# Qlik Sense (On-Prem)

This article outlines integration with Qlik Sense (On-Prem), enabling efficient metadata management through features such as crawling, delta crawling, report preview, and lineage building (both automatic and manual).

Connectivity to Qlik Sense (On-Prem) is established using **REST APIs** and **WebSocket**. The connector supports **Authentication with Windows** and **Authorization with JWT**, allowing metadata extraction through **service account-based access** and **JWT-enabled virtual proxy** authentication.

<figure><img src="/files/2PLHIdHmFvTPeXUeqVmP" alt=""><figcaption></figcaption></figure>

## Overview

### **Connector Capabilities**

The QlikSense connector supports the following data objects:

<table data-header-hidden><thead><tr><th width="407.75"></th><th></th></tr></thead><tbody><tr><td>Connector Category</td><td>Reporting Tools</td></tr><tr><td>OvalEdge Release Supported</td><td>Release6.3.4 and later</td></tr><tr><td><p>Connectivity</p><p>[How the connection is established with Qlik Sense]</p></td><td>REST APIs and WebSocket</td></tr><tr><td>Verified Qlik Sense (On-Prem) Version</td><td>November 2024 Release</td></tr></tbody></table>

{% hint style="info" %}
The Qlik Sense (On-Prem) connector has been validated with the mentioned "Verified Qlik Sense (On-Prem) Versions" and is expected to be compatible with other supported Qlik Sense (On-Prem) versions. If there are any issues with validation or metadata crawling, please submit a support ticket for investigation and feedback.
{% endhint %}

### Connector Features

| Feature                                                                                                                          | Availability |
| -------------------------------------------------------------------------------------------------------------------------------- | :----------: |
| Crawling                                                                                                                         |       ✅      |
| Delta Crawling                                                                                                                   |       ✅      |
| Profiling                                                                                                                        |       ❌      |
| Query Sheet                                                                                                                      |       ❌      |
| Report Preview                                                                                                                   |       ✅      |
| Auto Lineage                                                                                                                     |       ✅      |
| Manual Lineage                                                                                                                   |       ✅      |
| Secure Authentication via Credential Manager                                                                                     |       ✅      |
| Data Quality                                                                                                                     |       ❌      |
| DAM (Data Access Management)                                                                                                     |       ❌      |
| Bridge                                                                                                                           |       ✅      |
| [Chrome Extension Supported](https://docs.ovaledge.com/home/browser-extension/features-and-operations#view-certification-status) |       ✅      |

### Metadata Mapping

For detailed information about Qlik Sense metadata extraction, including scripts, measures, dimensions, sheets, visual objects, and internal data models, refer to [**Qlik Sense Metadata Extraction**](https://docs.ovaledge.com/connectors/connector-repositories/reporting-tool/qlik-sense/qlik-sense-on-prem/qlik-sense-metadata-extraction)**.**

The following objects are crawled from Qlik Sense (On-Prem) and mapped to the corresponding UI assets.

| Qlik Sense Object | Qlik Sense Attribute      | OvalEdge Attribute | OvaEdge Category | OvalEdge Type      |
| ----------------- | ------------------------- | ------------------ | ---------------- | ------------------ |
| Streams           | stream                    | Report Group       | Report Group     | Domain             |
| Apps              | App                       | Report Group       | ReportGroup      | Domain             |
| Apps              | App                       | Report             | Report           | Presentation Layer |
| Apps              | App description           | source Description | description      |                    |
| Sheet             | Sheet                     | Report             | Report           | Sheet              |
| Sheet             | Sheet description         | Source description | description      |                    |
| Cells             | Cell                      | Report             | Report           | cell type          |
| Cells             | cell description          | source description | description      |                    |
| Measures          | Measure                   | Report Field       | Report Field     | Measure            |
| Measures          | Measure name              | name               | Report filed     | Measure            |
| Measures          | Measure fomula            | formula            | Report field     | Measure            |
| Measures          | Measure description       | description        | Report field     | Measure            |
| Dimensions        | Dimension                 | Report Field       | Report field     | Dimension          |
| Dimensions        | Dimension name            | name               | Report field     | Dimension          |
| Dimensions        | Dimension formula         | formula            | Report Field     | Dimension          |
| Dimensions        | Dimension description     | description        | ReportField      | Dimension          |
| Master Objects    | Master Object             | Report Field       | ReportField      | Master Object      |
| Master Objects    | Master Object name        | name               | ReportField      | Master Object      |
| Master Objects    | Master Object formula     | formula            | ReportField      | Master Object      |
| Master Objects    | Master Object description | description        | ReportField      | Master Object      |
| Variables         | Variable                  | Report Field       | ReportField      | Variable           |
| Variables         | Variable name             | name               | ReportField      | Variable           |
| Variables         | Variable value            | formula            | ReportField      | Variable           |
| Source Code       | Script Info               | Source Code        | SourceCode       | Script             |
| Source Code       | Script content            | code               | SourceCode       | Script             |
| Source Code       | Script name               | sourceCodeName     | SourceCode       | Script             |

