Hello Team,

I just want to know what could be the possible reason for logs are missing for a certain time frame(approx 30-45mins.).

Logs are missing from traces.log(as we have created custom infoMaps, so printing logs in traces) and even from the request.log file.

Webseal and others components were up and running checked from msg_webseal-default.log file.

Any pointer could be helpful.

------------------------------
Mukesh
------------------------------

Hi Mukesh,

trace.log and WebSEAL request.log are two completely different logs written by two different parts of the system.  If they are both missing entries for some amount of time then it seems more likely that requests were not processed during that time than both logs temporarily failed to work.

Could it be that requests during this timeframe were directly somewhere else?  Maybe another cluster member - or a failover system?  Maybe check any load-balancer logs to see whether this was the case?

Jon.

------------------------------
Jon Harry
Consulting IT Security Specialist
IBM
------------------------------

Hi Jon,

Thanks for your quick response.

This issue is on the UAT server, we have not configured the cluster environment for UAT.

We are facing the same issue for a second time.

Are there any logs from that we can get to know, that at least the request has received at ISAM(WebSEAL)?


------------------------------
Mukesh
------------------------------

Original Message:
Sent: Tue June 22, 2021 08:21 AM
From: Jon Harry
Subject: ISAM - Logs are missing.

Hi Mukesh,

trace.log and WebSEAL request.log are two completely different logs written by two different parts of the system.  If they are both missing entries for some amount of time then it seems more likely that requests were not processed during that time than both logs temporarily failed to work.

Could it be that requests during this timeframe were directly somewhere else?  Maybe another cluster member - or a failover system?  Maybe check any load-balancer logs to see whether this was the case?

Jon.

------------------------------
Jon Harry
Consulting IT Security Specialist
IBM
------------------------------

Hi Mukesh,

request.log should have an entry for every request processed.
Have a look at the junction statistics (in pdadmin server task  ... junction show /junction) if the requests for  a junction are increasing then it is processing requests.

Jon.

------------------------------
Jon Harry
Consulting IT Security Specialist
IBM
------------------------------

Original Message:
Sent: Tue June 22, 2021 08:32 AM
From: Mukesh Bhati
Subject: ISAM - Logs are missing.

Hi Jon,

Thanks for your quick response.

This issue is on the UAT server, we have not configured the cluster environment for UAT.

We are facing the same issue for a second time.

Are there any logs from that we can get to know, that at least the request has received at ISAM(WebSEAL)?


------------------------------
Mukesh
------------------------------


Original Message:
Sent: Tue June 22, 2021 08:21 AM
From: Jon Harry
Subject: ISAM - Logs are missing.

Hi Mukesh,

trace.log and WebSEAL request.log are two completely different logs written by two different parts of the system.  If they are both missing entries for some amount of time then it seems more likely that requests were not processed during that time than both logs temporarily failed to work.

Could it be that requests during this timeframe were directly somewhere else?  Maybe another cluster member - or a failover system?  Maybe check any load-balancer logs to see whether this was the case?

Jon.

------------------------------
Jon Harry
Consulting IT Security Specialist
IBM