LDAP metrics reference
LDAP metrics are exposed as LDAP attributes on entries under cn=monitor
.
Metrics entry object class names start with ds-monitor
.
Metrics attribute names start with ds-mon
.
For details, refer to the About This Reference.
For examples of common monitoring requests, refer to LDAP-based monitoring.
Some |
Name | Syntax | Description |
---|---|---|
|
Counter metric |
Total number of abandoned operations since startup |
|
Integer |
Number of active client connections |
|
Integer |
Number of active persistent searches |
|
Integer |
Number of connections currently established on the Administration Connector |
|
Host port |
The administrative host and port |
|
Directory String |
Certificate alias |
|
Boolean |
Indicates whether the server is alive |
|
Directory String |
Lists server errors preventing the server from operating correctly that require administrative action |
|
Directory String |
Backend degraded index |
|
Integer |
Number of degraded indexes in the backend |
|
Integer |
Number of entries contained in the backend |
|
Summary metric |
Histogram of entry sizes being read from the underlying storage |
|
Summary metric |
Histogram of entry sizes being written to the underlying storage |
|
Integer |
Number of indexed searches performed against the backend |
|
Integer |
Number of unindexed searches performed against the backend |
|
Json |
Information about the simple search filter processed against the backend |
|
Generalized Time |
Time the server started recording statistical information about the simple search filters processed against the backend |
|
Boolean |
Whether the base DNs of this backend should be considered public or private |
|
DN |
Base DNs routed to remote LDAP servers by the proxy backend |
|
Summary metric |
Remote LDAP servers that the proxy backend forwards requests to |
|
Summary metric |
Summary for entries purged by time-to-live |
|
Boolean |
Indicates whether time-to-live is in the process of purging expired entries |
|
Generalized Time |
Last time time-to-live finished purging expired entries |
|
Integer |
Number of entries queued for purging by the time-to-live service |
|
Integer |
Number of active time-to-live threads |
|
Directory String |
Current backend behavior when processing write operations, can either be "disabled", "enabled" or "internal-only" |
|
DN |
Base DN handled by a backend |
|
Integer |
Number of subordinate entries of the base DN, including the base DN |
|
Integer |
Build number of the Directory Server |
|
Directory String |
Build date and time of the Directory Server |
|
Summary metric |
Network bytes read summary |
|
Summary metric |
Network bytes written summary |
|
Integer |
Current number of entries held in this cache |
|
Integer |
Maximum number of entries allowed in this cache |
|
Size in bytes |
Memory limit for this cache |
|
Summary metric |
Number of attempts to retrieve an entry that was not held in this cache |
|
Integer |
Total memory in bytes used by this cache |
|
Summary metric |
Number of attempts to retrieve an entry from this cache |
|
Generalized Time |
Time the certificate expires |
|
DN |
Certificate issuer DN |
|
Integer |
Certificate serial number |
|
DN |
Certificate subject DN |
|
Integer |
The number of changelog files containing updates generated by this replica. A value of zero indicates the replica did not generate any updates during the last purge delay interval |
|
Host port |
The host and port of the changelog server |
|
Directory String |
Changelog identifier |
|
Duration in milli-seconds |
The purge delay of the changelog |
|
Integer |
Total number of collective attribute subentries |
|
Directory String |
Compact version of the Directory Server |
|
DN |
DN of the configuration entry |
|
Host port |
Host and replication port of the server that this server is connected to |
|
Directory String |
Identifier of the server that this server is connected to |
|
Json |
Client connection summary information |
|
Summary metric |
Connection summary |
|
Integer |
Number of client connections currently established except on the Administration Connector |
|
Integer |
Current replication window size for receiving messages, indicating the number of replication messages a remote server can send before waiting on acknowledgement from this server. This does not depend on the TCP window size |
|
Generalized Time |
Current time |
|
Integer |
Number of internal nodes evicted from the database cache |
|
Integer |
Number of leaf nodes (data records) evicted from the database cache |
