Domino Consulting - HCL Domino Administrator 12 Help

CONFIGURING

Showing statistics related to LDAP service port activity

You can see statistics about LDAP service port activity related specifically to LDAP operations, and also network statistics related to general network activity over the LDAP service ports. You can use the Show Stat command to see statistics. Each statistic listed in the following tables begins with the prefix LDAP, but the tables omit the prefix. For example, the statistic LDAP.Total LDAP Connections is shown as Total LDAP Connections.

Statistics related to LDAP operations

About this task

Statistics calculation begins at LDAP service startup.

Table 1. LDAP connections statistics

Statistic Description

Total LDAP Connections Number of LDAP connections

Simple LDAP Connections Number of LDAP connections using name-and-password authentication

Anonymous LDAP Connections Number of anonymous LDAP connections

Strong Authentication Connections Number of LDAP connections using X.509 client certificate authentication

Failed LDAP Connections Number of LDAP connections that failed

Total LDAP Searches Number of LDAP search requests processed

Longest LDAP Search time Longest amount of time taken to successfully complete an LDAP search request that has been received so far. This statistic does not include LDAP searches that fail with any error.

Average LDAP Search time Average amount of time taken to process LDAP search requests received so far. The value includes time taken to process search requests that fail, and so on occasion it may exceed the Longest LDAP Search time value.

Longest LDAP Search request Longest amount of time to receive an LDAP search request

Total LDAP Modifies Number of LDAP modify requests processed

Total LDAP Compares Number of LDAP compare requests processed

Total LDAP Adds Number of LDAP add requests processed

Total LDAP Deletes Number of LDAP delete requests processed

Total LDAP ModifyDNs Number of modifyDN requests processed

Total LDAP Extended Operations Number of requests to extend the schema processed

Total LDAP Abandons Number of abandon requests processed

Total LDAP Searches for Subschema Number of requests to search the subschema processed

Total LDAP Searches for Root DSE Number of requests to search the root DSE processed

Total LDAP Referrals returned Number of referrals to remote LDAP directories returned

Total LDAP Searches on Domain Catalog Number of requests to search the Domain Catalog processed

Total LDAP Search Entries Returned Number of entries returned from search requests

Total LDAP Search time Total time spent processing LDAP searches

Server.Running Shows whether the LDAP service is running

Statistics for network activity on the LDAP service ports

About this task

The following statistics relate to network activity over the LDAP service ports since Domino® server startup. These statistics can reflect network activity that does not involve the LDAP protocol, for example activity resulting from telnet requests.

Table 2. LDAP network statistics

Statistic Description

Sessions.Inbound.Accept.Queue Number of new connections waiting to be serviced by threadpool

Sessions.Inbound.Active Number of currently running inbound TCP/TLS connections

Sessions.Inbound.Active.SSL Number of currently running inbound TLS connections

Sessions.Inbound.BytesReceived Number of bytes received by all inbound TCP/TLS connections

Sessions.Inbound.BytesSent Number of bytes sent by all inbound TCP/TLS connections

Sessions.Inbound.Peak Maximum number of concurrent inbound TCP/TLS connections

Sessions.Inbound.Peak.SSL Peak number of concurrent inbound TLS connections

Sessions.Inbound.Total Number of all TCP/TLS inbound connections since server started

Sessions.Inbound.Total.SSL Number of all TLS inbound connections since server started

Sessions.Inbound.Total.SSL.Bad_Handshake Total number of failed inbound TLS handshakes since server started

Sessions.Outbound.Active Number of currently running outbound TCP/TLS connections

Sessions.Outbound.Active.SSL Number of currently running outbound TLS connections

Sessions.Outbound.BytesReceived Number of bytes received by all outbound TCP/TLS connections

Sessions.Outbound.BytesSent Number of bytes sent by all outbound TCP/TLS connections

