Configuring Logs for Directory Server

Many aspects of the log files can be modified. Some examples include the following:

• Enabling the audit log

  Unlike the access log and the errors log, the audit log is not enabled by default. For information, see To Enable the Audit Log.

• General settings

  • Enabling or disabling logging

  • Enabling or disabling log buffering

  • Log file location

  • Verbose logging

  • Log level

• Log rotation settings.

  • Creation of new logs at regular time intervals

  • Maximum log file size before a new log file is created

• Log deletion settings

  • Maximum file age before deletion

  • Maximum file size before deletion

  • Minimum free disk space before deletion

The following procedures describe how to modify log configuration and how to enable the audit log.

To Modify Log Configuration

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. View the settings for the log that you want to modify.

   $ dsconf get-log-prop -h host -p port log-type

   For example, to list the existing error log settings, type:

   $ dsconf get-log-prop -h host1 -p 1389 error
   Enter "cn=Directory Manager" password:
   buffering-enabled         :  off
   enabled                   :  on
   level                     :  default
   max-age                   :  1M
   max-disk-space-size       :  100M
   max-file-count            :  2
   max-size                  :  100M
   min-free-disk-space-size  :  5M
   path                      :  /tmp/ds1/logs/errors
   perm                      :  600
   rotation-interval         :  1w
   rotation-min-file-size    :  unlimited
   rotation-time             :  undefined
   verbose-enabled           :  off

2. Set the new value.

   Set the value that you want for the property.

   $ dsconf set-log-prop -h host -p port log-type property:value

   For example, to set the rotation interval for the error log to two days, use this command:

   $ dsconf set-log-prop -h host1 -p 1389 error rotation-interval:2d

To Enable the Audit Log

Unlike the access log and errors log, the audit log is not enabled by default. Before viewing the audit log, you must enable it.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

• Enable the audit log.

  $ dsconf set-log-prop -h host -p port audit enabled:on