Audit log

You can configure the audit log to audit operations that run against a directory server instance.

If you configure the audit feature, the performance of directory server instance can degrade based on the operations that are set for audit. If you do require auditing of operations against a directory server, it is advisable to turn off auditing of all operations. To disable the audit, you must ensure that the directory server instance is running. To check the status of the audit feature, run the following command:

idsldapsearch -p port -D adminDN -w adminPwd -s base \
-b "cn=audit,cn=log management,cn=configuration" objectclass=* ibm-audit
cn=Audit, cn=Log Management, cn=Configuration
ibm-audit=false

where, ibm-audit=false indicates that the auditing is off. If the value of the ibm-audit attribute is true, set the value to false. To set the attribute to false, run the following command:

idsldapmodify -p port -D adminDN -w adminPwd 
dn: cn=Audit, cn=Log Management, cn=Configuration
changetype: modify
replace: ibm-audit
ibm-audit: false