Chapter 18. The awx-manage Utility Use the awx-manage utility to access detailed internal information of automation controller. Commands for awx-manage must run as the awx user only. 18.1. Inventory Import awx-manage is a mechanism by which an automation controller administrator can import inventory directly into automation controller, for those who cannot use Custom Inventory Scripts. To use awx-manage properly, you must first create an inventory in automation controller to use as the destination for the import. For help with awx-manage , run the following command: awx-manage inventory_import [--help] The inventory_import command synchronizes an automation controller inventory object with a text-based inventory file, dynamic inventory script, or a directory of one or more, as supported by core Ansible. When running this command, specify either an --inventory-id or --inventory-name , and the path to the Ansible inventory source ( --source ). awx-manage inventory_import --source=/ansible/inventory/ --inventory-id=1 By default, inventory data already stored in automation controller blends with data from the external source. To use only the external data, specify --overwrite . To specify that any existing hosts get variable data exclusively from the --source , specify --overwrite_vars . The default behavior adds any new variables from the external source, overwriting keys that already exist, but preserving any variables that were not sourced from the external data source. awx-manage inventory_import --source=/ansible/inventory/ --inventory-id=1 --overwrite Note Edits and additions to Inventory host variables persist beyond an inventory synchronization as long as --overwrite_vars is not set. 18.2. Cleanup of old data awx-manage has a variety of commands used to clean old data from automation controller. Automation controller administrators can use the automation controller Management Jobs interface for access or use the command line. awx-manage cleanup_jobs [--help] This permanently deletes the job details and job output for jobs older than a specified number of days. awx-manage cleanup_activitystream [--help] This permanently deletes any Activity stream data older than a specific number of days. 18.3. Cluster management For more information on the awx-manage provision_instance and awx-manage deprovision_instance commands, see Clustering . Note Do not run other awx-manage commands unless instructed by Ansible Support. 18.4. Token and session management Automation controller supports the following commands for OAuth2 token management: create_oauth2_token revoke_oauth2_tokens cleartokens expire_sessions clearsessions 18.4.1. create_oauth2_token Use the following command to create OAuth2 tokens (specify the username for example_user ): USD awx-manage create_oauth2_token --user example_user New OAuth2 token for example_user: j89ia8OO79te6IAZ97L7E8bMgXCON2 Ensure that you provide a valid user when creating tokens. Otherwise, an error message that you attempted to issue the command without specifying a user, or supplied a username that does not exist, is displayed. 18.4.2. revoke_oauth2_tokens Use this command to revoke OAuth2 tokens, both application tokens and personal access tokens (PAT). It revokes all application tokens (but not their associated refresh tokens), and revokes all personal access tokens. However, you can also specify a user for whom to revoke all tokens. To revoke all existing OAuth2 tokens use the following command: USD awx-manage revoke_oauth2_tokens To revoke all OAuth2 tokens and their refresh tokens use the following command: USD awx-manage revoke_oauth2_tokens --revoke_refresh To revoke all OAuth2 tokens for the user with id=example_user (specify the username for example_user ): USD awx-manage revoke_oauth2_tokens --user example_user To revoke all OAuth2 tokens and refresh token for the user with id=example_user : USD awx-manage revoke_oauth2_tokens --user example_user --revoke_refresh 18.4.3. cleartokens Use this command to clear tokens which have already been revoked. For more information, see cleartokens in Django's Oauth Toolkit documentation. 18.4.4. expire_sessions Use this command to terminate all sessions or all sessions for a specific user. Consider using this command when a user changes role in an organization, is removed from assorted groups in LDAP/AD, or the administrator wants to ensure the user can no longer execute jobs due to membership in these groups. USD awx-manage expire_sessions This command terminates all sessions by default. The users associated with those sessions are logged out. To only expire the sessions of a specific user, you can pass their username using the --user flag (replace example_user with the username in the following example): USD awx-manage expire_sessions --user example_user 18.4.5. clearsessions Use this command to delete all sessions that have expired. For more information, see Clearing the session store in Django's Oauth Toolkit documentation. For more information on OAuth2 token management in the UI, see the Applications section of the Automation controller User Guide. 18.5. Analytics gathering Use this command to gather analytics on-demand outside of the predefined window (the default is 4 hours): USD awx-manage gather_analytics --ship For customers with disconnected environments who want to collect usage information about unique hosts automated across a time period, use this command: awx-manage host_metric --since YYYY-MM-DD --until YYYY-MM-DD --json The parameters --since and --until specify date ranges and are optional, but one of them has to be present. The --json flag specifies the output format and is optional.

Commands:
awx-manage inventory_import [--help]
awx-manage inventory_import --source=/ansible/inventory/ --inventory-id=1
awx-manage inventory_import --source=/ansible/inventory/ --inventory-id=1 --overwrite
awx-manage cleanup_jobs [--help]
awx-manage cleanup_activitystream [--help]
awx-manage create_oauth2_token --user example_user New OAuth2 token for example_user: j89ia8OO79te6IAZ97L7E8bMgXCON2
awx-manage revoke_oauth2_tokens
awx-manage revoke_oauth2_tokens --revoke_refresh
awx-manage revoke_oauth2_tokens --user example_user
awx-manage revoke_oauth2_tokens --user example_user --revoke_refresh
awx-manage expire_sessions
awx-manage expire_sessions --user example_user
awx-manage gather_analytics --ship
awx-manage host_metric --since YYYY-MM-DD --until YYYY-MM-DD --json