Environment
Novell Identity Manager 3.5.1
Novell Identity Manager 3.6.1
Novell Identity Manager 4.0
Situation
High utilization of server or slow performance of IDM because auditing is turned on.
Resolution
First, it is recommended to turn off auditing to eDirectory. This has no impact on logging any auditing events to auditing applications. It only prevents separate logging to eDirectory. Only if you are sure you are using this should it be left on.
To turn it off do the following:
1 - Turn off logging to eDirectory but leave the logging of events to platform agents. This is changed by going into the properties of the driver, going to the Log Level tab and marking the option "Turn off logging to Driver Set, Subscriber and Publisher logs."
It is recommended that unless this feature is being used, that this option be selected for each driver and for the Driver Set. This is especially true for anyone using the Entitlement driver.
To explain this option:
-- The log limit identifies the maximum number of DirXML errors to store on the Driver set, publisher or subscriber objects.
Minimum - 50 (Default)
Maximum - 500
The attribute name is "DirXML-LogLimit"
-- The log limit identifies the maximum number of DirXML errors to store on the Driver set, publisher or subscriber objects.
Minimum - 50 (Default)
Maximum - 500
The attribute name is "DirXML-LogLimit"
If you want to turn off auditing events going to any auditing agent on the same properties screen you can set the option "Logging off"
CAUTION: Only turn this off if you are not auditing the events on that driver.
A second method is to edit the logevent configuration file. The same caution to only turn it off if not using it applies.
Windows
To remove auditing on windows platform, add the following to the logevent.cfg file:
LogHost=Not Configured
To remove auditing on windows platform, add the following to the logevent.cfg file:
LogHost=Not Configured
LINUX
In the /etc it has the logevent.conf
LogHost=Not Configured
In the /etc it has the logevent.conf
LogHost=Not Configured
General Auditing Info
NCP Server object
NOvell Audit tab
2 check boxes
- Register events inline - should not be checked
- Do not audit replicated events. - should be checked ( most cases)
NCP Server object
NOvell Audit tab
2 check boxes
- Register events inline - should not be checked
- Do not audit replicated events. - should be checked ( most cases)
LogReconnectInterval=600 is the default (in seconds)
Should probably do 30 to 60
Should probably do 30 to 60
See KB 7005385 for more info