Customer Service Center

NovaCon AlwaysOn JD Edwards EnterpriseOne

Stop finding out about JD Edwards problems after the business already has.

NovaCon AlwaysOn continuously monitors your JD Edwards estate, spots the early signs of degradation, opens one numbered ticket per incident, and turns operational data into context your team can act on, before a stalled job becomes an outage.

  • Enterprise Server
  • Kernels
  • Batch / UBE
  • Scheduler
  • WebLogic
  • JAS
  • AIS
  • BSSV
  • Oracle
  • SQL Server
  • IBM i
  • Hosts
  • Services
  • TLS certificates

Agentless by design: nothing is installed on your JD Edwards servers.

AlwaysOn Environment Dashboard showing four servers in the PROD group: ENTSRV in error at 94% CPU, with WEBSRV, DEPSRV and DBSRV online, each with CPU, memory, disk and open alert counts by ticket family. ENTSRV · CPU 94% over threshold JDE service RUNNING
The cost of running reactive

Your ERP doesn't fail all at once. It starts sending signals.

Before a problem turns into downtime there are almost always symptoms: a job that never finishes, a process that keeps growing, a service that degrades, a blocker in the database, a disk closing in on its limit, or an instance that stops answering the way it should. The question is whether anyone sees them in time.

Users find out before IT does

The first notification is a help desk ticket. By then the impact has already started and the clock is running against you.

Fragmented diagnosis

Oracle, Enterprise Server, WebLogic, AIS, batch queues and logs each end up investigated in a different console, by a different person.

Knowledge in too few heads

Diagnosis depends on the handful of specialists who know exactly where to look, and that knowledge rarely survives a vacation or a resignation.

Recurring incidents

The problem gets fixed, but with no recorded history the pattern behind it stays invisible. So it comes back.

Manual after-hours duty

Outside business hours, finding cause and context can mean logging into several environments and consoles before the real work even begins.

Generic monitoring doesn't speak JDE

Knowing that CPU is high or that a port is open is not the same as understanding what that means for jdenet kernels, a UBE queue or an AIS instance.

The shift

From firefighting to an operation that is genuinely always on.

The goal is not to generate more alarms. It is to shorten the gap between “something is wrong” and “we know where to look and what to do.”

01

Observe

Agentless collectors connect over SSH, WMI/WinRM, REST and database connections, continuously and across every tier.

02

Detect

51 alert types evaluated against thresholds set per group and category, with sustained-duration rules that ignore spikes.

03

Understand

One numbered ticket per incident, reused until it resolves, carrying the measured value, the threshold and the full evaluation history.

04

Act

Guarded operational actions such as cleanup, service control and scheduled commands, with start, stop and restart always waiting for human approval.

What AlwaysOn is

One operational view of your entire JD Edwards environment.

AlwaysOn continuously monitors infrastructure components, JD Edwards services, middleware and databases, centralizing status, alerts, history and operational actions in a single experience, across roughly 45 screens organized the way the work actually happens.

01

Monitor

Continuous visibility into hosts, JD Edwards services, WebLogic managed instances and databases: Linux over SSH, Windows over WMI and WinRM, IBM i through DB2 for i SQL Services.

02

Alert

Alerts with context, carrying auto-numbered tickets, per-group thresholds, sustained-duration rules, cooldowns, snooze, maintenance windows, full history and automatic resolution.

03

Automate

Guarded log and runtime-cache cleanup, scheduled OS commands, service control and one-click database lock resolution. Repetitive work handled safely, and always confirmed.

Coverage

Well past “the server is up.” Monitoring that understands JD Edwards.

A generic monitor tells you the host is answering. AlwaysOn tells you the batch engine went down, that jdenet kernels are missing, that the Scheduler stopped firing, or that an AIS instance is refusing connections on 9891, in the vocabulary your CNC team already uses.

  • jdenet kernels: processes present and behaving
  • Batch engine: down or not responding
  • JDE service ports: reachable or refusing connections
  • Security server: availability
  • Zombie and defunct processes: detected and reported
  • Runaway processes: with verified auto-kill
  • Oversized logs: before they fill the mount
  • Severe terms in logs, such as ORA-00600 found in jde.log

The JDE ticket family covers 10 alert types dedicated to Enterprise Server services alone.

The alert engine

Fewer alerts. More signal.

Alerting on everything is not better monitoring. It is how a team learns to ignore its own monitor. Every AlwaysOn alert clears the same seven steps before it reaches a human.

1

Gate

Is this alert type enabled for that server's group and category? Configuration lives on the group, never on each server.

