Guidance for Monitoring CA Directory Session Store Logs in Splunk

Products

• CA Directory

Issue/Introduction

This article provides best practice recommendations for onboarding CA Directory Session Store logs and metrics into Splunk to enable effective monitoring, analysis, and alerting for your Directory environment.

Environment

Directory 14.1

Splunk (3rd party log management platform)

Resolution

To ensure effective monitoring and alerting for the Session Store environment, we recommend utilizing the dxsnmp utility on your Directory servers to export metrics for Splunk ingestion. Focus on the following data points for visibility into the health of your Directory servers:

1. Multiwrite Queue Health: Monitor dxMWStatus. Any status other than "1 (ok)" is a strong indicator of an issue. Also, track dxMWQueueLength.
2. Operational Metrics: Track dsaInOps, dsaReadOps, dsaAddEntryOps, dsaModifyEntryOps, and dsaSearchOps for historical trends on request rates.
3. System Performance: Monitor dxStatsCPUSeconds to help identify performance bottlenecks.
4. Cache Metrics: While dxCache* metrics are useful, test the impact of polling these in your environment first, as excessive SNMP queries to the cache can potentially degrade performance.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.