Http logs in 7.11

Hi guys,
Do you know where to find http logs in 7.11? And also how to download these logs?
Thanks!

For logging HTTP messages:
Go to TCODE - SXMB_ADM
and add those paramaters:
LOGGING and LOGGING_SYNC category RUNTIME current value = 1 (active)
you can also set TRACE_LEVEL to 3 (on your DEV XI system) so that XI will document all processing steps and details
If you're referring to HTTP Service Logs, follow the above instructions.

Similar Messages

Using API mbean for HTTP Logging - WebServerLogMBean

I have been trying to configure http logging using API MBEANS. For some reason, the values are not being passed along.
I am using WLST to call a .py to configure the values. For the general logging, it works without issue.
Also, along the same format, how can logging be adjusted for the admin logs.
Version WL: 10
****SCRIPT*****
import weblogic.management.configuration.LogMBean as LogMBean
import weblogic.management.configuration.WebServerLogMBean as WebServerLogMBean
# This section creates the Log MBean and configures it for log rotation.
create(managedServerName, 'Log')
cd('Log/' + managedServerName)
cmo.setRotationType(LogMBean.TIME)
cmo.setFileName('logs/' + managedServerName + '.log')
cmo.setFileCount(25)
# This section creates the WebServer Log MBean and configures it for log rotation. HTTP LOGGING
cmo.setRotationType(WebServerLogMBean.TIME)
cmo.setFileCount(15)
cmo.setLogFileFormat(extend)
cmo.setELFFields("c-ip date time cs-method cs-uri sc-status bytes time-taken")
*****END OF SCRIPT*****
Any help is appreciated.
Edited by woodalla at 06/09/2008 11:25 AM

Can you provide more info on what the problem is? What do you mean by
the values are not being passed along?
Andrew Woodall wrote:
I have been trying to configure http logging using API MBEANS. For some reason, the values are not being passed along.
I am using WLST to call a .py to configure the values. For the general logging, it works without issue.
Also, along the same format, how can logging be adjusted for the admin logs..
Version WL: 10
****SCRIPT*****
import weblogic.management.configuration.LogMBean as LogMBean
import weblogic.management.configuration.WebServerLogMBean as WebServerLogMBean
# This section creates the Log MBean and configures it for log rotation.
create(managedServerName, 'Log')
cd('Log/' + managedServerName)
cmo.setRotationType(LogMBean.TIME)
cmo.setFileName('logs/' + managedServerName + '.log')
cmo.setFileCount(25)
# This section creates the WebServer Log MBean and configures it for log rotation. HTTP LOGGING
cmo.setRotationType(WebServerLogMBean.TIME)
cmo.setFileCount(15)
cmo.setLogFileFormat(extend)
cmo.setELFFields("c-ip date time cs-method cs-uri sc-status bytes time-taken")
*****END OF SCRIPT*****
Any help is appreciated.
Edited by woodalla at 06/09/2008 11:25 AM

In HTTP log: Store Critical: Unable to read index file for user/ uid

All:
Sun Java(tm) System Messaging Server 6.2-7.05 (built Sep 5 2006)
libimta.so 6.2-7.05 (built 12:18:44, Sep 5 2006)
We recently have started to see the following errors in our http logs:
[01/Mar/2007:13:03:43 -0500] httpd[5174]: Store Critical: Unable to read index file for user/<uid>: System I/O error. Administrator, check server log for details.
It's occurring a couple of different times during the day to certain users. Then it won't happen for days to anyone, but then start up again. I saw a similar thread to this re: IMAP and I'm curious if http could be having the same problem. We increased the number of process of http (from 2 to 4 a few months ago) but kept the same maxsessions (6000), so maybe I need to change the maxsession to something lower? We only started to see the I/O error two weeks ago We're not seeing the error in imap logs. Also there's no errors in the default log related to the users that receive this in http.
I'm planning on running a reconstruct -m in the mean time to see if that helps. There have been no changes to the server or application for quite some time. Any thoughts?

