected-vulnerabilities 

(It looks like the Bit-defender can not scan ZIP files larger than 2 GB)

We upgrade Bitdefender to PLUS version in hope the firewall should be part of that deal.

But firewall was not part of the PLUS version. We got the VPN function, but you can not choose what country you will be using. We need to upgrade again to get firewall…

The company change the offering every year, so the package you have the first year may be something different the next year. If you stop your automatic subscription, then the bitdefender program stops working when the subscription ends. Malwarebytes have a different solution.

Passwords manager is better to use separate program like:

https://keepass.info/ 

https://bitwarden.com/pricing/

https://en.wikipedia.org/wiki/KeePass 

 

More information:

https://en.wikipedia.org/wiki/Antivirus_software 

https://www.bitdefender.com/consumer/support/answer/106172/ 

https://www.bitdefender.com/pages/consumer/se/new/cl-offer-premium-dlp?irclickid=QTEWqQW9ixycTh7zFWyZ4WU4Ukpy7-3HHW8nTc0&im_rewards=&irgwc=1&MPid=1271102&cid=aff%7Cc%7CIR%7CSafetyDetectives&locale=sv-SE&vcampaign=NDLP25V2 

 

https://www.bitdefender.com/consumer/support/prevention/ 

Before you decide, search the internet for zonealarm issues…

Product:
Planning Analytics 2.1.14 server
Microsoft Windows 2022 Server

Issue:

In tm1server.log file you have this error at every startup of the TM1 service:

TM1.Server Failure initializing Performance Monitor: Installed counters do not match registry definition

Solution:

Looks like the installation did not go well.

Start a CMD as a administrator on the TM1 server.

Go to folder:  D:\Program files\ibm\tm1_64\bin64

Enter command:

regsvr32    TM1PerfmonDLL.dll

Click OK.

Restart the TM1 service, and check if the error is gone from the tm1server.log file. Search for TM1.Server Security Mode to find the lines.

example from the tm1server.log file;

…..TM1.Server Certificate Authority:
TM1.Server Client Export Server Certificate: 0
TM1.Server Security Mode: 5
TM1.Server Use Generic Login Connect Error:
TM1.Server Server CAM URI: http://servername:9300/p2pd/servlet/dispatch
TM1.Server Server CAM URI Retry Attempts: 3
TM1.Server CAM use SSL: 0
TM1.Server Client CAM URI: http://servername:80/ibmcognos/bi/v1/disp
TM1.Server Web CAM URI: http://servername:80/ibmcognos/bi/v1/disp… …………..
TM1.Server Client Ping CAM Passport: 900
TM1.Server Start time: Fri Oct 24 2025 02:22:44 PM
TM1.Server Failure initializing Performance Monitor: Installed counters do not match registry definition
TM1.Server The server will use Parallel Interaction.
TM1.Server Client Message Port does not accept Tm1Top connections.
TM1.Server SmartCache is disabled
TM1.Server Starting HTTP Session Timeout thread. Thread Id: 6264
TM1.Server Dynamic Client Message Port: 57066
TM1.Server MTQ is enabled with 8 threads ……

 

More Information:

https://www.ibm.com/docs/en/planning-analytics/2.1.0?topic=utility-running-tm1-perfmon