Reference › DSA Commands (DXserver Commands) › Commands Reference › set query-log-advanced—Set Advanced Logging Options

set query-log-advanced—Set Advanced Logging Options

The set query-log-advanced command lets you configure the information that is included in the query log. To show the current value for this command, use the get log command.

This command has the following format:

set query-log-advanced = none | all | options ;

The command has the following syntax:

none

(Default) The query log contains only basic information about each request.

all

Includes all of the options.

options

A comma-separated list of one or more of the following options:

ssl

Includes the text (ssl) line if a request is sent over SSL. For example:

20110504.154626.801 0.6 SEARCH dn="c=au" scope=base-object (ssl)

source

Indicates where a request originated, where the origin is one of the following:

• client: The source of the request is from a client over the DAP or LDAP protocol.
• mw: The update request received was replicated with multiwrite. This includes the name of the DSA from which the request was sent.

  dsp: The request was received from a DSA servicing another namespace (either chained or multi-chained). These are received over the DSP (inter-DSA) protocol.

• internal: The request was generated internally by the DSA to perform another triggered action. For example, password policy may trigger an update of password policy attributes on a bind request.

For example:

20110504.154323.989 0.2147483645 MODIFY dn="cn=Craig LINK,o=users,c=au" source="dsp[router]"

ldap-controls

Includes a description of LDAP controls known/supported by the DSA. The descriptions are logged on requests and responses. If an LDAP control is not known the OID is displayed.

For example:

20110415.092635.362 7.4 SEARCH controls="simple-paged-results"

ldap-error

Includes the LDAP error name and number in an error response.

For example:

20110504.155609.029 0.10 ADD dn="cn=Craig LINK,o=users,c=au" (ssl) source="client" controls="manage-dsa-it"
20110504.155609.033 0.10 RESULT error update 5 entryAlreadyExists(68)

update-timer

Includes the time in milliseconds taken for an update to successfully complete.

For example:

20110504.154323.989 0.2147483645 MODIFY dn="cn=Craig LINK,o=users,c=au" 
20110504.154323.991 0.2147483645 RESULT success 1 msecs

show-eis

Includes the list of attributes requested on a search instead of the count of attributes being returned. This option performs the same function as the set query-log-show-eis command.

For example:

20110504.161328.495 3.9 SEARCH dn="c=au" scope=subtree filter=(cn=C*) eis=cn

More information:

Types of Logs

get log Command—List All Log Files and Settings