Yes, http can have the same issue. Yes, lowering the maxsessions from 6000 is the answer, IF it's the same problem. Likely, but not guranteed.
If you actually look at the store.idx for that particular user, what do you see? Is it near 2 gig? If so, then the user needs to either delete some messages or move some to another folder, as 2 gig is the limit for the store.idx file.....
jay

Http logs flooded with Account Notice: close unauthenticated

Hi,
In the http log file there is a flood of error messages on that logs an entriy eveytime someone clicks on something in it logs an entry
is there any specific reason why this is happening?
iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)
libimta.so 5.2 Patch 2 (built 19:30:12, Jul 14 2004)
SunOS mail 5.9 Generic_117171-07 sun4u sparc SUNW,Sun-Blade-1000
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 207 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 211 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 209 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 212 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 208 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 208 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 207 127 0
[18/May/2005:10:01:41 +0300] webmail httpd[22300]: Account Notice: close 1.229.1.187 xyz.rss 2005/5/18 10:00:52 0:00:49 0 0 1
[18/May/2005:10:01:51 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:51 0:00:00 493 377 0
[18/May/2005:10:01:51 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:51 0:00:00 508 4399 0
[18/May/2005:10:01:51 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:51 0:00:00 208 127 0
[18/May/2005:10:02:04 +0300] webmail httpd[22300]: Account Notice: close [6.18.39.25] [unauthenticated] 2005/5/18 10:02:01 0:00:03 2736 2743 0

Hi Jay,
Does that mean that if the logs written "unauthenticated" it means the user actually did not login and it was just the user's PC "pinging" the server because their browser is still on and set to the msg server?
I am trying to graph the http log but my log is as below:
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close 133.12.130.89 25528 2005/7/7 12:39:43 2:09:44 0 0 1
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close 134.31.130.113 74881 2005/7/7 12:40:42 2:08:45 0 0 1
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close 130.32.82.111 28286 2005/7/7 12:42:14 2:07:13 0 0 1
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:27 0:00:00 19 149 0
[07/Jul/2005:14:49:29 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:29 0:00:00 19 149 0
[07/Jul/2005:14:49:31 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:31 0:00:00 19 149 0
[07/Jul/2005:14:49:33 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:33 0:00:00 19 149 0
[07/Jul/2005:14:49:35 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:35 0:00:00 19 149 0
[07/Jul/2005:14:49:37 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:37 0:00:00 19 149 0
[07/Jul/2005:14:49:39 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:39 0:00:00 19 149 0
[07/Jul/2005:14:49:40 +0800] myserver httpd[10763]: Account Notice: close [139.16.130.68] [unauthenticated] 2005/7/7 14:48:08 0:01:32 2476 7191 0
[07/Jul/2005:14:49:41 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:41 0:00:00 19 149 0
[07/Jul/2005:14:49:43 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:43 0:00:00 19 149 0
[07/Jul/2005:14:49:45 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:45 0:00:00 19 149 0
[07/Jul/2005:14:49:45 +0800] myserver httpd[10763]: Account Notice: close [139.16.130.68] [unauthenticated] 2005/7/7 14:48:08 0:01:37 2714 8341 0
[07/Jul/2005:14:49:47 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:47 0:00:00 19 149 0
[07/Jul/2005:14:49:49 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:49 0:00:00 19 149 0
[07/Jul/2005:14:49:51 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:51 0:00:00 19 149 0
Can I assume that those without the [unauthenticated] are those who actually login during the time period? or is it logout?
Any suggestions on how to graph the http log?

