Using Web Administration

Edit online

Use the instructions provided here to set the server audit logs using Web Administration Tool.

About this task

Procedure

  1. Expand Logs in the navigation area, click Modify log settings.
  2. Click Server Audit log.
    Note:
    • The directory administrator and administrative group members are the only users who can access this panel.
    • On some platforms, logging is provided through standard operating system logging mechanisms. On these platforms, this panel cannot be used to configure directory server logs. For example, on an OS/400® platform, the directory server job log contains all server messages. However, in the case of i5/OS™ directory server version 6.1 and above, the Audit log panel is displayed and directory server logs for audit can be configured.
    • If you have the Log Management Tool installed, you can set the Log size threshold, Maximum log archives, and Log archive path values. Values entered into these fields will not take effect if the Log Management Tool is not installed. See the Troubleshooting and support section of the IBM® Verify Directory documentation for more information about the Log Management Tool.
  3. Select Enable server audit logging to use the audit log utility.
  4. Enter the Path and file name for the audit log. The audit log can also be directed to something other than a file, for example, a line printer. Ensure that the file exists on the ldap server and that the path is valid. See Default log paths for default log paths. Note: If you specify a file that is not an acceptable file name (for example, invalid syntax or if the server does not have the rights to create and/or modify the file), the attempt fails with the following error: LDAP Server is unwilling to perform the operation.
  5. Under Log size threshold (MB) select the first radio button and enter the maximum log size in Megabytes. If you do not want to limit log size, select the Unlimited radio button instead.
  6. Under Maximum log archives, select one of the following options:
    • If you want to specify a maximum number of archived logs, select the radio button with an edit window next to it. Enter the maximum number of archives you want to save. One archived log is an earlier log that reached its size threshold.
    • If you do not want to archive logs, select No archives.
    • If you do not want to limit the number of archived logs, select Unlimited.
  7. Under Audit version, select the audit version you want to use.Version 1 maintains previous audit logging capabilities for any applications that parse the audit log. Version 2 enables you to log extended operations, however, you might need to modify existing applications that parse the audit log. Version 3, the default value, also writes out a unique ID, if the server generates one for the request. The unique ID only appears on the proxy server and is printed between the header information and any control data.
  8. Under Audit log level, do one of the following steps:
    • If you want to log only failed attempts, select the Only failed attempts radio button.
    • If you want to log all attempts, select the All attempts radio button.
  9. Under Log archive path, do one of the following steps:
    • If you want to specify the path where archives are kept, select the radio button with an edit window next to it and enter the required path.
    • If you want to keep the archives in the directory where the log file is located, select the Same directory as log file radio button.
  10. Select the operations you wish to log. Consult the field help for additional information about the various operations you can log.
    • Bind - records connections to the server
    • Unbind - records disconnections from the server
    • Search - records LDAP search operations performed by any client
    • Add - records additions to LDAP
    • Modify - records modifications to LDAP
    • Delete - records deletions from LDAP
    • Compare - records compare operations
    • Modify RDN® - records modifications made to RDNs
    • Event notification - records event notifications
    • Extended operations- records extended operations performed against the server
    • Group values sent on group control - records the groups defined in the group control.
    • Attributes sent on group evaluation extended operation - records attributes sent with the group evaluation extended operation.
  11. Under Log Schedule, do the following steps:
    1. Specify the frequency between two cycles of Event by selecting an item from the Select frequency check box.
    2. Specify the start date and start time for Event in the Starting on fields. You can also click the calendar icon to specify the start date. The start time should be in the following format: 12:30:00 PM.
  12. Click Apply to apply your changes and continue working with logs, or click OK to save your changes and to return to the IBM Verify Directory Web Administration Introduction panel. Click Cancel to return to the IBM Verify Directory Web Administration Introduction panel without saving any changes.