SPML Logging

Identity Manager can be configured to log SPML requests and responses. If Identity Manager receives a request or response that is known to the system, it writes pertinent information about the request to SPML log file. If it receives an unrecognized request, then it logs all the available information.

The SPML log is configured by editing the SPML configuration object. You cannot manage SPML logging from the administrator interface.

Access Log Configuration

Edit the following paramters in the SPML configuration object to enable and maintain logging.

• AccessLogPath. Specifies the full path to the active SPML access log file.

• AccessLogMaxSize. Specifies the maximum size, in kilobytes, of the active access log can grow to before it is archive. A value of 0 indicates there is no maximum file size.

• AccessLogMaxArchiveFiles. Specifies the maximum number of archive log files to preserve. A value of –1 indicates there is no limit. A value of 0 indicates to keep cycling the active log.

Access Log Example

The following sample shows a variety of logged requests.

# ListTargetsRequest
2009-02-03T01:16:12.083Z ListTargetsRequest requestID='rid[9964]' protocol='v2' 
executionMode='synchronous' data='(accountId=Configurator,password=...)'
2009-02-03T01:16:12.089Z ListTargetsResponse requestID='rid[9964]' protocol='v2' 
status='success' errorCode='null' targets='((spml2Person(objectclass(required=true),
accountId(required=true),credentials(required=true),firstname(required=null),
lastname(required=null),emailAddress(required=null))))' etime=40

# AddRequest
2009-02-03T01:16:12.582Z AddRequest requestID='null' protocol='v2' 
executionMode='null' returnData='everything' 
data='everything'2009-02-03T01:16:13.154Z 
AddResponse requestID='Gen7951-1233623773152' protocol='v2' status='success' 
errorCode='null' psoId='spml2Person:#ID#E413:20EBCB32F11:783B7992-:46D19511056F6FB3' 
etime=578

# LookupRequest
2009-02-03T01:16:15.024Z LookupRequest requestID='null' protocol='v2'
 executionMode='synchronous' returnData='everything'
2009-02-03T01:16:15.130Z LookupResponse requestID='Gen7953-1233623775127' protocol='v2' 
status='success' errorCode='null' 
psoId='spml2Person:#ID#8092:20EBCB32F11:783B7992-:46D19511056F6FB3' etime=112

# ModifyRequest
2009-02-03T01:16:15.253Z ModifyRequest requestID='null' protocol='v2' executionMode='null' 
returnData='everything' psoId='maurelius' modifications='(lastname=(Antoninus))'
2009-02-03T01:16:15.915Z ModifyResponse requestID='Gen7954-1233623775912' protocol='v2' 
status='success' errorCode='null' 
psoId='spml2Person:#ID#8092:20EBCB32F11:783B7992-:46D19511056F6FB3' etime=668