Getting auth_user into http logs

We are currently using a vendors portal server product running on WebLogic 5.1SP8
on Solaris 8.
My question is : When a user authenticates to the portal and is logged in, how
can I get the userID written
to the http log. Currently the common logfile format of the http logs displays"-"
in the authuser location,
but does fill in the remotehost, date,request, status, and bytes fields. Thanks

Dear Murthy,
Hope you are doing good.
Try following in order to avoid the timeout:
1) refer to note 824554 and check whether increasing the ICM parameter helps to prevent the timeouts. Either set the parameter for icm/server_port_0 or increase icm/keep_alive_timeout (sec.) from 600 to 10000.
2) in the system settings change the profile parameter ms/http_timeout and ms/https_timeout to higher values.
3) Regarding the parameter rdisp/plugin_auto_logout, refer the blog: [BSP In-Depth: Confusion between Stateless, Stateful and Authentication]
(Timer: Session Management, Timer: HTTP Request Processing Time).
4) Set: icm/HTTP/esid_response_check = TRUE in the backend system, restart the server and perform a new test.
Thank you and have a nice day :).
Kind Regards,
Hemanth
SAP AGS

Failed to roll HTTP log file Error at Startup WL 8.1

Hi people, i´m having the following error on the Weblogic 8.1 console at startup , the applications works fine but i´m always having this:
####<Oct 19, 2004 6:44:12 PM CDT> <Error> <HTTP> <computerName> <portalServer> <ExecuteThread: '11' for queue: 'default'> <<WLS Kernel>> <> <BEA-101242> <Failed to roll HTTP log file for the Web server: portalServer.
java.io.IOException: Failed to rename log file on attempt to rotate logs
     at weblogic.servlet.logging.LogManagerHttp.rotateLog(LogManagerHttp.java:200)
     at weblogic.servlet.logging.LogManagerHttp.keepStatsAndRollIfNecessary(LogManagerHttp.java:349)
     at weblogic.servlet.logging.LogManagerHttp.log(LogManagerHttp.java:391)
     at weblogic.servlet.internal.HttpServer.log(HttpServer.java:1137)
     at weblogic.servlet.internal.ServletResponseImpl.send(ServletResponseImpl.java:1192)
     at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2590)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)
>
Does anyone know what do i need to do in order to solve this problem??
thanks a lot
Guillermo De La Rosa

I'm having the same error message. I also noticed that the server is running a bit slower and that beasvc.exe is using more memory that usual.Has anyone logged a technical support case??
Thanks.
####<Sep 20, 2005 10:15:28 AM EDT> <Info> <HTTP> <ddca2401> <myserver> <ExecuteThread: '44' for queue: 'weblogic.kernel.Default'> <<anonymous>> <> <BEA-101047> <[ServletContext(id=17209502,name=apps,context-path=/apps)] /*: Using standard I/O>
####<Sep 20, 2005 10:15:28 AM EDT> <Error> <HTTP> <ddca2401> <myserver> <ExecuteThread: '44' for queue: 'weblogic.kernel.Default'> <<WLS Kernel>> <> <BEA-101242> <Failed to roll HTTP log file for the Web server: myserver.
java.io.IOException: Failed to rename log file on attempt to rotate logs
     at weblogic.servlet.logging.LogManagerHttp.rotateLog(LogManagerHttp.java:200)
     at weblogic.servlet.logging.LogManagerHttp.keepStatsAndRollIfNecessary(LogManagerHttp.java:349)
     at weblogic.servlet.logging.LogManagerHttp.log(LogManagerHttp.java:388)
     at weblogic.servlet.internal.HttpServer.log(HttpServer.java:1153)
     at weblogic.servlet.internal.ServletResponseImpl.send(ServletResponseImpl.java:1197)
     at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2574)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

302 in http.log

I am seeing a large numbe of 302 status codes in my http.log file. Is
this normal? the RFC states that this message implies a file is moved
and you are being redirected to it's new location. Is this what I am
seeing? If so, then why is it successfull "200" on the calls before and
after it? One distinction is that all "302" messages are for POSTs that
were exactly 271 bytes. Here's a sample of a log file:
[22/May/2002:14:24:12 -0500] "POST /bin/Servlet?action=Login HTTP/1.1"
200 16473 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
302 271 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
200 2776 206.103.66.134 - -

