For more information, see Working with Administrative Alert Handlers.

  1. To create a criteria object for the Admin Alert Access Log, use dsconfig.

    If you are using the dsconfig tool in interactive mode, the menu items for the criteria operations are located in the Standard objects menu.

    For this example, we want to log only write operations that target user entries. The following command matches any of the specified operations whose target entry matches the filter (objectClass=person).

    $ bin/dsconfig create-request-criteria --type simple \ 
  --criteria-name “User Updates” \ 
  --set operation-type:add \ 
  --set operation-type:delete \
  --set operation-type:modify \ 
  --set operation-type:modify-dn \ 
  --set “any-included-target-entry-filter:(objectClass=person)”
  2. To create a log publisher of type admin-alert-access, use dsconfig. 
    $ bin/dsconfig create-log-publisher \ 
  --publisher-name ”User Updates Admin Alert Access Log” \ 
  --type admin-alert-access \ 
  --set “request-criteria:User Updates” \ 
  --set include-request-details-in-result-messages:true \ 
  --set enabled:true