第 8 章 使用命令行获取目录服务器访问日志

• -s: 指定开始日志文件分析的时间。
• -e: 指定停止日志文件分析的时间。
• -bc: 根据用于连接到服务器的 DN 数量以及服务器返回的总连接代码生成报告。
• -m ：将每秒输出数据(-m)生成到指定的 CSV 输出文件。
• -m: 生成每分钟带有计数(-M)的输出数据到指定的 CSV 输出文件。

流程

• 要生成简单的访问日志概述，请运行以下命令：

  # logconv.pl /var/log/dirsrv/slapd-instance_name/access
  
  Access Log Analyzer 8.2
  Command: logconv.pl /var/log/dirsrv/slapd-instance_name/access
  Processing 1 Access Log(s)...
  
  [001] /var/log/dirsrv/slapd-instance_name/access size(bytes):77532
  
  Total Log Lines Analysed:  527
  Start of Logs:    14/Oct/2017:16:15:22.452909568
  End of Logs:      14/Oct/2017:16:39:50.157790196
  
  Processed Log Time:  0 Hours, 24 Minutes, 27.704877056 Seconds
  
  Restarts:                     10
  Secure Protocol Versions:
   - TLS1.2 client bound as uid=user_name,ou=people,o=example.com (11 connections)
   - TLS1.2 128-bit AES; client CN=CA Subsystem,O=example.com; issuer CN=Certificate Authority,O=example.com (11 connections)
   - TLS1.2 128-bit AES-GCM (2 connections)
   - TLS1.2 128-bit AES (3 connections)
  
  Peak Concurrent Connections:  38
  Total Operations:             4771
  Total Results:                4653
  Overall Performance:          97.5%
  
  Total Connections:            249          (0.17/sec)  (10.18/min)
   - LDAP Connections:          107          (0.07/sec)  (4.37/min)
   - LDAPI Connections:         128          (0.09/sec)  (5.23/min)
   - LDAPS Connections:         14           (0.01/sec)  (0.57/min)
   - StartTLS Extended Ops:     2            (0.00/sec)  (0.08/min)
  
  Searches:                     2963         (2.02/sec)  (121.13/min)
  Modifications:                649          (0.44/sec)  (26.53/min)
  Adds:                         785          (0.53/sec)  (32.09/min)
  Deletes:                      10           (0.01/sec)  (0.41/min)
  Mod RDNs:                     6            (0.00/sec)  (0.25/min)
  Compares:                     0            (0.00/sec)  (0.00/min)
  Binds:                        324          (0.22/sec)  (13.25/min)
  
  Proxied Auth Operations:      0
  Persistent Searches:          17
  Internal Operations:          0
  Entry Operations:             0
  Extended Operations:          4
  Abandoned Requests:           0
  Smart Referrals Received:     0
  
  VLV Operations:               30
  VLV Unindexed Searches:       0
  VLV Unindexed Components:     20
  SORT Operations:              22
  
  Entire Search Base Queries:   12
  Paged Searches:               2
  Unindexed Searches:           0
  Unindexed Components:         149
  
  FDs Taken:                    249
  FDs Returned:                 212
  Highest FD Taken:             107
  
  Broken Pipes:                 0
  Connections Reset By Peer:    0
  Resource Unavailable:         0
  Max BER Size Exceeded:        0
  
  Binds:                        324
  Unbinds:                      155
  ---------------------------------
   - LDAP v2 Binds:             41
   - LDAP v3 Binds:             180
   - AUTOBINDs(LDAPI):          103
   - SSL Client Binds:          0
   - Failed SSL Client Binds:   0
   - SASL Binds:                134
     - EXTERNAL: 114
     - GSSAPI: 20
   - Directory Manager Binds:   10
   - Anonymous Binds:           1
  
  Cleaning up temp files...
  Done.

  logconv.pl 脚本显示操作总数、连接总数、每个操作类型计数、对一些扩展操作（如持久搜索和绑定信息）计数。

  • 可选： 如果必须启用作为单个选项传递的额外连接摘要，如用于连接到服务器的 DN 数量(b)以及服务器返回的总连接代码(c)，指定 -bc 选项，如下所示：

    # lotgconv.pl -bc /var/log/dirsrv/slapd-instance_name/access
    
    ----- Total Connection Codes -----
    U1              3    Cleanly Closed Connections
    B1              1    Bad Ber Tag Encountered
    
    ----- Top 20 Bind DN's -----
    Number of Unique Bind DN's: 212
    1801            cn=Directory Manager
    1297            Anonymous Binds
    311              uid=jsmith,ou=people...
    87               uid=bjensen,ou=peopl...
    85               uid=mreynolds,ou=peo...
    69               uid=jrockford,ou=peo...
    55               uid=sspencer,ou=peop...

  • 可选： 如果必须为某个启动(-S)和结束时间(-E)或特定范围内的数据输出启用数据输出，请运行以下命令

    # logconv.pl -S "[01/Jul/2022:16:11:47.000000000 -0400]" -E "[01/Jul/2022:17:23:08.999999999 -0400]" /var/log/dirsrv/slapd-instance_name/access
    ...
    ----------- Access Log Output ------------
    
    Start of Logs:    01/Jul/2022:16:11:47
    End of Logs:      01/Jul/2022:17:23:08

    当设置 start 和 end times 时，logconv.pl 命令首先打印给定的时间范围，然后显示该周期的摘要。

  • 可选： 如果必须启用每分钟数的数据输出(-M)或每秒数(-m)，请运行以下命令：

    # logconv.pl -m|-M outputFile accessLogFile