Hi,
302 is a normal HTTP Code it's simply state to look somewhere else to get what agent
(browser) is looking for. This can be achieved by a servlet or a JSP using API Servlet.
Sometimes it's also the application server that sends a "redirect" (for examples
: proprietary login form, HTTP error page, ...). HTTP code 200 following 302 is
often "normal", it simply state that the browser issue a new request to the location
found in the HTTP code 302 response an finally reach the ressources initialy requested.
If there is too much redirection in application design it can result in poor performance
since each 302 implies a round trip to the server...
Mark Vaughn <[email protected]> wrote:
I am seeing a large numbe of 302 status codes in my http.log file. Is
this normal? the RFC states that this message implies a file is moved
and you are being redirected to it's new location. Is this what I am
seeing? If so, then why is it successfull "200" on the calls before and
after it? One distinction is that all "302" messages are for POSTs that
were exactly 271 bytes. Here's a sample of a log file:
[22/May/2002:14:24:12 -0500] "POST /bin/Servlet?action=Login HTTP/1.1"
200 16473 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
302 271 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
200 2776 206.103.66.134 - -

PabUri Error in http log

We are using the latest Comms 5 suite Messaging server and have migrated Data from IMS5.2 into the new environment and migrated the addressbook from the o=pab to o=PiServerDB using the pab2abs tool. We are not experiencing any problems with the addressbook, however we are seeing the following lines in the http log on the front end Messaging server:
httpd[29632]: General Error: No configured pab.ldaphost matches this pabURI: ldap://+oldldaphost+:389/ou=user,ou=People,o= test.com,o=+test+,o=pab
If the server should ignore the hostname in pabURIs, enable the option local.service.pab.alwaysusedefaulthost
The pabUri that it is showing is the users old pabUri from the old IMS5.2 environment and the users now have the correct psRoot attribute.
Should the pabUri be changed to show the piServerDB location for that user? remove the pabUri attribute for the users? or is there a setting in the messaging server that should be changed?

Hi,
mdpiot1 wrote:
We are using the latest Comms 5 suite Messaging server and have migrated Data from IMS5.2 into the new environment and migrated the addressbook from the o=pab to o=PiServerDB using the pab2abs tool.Are you using UWC or the older Messenger Express web-interface or both?
You only need to migrate the PAB data to o=PiServerDB if you intend to use UWC.
We are not experiencing any problems with the addressbook, however we are seeing the following lines in the http log on the front end Messaging server:
httpd[29632]: General Error: No configured pab.ldaphost matches this pabURI: ldap://+oldldaphost+:389/ou=user,ou=People,o= test.com,o=+test+,o=pab
If the server should ignore the hostname in pabURIs, enable the option local.service.pab.alwaysusedefaulthostThis error indicates that a user logged into Messenger Express and not UWC, as UWC addressbook related errors show up in the uwc.log file.
The pabUri that it is showing is the users old pabUri from the old IMS5.2 environment and the users now have the correct psRoot attribute.pabUri => Messenger Express
psRoot => UWC
Should the pabUri be changed to show the piServerDB location for that user?No this won't help.
Basically you have two independent address-books, one that UWC uses and the other that ME uses. The migration utility that you ran basically copies the ME PAB data to UWC, but this is a one-time thing. If your customers use both ME/UWC and changes both address-books they will not be kept in sync.
Regards,
Shane.

Calendar 5 : http.log and Fetchcomponents_by_range_reply_access

Hi,
Does someone know what this error means :
Fetchcomponents_by_range_reply_access ?
In my http.log I have lines like :
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5A80".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5B92".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "3B42".
Those calendars exist (5A80, 5B92, 3B42), and the everyone has full
control over those calendars. Can someone tell us the meaning of this error
Thank you very much,
Norbert

Hi,
What is the product ?
Regards
Raj
"Norbert Cauderan" wrote:
Hi,
Does someone know what this error means :
Fetchcomponents_by_range_reply_access ?
In my http.log I have lines like :
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5A80".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5B92".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "3B42".
Those calendars exist (5A80, 5B92, 3B42), and the everyone has full
control over those calendars. Can someone tell us the meaning of this error
Thank you very much,
Norbert