## Set up a Connection

### Prerequisites

The following are the prerequisites to establish a connection:

For detailed steps to create a **service account user**, **configure user access**, configure **Admin permissions**, and assign **minimum required security rules** for Authentication with Windows, refer to the [**Access Configuration for Qlik Sense on Windows**](https://docs.ovaledge.com/connectors/connector-repositories/reporting-tool/qlik-sense/qlik-sense-on-prem/access-configuration-for-qlik-sense-on-windows).

For detailed steps to configure **virtual proxy** settings, **JWT certificates**, and **authentication parameters** required for **Authorization with JWT**, refer to the [**JWT Authentication Configuration for Qlik Sense**](https://docs.ovaledge.com/connectors/connector-repositories/reporting-tool/qlik-sense/qlik-sense-on-prem/jwt-authentication-configuration-for-qlik-sense).

#### **Service Account User Permissions**

{% hint style="warning" %}
It is recommended to use a separate service account to establish the connection to the data source, configured with the following minimum set of permissions.
{% endhint %}

{% hint style="info" %}
👨‍💻Who can provide these permissions? These permissions are typically granted by the Qlik Sense administrator, as users may not have the required access to assign them independently.
{% endhint %}

<table><thead><tr><th width="137.18182373046875">Operations</th><th width="150.45452880859375">Objects</th><th>Access Permission</th></tr></thead><tbody><tr><td>Crawling</td><td>Space</td><td>User with View and Edit Access on Generated API Key</td></tr><tr><td>Crawling</td><td>Apps</td><td>User with View and Edit Access on Generated API Key</td></tr><tr><td>Crawling</td><td>Reports</td><td>User with View and Edit Access on Generated API Key</td></tr><tr><td>Crawling</td><td>Sub Reports</td><td>User with View and Edit Access on Generated API Key</td></tr><tr><td>Crawling</td><td>Source Code</td><td>User with View and Edit Access on Generated API Key</td></tr></tbody></table>

### Connection Configuration Steps

{% hint style="warning" %}
Users are required to have the Connector Creator role in order to configure a new connection.
{% endhint %}

1. Log into **OvalEdge**, go to **Administration > Connectors**, click **+ (New Connector)**, search for **Qlik Sense**, and complete the required parameters.

{% hint style="info" %}
Fields marked with an asterisk (\*) are mandatory for establishing a connection.
{% endhint %}

<table><thead><tr><th width="219">Field Name</th><th>Description</th></tr></thead><tbody><tr><td>Connector Type</td><td>By default, "Qlik Sense" is displayed as the selected connector type.</td></tr><tr><td>Type of Server*</td><td>Select QliksenseOnPrem from the dropdown menu.</td></tr><tr><td>Credential Manager*</td><td><p>Select the desired credentials manager from the drop-down list. Relevant parameters will be displayed based on your selection.</p><p>Supported Credential Managers:</p><ul><li>OE Credential Manager</li><li>AWS Secrets Manager</li><li>HashiCorp Vault</li><li>Azure Key Vault</li></ul><p>For more details, click <a href="https://docs.ovaledge.com/connectors/additional-requirements/credential-manager-configuration">here</a>.</p></td></tr><tr><td>License Add Ons</td><td>Select the checkbox for Auto Lineage Add-On to build data lineage automatically.<br>For more details, click <a href="https://docs.ovaledge.com/connectors/introduction-to-connectors/setup-and-connectivity/license-types-and-add-ons">here</a>.</td></tr><tr><td>Connector Name*</td><td><p>Enter a unique name for the Qlik Sense (On-Prem) connection              </p><p>(Example: "Qlik Sense_test").</p></td></tr><tr><td>Connector Environment</td><td>Select the environment (Example: PROD, STG) configured for the connector.<br>For more details, click <a href="https://docs.ovaledge.com/connectors/introduction-to-connectors/setup-and-connectivity/prerequisites#connector-environment">here</a>.</td></tr><tr><td>Connector Description</td><td>Enter a brief description of the connector.</td></tr><tr><td>Authentication*</td><td><p>The following two types of authentication are supported for Qlik Sense (On-Prem):</p><ul><li>Authentication with Windows</li><li>Authorization with JWT</li></ul></td></tr></tbody></table>