Sessions.Outbound.Peak Maximum number of concurrent outbound TCP/TLS connections

Sessions.Outbound.Peak.SSL Maximum number of concurrent outbound TLS connections

Sessions.Outbound.Total Number of all TCP outbound connections since server started

Sessions.Outbound.Total.SSL Number of all TLS outbound connections since server started

Sessions.Outbound.Total.SSL.Bad_Handshake Total number of failed outbound TLS handshakes since server started

Sessions.Threads.Busy Total number of running threads servicing network IO requests

Sessions.Threads.Idle Total number of idle threads waiting to service network IO requests

Sessions.Threads.InThreadPool Current® number of threads in threadpool

Sessions.Threads.Peak Peak number of threads in threadpool

LDAP.Search.Longest statistics

About this task

This set of statistics allows administrators to quickly identify slow LDAP search patterns. Often it is the search pattern, not every search instance, that determines the overall efficiency of a Domino LDAP search. LDAP applications search by reusing a limited set of search patterns, but with different values. The LDAP.Search.Longest statistics are performance statistics that provide non-disruptive detection of slow LDAP search patterns, and reveal the slowest search patterns used in LDAP searches.

All four sets of statistics are indexed in parallel. Therefore, information about the slowest search patterns has a statistic name suffix of .01, the second slowest has .02, and so on. This yields statistics names such as LDAP.Search.Longest.Pattern.01 and LDAP.Search.Longest.AverageTime.01.

After identifying slow search patterns, (and depending upon the LDAP application), application administrators are then able to adjust their LDAP applications to substitute search filters that the Domino LDAP server can service more quickly.

Table 3. LDAP longest search time statistics

LDAP.Search.Longest.AverageTime Total search time in milliseconds for the search pattern considered divided by count.

LDAP.Search.Longest.Count Number considered (see LDAPMinLongestSearchTime) searches recorded for the associated pattern.

LDAP.Search.Longest.Entries Number of result entries returned by the search pattern

LDAP.Search.Longest.Pattern The search pattern is used to divide each of the individual sets of statistics entries. Its representation uses an abbreviated form of an RFC 4516 LDAP search URL where the ldap://hostname prefix has been omitted and %v is used in place of any attribute value in the filter. The syntax of the pattern is:

[dn] ? [attributes] ? [scope] ? [filter] [? extensions]
dn - Identifies the base of the LDAP search pattern.
attributes - Indicates which attributes should be returned from the result entries.
scope - Specifies the scope of the search. "base" for a base object search, "one" for a one-level search, or "sub" for a subtree search. If blank, "sub" is used.
filter - Specifies the search filter to apply to entries within the specified scope during the search. It has the format specified in RFC 4515, except %v is used in place of attribute values.
extensions - comma-separated list of type=value pairs, indicating requested timeouts, etc.

LDAPMaxLongestSearchCount and LDAPMinLongestSearchTime are two NOTES.INI variables you can use to configure how LDAP.Search.Longest statistics are maintained.

Help on Help

All Help Contents

Help on Help

All Help Contents

Statistic	Description
Total LDAP Connections	Number of LDAP connections
Simple LDAP Connections	Number of LDAP connections using name-and-password authentication
Anonymous LDAP Connections	Number of anonymous LDAP connections
Strong Authentication Connections	Number of LDAP connections using X.509 client certificate authentication
Failed LDAP Connections	Number of LDAP connections that failed
Total LDAP Searches	Number of LDAP search requests processed
Longest LDAP Search time	Longest amount of time taken to successfully complete an LDAP search request that has been received so far. This statistic does not include LDAP searches that fail with any error.
Average LDAP Search time	Average amount of time taken to process LDAP search requests received so far. The value includes time taken to process search requests that fail, and so on occasion it may exceed the Longest LDAP Search time value.
Longest LDAP Search request	Longest amount of time to receive an LDAP search request
Total LDAP Modifies	Number of LDAP modify requests processed
Total LDAP Compares	Number of LDAP compare requests processed
Total LDAP Adds	Number of LDAP add requests processed
Total LDAP Deletes	Number of LDAP delete requests processed
Total LDAP ModifyDNs	Number of modifyDN requests processed
Total LDAP Extended Operations	Number of requests to extend the schema processed
Total LDAP Abandons	Number of abandon requests processed
Total LDAP Searches for Subschema	Number of requests to search the subschema processed
Total LDAP Searches for Root DSE	Number of requests to search the root DSE processed
Total LDAP Referrals returned	Number of referrals to remote LDAP directories returned
Total LDAP Searches on Domain Catalog	Number of requests to search the Domain Catalog processed
Total LDAP Search Entries Returned	Number of entries returned from search requests
Total LDAP Search time	Total time spent processing LDAP searches
Server.Running	Shows whether the LDAP service is running