|
Boolean |
Whether leaf nodes are cached |
|
Integer |
Number of internal nodes requested by btree operations that were not in the database cache |
|
Integer |
Number of leaf nodes (data records) requested by btree operations that were not in the database cache |
|
Size in bytes |
Size of the database cache |
|
Size in bytes |
Maximum size of the database cache |
|
Integer |
Number of internal nodes requested by btree operations |
|
Integer |
Number of leaf nodes (data records) requested by btree operations |
|
Integer |
Number of checkpoints run so far |
|
Integer |
Number of cleaner file deletions |
|
Integer |
Number of files currently open in the database file cache |
|
Integer |
Number of times a log file has been opened |
|
Size in bytes |
Estimate of the amount in bytes of live data in all data files (i.e., the size of the DB, ignoring garbage) |
|
Size in bytes |
Size used by all data files on disk |
|
Integer |
Current maximum (upper bound) log utilization as a percentage |
|
Integer |
Current minimum (lower bound) log utilization as a percentage |
|
Directory String |
Database version used by the backend |
|
Filesystem path |
A monitored directory containing data that may change over time |
|
Size in bytes |
Amount of free disk space |
|
Size in bytes |
Effective full disk space threshold |
|
Size in bytes |
Effective low disk space threshold |
|
Filesystem path |
Monitored disk root |
|
Directory String |
Current disk state, can be either "normal", "low" or "full" |
|
Integer |
Replication domain generation identifier |
|
DN |
Replication domain name |
|
Integer |
Total number of dynamic groups |
|
Integer |
Total number of entries ACIs |
|
Integer |
Number of entries for which an update operation has been received but not replayed yet by this replica |
|
Integer |
Total number of entries with ACI attributes |
|
Directory String |
IDs of issues that have been fixed in this Directory Server build |
|
Directory String |
Full version of the Directory Server |
|
Integer |
Total number of global ACIs |
|
Directory String |
Unique identifier of the group in which the directory server belongs |
|
Boolean |
Indicates whether the server is able to handle requests |
|
Directory String |
Lists transient server errors preventing the server from temporarily handling requests |
|
Directory String |
The name of the index |
|
Timer metric |
Number of index updates and their time cost |
|
Directory String |
Change number indexing state, can be one of "INDEXING", "BLOCKED_BY_REPLICA_NOT_IN_TOPOLOGY" or "WAITING_ON_UPDATE_FROM_REPLICA" |
|
Summary metric |
Number of accesses of this index. For attribute indexes it represents the number of search operations that have used this index, for system indexes it represents the number of key lookups. |
|
Filesystem path |
Directory Server root installation path |
|
Filesystem path |
Directory Server instance path |
|
Directory String |
Java virtual machine architecture (e.g. 32-bit, 64-bit) |
|
Directory String |
Input arguments passed to the Java virtual machine |
|
Integer |
Number of processors available to the Java virtual machine |
|
Integer |
Number of classes loaded since the Java virtual machine started |
|
Integer |
Number of classes unloaded since the Java virtual machine started |
|
Filesystem path |
Path used to find directories and JAR archives containing Java class files |
|
Filesystem path |
Installation directory for Java runtime environment (JRE) |
|
Directory String |
Java runtime environment (JRE) vendor |
|
Directory String |
Java runtime environment (JRE) version |
|
Size in bytes |
Amount of heap memory that the Java virtual machine initially requested from the operating system |
|
Size in bytes |
Maximum amount of heap memory that the Java virtual machine will attempt to use |
|
Size in bytes |
Amount of heap memory that is committed for the Java virtual machine to use |
|
Size in bytes |
Amount of heap memory used by the Java virtual machine |
|
Size in bytes |
Amount of memory that the Java virtual machine initially requested from the operating system |
|
Size in bytes |
Maximum amount of memory that the Java virtual machine will attempt to use |
|
Size in bytes |
Amount of non-heap memory that the Java virtual machine initially requested from the operating system |
|
Size in bytes |
Maximum amount of non-heap memory that the Java virtual machine will attempt to use |
|
Size in bytes |
Amount of non-heap memory that is committed for the Java virtual machine to use |
