Show TOC

 Directory Server Access LogLocate this document in the navigation structure

Definition

The directory server access log records the duration and type of requests made to the directory server configured as data source for the user management engine (UME).

Use

You can configure the UME to log access to your LDAP directory server. This enables you to monitor how long different types of searches take to optimize or troubleshoot directory server access.

To enable the directory server access log file, set the indicator Record LDAP Access. For more information, see Configuring the UME to Use an LDAP Directory as Data Source .

Caution

This log does not have a maximum file size. Disable the log when you no longer need it.

To view the log file, use any text editor.

Structure

When enabled, the UME creates the directory server access log file, sapum.access.audit , in the following location:

<drive>:\usr\sap\<SID>\<instance>\j2ee\cluster\server<n>

When you start the SAP NetWeaver Application Server (AS) Java, the system checks for the existence of a previous log. If a log exists, the system appends a time stamp to the file name and creates a new log file.

Description of Log File Entries

Field Description

Time stamp

Time and date the log entry was made.

Request type

search or read , including the time in seconds since Jan 1, 1970.

Request parameter

For a search request, the parameter includes the base path where the search starts in the directory server structure and any search filter applied.

For a read request, the parameter include the attributes to be read.

Request duration

The duration of the request in milliseconds.

Integration

You can also monitor the LDAP connection pool. For more information, see Directory Server Connection Pool Log .

Example

Below is an example of the log output for a search request:

Mon Dec O9 10:07:32




 CET 2005-12-05 performSimpleSearch: ldap access at 1133773652735       with search base:       searchfilter(&(objectclass=user)(samaccountname=administrator)) Mon Dec 05 10:07:32


 CET 2005 performSimpleSearch returning from ldap after:6 ms