CONFIGURING


Showing statistics related to LDAP service port activity
You can see statistics about LDAP service port activity related specifically to LDAP operations, and also network statistics related to general network activity over the LDAP service ports. You can use the Show Stat command to see statistics. Each statistic listed in the following tables begins with the prefix LDAP, but the tables omit the prefix. For example, the statistic LDAP.Total LDAP Connections is shown as Total LDAP Connections.

Statistics related to LDAP operations

About this task

Statistics calculation begins at LDAP service startup.

Table 1. LDAP connections statistics
StatisticDescription
Total LDAP ConnectionsNumber of LDAP connections
Simple LDAP ConnectionsNumber of LDAP connections using name-and-password authentication
Anonymous LDAP ConnectionsNumber of anonymous LDAP connections
Strong Authentication ConnectionsNumber of LDAP connections using X.509 client certificate authentication
Failed LDAP ConnectionsNumber of LDAP connections that failed
Total LDAP SearchesNumber of LDAP search requests processed
Longest LDAP Search timeLongest amount of time taken to successfully complete an LDAP search request that has been received so far. This statistic does not include LDAP searches that fail with any error.
Average LDAP Search timeAverage amount of time taken to process LDAP search requests received so far. The value includes time taken to process search requests that fail, and so on occasion it may exceed the Longest LDAP Search time value.
Longest LDAP Search requestLongest amount of time to receive an LDAP search request
Total LDAP ModifiesNumber of LDAP modify requests processed
Total LDAP Compares Number of LDAP compare requests processed
Total LDAP AddsNumber of LDAP add requests processed
Total LDAP DeletesNumber of LDAP delete requests processed
Total LDAP ModifyDNsNumber of modifyDN requests processed
Total LDAP Extended OperationsNumber of requests to extend the schema processed
Total LDAP Abandons Number of abandon requests processed
Total LDAP Searches for SubschemaNumber of requests to search the subschema processed
Total LDAP Searches for Root DSENumber of requests to search the root DSE processed
Total LDAP Referrals returnedNumber of referrals to remote LDAP directories returned
Total LDAP Searches on Domain CatalogNumber of requests to search the Domain Catalog processed
Total LDAP Search Entries ReturnedNumber of entries returned from search requests
Total LDAP Search timeTotal time spent processing LDAP searches
Server.RunningShows whether the LDAP service is running

Statistics for network activity on the LDAP service ports

About this task

The following statistics relate to network activity over the LDAP service ports since Domino® server startup. These statistics can reflect network activity that does not involve the LDAP protocol, for example activity resulting from telnet requests.

Table 2. LDAP network statistics
StatisticDescription
Sessions.Inbound.Accept.Queue Number of new connections waiting to be serviced by threadpool
Sessions.Inbound.ActiveNumber of currently running inbound TCP/SSL connections
Sessions.Inbound.Active.SSL Number of currently running inbound SSL connections
Sessions.Inbound.BytesReceived Number of bytes received by all inbound TCP/SSL connections
Sessions.Inbound.BytesSent Number of bytes sent by all inbound TCP/SSL connections
Sessions.Inbound.Peak Maximum number of concurrent inbound TCP/SSL connections
Sessions.Inbound.Peak.SSL Peak number of concurrent inbound SSL connections
Sessions.Inbound.Total Number of all TCP/SSL inbound connections since server started
Sessions.Inbound.Total.SSL Number of all SSL inbound connections since server started
Sessions.Inbound.Total.SSL.Bad_HandshakeTotal number of failed inbound SSL handshakes since server started
Sessions.Outbound.ActiveNumber of currently running outbound TCP/SSL connections
Sessions.Outbound.Active.SSL Number of currently running outbound SSL connections
Sessions.Outbound.BytesReceivedNumber of bytes received by all outbound TCP/SSL connections
Sessions.Outbound.BytesSent Number of bytes sent by all outbound TCP/SSL connections
Sessions.Outbound.PeakMaximum number of concurrent outbound TCP/SSL connections
Sessions.Outbound.Peak.SSLMaximum number of concurrent outbound SSL connections
Sessions.Outbound.TotalNumber of all TCP outbound connections since server started
Sessions.Outbound.Total.SSLNumber of all SSL outbound connections since server started
Sessions.Outbound.Total.SSL.Bad_HandshakeTotal number of failed outbound SSL handshakes since server started
Sessions.Threads.Busy Total number of running threads servicing network IO requests
Sessions.Threads.IdleTotal number of idle threads waiting to service network IO requests
Sessions.Threads.InThreadPoolCurrent® number of threads in threadpool
Sessions.Threads.Peak Peak number of threads in threadpool

LDAP.Search.Longest statistics

About this task

This set of statistics allows administrators to quickly identify slow LDAP search patterns. Often it is the search pattern, not every search instance, that determines the overall efficiency of a Domino LDAP search. LDAP applications search by reusing a limited set of search patterns, but with different values. The LDAP.Search.Longest statistics are performance statistics that provide non-disruptive detection of slow LDAP search patterns, and reveal the slowest search patterns used in LDAP searches.

All four sets of statistics are indexed in parallel. Therefore, information about the slowest search patterns has a statistic name suffix of .01, the second slowest has .02, and so on. This yields statistics names such as LDAP.Search.Longest.Pattern.01 and LDAP.Search.Longest.AverageTime.01.

After identifying slow search patterns, (and depending upon the LDAP application), application administrators are then able to adjust their LDAP applications to substitute search filters that the Domino LDAP server can service more quickly.

Table 3. LDAP longest search time statistics
LDAP.Search.Longest.AverageTimeTotal search time in milliseconds for the search pattern considered divided by count.
LDAP.Search.Longest.CountNumber considered (see LDAPMinLongestSearchTime) searches recorded for the associated pattern.
LDAP.Search.Longest.EntriesNumber of result entries returned by the search pattern
LDAP.Search.Longest.PatternThe search pattern is used to divide each of the individual sets of statistics entries. Its representation uses an abbreviated form of an RFC 4516 LDAP search URL where the ldap://hostname prefix has been omitted and %v is used in place of any attribute value in the filter. The syntax of the pattern is:
  • [dn] ? [attributes] ? [scope] ? [filter] [? extensions]
  • dn - Identifies the base of the LDAP search pattern.
  • attributes - Indicates which attributes should be returned from the result entries.
  • scope - Specifies the scope of the search. "base" for a base object search, "one" for a one-level search, or "sub" for a subtree search. If blank, "sub" is used.
  • filter - Specifies the search filter to apply to entries within the specified scope during the search. It has the format specified in RFC 4515, except %v is used in place of attribute values.
  • extensions - comma-separated list of type=value pairs, indicating requested timeouts, etc.

LDAPMaxLongestSearchCount and LDAPMinLongestSearchTime are two NOTES.INI variables you can use to configure how LDAP.Search.Longest statistics are maintained.

Related concepts
Monitoring system statistics
NOTES.INI Settings
The LDAP service
Setting up the LDAP service