Statistic	Description
Sessions.Inbound.Accept.Queue	Number of new connections waiting to be serviced by threadpool
Sessions.Inbound.Active	Number of currently running inbound TCP/TLS connections
Sessions.Inbound.Active.SSL	Number of currently running inbound TLS connections
Sessions.Inbound.BytesReceived	Number of bytes received by all inbound TCP/TLS connections
Sessions.Inbound.BytesSent	Number of bytes sent by all inbound TCP/TLS connections
Sessions.Inbound.Peak	Maximum number of concurrent inbound TCP/TLS connections
Sessions.Inbound.Peak.SSL	Peak number of concurrent inbound TLS connections
Sessions.Inbound.Total	Number of all TCP/TLS inbound connections since server started
Sessions.Inbound.Total.SSL	Number of all TLS inbound connections since server started
Sessions.Inbound.Total.SSL.Bad_Handshake	Total number of failed inbound TLS handshakes since server started
Sessions.Outbound.Active	Number of currently running outbound TCP/TLS connections
Sessions.Outbound.Active.SSL	Number of currently running outbound TLS connections
Sessions.Outbound.BytesReceived	Number of bytes received by all outbound TCP/TLS connections
Sessions.Outbound.BytesSent	Number of bytes sent by all outbound TCP/TLS connections
Sessions.Outbound.Peak	Maximum number of concurrent outbound TCP/TLS connections
Sessions.Outbound.Peak.SSL	Maximum number of concurrent outbound TLS connections
Sessions.Outbound.Total	Number of all TCP outbound connections since server started
Sessions.Outbound.Total.SSL	Number of all TLS outbound connections since server started
Sessions.Outbound.Total.SSL.Bad_Handshake	Total number of failed outbound TLS handshakes since server started
Sessions.Threads.Busy	Total number of running threads servicing network IO requests
Sessions.Threads.Idle	Total number of idle threads waiting to service network IO requests
Sessions.Threads.InThreadPool	Current® number of threads in threadpool
Sessions.Threads.Peak	Peak number of threads in threadpool

LDAP.Search.Longest.AverageTime	Total search time in milliseconds for the search pattern considered divided by count.
LDAP.Search.Longest.Count	Number considered (see LDAPMinLongestSearchTime) searches recorded for the associated pattern.
LDAP.Search.Longest.Entries	Number of result entries returned by the search pattern
LDAP.Search.Longest.Pattern	The search pattern is used to divide each of the individual sets of statistics entries. Its representation uses an abbreviated form of an RFC 4516 LDAP search URL where the ldap://hostname prefix has been omitted and %v is used in place of any attribute value in the filter. The syntax of the pattern is: [dn] ? [attributes] ? [scope] ? [filter] [? extensions] dn - Identifies the base of the LDAP search pattern. attributes - Indicates which attributes should be returned from the result entries. scope - Specifies the scope of the search. "base" for a base object search, "one" for a one-level search, or "sub" for a subtree search. If blank, "sub" is used. filter - Specifies the search filter to apply to entries within the specified scope during the search. It has the format specified in RFC 4515, except %v is used in place of attribute values. extensions - comma-separated list of type=value pairs, indicating requested timeouts, etc.