How to disable all policies with "Debug Trace" enabled
search cancel

How to disable all policies with "Debug Trace" enabled

book

Article ID: 191771

calendar_today

Updated On:

Products

CA API Gateway API SECURITY CA API Gateway Precision API Monitoring Module for API Gateway (Layer 7) CA API Gateway Enterprise Service Manager (Layer 7) STARTER PACK-7 CA Microgateway

Issue/Introduction

We have a scenario where almost all policies in API Gateway have the "Debug Trace" flag enabled. Detected more than 400 policies where the customer intends to uncheck this feature.
We've looked at the ssg database and found out that there is a table where this flag seems to be persisted, and we've created a SQL script that could help them mass disable those flags.

update published_service set tracing=0;

The question: can you confirm this SQL instruction?
Is this the only place in the database where this flag is registered?
Analyzing the dependencies in the SSG database tables structure show no impacts, but we'd like to be sure.

Environment

Release : 9.2

Component : API GATEWAY

Resolution

yes, the flag is updated on ssg database published_service table and tracing field.

if using :

use ssg;
update published_service SET tracing=0 where name ='policyName';

it will disable the service tracing on specific service name. (tracing=1 means enabled)


However the best practice is

1. Change the Logging Level back to CONFIG in Tasks --> Manage Log/Audit Sinks --> Choose SSG Log -->
Properties --> Change Severity Threshold from FINEST back to INFO
2. Then go to Tasks --> Global Settings --> Cluster Wide Properties and change log.levels back to com.l7tech.level = CONFIG
3. Edit your service and uncheck the Enable Policy Debug tracing

Additional Information

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-api-management/api-gateway/9-4/services-and-policies/working-with-policies/debug-a-policy/working-with-the-debug-trace-policy.html