2

Threshold

The measured value is compared against the threshold for that group and category, shipped with sensible factory defaults.

3

Sustained

Where it applies, the condition has to hold for N continuous minutes. A single false reading resets the streak, so a spike never pages anyone.

4

Suppression

Snooze, pause rules, deployment windows and maintenance windows stop the alert before it opens a ticket or sends mail.

5

Cooldown

After sending, the same alert stays quiet for a set time. The ticket stays open: you are not told twice about the same problem.

6

Ticket and dedup

A dedup key identifies the incident and reuses its number, so one problem keeps one history instead of scattering across your inbox.

7

Auto-resolve

When the condition clears, the ticket closes on its own and a green RESOLVED email goes out.

Recorded either way

Alert History keeps every evaluation: the value, the threshold, the result, and the cooldown that held the alert back.

51 alert types across 9 ticket families. The ticket prefix tells you at a glance whose problem it is.

HW Host and storage 11 JDE Enterprise services 10 WS WebLogic and web tier 7 DB Database 5 QY · SV · CERT · ORC Queries, logs, TLS, orchestrations 5 AON AlwaysOn auditing itself 13
The monitor watches itself. Thirteen internal checks raise AON pendencies: SMTP silently off, a group with no recipients, polling stalled, metrics gone stale, a kill it could not verify. They show up on the Always Health screen only, because a pendency about email must not depend on email to be seen.
Inside the product

One place to understand the health of your JD Edwards environment.

Every screen below is the real product, version 2.5.305. These are not mockups.

A 32-second look at AlwaysOn in the real product.
Environment Dashboard

The whole estate on one screen

Status, CPU, memory, disk per mount point, operating system uptime, JDE service state and open alerts by family, for every server in the group, refreshed continuously.

  • Open alert counts broken out as HW / JDE / WS / DB / QY / SV
  • Instant Health Check and Instant Alert Status on demand
  • Filter by group, with the last analysis timestamp always in view
Environment Dashboard showing four servers with CPU, memory and disk bars, JDE service state and alert counts by family.
Swipe sideways to see the full screen
Alert Tickets

One numbered ticket per incident

Every alert the system raises opens a numbered ticket. The same number is reused while the problem stays open, so an incident keeps a single identity from first signal to resolution.

  • Per-family counters across the top: Hardware, JDE, Web Server, Database, Query, Severe
  • The detail carries the actual evidence: “CPU 94% over the 90% threshold”, “severe term 'ORA-00600' found in jde.log”
  • Mark as resolved, snooze, or filter by status, type and group
Alert Tickets screen with per-family counters and three open tickets: HW-0012 for CPU over threshold, WS-0007 for a surface test connection refused, and SV-0003 for a severe term found in a log.
Swipe sideways to see the full screen
Managed Instances

Every JAS, AIS and BSSV instance

State, health, ports and active users for each managed instance, read through the WebLogic and Server Manager REST APIs, with nothing installed on the web tier.

  • Tells “the port answers” apart from “the instance is actually RUNNING and healthy”
  • Active user counts per instance
  • Feeds the WS ticket family directly
Managed Instances screen listing WebLogic managed instances with their state, health, port and active user counts.
Swipe sideways to see the full screen
Surface Test

Proof that users can actually log in

Scheduled JD Edwards login tests per managed instance, covering HTML, AIS and BSSV, measuring not only whether the endpoint answers but how long the login takes.

  • Tests the path a user actually takes, not just the port
  • Response-time thresholds on top of failure detection
  • A failed surface test opens a WS ticket with the refused connection detail
Surface Test screen showing scheduled JD Edwards login tests per managed instance for HTML, AIS and BSSV, with their results.
Swipe sideways to see the full screen
Scheduler and Orchestrator

The automation layer, watched like everything else

Is the JDE Scheduler firing? Which orchestrations are failing, and how long do they take? Both questions get a screen instead of an investigation.

  • Last run per scheduled job, with an automatic health check
  • Success and failure counts, average durations and exceptions per orchestration
  • A stalled Scheduler raises a JDE ticket; orchestration rules raise ORC tickets
Orchestrator Health screen with success and failure counts, average durations and exceptions listed per orchestration.
Swipe sideways to see the full screen
TLS Certificates

The expiration nobody has on their calendar

Every monitored endpoint is checked daily and alerts well ahead of expiry. It is the class of outage that is entirely preventable and still happens on a Sunday.

  • Automatic daily check across every monitored endpoint
  • CERT tickets opened ahead of the expiration date
  • Certificate state visible without connecting to each host
TLS Certificates screen listing monitored endpoints with their certificate expiration dates and status.
Swipe sideways to see the full screen
Automation

Not just detect. Take operational work off the team.

