Service manual

Access Logging
Chapter 8 Tuning Logging 141
Refer to the Sun ONE Directory Server Reference Manual for details concerning
individual configuration attributes.
Sun ONE Directory Server Resource Kit documentation covers extracting
information from the access log. Refer to “Downloading Directory Server Tools,”
on page 12, formore information.
nsslapd-accesslog-logging-enabled Enables and disables access logging.
Turn off (default is on) for maximum performance.
If the deployment requires that access logging be
enabled, set nsslapd-accesslog-level to the
lowestacceptable setting,and put the accesslog on its
own disk or disk subsystem. Rotate the access log
frequently (each day or week) and use
nsslapd-accesslog-logmaxdiskspace and
nsslapd-accesslog-logminfreediskspace to
manage disk space use.
nsslapd-accesslog-logmaxdiskspace Specifies maximum disk space that all access logs
(current and rotated logs) may consume.
Set this value below the total amount of disk space
dedicated to access logging.
If using the same disk for audit, access, and error
logging, ensure sufficient disk space for all three.
Iftheaccesslogresidesonitsowndisk,setthis
variable to the size of the disk.
nsslapd-accesslog-logminfreediskspace Specifies minimum free disk space allowed beforeold
logs are purged.
When the amount of free disk space falls below the
value specified on this attribute, the oldest access logs
are deleted until enough disk space is freed to
correspond to the setting for this attribute. If the
access logs cannot be written because the disk is full,
the server shuts down.
Table 8-2 Tuning Recommendations for Access Logging (Continued)
Configuration Attribute (on dn: cn=config) Short Description and Tuning Recommendations