11:05 a.m.
Hi,
I was wondering if there was an overlay that worked somewhat like the slapo-accesslog
overlay, but instead of logging the information to another OpenLDAP database, I'd like
the data to be written to a CSV file or something similar. Does such a beast exist?
Tim Gustafson
Baskin School of Engineering
UC Santa Cruz
tjg(a)soe.ucsc.edu
831-459-5354
8:09 a.m.
Tim Gustafson wrote:
I was wondering if there was an overlay that worked somewhat like
the
slapo-accesslog overlay, but instead of logging the information to another
OpenLDAP database, I'd like the data to be written to a CSV file or
something similar. Does such a beast exist?
slapo-auditlog writes to a LDIF file. But deploying the overlay today is not
recommended. Don't remember the details though.
I'd either write a syncrepl consumer or a connector accesing slapo-accesslog's
database.
But writing to a CSV file seems odd anyway. What exactly do you want to do? If
you want to synchronize data you should not do that via CSV files.
Ciao, Michael.
11:02 a.m.
slapo-auditlog writes to a LDIF file. But deploying the overlay
today is not recommended. Don't remember the details though.
slapo-autitlog is for auditing -updates- to the LDAP data. I need to log -queries- to the
LDAP data.
But writing to a CSV file seems odd anyway. What exactly do you
want to do? If you want to synchronize data you should not do
that via CSV files.
I want to be able to generate a monthly/weekly/daily report that tells me which clients
have been hitting the OpenLDAP server hardest, in terms of read queries. I think I may
have several clients that are either configured incorrectly or malfunctioning that are
hitting the server harder than they should be. Currently I'm using trafshow to show
the amount of TCP data being transmitted, but it doesn't tell me -what- is being
transmitted. I'd like to know what those malfunctioning/misconfigured hosts are
actually asking the server to do.
Tim Gustafson
Baskin School of Engineering
UC Santa Cruz
tjg(a)soe.ucsc.edu
831-459-5354
11:19 a.m.
Tim Gustafson wrote:
I want to be able to generate a monthly/weekly/daily report that
tells me
which clients have been hitting the OpenLDAP server hardest, in terms of
read queries.
There are scripts which parse the normal syslog output and output statistics.
Or simply search the accesslog database in the given time frame.
Ciao, Michael.
8:04 a.m.
There are scripts which parse the normal syslog output
and output statistics. Or simply search the accesslog
database in the given time frame.
Can you point me to such scripts?
As I mentioned in my original e-mail, using the accesslog overlay won't work for us;
it produces too much load (and would only work on the master server anyhow; the slaves are
read-only replicas). We get upwards of 500 queries/sec during the day, which would mean
upwards of 500 writes/sec, which is too much load for our LDAP server.
Tim Gustafson
Baskin School of Engineering
UC Santa Cruz
tjg(a)soe.ucsc.edu
831-459-5354
8:49 a.m.
--On Monday, April 11, 2011 8:04 AM -0700 Tim Gustafson <tjg(a)soe.ucsc.edu>
wrote:
> There are scripts which parse the normal syslog output
> and output statistics. Or simply search the accesslog
> database in the given time frame.
Can you point me to such scripts?
As I mentioned in my original e-mail, using the accesslog overlay won't
work for us; it produces too much load (and would only work on the master
server anyhow; the slaves are read-only replicas). We get upwards of 500
queries/sec during the day, which would mean upwards of 500 writes/sec,
which is too much load for our LDAP server.
<http://prefetch.net/code/ldap-stats.pl.html>
If you give it a log from loglevel 256 (stats logging) in OpenLDAP, it will
generate all sorts of useful information for you.
--Quanah
--
Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
11:20 a.m.
http://prefetch.net/code/ldap-stats.pl.html
If you give it a log from loglevel 256 (stats logging) in OpenLDAP,
it will generate all sorts of useful information for you.
Very cool; thanks! This is exactly what I think I'm looking for.
Tim Gustafson
Baskin School of Engineering
UC Santa Cruz
tjg(a)soe.ucsc.edu
831-459-5354
3681
days inactive
3687
days old
openldap-technical@openldap.org
6 comments
3 participants
participants (3)
-
Michael Ströder -
Quanah Gibson-Mount -
Tim Gustafson