|
Size in bytes |
Amount of non-heap memory used by the Java virtual machine |
|
Size in bytes |
Amount of memory that is committed for the Java virtual machine to use |
|
Size in bytes |
Amount of memory used by the Java virtual machine |
|
Directory String |
Transport Layer Security (TLS) cipher suites supported by this Directory Server |
|
Directory String |
Transport Layer Security (TLS) protocols supported by this Directory Server |
|
Integer |
Number of threads in the BLOCKED state |
|
Integer |
Number of live threads including both daemon and non-daemon threads |
|
Integer |
Number of live daemon threads |
|
Integer |
Number of deadlocked threads |
|
Directory String |
Diagnostic stack traces for deadlocked threads |
|
Integer |
Number of threads in the NEW state |
|
Integer |
Number of threads in the RUNNABLE state |
|
Integer |
Number of threads in the TERMINATED state |
|
Integer |
Number of threads in the TIMED_WAITING state |
|
Integer |
Number of threads in the WAITING state |
|
Directory String |
Java virtual machine vendor |
|
Directory String |
Java virtual machine version |
|
Directory String |
The CSN of the last received update originating from the remote replica |
|
Directory String |
The CSN of the last replayed update originating from the remote replica |
|
Generalized Time |
Time this server was last seen |
|
Host port |
The host and port to connect using LDAP (no support for start TLS) |
|
Host port |
The host and port to connect using LDAPS |
|
Host port |
The host and port to connect using LDAP (with support for start TLS) |
|
Directory String |
Host and port |
|
Integer |
Number of times the replica lost its connection to the replication server |
|
Integer |
Major version number of the Directory Server |
|
Integer |
Maximum number of simultaneous client connections that have been established with the Directory Server |
|
Integer |
Minor version number of the Directory Server |
|
Integer |
Newest change number present in the change number index database |
|
CSN (Change Sequence Number) |
Newest CSN present in the replica database |
|
Generalized Time |
Time of the newest CSN present in the replica database |
|
Integer |
Oldest change number present in the change number index database |
|
CSN (Change Sequence Number) |
Oldest CSN present in the replica database |
|
Generalized Time |
Time of the oldest CSN present in the replica database |
|
Directory String |
Operating system architecture |
|
Directory String |
Operating system name |
|
Directory String |
Operating system version |
|
Integer |
Total number of password policy subentries |
|
Integer |
Point version number of the Directory Server |
|
UUID |
Process ID of the running directory server |
|
Directory String |
Full name of the Directory Server |
|
Directory String |
Network protocol |
|
Boolean |
Indicates whether changelog purging is waiting for change number indexing to advance. If true, check the ds-mon-indexing-state and ds-mon-replicas-preventing-indexing metrics |
|
Duration in milli-seconds |
Current local delay in receiving replicated operations |
|
Duration in milli-seconds |
Current local delay in replaying replicated operations |
|
Counter metric |
Number of updates replayed on this replica which modify the internal state but not user data |
|
Timer metric |
Replay etime for updates that have been replayed on this replica |
|
Counter metric |
Number of updates replayed on this replica for which replication naming conflicts have been resolved |
|
Counter metric |
Number of updates replayed on this replica for which replication naming conflicts have not been resolved |
|
Directory String |
Lists the replicas preventing external changelog change numbers from incrementing |
|
DN |
The replication domain |
|
Integer |
The protocol version used for replication |
|
Timer metric |
Abandon request timer |
|
Timer metric |
Add request timer |
|
Timer metric |
Bind request timer |
|
Timer metric |
Compare request timer |
|
Timer metric |
Delete request timer |
|
Timer metric |
Extended request timer |
|
Timer metric |
Timer for requests that failed because there was a problem while attempting to perform the associated operation (associated LDAP result codes: 1, 2, 12, 15, 16, 17, 18, 19, 20, 21, 23, 34, 35, 36, 37, 38, 39; associated HTTP status codes: client error (4xx) except 401 and 403) |
|
Timer metric |
Timer for requests that could not complete because further action is required (associated HTTP status codes: redirection (3xx)) |
