Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Руководство администратора

Страница: 381 / 564

Chapter 15.
359
Configuring Subsystem Logs
The Certificate System subsystems create log files that record events related to activities, such as
administration, communications using any of the protocols the server supports, and various other
processes employed by the subsystems. While a subsystem instance is running, it keeps a log of
information and error messages on all the components it manages. Additionally, the Apache and
Tomcat web servers generate error and access logs.
Each subsystem instance maintains its own log files for installation, audit, and other logged functions.
Log plug-in modules are listeners which are implemented as Java
™
classes and are registered in the
configuration framework.
All the log files and rotated log files, except for audit logs, are located in the
/var/
log/ subsystem_name
directory, by default.
Regular audit logs are located in the
/var/log/ subsystem_name
directory with other types of logs,
while signed audit logs are written to
/var/log/ subsystem_name /signedAudit/
. The default
location for logs can be changed by modifying the configuration.
15.1. An Overview of Log Settings
The Certificate System subsystem log files record events related to operations within that specific
subsystem instance. For each subsystem, different logs are kept for issues such as installation,
access, and web servers.
The way that logs are configured can affect Certificate System performance. For example, log file
rotation keeps logs from becoming too large, which slows down subsystem performance. This section
explains the different kinds of logs recorded by Certificate System subsystems and covers important
concepts such as log file rotation, buffered logging, and available log levels.
•
Section 15.1.1, “Services That Are Logged”
•
Section 15.1.2, “Log Levels (Message Categories)”
•
Section 15.1.3, “Buffered and Unbuffered Logging”
•
Section 15.1.4, “Log File Rotation”
15.1.1. Services That Are Logged
All major components and protocols of Certificate System log messages to log files.
Table 15.1,
“Services Logged”
lists services that are logged by default. To view messages logged by a specific
service, customize log settings accordingly. For details, see
Section 15.6, “Viewing Logs”
.
Service Description
ACLs Logs events related to access control lists.
Administration Logs events related to administration activities, such as HTTPS communication between the Console and the instance.
All Logs events related to all the services.
Authentication Logs events related to activity with the authentication module.
Certificate Authority Logs events related to the Certificate Manager.