{% tabs %}
{% tab title="Authentication with Windows" %}

<table><thead><tr><th width="220.25">Field Name</th><th>Description</th></tr></thead><tbody><tr><td>Connection url*</td><td>Enter the Hostname or IP address of the Qlik Sense (On-Prem) (Example: xxxx-sqlserver.xxxx4ijtzasl.xx-xxx-1.xxx.xxxx.com or 1xx.xxx.1.xx).</td></tr><tr><td>Qlik Sense User Id*</td><td>Provide the service account User ID with required permissions to connect to Qlik Sense.</td></tr><tr><td>Qlik Sense User Password*</td><td>Enter the password associated with the Qlik Sense service account.</td></tr><tr><td>Alias Host Name</td><td>Enter the alias host name of the Qlik Sense (On-Prem) server used for establishing connectivity.</td></tr><tr><td>Logs Path</td><td>Enter the directory path where Qlik Sense logs will be stored for monitoring and troubleshooting.</td></tr><tr><td>Proxy Enabled*</td><td>Select Yes if a proxy server is required for connectivity, otherwise select No.</td></tr><tr><td>QVDs Path</td><td>Provide the path where QVD files are stored for metadata crawling.</td></tr><tr><td>Xml files generation path</td><td>Enter the path created in the OvalEdge server to generate metadata files.</td></tr><tr><td>Path to store QVDS</td><td>Enter path to save extension-modified QVD files for later use.</td></tr><tr><td>QVS Path</td><td>Enter the directory path where QVS script files are located.</td></tr><tr><td>Certificate Path</td><td>Enter the path where the Qlik Sense certificates are stored for secure authentication.</td></tr><tr><td>Certificates Password</td><td>Enter the password associated with the Qlik Sense certificates.</td></tr><tr><td>User Directory</td><td>Enter the Qlik Sense user directory name configured in the QMC (Qlik Management Console).</td></tr><tr><td>Crawl Streams</td><td>Select <strong>Y</strong> to enable crawling of Qlik Sense streams, or <strong>N</strong> to skip them.</td></tr><tr><td>Exclude UnPublished Apps(Y/N)</td><td>Select Y to exclude unpublished apps during crawling, or N to include them.</td></tr><tr><td>Exclude UnPublished Sheets(Y/N)</td><td>Select Y to exclude unpublished sheets during crawling, or N to include them.</td></tr></tbody></table>
{% endtab %}