|
Timer metric |
Timer for requests that failed because the server did not hold the request targeted entry (but was able to provide alternative servers that may) (associated LDAP result code: 10) |
|
Timer metric |
Timer for requests that failed because they were trying to exceed the resource limits allocated to the associated clients (associated LDAP result codes: time, size and admin limit exceeded (respectively 4, 5 and 11) |
|
Timer metric |
Timer for requests that failed for security reasons (associated LDAP result codes: 8, 9, 13, 25, 26, 27; associated HTTP status codes: unauthorized (401) and forbidden (403)) |
|
Timer metric |
Timer for apparently valid requests that failed because the server was not able to process them (associated LDAP result codes: busy (51), unavailable (52), unwilling to perform (53) and other (80); associated HTTP status codes: server error (5xx)) |
|
Timer metric |
Timer for requests that failed due to uncategorized reasons |
|
Timer metric |
GET request timer |
|
Integer |
Number of requests in the work queue that have not yet been picked up for processing |
|
Timer metric |
Modify request timer |
|
Timer metric |
Modify DN request timer |
|
Timer metric |
PATCH request timer |
|
Timer metric |
POST request timer |
|
Timer metric |
Persistent search request timer |
|
Timer metric |
PUT request timer |
|
Timer metric |
Base object search request timer |
|
Timer metric |
One level search request timer |
|
Timer metric |
Subtree search request timer |
|
Summary metric |
Summary for operations that have been successfully submitted to the work queue |
|
Timer metric |
Unbind request timer |
|
Timer metric |
Uncategorized request timer |
|
Directory String |
Revision ID in the source repository from which the Directory Server is build |
|
Counter metric |
Number of replication updates sent by this replica |
|
Directory String |
Server identifier |
|
Boolean |
Indicates whether this is the topology server that has handled the monitoring request |
|
CSN (Change Sequence Number) |
Replication server state |
|
Directory String |
Short name of the Directory Server |
|
Boolean |
Whether SSL encryption is used when exchanging messages with this server |
|
Generalized Time |
Time the Directory Server started |
|
Integer |
Total number of static groups |
|
Integer |
Number of static groups with at most 100 members |
|
Integer |
Number of static groups with at most 1000 members |
|
Integer |
Number of static groups with at most 10000 members |
|
Integer |
Number of static groups with at most 100000 members |
|
Integer |
Number of static groups with at most 1000000 members |
|
Integer |
Total number of static groups |
|
Directory String |
Replication status of the local replica, can either be "Invalid", "Not connected", "Normal", "Too late", "Full update", "Bad data" |
|
Generalized Time |
Last time the replication status of the local replica changed |
|
Directory String |
Supported server log categories |
|
Directory String |
Fully qualified domain name of the system where the Directory Server is running |
|
Duration in milli-seconds |
Duration since the last time a change was indexed |
|
Integer |
Total number of client connections that have been established with the Directory Server since it started |
|
Directory String |
The type of total update when it is in progress. Possible values: import or export |
|
Integer |
The total number of entries to be processed when a total update is in progress |
|
Integer |
The number of entries still to be processed when a total update is in progress |
|
Counter metric |
Number of duplicate updates: updates received by this replica which cannot be applied because they are already in progress. Can happen when a directory server fails over to another replication server |
|
Integer |
Number of remote updates received from the replication server but not replayed yet on this replica |
|
Integer |
Number of remote updates received in the queue waiting to be replayed |
|
Integer |
Number of remote updates received in the queue |
|
Integer |
Number of local updates that are waiting to be sent to the replication server once they complete |
|
Json |
JSON array of the number of updates replayed per replay thread |
|
Directory String |
Vendor name of the Directory Server |
|
Directory String |
Version qualifier of the Directory Server |
|
Integer |
Total number of virtual static groups |
|
Filesystem path |
Current working directory of the user running the Directory Server |