How to check number of records in impd-notify using ldapsearch

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

The etanotify database (directory) contains records from provisioning server that still have not been consumed by IM.
When all messages has been consumed, the number of records in this directory should be equal to number of connector server.
The number of records in this directory will fluctate during the day. For example an explore/correlate may create a large number of records.

In some cases you would like to monitor the number of records to see if they are getting consumed properly. Especially after clearing a blocking record.
ldapsearch can be used for this

 

Environment

Release: CAIDMB99000-12.6.7-Identity Manager-B to B
Component:

Resolution

ldapsearch is located in Provisioning Server\bin, but any ldapsearch implementation can be used.
HOSTNAME=the host where the directory is running
PASSWORD=The password used when installing provisioning directory
-p 20404 is the default port for the DSA called <HOSTNAME>-impd-notify

ldapsearch -LLL -h HOSTNAME -p 20404 -D "eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb" -w PASSWORD -s sub -b "dc=notify,dc=etadb" dxEntryCount

This will give you the current number of records. Rerunning this regularly should show different numbers. If there are no operation going on in the provisioning server, this number should decrease over time.

 

Additional Information

See TEC593173 (http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec593173.aspx) for clearing out stuck records