Automation does not mean giving up control. Sensitive actions stay explicit, bounded and auditable, which is exactly why they can be trusted to run at all.

Guarded cleanup

Log and runtime-cache cleanup per server, per group, or after a reboot. Find lists every runtime-cache job with its real size so you can clear selectively, with every path validated and a strong confirmation.

Scheduled remote commands

Operating system commands over SSH or PowerShell, scheduled and run from one place instead of from six terminal sessions.

Services Control

Start and stop managed instances and Enterprise Server services, guarded and confirmed before anything happens.

Database lock resolution

Blockers in red, waiters in yellow. Resolve one specific session, or every blocker, in a single click, from the same screen that showed you the problem.

Verified auto-kill

If an auto-kill reports success and the process is still alive on the next cycle, the product says so instead of trusting its own result.

It can never wipe itself

Cleanup validates every path before acting and is structurally prevented from removing the product. That is the guard rail that makes everything else safe.

Operating model

You decide how far the platform is allowed to go.

AlwaysOn is deliberately built in three levels of authority. You can stay on the first one indefinitely, and plenty of teams do. The levels above it only ever act inside the limits you set.

01

Observe and detect

See it before anyone reports it.

  • Continuous agentless collection across every tier
  • 51 alert types, thresholds per group and category
  • Dashboards, Warning Events and health reporting
  • Nothing in your environment is changed
Available · v2.5.305
02

Understand

Get to the diagnosis faster.

  • One numbered ticket per incident, reused until resolved
  • Alert History: value, threshold, result and cooldown
  • Find in Logs across every server, read-only
  • Health Report with rolling 7, 15 and 30-day averages and an advisor
  • Server History, Job Monitor and Web Exceptions
Available · v2.5.305
03

Act

Automation with controlled authority.

  • Guarded cleanup, scheduled commands and service control
  • Incidents forwarded to your incident response tooling
  • A command channel back, through a signed command block
  • Start, stop and restart always wait for human approval
  • Six independent checks, all of them mandatory
Available · human approval required
Automation without governance is just faster damage. Before any inbound command is accepted, six checks have to pass: sender allow-list, HMAC token, message threading, a pre-authorizing rule, target binding and a single-use correlation ID. Reversible actions can run on their own; anything that starts, stops or restarts a service waits for a person.

The capabilities described on this page are those of AlwaysOn v2.5.305. For anything beyond that scope, check availability with the NovaCon team.
Operational outcome

What changes in the day-to-day.

No percentages here. Those numbers depend on your environment, not on our marketing. What follows is the change in how the work actually gets done.

Without AlwaysOn

Reactive
  • Manual checks, repeated by hand on every host
  • Several consoles, one per layer of the stack
  • The user notices first
  • Diagnosis fragmented across teams and tools
  • Isolated alerts with no shared identity
  • Knowledge concentrated in a few specialists
  • History scattered across logs and inboxes
  • On-call starts with no context at all

With AlwaysOn

Proactive
  • Continuous monitoring across every tier, agentless
  • One centralized view of the whole estate
  • Alerts carry JD Edwards context, not just metrics
  • Noise controlled by thresholds, sustained rules and cooldowns
  • One numbered ticket per incident, reused until resolved
  • Recorded history: value, threshold, result, evaluation
  • Health, package, server and job reports ready to hand over
  • Guarded operational actions from the same screen
Simulation

What does finding out too late already cost you?

This calculator does arithmetic on the numbers you type. It describes your current reactive operation. It is not a NovaCon projection, promise or claimed saving. Change any field to model your own scenario.

Ones that need technical investigation
From first signal to identified cause
CNC, DBA, infrastructure, help desk
Fully loaded technical hour
JD Edwards unavailable to the business
Your own figure, only you can set this
On-call, overtime, weekend coverage
Third parties called in to diagnose
Built in by design

Security is not a layer added afterward.

A monitoring tool holds credentials for every tier of your ERP. That makes how it stores, uses and records them a primary design constraint, not a checklist item.

Encrypted at rest

The local database is an encrypted SQLCipher (AES) store, unreadable without the key.

Encrypted credentials

Every operating system, database, service, admin and keystore password is encrypted, never stored in clear text.

Read-only by default

Database monitoring queries are read-only by default. Write actions are explicit and gated.

Guarded destructive operations

Cleanup validates every path and requires a strong confirmation, and it can never delete the product itself.

Audit and traceability

A read-only trail of every configuration change and every write issued against a registered database, with the command and where it came from. Credential access and every alert state are logged.

