NAME | Synopsis | Description | Options | Extended Description | Examples | Exit Status | Attributes
install-path/dsrk6/bin/logconv [options] logfile...
The logconv command analyzes Directory Server access logs, specified as the logfile argument to the command, to extract usage statistics and count occurrences of significant events.
As the logconv command depends on the content of the access logs, output depends on the quantity of information present in the access logs. Refer to the Directory Server documentation for instructions on how adjust how much information Directory Server writes to the access logs.
The user running the logconv command must have at least read access to the Directory Server log files.
The logconv command ignores log files named access.rotationinfo.
The logconv command supports the following options.
Options specified here without a preceding dash (-) may be specified in any order, but must be specified together as a single option such as -abcefgijlnrtux.
Write statistics on client activity based on the number of operations to the specified file.
This option overrides the use of options in the list -abcefgijlnrtux.
Write statistics on client activity based on the number of connections to the specified file.
This option overrides the use of options in the list -abcefgijlnrtux.
List the most frequently used base DNs.
Write statistics on the most frequently used bind DNs to the specified file.
This option overrides the use of options in the list -abcefgijlnrtux.
List the most frequently used bind DNs.
Write statistics on the number of operations performed per connection to the specified file.
This option overrides the use of options in the list -abcefgijlnrtux.
List the number of occurrences for each type of connection code.
Generate a field-delimited, formatted report when using the -B or -R options.
You can import this report into a spreadsheet application.
Use the specified DN to identify operations performed by Directory Manager.
Default is cn=Directory Manager.
Generate statistics on occurrences of the specified error code.
This option overrides the use of options in the list -abcefgijlnrtux.
List the most frequently occurring error and return codes.
List the bind DNs with the most failed binds due to invalid credentials.
List details of all abandoned operations.
Display the usage message.
Use the specified interval for reporting when generating a report using the -B or -R options. The interval may be MINUTE, HOUR, DAY, or MONTH.
List the IP addresses and connection codes for clients opening the most connections.
This option helps detect clients that may attempt to compromise security.
Generate recommendations based on the data collected.
List the most frequently occurring search filters.
Resolve IP addresses to host names.
Using this option may impact performance.
List the largest and most frequent number of entries per result (nentries).
Write a report on pending operations to the specified file.
This option overrides the use of options in the list -abcefgijlnrtux.
Write a report on operations to the specified file.
This option overrides the use of options in the list -abcefgijlnrtux.
List the most frequently requested attributes.
Return the specified number of results per category.
Default is 20.
List the longest and most frequent operation times (etimes).
List details about unindexed searches.
Enable verbose output. Same as -abcefgijlnrtux.
Display version information and exit.
Exclude operations originating from clients with the specified IP address, for example when repeated health check operations come from a load balancer.
Repeat this option to exclude multiple addresses.
List the number and OID of all extended operations requested.
The logconv command generates three types of statistics useful for monitoring Directory Server use and optimizing Directory Server configuration:
Counts of events such as total binds and total searches performed
Lists of the most frequently occurring parameters in LDAP requests
For example, the logconv command generates lists of the top ten bind DNs, base DNs, filter strings, and attributes returned. As generating such lists is computation intensive, you must explicitly request their generation using the appropriate options.
Counts of occurrences for error codes such as those defined in <ldap.h>
Performance of the logconv command is affected by the volume of data in the access logs. To ensure acceptable performance, avoid running the logconv command on more than 1 GB of access logs at a time.
Furthermore, some of the data extracted depends on connection and operation numbers reset when you restart Directory Server. To obtain the most accurate counts, avoid analyzing logs that span a server restart.
Examples in this section use the following conventions:
The logconv command is found in a directory present in the PATH used for the examples.
Directory Server stores access logs in /var/ds/logs.
The current user has read access to the logs.
The following command generates statistics on client connections, binds, abandoned operations, and unindexed searches, and generates recommendations for performance improvements and further investigation:
$ logconv -ibgju /var/ds/logs/access* |
The following command counts the number of times clients attempted to bind with invalid credentials, error 49 LDAP_INVALID_CREDENTIALS, resolving client IP addresses to host names:
$ logconv -N -E 49 /var/ds/logs/access* |
The following command generates a field delimited report on operations, suitable for import into a spreadsheet application:
$ logconv -DELIM -R report.txt /var/ds/logs/access $ cat report.txt Year|Month|Day|Time|Operations|Results|Performance|Connections| Searches|Modifications|Adds|Deletes|Modrdns|Binds|Extended Ops|Compares 2006|Apr|05|07:51:04|18119|18129|100.1%|10|0|0|0|0|0|18119|0|0 2006|Apr|05|08:09:30|12875|12883|100.1%|12878|0|0|0|0|0|12875|0|0 |
Long lines in this example have been wrapped for readability.
The logconv command exits with status 0 if it completes successfully. Otherwise it exits with non-zero status.
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE |
ATTRIBUTE VALUE |
---|---|
Availability |
Zip distribution only |
Stability Level |
Evolving |
NAME | Synopsis | Description | Options | Extended Description | Examples | Exit Status | Attributes