IBM Support

How to Configure Rollover Maximum Files for WebSEAL Request Log

Question & Answer


Question

The server-log-cfg is the parameter used to control a WebSEAL instance's message log only. This parameter also includes the max_rollover_files directive to enble management of the number of roll over files directly for the WebSEAL message log, but how can this be acheived for the WebSEAL request log?

Answer

The max-files parameter cannot be used for controlling the number of roll over request log files in the WebSEAL's [logging] stanza. The only way to set the maximum rollover files for the WebSEAL request log is to make the configuration directly in the WebSEAL configuration file. This is achieved by setting the parameters below:

[Logging]
# Note this entry is required to be present by the LMI, but is not used when the logcfg parameter is set.
max-size = 2000000

# This entry stops the manual logcfg entry being overwritten (you must use the logcfg parameter and not enable the request log via this [logging] setting). Set 'requests' to a value of 'no' to use the logcfg setting in the aznapi-configuration stanza.
requests = no

[aznapi-configuration]
# This example entry permits request.log rollover control (all on one line, with a space character between 'file' and 'path')
logcfg = http.clf:file path=request.log,flush=10,rollover=1000000,max_rollover_files=10,log=clf,buffer_size=8192,queue_size=48

In this example the value of rollover (1000000) in the logcfg parameter is the value used by the request.log. So in this case, the "max-size=2000000" value stated earlier in the [logging] stanza is not used here when logcfg is set. Note that in the LMI, under the WebSEAL Edit -> Logging menu, the 'max-size' will be stated as 2000000, but the logcfg parameter overrides this (this is also the same for the Flush Time parameter). So if using the logcfg parameter to control the request.log then you cannot use the LMI WebSEAL instance's Edit -> Logging settings for this.

[{"Product":{"code":"SSPREK","label":"Tivoli Access Manager for e-business"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Documentation","Platform":[{"code":"PF004","label":"Appliance"}],"Version":"8.0.1.3;8.0.1.4;9.0;9.0.0.1;9.0.1;9.0.2;9.0.2.1;9.0.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21969684