Access and identity

A mandatory application password hashed with Argon2, optional TOTP two-factor with replay protection, email OTP login with rate limiting, and a machine token plus a time-limited human session guarding every request.

Host-key pinning (TOFU)

SSH and TLS host keys are pinned on first use, so impersonation of a monitored host is detected rather than trusted.

Loopback by default

The desktop backend binds to 127.0.0.1. Browser access is a separate, opt-in HTTPS console on its own port, off by default, with credentials redacted server-side before any response leaves the machine.

Dormant user governance

JD Edwards sign-on history from F9312 and per-connection database user auditing, with rules that flag (or, in Final mode, deactivate) users dormant for too long, behind a protected list and a percentage fuse.

Architecture

Agentless by design.

AlwaysOn reaches out, reads, and reports. No agent is installed on your JD Edwards servers, and nothing runs where it shouldn't.

NovaCon AlwaysOn architecture AlwaysOn runs as a desktop client plus an always-on Windows Service, with a local encrypted SQLCipher database. Agentless collectors connect outbound over SSH, WMI and WinRM, WebLogic and Server Manager REST, and Oracle, SQL Server and DB2 for i database connections to the customer JD Edwards environment, which includes the Enterprise Server, the WebLogic web tier with JAS, AIS and BSSV instances, and the database tier. Alerts leave over SMTP as auto-numbered email tickets, and an optional HTTPS console is available on its own port. NovaCon AlwaysOn Runs inside your network Desktop client Always-on Windows Service SQLCipher (AES) store encrypted at rest AGENTLESS COLLECTORS · OUTBOUND SSH for Linux hosts WMI and WinRM for Windows hosts WebLogic and Server Manager REST Oracle · SQL Server · DB2 for i Your JD Edwards on-premises · cloud · hybrid Enterprise Server kernels · batch · scheduler WebLogic web tier JAS · AIS · BSSV Database tier Oracle · SQL Server · IBM i ✓ No agent installed SMTP · auto-numbered tickets Opt-in HTTPS console · own port · off by default

Architecture as documented for AlwaysOn v2.5.305.

Why NovaCon

Built by people who live JD Edwards CNC.

AlwaysOn comes out of the daily practice of a consultancy dedicated exclusively to operating, modernizing and protecting JD Edwards environments. Every alert in it exists because somebody needed it at 3 a.m.

2004
Founded in São Paulo
20+
Years of JD Edwards
500+
Projects delivered
10+
Countries served

Exclusive CNC focus

A consultancy dedicated only to JD Edwards CNC, with no conflicts of interest and depth instead of breadth.

On-premises, cloud and hybrid

Certified specialists working alongside your internal IT across every JD Edwards supported platform, with a long-term partnership mindset.

Questions

Frequently asked questions

AlwaysOn is a monitoring, alerting and automation product built specifically for Oracle JD Edwards EnterpriseOne environments. It runs as a desktop client plus an always-on Windows Service, continuously collects data from infrastructure, JD Edwards services, WebLogic managed instances and databases, and centralizes status, alerts, history and guarded operational actions across roughly 45 screens.

It is designed to cover what generic infrastructure monitoring cannot reach: the JD Edwards layer. A general-purpose monitor reports that CPU is high or that a port is open. AlwaysOn evaluates jdenet kernels, the batch engine, UBE queues, the JDE Scheduler, JAS, AIS and BSSV managed instances, Oracle blockers and tablespaces, and real JD Edwards logins, and it also covers CPU, memory, disk per mount point and reachability at the host level. Whether it replaces or complements your current tool depends on your estate, which is exactly the kind of question an assessment answers.

Enterprise Server services, with jdenet kernels, the batch engine, JDE ports, the security server, zombie and runaway processes; batch and UBE, with jobs in error, jobs waiting, the JDE Scheduler and Job Monitor history; the web tier, with WebLogic and WebSphere managed instances, JAS, AIS and BSSV, surface tests and web exceptions; Oracle, SQL Server and DB2 for i databases; the Orchestrator; TLS certificates; and the underlying hosts. In total, 51 alert types across 9 ticket families.

No. AlwaysOn is agentless by design. It connects outbound to collect: SSH for Linux hosts, WMI and WinRM for Windows, the WebLogic and Server Manager REST APIs for the web tier, and standard database connections for Oracle and SQL Server. Enterprise servers on IBM i are read through DB2 for i SQL Services. Nothing is installed on your JD Edwards servers and nothing is left behind.

