Hi,
I was wondering if there was an overlay that worked somewhat like the slapo-accesslog overlay, but instead of logging the information to another OpenLDAP database, I'd like the data to be written to a CSV file or something similar. Does such a beast exist?
Tim Gustafson Baskin School of Engineering UC Santa Cruz tjg@soe.ucsc.edu 831-459-5354
Tim Gustafson wrote:
I was wondering if there was an overlay that worked somewhat like the slapo-accesslog overlay, but instead of logging the information to another OpenLDAP database, I'd like the data to be written to a CSV file or something similar. Does such a beast exist?
slapo-auditlog writes to a LDIF file. But deploying the overlay today is not recommended. Don't remember the details though.
I'd either write a syncrepl consumer or a connector accesing slapo-accesslog's database.
But writing to a CSV file seems odd anyway. What exactly do you want to do? If you want to synchronize data you should not do that via CSV files.
Ciao, Michael.
slapo-auditlog writes to a LDIF file. But deploying the overlay today is not recommended. Don't remember the details though.
slapo-autitlog is for auditing -updates- to the LDAP data. I need to log -queries- to the LDAP data.
But writing to a CSV file seems odd anyway. What exactly do you want to do? If you want to synchronize data you should not do that via CSV files.
I want to be able to generate a monthly/weekly/daily report that tells me which clients have been hitting the OpenLDAP server hardest, in terms of read queries. I think I may have several clients that are either configured incorrectly or malfunctioning that are hitting the server harder than they should be. Currently I'm using trafshow to show the amount of TCP data being transmitted, but it doesn't tell me -what- is being transmitted. I'd like to know what those malfunctioning/misconfigured hosts are actually asking the server to do.
Tim Gustafson Baskin School of Engineering UC Santa Cruz tjg@soe.ucsc.edu 831-459-5354
Tim Gustafson wrote:
I want to be able to generate a monthly/weekly/daily report that tells me which clients have been hitting the OpenLDAP server hardest, in terms of read queries.
There are scripts which parse the normal syslog output and output statistics. Or simply search the accesslog database in the given time frame.
Ciao, Michael.
There are scripts which parse the normal syslog output and output statistics. Or simply search the accesslog database in the given time frame.
Can you point me to such scripts?
As I mentioned in my original e-mail, using the accesslog overlay won't work for us; it produces too much load (and would only work on the master server anyhow; the slaves are read-only replicas). We get upwards of 500 queries/sec during the day, which would mean upwards of 500 writes/sec, which is too much load for our LDAP server.
Tim Gustafson Baskin School of Engineering UC Santa Cruz tjg@soe.ucsc.edu 831-459-5354
--On Monday, April 11, 2011 8:04 AM -0700 Tim Gustafson tjg@soe.ucsc.edu wrote:
There are scripts which parse the normal syslog output and output statistics. Or simply search the accesslog database in the given time frame.
Can you point me to such scripts?
As I mentioned in my original e-mail, using the accesslog overlay won't work for us; it produces too much load (and would only work on the master server anyhow; the slaves are read-only replicas). We get upwards of 500 queries/sec during the day, which would mean upwards of 500 writes/sec, which is too much load for our LDAP server.
http://prefetch.net/code/ldap-stats.pl.html
If you give it a log from loglevel 256 (stats logging) in OpenLDAP, it will generate all sorts of useful information for you.
--Quanah
--
Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
http://prefetch.net/code/ldap-stats.pl.html
If you give it a log from loglevel 256 (stats logging) in OpenLDAP, it will generate all sorts of useful information for you.
Very cool; thanks! This is exactly what I think I'm looking for.
Tim Gustafson Baskin School of Engineering UC Santa Cruz tjg@soe.ucsc.edu 831-459-5354
openldap-technical@openldap.org
-
Michael Ströder -
Quanah Gibson-Mount -
Tim Gustafson