Http.log debug entries

Hi,
I'm seeing a lot of below entries in my http.log file. Any one has an idea?
cshttpd[978]: General Debug: Cache DB Checkpoint Done
cshttpd[978]: General Debug: Cache DB Checkpoint Done
cshttpd[978]: General Debug: Got ppFileList of logfiles not needed. Retval = 0, ppFileList is at 0

stamford wrote:
I'm seeing a lot of below entries in my http.log file. Any one has an idea?What is the context of your question i.e. why are you even looking at Debug logs?
What version of Calendar Server are you running (./csversion)?
Regards,
Shane.

Https log in error

Hi experts
i'd like to know how is possible to solve this log-in error
No switch to HTTPS occurred, so it is not secure to send a password Client, name, or password is not correct; log on again
Regards
andrea

Hi Andrea,
go to
- TA SICF
- select the service where you are facing the message (e.g. BBPSTART)
- tab "logon data"
- change the "security requirement" to SSL
This should help.
Best regards,
Georg

Https (log in) pages and Top Sites...

I'm having trouble making any page that's https (such as log in pages) permanent in Top Sites. I get everything set up the way I want, quit, and upon restart, everything with https is gone, while my other permanent sites are still there as I left them.
Does Top Sites not allow https pages to be marked as permanent?
Thanks

Hi Rob,
Try maintenance ...
From the Safari Menu Bar, click Safari / Empty Cache. When you are done with that...
From the Safari Menu Bar, click Safari / Reset Safari. Select the top 5 buttons and click Reset.
If Safari unexpectedly quits, it could be a 3rd party plugins causing the problem. Go to ~/Library/Internet Plugins. Move any 3rd party plugins to the Trash and restart your Mac.
Also, if you are running Safari in 64 bit mode, try running in 32-bit mode instead. Right or control click the Safari icon in the Applications folder, then click: Get Info In the Get Info window click the black disclosure triangle next to General so it faces down. Select 32 bit mode. Quit Safari then relaunch.
While you have the Get Info window open for Safari, make sure it's not running in Rosetta.
Keep your system software up to date. Go to the Apple Menu / Software Updates.
Repair disk permissions...
Quit any open applications/programs. Launch Disk Utility. (Applications/Utilities) Select MacintoshHD in the panel on the left, select the FirstAid tab. Click: Repair Disk Permissions. When it's finished from the Menu Bar, Quit Disk Utility and restart your Mac. If you see a long list of "messages" in the permissions window, it's ok. That can be ignored. As long as you see, "Permissions Repair Complete" when it's finished... you're done. Quit Disk Utility and restart your Mac.
Carolyn

IPlanet 6.0 - Enabling HTTP logging to debug SSL Handshake

Hello all,
We have a IPlanet 6.0 web server instance which receives secure HTTP requests from client systems. We are experiencing a SSL handshake failure. We have ensured that the correct certificates are installed at both ends.
A wireshark trace at the web server shows that the Client Hello was received successfully and a Server Hello was never sent. Our conjecture is that this could be because the cipher suites do not match. It could be extremely useful to us if we could enable appropriate levels of logging and/or add JVM options to log the HTTP/SSL handshake transactions.
Can someone help us with the additional logging? If there are questions that I can answer, please let me know.
Thanks,
Sourabh

6.0 is EOL (dead). Please upgrade to 7.0.
I can answer SSL protocol questions as far as they apply to 7.0, but don't have any information about 6.0 specifically.
The JVM is not involved in SSL protocol handling. In general for diagnostics, always set the Web Server error log to verbose. That said in this case it probably won't help much, but can't hurt.
If the client hello is being silently ignored there is some higher level problem going on. Either the server has crashed or is hung or maybe it never received the client request or maybe its response was lost (a misbehaving firewall dropping packets, for example). This is not a case of merely having no common ciphersuite, the server would still have sent a failure response if it was able to do so.
It might not reveal much more than wireshark did, but first thing I'd try (after upgrading to 7.0 ;-), is run the connection attempt through ssltap and see what it reports.

