Netscape Certificate Management System 6.2, Руководство администратора

Страница: 266 / 874

Logs
266 Netscape Certificate Management System Administrator’s Guide • June 2003
You can use log levels to filter log entries based on the severity of an event. By
default, a level 3 (Failure) is set for all services.
The log level is additive—that is, specifying a value of 3 causes levels 4, 5, and 6 to
be logged. Log data can be voluminous, especially at lower (more verbose) logging
levels. Make sure that the host machine has sufficient disk space for all the log files.
It is also important to define your logging level, log rotation, and server-backup
policies appropriately so that all the log files are backed up and the host system
doesn’t get overloaded; otherwise, you may lose information.
Buffered Versus Unbuffered Logging
CMS supports buffered logging for all types of logs. You can choose to configure
the server for either buffered or unbuffered logging.
If you configure for buffered logging, the server creates buffers for the
corresponding logs, and it holds the messages in these buffers for as long as
possible. The server flushes out the messages to the log files only when either of the
following conditions occurs:
• The buffer gets full—the buffer gets full when the buffer size is equal to or
greater than the value specified by the
bufferSize
configuration parameter.
The default value for this parameter is 512 KB.
• The flush interval for the buffer is reached—the flush interval is reached when
the time interval since the last buffer flush is equal to or greater than the value
specified by the
flushInterval
configuration parameter. The default value
for this parameter is 5 seconds.
4 Misconfiguration These messages indicate that a misconfiguration in
the server is causing an error.
5 Catastrophic failure These messages indicate that because of an error, the
service cannot continue running.
6 Security-related events These messages identify occurrences that affect the
security of the server (for example, “Privileged
access attempted by user with revoked or unlisted
certificate”).
Table 7-2 Classification of Log Entries or Messages (Continued)
Log level Message category Description