Archer Data Feed Monitor

The Archer Data Feed Monitor is a tool & utility enabling Archer Administrators to call a data feed only when there are records to process, reducing the resource load on the Archer Platform instance.

Archer Exchange: With the Archer Exchange, the Archer team has created a broad selection of supplemental, value-added offerings to help you get your unique risk management program on the right path, right from the start. You can leverage the Archer Exchange offerings to expand the use of Archer solutions into new business processes and address specific industry, geographic, regulatory, or technical requirements.

Release notes

Release date

Release

Notes

May 2026 2025.12 Recertified on Archer Platform Release 2025.12

Overview

In many Archer implementations, business users are looking for the ability to react to specific events in near real-time. For example, a file containing vulnerability scan results is placed on a network share, and the business wants to ingest the file as soon as it appears. The creation of the file can be unscheduled, and therefore unexpected. Data feeds that perform the ingestion are configured to run every five minutes (or less) in an effort to approximate real-time processing.

This use of minutely data feeds produces several undesirable results. Most notably, the rapid growth of affected system tables: tblAsyncInstrumentation, tblDataFeedHistory, and tblDataFeedMessage. In some cases, this can result in those tables landing in the top 10 by row count and size on disk.

Spinning up and shutting down a data feed requires system resources. The Job Engine must poll for runnable jobs, pop the data feed job from the queue, push the next occurrence to the queue, spin up a thread to process the job, unpack the named argument XML, constitute the data feed, check the source, determine that there is no work to do, log messages to tblDataFeedHistory and tblDataFeedMessage, and write the completed job information to tblAsyncInstrumentation. In one client instance, a data feed that was scheduled to run every five minutes was executed more than 17,000 times during a 60-day period. During that time there was not a single source row to process. This occupied more than three days of processing time on the services server and generated thousands of rows of data in the instance database to track the processing of the feeds. A better solution is needed.

The Data Feed Monitor is intended to be run through the Windows Task Scheduler at a high frequency (every five minutes or less). When it runs, it checks a pre-configured list of monitors to see if any of them found work to do. Any monitor that finds pending work will call its associated data feed. This results in near real-time data feed execution, but without the expense of spinning up a data feed when there is no work to do. It also avoids the large database footprint associated with frequent data feed execution.

Revisiting our customer example, the Data Feed Monitor was deployed to watch for pending work. Over a subsequent 60-day period, the data feed was executed twice, resulting in a major savings of server resources and database storage.

Key features & benefits

Archer Data Feed Monitor enables you to do the following.

  • Implement a monitor that can call the data feed only when there is work to do.

  • Reduce the instance processing requirements.

  • Reduce the amount of data stored in the database data feed history/log tables.

  • Improve instance performance.

  • Leverage the NLog framework to provide control over where and how log messages are written and maintained.

The benefits of the Archer Data Feed Monitor are as follows.

  • Reduce resource load on the Archer instance and enhance system efficiency.

  • Avoid rapid growth of system tables caused by frequent data feed execution.

Prerequisites (ODA & system requirements)

Components

Recommended software

Archer solution areas Any
Archer use cases Any
Archer applications Any
Uses custom objects No
Requires Archer on-demand application (ODA) license Zero (0) Archer On-Demand license applications are required.
Archer requirements

Archer Platform Release 2025.12 and later

Supported Archer environments

  • On-Premise
    • Archer on-premises clients can deploy the Windows executable file on the server that is hosting the Archer platform.
  • Archer SaaS
    • Archer SaaS clients can leverage this offering but cannot install the offering in the Archer SaaS environment.  The offering must be installed on a client owned and managed server that can communicate with the Archer instance.

.Net Framework

Microsoft .Net framework 4.7.2 and above

Network requirements

Requires network access to the Archer platform

Architecture diagram

The following diagram provides a high-level overview of the data flow process for the Archer Data Feed Monitor Tool & Utility.

Configure Archer Data Archer Data Feed Monitor

Important: It is assumed that the reader has both working knowledge of all products involved, and the ability to perform the tasks outlined in this section. Administrators must have access to the documentation for all products in order to install the required components.

Important: The integration described in this guide is being provided as a reference implementation for evaluation and testing purposes. It may or may not meet the needs and use cases for your organization.  If additional customizations or enhancements are needed, it is recommended that customers contact Archer Support for assistance.

The Data Feed Monitor is an ASP.NET console application. The solution includes two XML configuration files. These allow for the specification of authentication credentials, along with other necessary details.

  1. Configure Data Feed Monitor.

  2. Create a Windows Scheduler task for the application.

  3. Test the connection. If the process is successful, it displays the message that criteria is met and feed is queued in the DataFeedMonitor.log.

  4. Execute the Data Feed Monitor. Failure to do so will result in a risk exposure, leaving parameters entered in monitor Section and app Settings (includes Archer credentials, ftp credentials and sql db parameters if configured) in the config file in plain text.