AlwaysOn runs inside your network and reaches your JD Edwards estate over SSH, WMI/WinRM, REST and database connections. Wherever those connections are allowed, whether on-premises, in cloud-hosted environments, or a mix of both, the collectors work the same way. Network paths and firewall rules are part of what an assessment maps out for your specific topology.

Through seven sequential steps. The alert type has to be enabled for that server's group and category; the measured value has to cross a threshold set per group; where it applies, the condition has to hold for N continuous minutes, so a single false reading resets the streak; snooze, pause rules, deployment and maintenance windows suppress it during planned events; a cooldown keeps the same alert quiet after sending while the ticket stays open; a dedup key reuses the existing ticket number; and when the condition clears, the ticket resolves automatically with a green RESOLVED email. Every evaluation is recorded either way, including the cooldown that held one back.

The local database is an encrypted SQLCipher (AES) store, unreadable without the key. Every operating system, database, service, admin and keystore password is encrypted and never stored in clear text. Access requires a mandatory application password hashed with Argon2, with optional TOTP two-factor or email OTP, and every request is guarded by a machine token plus a time-limited human session. SSH and TLS host keys are pinned on first use. Credentials are redacted server-side before any response leaves the machine, and credential access is logged.

Yes, and it is explicit. Database monitoring queries are read-only by default; write actions are gated. Cleanup validates every path, requires a strong confirmation, and is structurally incapable of removing the product. When incidents are forwarded to an external incident response tool, a command channel can send instructions back, but only after six independent checks pass: sender allow-list, HMAC token, message threading, a pre-authorizing rule, target binding and a single-use correlation ID. Reversible actions can run on their own; start, stop and restart always wait for human approval. Every configuration change and every database write leaves a read-only trail with the command and where it came from.

Yes. Observation and detection change nothing in your environment, and plenty of teams run at that level indefinitely. Automation capabilities are configured deliberately, and the actions that carry real consequence stay behind human approval even once they are enabled.

Reports your team can hand to the business. The Health Report gives rolling 7, 15 and 30-day averages per server, with a lifetime view, cleanup status and an advisor, exported as a self-contained HTML page. The Package Report tracks package build projects against their schedule and emails when one stalls. Server History produces a printable snapshot of any scope over a period. Job Monitor shows UBE history filtered by job, version, user, environment and queue, plus what is running right now with live CPU. Warning Events records non-urgent findings without alerting anyone. HTML and Excel exports are available on the screens that matter.

AlwaysOn audits its own behavior through thirteen internal checks in the AON family: SMTP off or failing silently, a group with no recipients, a master rule switched off, polling stalled, metrics gone stale, a license nearing expiration, or an auto-kill it could not verify. Those findings show up on the Always Health screen only, never by email, because a pendency about email must not depend on email to be seen.

Yes. An opt-in HTTPS console on its own separate port, enabled during installation and off by default, while the desktop backend stays on loopback at 127.0.0.1. Web sessions are multi-user and independent of the desktop, so a browser login never drops the desktop one. The same login rules apply: an Argon2 application password plus TOTP or email OTP.

Start with an AlwaysOn assessment. Fill in the form on this page, or talk to the NovaCon team, by email at info@novaconweb.com or by phone at +1 (646) 663-8667. We map your JD Edwards topology, the components in scope and the connections required, and show you what AlwaysOn would surface in your specific environment. Business hours are Monday through Friday, 9:00 AM to 6:00 PM EST, and we usually reply within 24 business hours.

Next step

Find out where your JD Edwards operation could catch problems sooner.

Talk to a NovaCon specialist and see how AlwaysOn would fit your JD Edwards EnterpriseOne environment: the components in scope, the connections required, and what it would surface on day one.

Rather talk to NovaCon directly?

Spot the warning signs before they cause an impact.

The assessment reveals where your JD Edwards environment is most exposed and how AlwaysOn can detect critical warning signs before they lead to downtime.

Continuous monitoring

  • ENTSRV · PROD Error

    CPU 94%MEM 80%1 job in error

  • WEBSRV · PROD Online

    CPU 31%MEM 54%JAS OK

  • DBSRV · PROD Online

    CPU 22%MEM 61%Oracle OK

  • ORCSRV · PROD Warning

    CPU 68%MEM 72%CPU over threshold

2 signals caught before anyone reported them

Tell us about your environment

Fill out the form below to request your AlwaysOn assessment.


E-mail

info@novaconweb.com

Location

Street Bom Pastor 2224, suite 410
São Paulo - SP

Links

Opportunities

Want to Join the Team?

Sign Up for Our Newsletter

Fill out the form below with your primary email:


NovaCon. Consulting and Systems © 2026 – All Rights Reserved.