[Date Prev][Date Next]
Re: (ITS#6815) Feature Request: Accesslog filter
Marco Pizzoli wrote:
> Hi Howard,
> thanks for this work.
> I noticed that you give me a baseDN under which I can have operations logged.
> If I would like to exclude one subtree from my principal tree, I need to
> specify all the baseDN of other sibling-subtrees.
> To do this do I need to poli-invoke accesslog overlay?
No, you can specify logbase multiple times in a single overlay.
Possibly we can extend the directive to handle exclusion as well as inclusion,
to simplify this case.
> Thanks again
> On Wed, Feb 23, 2011 at 3:15 AM, Howard Chu <email@example.com
> <mailto:firstname.lastname@example.org>> wrote:
> email@example.com <mailto:firstname.lastname@example.org> wrote:
> Full_Name: Marco Pizzoli
> Version: ALL
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (188.8.131.52)
> this is a feature request.
> I would like to have accesslog writing to his db only ldap operations
> that match
> some sort of filter, or, in particular, to not to log searches that
> matches a
> specific pattern.
> This request is spotted by some ldap clients that I have that every
> 30seconds do
> a dummy ldap search only to keep alive their connection to the ldap
> These searches are frequent and I have many of these clients in my
> deploy, so my
> accesslog become full of not significant entries.
> I've added a simple subtree-matching feature to accesslog in HEAD. Please
> test and let us know if it addresses this request.
> -- Howard Chu
> CTO, Symas Corp. http://www.symas.com
> Director, Highland Sun http://highlandsun.com/hyc/
> Chief Architect, OpenLDAP http://www.openldap.org/project/
> Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi.
> Jim Morrison
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/