PingDirectory

Filtered logging

The PingDirectory server allows you to access loggers with criteria that are used to identify which messages should actually be recorded.

This allows you to:

  • Maintain a log containing only non-successful operations.

  • Maintain a log containing operations that took longer than a specified duration to complete.

  • Maintain a log of requests by root users or topology administrators.

  • Maintain a log of search operations in which encoded passwords were returned to clients.

Enable filtered logging using the following access logger configuration properties:

connection-criteria

An optional connection criteria object that is required to match the associated client connection. If connection criteria is provided, then the logger does not attempt to generate any connect, disconnect, request, search entry, search reference, or result log messages from clients that do not match that criteria.

request-criteria

An optional request criteria object that is required to match the associated operation request. If request criteria is provided, then the logger does not attempt to generate any request, search entry, search reference, or result log messages for requests that do not match that criteria.

result-criteria

An optional result criteria object that is required to match the associated operation result. If result criteria is provided, then the logger does not attempt to generate any result log messages for results that do not match that criteria.

search-entry-criteria

An optional search entry criteria object that i required to match the associated search result entry. If search entry criteria is provided, then the logger does not attempt to generate any search result entry log messages for entries that do not match that criteria.

search-reference-criteria

An optional search reference criteria object that is required to match the associated search result reference. If search reference criteria is provided, then the logger does not attempt to generate any search result reference log messages for references that do not match that criteria.

See the log-operations-by-administrators.dsconfig and log-encoded-password-access.dsconfig batch files in the config/sample-dsconfig-batch-files directory for examples of creating loggers that use criteria to filter log messages.