11 April,19 at 11:51 AM
How to:
Centrify provides the following scripts to enable/disable debug logging:
Enable debugging in journald environment
If you need to enable debug logging for more than one feature, please note the order that the debug commands are run to enable them. When you disable debug logging, you should disable them in reverse order. After disabling all debug logging, you should verify that /etc/systemd/journald.conf has only expected values set for at least these settings:
If you have accidentally disabled debug logging out of order, then it is possible to rectify the problem by:
Enable debugging in rsyslog environment
If you enable debug logging for both DirectAudit and DirectControl, “addebug off” will disable debug logging for both DirectAudit and DirectControl. If you still want to capture debug log for DirectAudit, you need to run “dadebug off” then “dadebug on” to enable debug logging again.
Changing system log throttle settings
In journald and rsyslog implementations of syslog, two settings control how log messages are throttled :
For example, a burst setting of 30,000 and an interval setting of 5 seconds means processes can log a maximum of 30,000 messages in 5 seconds before further messages are dropped. In Centrify Suite for Linux and Centrify Server Suite 2017, the default values are set to 30,000 messages and 5 seconds for these two parameters. However, for DirectAudit version prior to Suite 2017, the default values are set to 10,000 messages and 1 second for these two parameters.
If you noticed that debug messages are dropped, or you need to enable debug mode for DirectAudit (version prior than Suite 2017) together with DirectControl and/or Centrify Agent for Linux, you need to change these throttle settings.
Editing the throttle limits
The new throttle limits will take effect when debug logging is enabled.