Reveille for Box — the full technical overview.
Every pre-configured test, dashboard metric, and User Analytics capability Reveille ships for Box. Published in full, no form required.
Prefer the formatted document? The PDF mirrors this page exactly.
What Reveille observes in Box
Reveille for Box provides broad coverage beyond traditional web monitoring options to deliver active monitoring of Box content management service levels and user activity. Reveille for Box gathers user operating performance, detects abnormal Box user behaviors or application access, betters the Box user experience understanding, and provides granular intraday Box threshold-based metrics for real-time management decision making. The Reveille Cloud Collectors reside behind the corporate firewall to collect data on the Box experience - there is no need to expose Box access credentials to Reveille Software or a separate 3rd party management service or entity. Reveille quickly identifies possible Box service levels issues (where is the issue - the ISP, is it our network, is it our Box platform app?) and detects possible improper access (why do we have users from that geographic location, why are there so many logins being attempted in a short time, why does this user download so many files?). The Reveille server, which processes the Reveille Cloud Collector data, can reside either on premises or in the cloud. Reveille dashboards and reports can be saved directly to a Box folder with a click or as part of scheduled email distribution. Box Relay can then route the Box dashboard metrics for review and discussion.
As Box can be used in conjunction with other common Reveille supported CSP's (content services platforms) such as IBM, OpenText, Microsoft, etc., Reveille can uniquely provide an overall content performance and security view of the complete ECM/CSP environment - be it cloud based on on-premises ECM solutions. The Reveille platform offers AI machine learning (ML) algorithms to predict dynamic thresholds for reduced alerts from workload variations. The Reveille platform supports the model context protocol (MCP) for communication with AI assistants and AI agents.
Reveille for Box can be further extended using Reveille infrastructure wizards to provide additional visibility across related Box application integrations - be it database (SQL Wizard), REST based applications or WSDL based services, file movement (File Access wizard for UNC/FTP/SFTP directories), and server (PowerShell/WMI/Performance Counters for Windows) component testing capabilities. Any custom ASP.NET based component can be added to a Reveille monitor and leverage all Reveille core functionality.
Every pre-configured test, by category
These are the tests Reveille ships out of the box for Box. Supported: Box Business Plus, Enterprise, or Enterprise Plus plan types.
Box service reachability and network path
- Check Box service status
- Check Box trace route path
- Check Box can be pinged
End-user content operations in Box
- Create Folder
- Upload File
- Download File
- Add Comment
- Delete Comment
- Delete File
- Delete Folder
Service-account content operations in Box
- Create Folder
- Upload File
- Download File
- Add Comment
- Delete Comment
- Delete File
- Delete Folder
Suspicious access and file activity patterns
- Check Delete File Transactions
- Check Failed Transactions
- Check Suspicious Transactions
- Check Different User Same IP Address
- Check Same User Different IP Address
- Check File Access Count
- Check File Access Count By Location
- Check File Accessed By User
Box dashboard metrics
Example metric capabilities
- Tracking Box operating performance
- Tracking Box service levels from key locations
- Tracking Box user activity
- Tracking Box suspicious activity
Out-of-the-box metric comparisons
- Maximum or Minimum
- Numeric Range
- Percentage Change
- Average
- Dynamic Thresholds from Machine Learning Forecast
- Change in Value
- Number of Occurrences
- Last N Times
- Visual Basic (VB) .NET expressions
Box User Analytics
Reveille gathers this information through patented collectors.
- Continuously observe the actual based user experience from your Box investments.
- Communicate user activity and user adoption information through dashboards, reports and notification processes.
- Rapidly identify user response time service level issues.
- Detect suspicious or abnormal user behavior indicating a possible content access breach from insider threats.
- Reduce mean time to threat detection and time to respond with leading endpoint detection solution integration options such as Microsoft Defender for EndPoint.
Reveille Box Configuration
Reveille for Box uses the Reveille Cloud Collector to gather data from/to Box. Box data is collected either locally or remotely and saved in an xml file that is then used by a Reveille monitor. If the data is collected remotely, then it is sent to the Reveille Server through encrypted web services. The data is compressed and optionally encrypted during the transfer to the Reveille server. The Reveille Cloud Collector:
- Is a cloud friendly (no additional network ports to open for communicating with the Reveille server)
- Uses a small footprint (single Windows service with no local database or app server)
- Reduces network latency and log file size impact (Collector located near or at desired location)
- Maintain and administer from Reveille server (located in cloud or on-premises)
- The Reveille Cloud Collector uses Box OAuth 2.0 with JWT (JSON Web Tokens) authentication flow. The Box developers console quickly can generate the required application config.json file. This file is unique for each Box enterprise. Next the Box Admin console is used to enable Reveille as a custom application. To enable this Box configuration setup requires either the Box Business Plus, Enterprise, or Enterprise Plus plan type.
