Symantec Access Management

  • 1.  Trace Template for SMTrace and InMemoryTrace

    Broadcom Employee
    Posted Feb 15, 2018 03:12 PM

    Are there any recommended trace template data available for smtracedefault and inmemorytrace for PROD servers ?

     

    Env:

    SSO 12.7 SP2 on RHEL 7.x



  • 2.  Re: Trace Template for SMTrace and InMemoryTrace

    Posted Feb 15, 2018 08:02 PM

    Hi Makesh, 

     

    You can use the below for SmTrace :

     

     

    components: Server/Connection_Management, Server/Policy_Server_General, IsProtected/Function_Begin_End, Login_Logout/Function_Begin_End, Login_Logout/Authentication, IsAuthorized/Function_Begin_End, ODBC, LDAP/Ldap_Call_Begin_End, LDAP/Internal_Operation, LDAP/Connection_Management, LDAP/Ldap_Error_Messages

    data: Date, PreciseTime, Tid, SrcFile, Function, ErrorValue, ErrorString, Data, Message

    version: 1.1

     

    Regards,

    Ram,



  • 3.  Re: Trace Template for SMTrace and InMemoryTrace

    Broadcom Employee
    Posted Feb 15, 2018 09:01 PM

    Thanks Ram.

     

    Are there any performance impact enabling both smtrace and in-memory trace on the PROD policy server or is it SAFE to just enable in-memory trace alone ?



  • 4.  Re: Trace Template for SMTrace and InMemoryTrace

    Posted Feb 15, 2018 09:33 PM

    Hi Makesh, 

     

    Having both Smtrace and in-memory might cause performance issues. However, you can turn on and off the SmTrace based on your requirement so that you can avoid performance issues.

     

     

    Regards,

    Ram,



  • 5.  Re: Trace Template for SMTrace and InMemoryTrace

    Posted Feb 15, 2018 09:36 PM

    Hello,

     

    Refer to the below link for In-memory Trace :

     

    Configure In-memory Trace Template - CA Single Sign-On - 12.7 - CA Technologies Documentation 

     

    Regards,

    Ram,



  • 6.  Re: Trace Template for SMTrace and InMemoryTrace
    Best Answer

    Posted Feb 19, 2018 01:02 AM

    Hi Makesh,

     

    We don't have any recommended trace template as that would depend on what you are trying to troubleshoot.

     

    For e.g if you are intending to troubleshoot the connectivity with LDAP , it is unnecessary too select ODBC component but mandatory to select LDAP..

     

    Theoretically, enabling tracing (inmemory or infile) should decrease PS performance as it involves more I/O operation.

    However, having said, one of my test earlier gave reverse result. 

    Policy server performance actually increased on enabling the tracing  

    This was with 12.52SP1.

     

    So this needs to be tested on your current version of PS before determining.

     

    Regards,

    Ujwol