Novell Identity Manager 3.5.1
Novell Identity Manager 3.6.1
Novell Identity Manager 4.0
High utilization of server or slow performance of IDM because auditing is turned on.
First, it is recommended to turn off auditing to eDirectory. This has no impact on logging any auditing events to auditing applications. It only prevents separate logging to eDirectory. Only if you are sure you are using this should it be left on.
To turn it off do the following:
1 - Turn off logging to eDirectory but leave the logging of events to platform agents. This is changed by going into the properties of the driver, going to the Log Level tab and marking the option "Turn off logging to Driver Set, Subscriber and Publisher logs."
It is recommended that unless this feature is being used, that this option be selected for each driver and for the Driver Set. This is especially true for anyone using the Entitlement driver.
To explain this option:
-- The log limit identifies the maximum number of DirXML errors to store on the Driver set, publisher or subscriber objects.
Minimum - 50 (Default)
Maximum - 500
The attribute name is "DirXML-LogLimit"
If you want to turn off auditing events going to any auditing agent on the same properties screen you can set the option "Logging off"
CAUTION: Only turn this off if you are not auditing the events on that driver.
A second method is to edit the logevent configuration file. The same caution to only turn it off if not using it applies.
To remove auditing on windows platform, add the following to the logevent.cfg file:
In the /etc it has the logevent.conf
General Auditing Info
NCP Server object
NOvell Audit tab
2 check boxes
- Register events inline - should not be checked
- Do not audit replicated events. - should be checked ( most cases)
LogReconnectInterval=600 is the default (in seconds)
Should probably do 30 to 60