- Additional configuration permits the conditional or automatic disabling of a Box user when possible suspicious user activity is detected by Reveille.
Box Collector Status
Reveille continuously verifies the remote Reveille Cloud Collector system status and alerts if the Reveille Cloud Collector is not operating nor transferring information back to the Reveille server.
- Reveille Box Cloud Collectors gather Box user activity and suspicious behavior data.
- Box Platform Collectors verify Box content access performance and service levels.
- Reveille Collectors send data to the Reveille server for data processing, threshold analysis, metric analytics evaluation, and alert notification.
Box Groups
Reveille grouping provides a way to aggregate Reveille Monitors for Box into logical groups based upon user-defined criteria, such as geographic location, company, function, and so on.
- Each business view can then be secured at individual group levels using Windows Domain security.
- This feature enhances the communication of application status and service levels using relevant business semantics or terminology.
What Box teams use Reveille for
How can we reduce the amount for manual observation / execution of manual checklists for monitoring Box content access from different locations?
Reveille eliminates Box application ‘babysitting’ — the observing, tracking, and communicating done by help desk or DevOps teams. It also reduces the time spent opening incidents after the fact, ensuring incidents are historically tracked.
How can we know who accessed what document from what Box folder and when? How can we know when abnormal access has taken place?
Reveille captures the actual Box user activity for an enterprise, detailing who accessed what files during what time. That record assists with audit, compliance, and capacity planning reviews, and it supports detecting abnormal security user access patterns.
How can we reduce the MTTR (Mean Time To Resolution) and ‘after the fact’ group problem determination meetings/conference calls?
Reveille proactively communicates degrading conditions when they happen. That reduces surprise impacts causing bridge calls that extend manual recovery workflows.
We need to collect of key troubleshooting data during the critical moments after an event is detected.
Reveille collects information that is necessary for troubleshooting issues that is often challenging to obtain manually after the fact.
How can we objectively measure how the Box application environment is performing? How can we have a baseline?
Reveille reports are created that answer questions like: How did we do today? This week or month? How are our KPI’s? Examples include dashboard metrics for Box content activity, dashboard metrics for Box content performance, and dashboard metrics for Box suspicious user behavior.
How can we implement quickly and leverage best practice monitoring?
Reveille has a large amount of “out of the box” components for Box, and Reveille’s Box monitor template jumpstarts monitor creation. The Reveille implementation team has deep content services experience.
How can we plan our Box license needs to handle user growth?
Reveille dashboard metrics gather baselines of Box operating performance. Reveille User Analytics objectively understands Box user transaction volumes, ‘hot’ content, download activity, and content access patterns.
We need to spend more time on new application delivery and less time on production support in a constrained resource environment.
The Reveille solution decreases the amount of time spent supporting Box applications. Customers typically see a reduced number of support tickets for ECM applications and a shortened MTTR for remaining, legitimate application issues, and coordination with support resources is greatly enhanced.
We need a Box application monitoring tool that does not require us learning each ECM/CSP API set, heavy customer ‘integration’ and maintenance, and keeps pace with our ECM/CSP platform advances.
Reveille also works ‘out of the box’ with many ECM/CSP’s such as IBM FileNet P8, IBM CMOD Multiplatforms, IBM Datacap, OpenText Documentum, OpenText Intelligent Capture, Kofax, Microsoft SharePoint, and maintains currency with Box SDK interfaces. Reveille Software primary focus is content systems application management, user analytics, and detecting content access breaches.
Where this fits in your stack
Reveille for Box, in conjunction with other Reveille CSP focused tests, deliver unmatched, comprehensive monitors to track, diagnose, repair, and report the complete CSP operational environment - with Box specific metrics and user behavior visibility. Reveille's agentless approach provides controlled capabilities beyond other agent-based techniques focused just on transaction segment response time. By adding Reveille User Analytics functionality to extend the Reveille platform core, Reveille delivers monitoring of Box user activity to detect suspicious content access. Reveille for Box integrates with existing ITOM platforms (such as Splunk) and incident management systems (such as ServiceNow) to extend your existing IT investments.
See also Reveille for Box and the success story.
You’ve seen every test. Now see them against your environment.
A Reveille engineer will walk your Box estate, identify the highest-value monitors to deploy first, and outline a proof-of-value timeline.
Questions about our tests and metrics? kfox@reveillesoftware.com