  5. Test the connection. If the process is successful, it displays the message that criteria is met and feed is queued in the DataFeedMonitor.log.

The Data Feed Monitor is an ASP.NET console application. The solution includes two XML configuration files. These allow for the specification of authentication credentials, along with other necessary details.

Technical information

.NET Configuration

An ASP.NET console application uses an XML configuration file in the form of the DataFeedMonitor.exe.config.

The XML configuration code below offers a configuration example.

<appSettings>

<add key="useSoapAuth" value="false" />

<addkey="archerBaseUrl"value="https://localhost/archer"/>

<addkey="cacheFilePath"value="c:\temp\"/>

<addkey="cacheFileEncryptionPassphrase"value="d0n7TryTh1s@h0m3!"/>

<addkey="securityProtocolVersion" value="Tls" />

<addkey="useSslValidation"value="false"/>

<addkey="archerInstance"value="Archer"/>

<addkey="archerUser"value="adminuser"/>

<addkey="archerPassword"value="Password@123"/>

<addkey="httpTimeoutMilliseconds" value="30000" />

<add key="useDefaultCredentials" value="false" />

</appSettings>

DataFeedMonitor.exe.config settings

The following table describes each setting in DataFeedMonitor.exe.config file.

Setting

Description

useSoapAuth The api method used to authenticate to archer. Acceptable values - true/false. If archer instance has sso enabled with manual bypass disabled then use "true". else use "false"

archerBaseUrl

The root URL for the Archer instance from which information is pulled.

cacheFilePath

Path to the location where the cache file will be written. This flat file is used to cache Archer ID values. When the solution is started, values are looked up from the configured Archer instance and stored in the cache file. This enables correctly referenced fields, modules, and other resources to use IDs appropriate to the Archer instance.

cacheFileEncryptionPassphrase

If provided, the cache file is encrypted using this setting as the passphrase, providing security for data at rest.

securityProtocolVersion

This value dictates which security protocol should be used. Options include: SSL3, TLS 1.0, TLS 1.1, and TLS 1.2.

useSslValidation

When set to true, custom validation is used for the SSL certificate. This is necessary when using a self-signed certificate to avoid validation dialogs.

archerInstance

The name of the Archer instance from which information is pulled.

archerUser

The name of the account used to pull information from Archer.

archerPassword

The password for the account used to pull information from Archer.

httpTimeoutMilliseconds

The httpTimeoutMilliseconds provides a configuration setting that enables the user to override the default HTTP timeout of 30,000 milliseconds (30 seconds). This value is in milliseconds and should be set to the number of seconds you want HTTP time out to take * 1000.

useDefaultCredentials This property can be set to true or false. When true, the logged-in user’s credentials can be requested by IIS, if needed. For this application, the value can safely be set to false.

The configuration file also allows you to define monitors, along with other necessary details.

The following is a description of each of these settings.

<sectionname="monitorSection"…– this entry associates a custom configuration section with the assembly that will be used to process that section. This entry should not be modified.

<monitorSection><monitors>…– this section contains configuration information for each individually configured monitor.

<monitor…– each monitor node defines the configuration for a single data feed monitor. The configuration file can contain as many monitors are needed.

Troubleshooting

Configuration File (DataFeedMonitor.exe.config)

  • Ensure the values in the configuration file match your Archer environment.

  • Do not include default.aspx in the Archer URL.

  • Note that the Archer instance name is case sensitive.

  • If you are changing the Archer URL in the config file, ensure that you have deleted the previously used cache file.

  • Ensure that dedicated, active Archer user account credentials are used in the configuration file.

File Transport MonitorOthers:

  • When configuring a file transport monitor, if the directory being monitored is not in the same location where the Data Feed Monitor is running, ensure that you have specified the full path in the “directoryToWatch” parameter. This will be the case when the directory to watch is on a network share, or when the it is not in the same location where the Data Feed Monitor is running. If the folder has security, you can schedule the task in Windows Task Scheduler to run under a privileged account. Or you can just have it run the task under a service account and then grant that account access to the share.

  • If you are running an Archer Record Monitor and the utility is reporting that the criteria are not met, even when you think they should be, ensure that the report that the monitor is watching is a standard report, not a statistics report. If the report is a statistics report, you must configure an Archer Record Statistical Monitor instead. This is because the two reports return different XML schemas, so a specialized monitor is required to correctly parse the XML and count results.

Criteria Not Met message

  • If you are running an Archer Record Monitor and the utility is reporting that the criteria are not met, even when you think they should be, ensure that the report that the monitor is watching is a standard report, not a statistics report. If the report is a statistics report, you must configure an Archer Record Statistical Monitor instead. This is because the two reports return different XML schemas, so a specialized monitor is required to correctly parse the XML and count results.

Certification environment

Date tested: May 2026

Product Name

Version Information

Archer

2025.12