{% tab title="Authorization with JWT" %}

<table><thead><tr><th width="220.25">Field Name</th><th>Description</th></tr></thead><tbody><tr><td>Connection url*</td><td>Enter the Hostname or IP address of the Qlik Sense (On-Prem) (Example: xxxx-sqlserver.xxxx4ijtzasl.xx-xxx-1.xxx.xxxx.com or 1xx.xxx.1.xx).</td></tr><tr><td>JWT Token*</td><td>Enter the JSON Web Token (JWT) required for authentication with Qlik Sense.</td></tr><tr><td>Prefix*</td><td>Enter the user directory prefix associated with the JWT token for successful authentication.</td></tr><tr><td>Alias Host Name</td><td>Enter the alias host name of the Qlik Sense (On-Prem) server used for establishing connectivity.</td></tr><tr><td>Logs Path</td><td>Enter the directory path where Qlik Sense logs will be stored for monitoring and troubleshooting.</td></tr><tr><td>Proxy Enabled</td><td>Select Yes if a proxy server is required for connectivity, otherwise select No.</td></tr><tr><td>QVDs Path</td><td>Provide the path where QVD files are stored for metadata crawling.</td></tr><tr><td>Xml files generation path</td><td>Enter the path created in the OvalEdge server to generate metadata files by the node server.</td></tr><tr><td>Path to store QVDS</td><td>Enter path to save extension-modified QVD files for later use.</td></tr><tr><td>QVS Path</td><td>Enter the directory path where QVS script files are located.</td></tr><tr><td>Certificate Path</td><td>Enter the path where the Qlik Sense certificates are stored for secure authentication.</td></tr><tr><td>Certificates Password</td><td>Enter the password associated with the Qlik Sense certificates.</td></tr><tr><td>User Directory</td><td>Enter the Qlik Sense user directory name configured for authentication.</td></tr><tr><td>Crawl Streams</td><td>Select Y to enable crawling of Qlik Sense streams, or <em>N</em> to skip them.</td></tr><tr><td>Exclude UnPublished Apps(Y/N)</td><td>Select Y to exclude unpublished apps during crawling, or N to include them.</td></tr><tr><td>Exclude UnPublished Sheets(Y/N)</td><td>Select Y to exclude unpublished sheets during crawling, or N to include them.</td></tr><tr><td>Is Virtual Proxy Enabled(Y/N)</td><td>Select Y if a virtual proxy is configured in Qlik Sense, otherwise select N.</td></tr></tbody></table>
{% endtab %}
{% endtabs %}

**Default Governance Roles**

<table data-header-hidden><thead><tr><th width="221.27276611328125"></th><th></th></tr></thead><tbody><tr><td>Default Governance Roles*</td><td>Select the appropriate users or teams for each governance role from the drop-down list. All users configured in the security settings are available for selection.</td></tr></tbody></table>

**Admin Roles**

<table data-header-hidden><thead><tr><th width="218.54547119140625"></th><th></th></tr></thead><tbody><tr><td>Admin Roles*</td><td>Select one or more users from the dropdown list for Integration Admin and Security &#x26; Governance Admin. All users configured in the security settings are available for selection.</td></tr></tbody></table>

**Bridge**

<table data-header-hidden><thead><tr><th width="219.45452880859375"></th><th></th></tr></thead><tbody><tr><td>Select Bridge*</td><td><p>If applicable, select the bridge from the drop-down list.</p><p>The drop-down list displays all active bridges that have been configured. These bridges facilitate communication between data sources and the system without requiring changes to firewall rules.</p></td></tr></tbody></table>

2. After entering all connection details, the following actions can be performed:
   1. Click **Validate** to verify the connection.
   2. Click **Save** to store the connection for future use.
   3. Click **Save & Configure** to apply additional settings before saving.
3. The saved connection will appear on the Connectors home page.

## Manage Connector Operations

### Crawl

{% hint style="warning" %}
To perform crawl operations, users must be assigned the Integration Admin role.
{% endhint %}

The **Crawl/Profile** button allows you to select one or more Report Groups for crawling.&#x20;

1. Navigate to the Connectors page and click **Crawl/Profile**.
2. Select the report groups to be crawled.
3. The **Crawl** option is selected by default.
4. Click **Run** to collect metadata from the connected source and load it into the **Data Catalog.**
5. After a successful crawl, the information appears in the **Data Catalog > Report / Report Column** tab.

The Schedule checkbox allows automated crawling at defined intervals, from a minute to a year.

1. Click the **Schedule** checkbox to enable the Select **Period drop-down**.
2. Select a time interval for the operation from the drop-down menu.
3. Click **Schedule** to initiate metadata collection from the connected source.
4. The system will automatically execute the selected **crawl operation** at the scheduled time.

#### Other Operations

The Connectors page provides a centralized view of all configured connectors, along with their health status.

#### Managing connectors includes:

* **Connector Health:** Displays the current status of each connector using a **green** icon for active connections and a **red** icon for inactive connections, helping to monitor the connectivity with data sources.
* **Viewing**: Click the **Eye** icon next to the connector name to view connector details, including report, sub report, report columns, and codes.

