Symantec Access Management

  • 1.  login rate in CA SSO

    Posted Sep 21, 2018 05:53 AM

    Hi Experts,

     

    I have smaccess logs in text file, i am looking for to find out the login rate like every second, how many users getting authenticated or authorized, is there any tool or script to check this?

     

    Thanks in advance

    -Regards

    Rikash



  • 2.  Re: login rate in CA SSO

    Broadcom Employee
    Posted Sep 21, 2018 08:54 AM

    You are looking for throughput of the policy server. Please refer the below KB article:

     

    Tech Tip : CA Single Sign-On :: Policy server :: STATS Information (Updated) 

     

    Here is an example of the 'smpolicysrv -stats' which outputs the smps.log when run:

     

    [3524/4640][Sun Sep 17 2017 23:49:55][CServer.cpp:4747][INFO][sm-Serveor-01990] ===================================================================================
    [3524/4640][Sun Sep 17 2017 23:49:55][CServer.cpp:4748][INFO][sm-Server-02000] System Statistics
    [3524/4640][Sun Sep 17 2017 23:49:55][CServer.cpp:4765][INFO][sm-Server-02020] Thread pool limit: 70
    [3524/4640][Sun Sep 17 2017 23:49:55][CServer.cpp:4787][INFO][sm-Server-02030] Thread pool: Msgs=36630 Throughput=0.033/sec Response Time=209.441ms Wait Time In Queue=0.077ms Max HP Msg=2 Max NP Msg=1 Current Depth=0 Max Depth=2 Current High Depth=0 Current Norm Depth=0 Current Threads=8 Max Threads=8 Busy Threads=0
    [3524/4640][Sun Sep 17 2017 23:49:55][CServer.cpp:4795][INFO][sm-Server-02040] Connections: Current=0 Max=23 Limit=256 Exceeded limit=0
    [3524/4640][Sun Sep 17 2017 23:49:55][CServer.cpp:4798][INFO][sm-Server-01990] ===================================================================================

       

    Note :

    • stats:  This switch produces current server runtime statistics such as thread pool limit, thread pool message, and the number of connections.
    • resetstats: This switch resets the current server runtime statistics without restarting the Policy Server. This switch resets the following counters

     

    Stats Information

    • Msgs                       : This is the total number of requests that have been removed from the queue.
    • Throughput              : Average number of request processed per second (request/per second)
    • Response Time         : Average response times.
    • Wait Time In Queue  : Average time interval between Enqueue and Dequeue of the messages (request) from the queue
    • Max HP Msg             : Maximum number of High Priority messages on the queue since the last reset of stats
    • Max. NP Msg            : Maximum number of Normal Priority messages on the queue since the last reset of stats
    • Current Depth          : Number of messages in the queue at the time of executing -stats
    • Max Depth               : Maximum number of messages in the queue since the last rest of stats
    • Current High Depth   : Number of High Priority messages in the queue at the time of executing -stats
    • Current Norm Depth : Number of Normal Priority messages in the queue at the time of executing -stats
    • Current Threads       : Number of worker threads running at the time of executing -stats. This includes sum of busy and idle worker threads.
    • Max Threads            : Maximum number of worker thread at any time.
    • Busy Threads           : Number of worker threads actively processing request at the time of executing -stats

     



  • 3.  Re: login rate in CA SSO

    Broadcom Employee
    Posted Sep 21, 2018 10:15 AM

    You can also get thruput info by analyzing the smtracedefault from the policy server.  The tool that can do this can be found here:

     

    https://communities.ca.com/thread/97562407-siteminder-policy-trace-analysis



  • 4.  Re: login rate in CA SSO

    Broadcom Employee
    Posted Sep 28, 2018 12:57 PM

    An additional method of seeing this metric is to use the CA SSO OneView Monitor to actively see the transaction rate. This is an active method of monitoring the components. But it does not generate reports.

     

    CA APM is also an active method of collecting the CA SSO metrics and generating reports.

     

    Hope this helps!