IBM Support

Rollover for WebSeal Logfiles not working

Troubleshooting


Problem

Even though the max-size parameter in webseald-.conf is set to 2000000 (2MB default) the logfiles agent.log, referer.log and request.log get larger (1GB and more).

Cause

The permissions of the directories specified in requests-file, agent-file and referer-file parameters in webseald-<domain>.conf are wrong (owned by root instead of ivmgr).

Check the msg__webseald-<domain>.log file for entries like


... ----- 0x1354A2FC webseald ERROR ivc file EventLogger.cpp 620 0xb1cf9b90
HPDCO0764E Could not rename file (/var/ibm/tivoli/common/DPW/logs/www-default/log/referer.log, /var/ibm/tivoli/common/logs/www-default/log/referer.log.2012-08-03-05-52-45, 13)
...

Resolving The Problem

Change the permissions of the log directory to
drwxr-x--- 2 ivmgr ivmgr log

[{"Product":{"code":"SSPREK","label":"Tivoli Access Manager for e-business"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"WebSEAL","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"6.1;6.1.1;7.0;Version Independent","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21624543