HTTP logs not created when using software load balancer

This is my setup:
1. I have a server running a software load balancer - call it A
2. There are two servers clustered under A - call it X and Y
3. I am able to access the application deployed on X and Y through A.
Fail-over also works. Shutting down X when the application is up and running routes the requests to Y and vice-versa. All is well until this point.
Problem is:
Let us take server X.
$ORACLE_HOME/Apache/Apache/logs does not have an access log in it. (It
however has an error log.)
Access logs are not created when accessing the servers in the cluster (X and Y) through the load balancer URL.
However, when accessing the individual servers in the cluster (with their URLs), access logs are created.
Specifics on the setup:
1. A, X, Y - all three are OAS 10.1.3.2
2. All three are deployed on individual server machines
3. All three servers have one OC4J instance each running in them
4. The software load balancer used is from WebLogic 8.1sp5 - basically to create a *.war file that has the details of X and Y (servers in the cluster)
5. This *.war file is deployed on A
6. Server A, the one that has the software load balancer, DOES NOT have AS control. One of the other servers in the cluster does.
Has anybody encountered this problem before? Or is there anything wrong
with the setup? What is the resolution for the same?
Any help is greatly appreciated.
Thank you.

Thank you, Jacco. You are right in saying that the software load balancer does not route the request to Apache and hence the logs are not created.
While the logs are not critical to the component we are working on, was just wondering why they were not being created.
As regards your comment on FastCGI, there is a FastCGI directory created under $ORACLE_HOME/Apache/Apache/logs - but there is nothing in it. Neither do the error logs have any information pertaining to FastCGI.
Anyway, I am not going to worry about this issue anymore - may be sometime in the future will try to use a different software load balancer and see if it makes any difference.

Understanding http log

Hi,
I know that the doc did specify a very high level of understanding the log:
dateTime hostName processName[pid]: category logLevel: eventMessage
However I have couple of questions here:
Q1) Why is there different IP addresses shown? 129.2.20.19 is the load balancer and 136.14.130.21 is from PC.
Q2) What is the difference between the 2 time stamps, one at the beginning and one at the end of each entry?
Example: ..03/Jun/2005:14:58:00....14:56:57 0:01:03.....
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/6/3 14:58:00 0:00:00 19 149 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [192.168.48.109] [unauthenticated] 2005/6/3 14:58:00 0:00:00 623 262 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [136.14.130.21] [unauthenticated] 2005/6/3 14:56:57 0:01:03 1330 604 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [136.14.130.21] [unauthenticated] 2005/6/3 14:56:56 0:01:04 2435 3698 0

Hi,
I know that the doc did specify a very high level of
understanding the log:
dateTime hostName processName[pid]: category
logLevel: eventMessage
However I have couple of questions here:
Q1) Why is there different IP addresses shown?
129.2.20.19 is the load balancer and 136.14.130.21
1 is from PC.The ip is the address of the system that connected. It's reporting that. If one of your users connected directly, then his ip is reported. We must know the ip where the connection is happening, if we're going to have ip security.
Q2) What is the difference between the 2 time stamps,
one at the beginning and one at the end of each
entry?Login time vs log out time? I'm not exactly sure, myself.
Why is this important to you? The timestamp on the left is the logout time.
>
Example: ..03/Jun/2005:14:58:00....14:56:57
0:01:03.....
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [129.2.20.19] [unauthenticated]
2005/6/3 14:58:00 0:00:00 19 149 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [192.168.48.109]
[unauthenticated] 2005/6/3 14:58:00 0:00:00 623 262
0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [136.14.130.21]
[unauthenticated] 2005/6/3 14:56:57 0:01:03 1330 604
0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [136.14.130.21]
[unauthenticated] 2005/6/3 14:56:56 0:01:04 2435 3698
0

Http logs in 7.11

Similar Messages

Maybe you are looking for