IBM Security Verify

 View Only
Expand all | Collapse all

Log Latency : Webseal request-log-format

  • 1.  Log Latency : Webseal request-log-format

    Posted Tue May 14, 2024 05:32 AM

    Dear IBM Community,

    We are currently experiencing some network performance issues. Specifically, we want to ascertain whether the delays are occurring within WebSEAL itself or in the network communication between WebSEAL and our backend junction server.

    To achieve this, we require detailed logging information that accurately captures the time taken by the backend junction server to process each request.

    Based on https://www.ibm.com/docs/en/sva/10.0.6?topic=stanza-request-log-format Here are the specific log parameters we have used so far:

    • latency: "%J"
    • end_to_end_latency: "%F"

    We are seeking guidance on the optimal log format and any additional parameters that could help us isolate and measure the backend processing time accurately.

    Questions:

    1. Are there any additional or alternative log parameters that can give us more precise insights into the backend junction server processing times?
    2. How can we configure our logs to distinguish between the time spent within WebSEAL and the time spent in network transit to the backend junction server?

    Thank you for your support and expertise.



    ------------------------------
    Piyush Agrawal
    https://www.linkedin.com/in/piyush-norway/
    Gjensidige Norway
    ------------------------------


  • 2.  RE: Log Latency : Webseal request-log-format

    Posted Tue May 14, 2024 06:13 PM

    I believe that you have two options here:

    1. You can add the '%F' and '%J' format specifiers to the request log.  The '%F' specifier will show you how long it took WebSEAL to process the request, from the time that it received the request until it sends the response back to the client.  The '%J' specifier will show you how long the junction processing took, from the time that the request was sent to the junctioned server until the response was received.  If you subtract the '%J' value from the '%F' value you will find out how much time the request spent within the WebSEAL server.
    2. If this is not a permanent change and you just want to debug where time is being spent you can use WebSEAL statistics.  See the documentation for further information: https://www.ibm.com/docs/en/sva/10.0.7?topic=auditing-working-local-statistics.  You also have the option of sending statistical information to a remote statsd server: https://www.ibm.com/docs/en/sva/10.0.7?topic=monitoring-sending-statistics-statsd.

     

    I hope that this helps.

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     




    Original Message