How to reduce the logging level in Oracle Internet Directory

I am talking about a small but important feature in Oracle Internet Directory 10.1.4.3, it is Logging. This is in production environment where the no. of hits to Oracle Internet Directory will be huge every day and hence the logs OID are getting updated drastically and hence occupying lot of space.

So, I just wanted to reduce/disable the logging level completely. I followed the below steps to achieve it.

First and foremost, we need to check the existing logging level as shown in below screenshot.

The debug level is described with the attribute orcldedebugflag. If the output of the above command is non-zero then logging is enabled. Next step is to create an ldif file to set this attribute with 0 value as shown in below screenshot.

I have named it as orcldebugoff.ldif. We need to run ldapmodify command to change this entry in the root DSE as shown below.

Perform a basic check whether this flag value is set to 0 by using ldapsearch as shown below.

This means that debug flag is set to 0 in the root DSE. Now we would need to make OID instances to consume this flag. oidctl process has to be stopped as shown below.

Start the oidctl process as shown below.

That’s it. Now I did not see logs generating for ldap operations. There are different debug level operations that can be set depending upon requirement, to know more about it, check this metalink note 397821.1. 

Helpful Docs:

Metalink note 232666.1




About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

Not found