**Nine Dots Menu Options:**

To view, edit, validate, build lineage, configure, or delete connectors, click on the **Nine Dots** menu.

* **Edit Connector**: Update and revalidate the data source.
* **Validate Connector**: Check the connection's integrity.
* **Settings**: Modify connector settings.
  * **Crawler**: Configure data extraction.
  * **Access Instructions**: Add notes on how data can be accessed.
  * **Business Glossary Settings**: Manage term associations at the connector level.
  * **Others**: Configure notification recipients for metadata changes.
* **Build Lineage:** Automatically build data lineage using source code parsing.
* **Delete Connector:** Remove a connector with confirmation.

For more details on connector settings, click [here](https://docs.ovaledge.com/connectors/introduction-to-connectors/setup-and-connectivity/connector-settings).

## Connectivity Troubleshooting

If incorrect parameters are entered, error messages may appear. Ensure all inputs are accurate to resolve these issues. If issues persist, contact the assigned support team.

<table><thead><tr><th width="92.03030395507812">Sl. No.</th><th width="200.939453125">Error Message</th><th>Error Description and Resolution</th></tr></thead><tbody><tr><td>1</td><td>SSL validation failed due to incorrect certificate configuration</td><td><p><strong>Description:</strong> Connector validation failed because the SSL certificate path configured in <code>server.xml</code> was outdated or incorrect.</p><p> <strong>Resolution:</strong> </p><ul><li>Update the certificate path in the <code>server.xml</code> configuration file. </li><li>Restart the OvalEdge service after updating the configuration.</li><li>Revalidate the connector to confirm successful SSL communication.</li></ul></td></tr><tr><td>2</td><td>PKIX path building failed during Bridge validation</td><td><p><strong>Description:</strong> Bridge validation failed due to missing or invalid SSL certificate configuration, resulting in a PKIX path building error. </p><p><strong>Resolution:</strong> </p><ul><li>Configure the correct SSL certificate path on the OvalEdge server.</li><li>Verify that the certificate is valid and accessible by the Bridge service.</li><li>Revalidate the connector after updating the certificate configuration.</li></ul></td></tr><tr><td>3</td><td>SSL trust validation failed for Qlik Sense On-Prem connector</td><td><p><strong>Description:</strong> Connector communication failed because the required SSL certificates were not available or trusted on the Bridge instance.</p><p><strong>Resolution:</strong></p><ul><li>Import the required certificates into the Bridge truststore.</li><li>Verify that all certificates are properly trusted by the environment.</li><li>Revalidate the connector after updating the truststore configuration.</li></ul></td></tr><tr><td>4</td><td>Engine connectivity failed due to certificate validation error</td><td><p><strong>Description:</strong> The Qlik Sense engine connection failed because of an SSL certificate validation issue causing a PKIX path building error.</p><p><strong>Resolution:</strong></p><ul><li>Update the SSL certificate configured on the server.</li><li>Ensure the certificate is correctly installed and valid.</li><li>Coordinate with the DevOps team to apply the required certificate updates.</li></ul></td></tr><tr><td>5</td><td>403 Forbidden error during engine connectivity validation</td><td><p><strong>Description:</strong> Connector validation failed with a <code>403 Forbidden</code> error because the Qlik Sense server was unavailable or unreachable during validation.</p><p><strong>Resolution:</strong></p><ul><li>Verify that the Qlik Sense server is up and running.</li><li>Ensure the server is reachable from the OvalEdge environment.</li><li>Retry connector validation after confirming server availability.</li></ul></td></tr></tbody></table>

## Additional Information

<table><thead><tr><th width="233.0909423828125">Configuration</th><th>Details</th></tr></thead><tbody><tr><td>Qlik Sense On-Premises Certificates</td><td>For Qlik Sense On-Premises connections, add the required Qlik certificates to the Java keystore (<code>cacerts</code>) before validating the connection.</td></tr></tbody></table>

***

Copyright © 2026, OvalEdge LLC, Peachtree Corners GA USA


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ovaledge.com/connectors/connector-repositories/reporting-tool/qlik-sense/qlik-sense-on-prem.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.