Configuring Subsystem Logs; An Overview Of Log Settings; Services That Are Logged - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Chapter 15.

Configuring Subsystem Logs

The Certificate System subsystems create log files that record events related to activities, such as
administration, communications using any of the protocols the server supports, and various other
processes employed by the subsystems. While a subsystem instance is running, it keeps a log of
information and error messages on all the components it manages. Additionally, the Apache and
Tomcat web servers generate error and access logs.
Each subsystem instance maintains its own log files for installation, audit, and other logged functions.
Log plug-in modules are listeners which are implemented as Java™ classes and are registered in the
configuration framework.
All the log files and rotated log files, except for audit logs, are located in the /var/
log/subsystem_name directory, by default.
Regular audit logs are located in the /var/log/subsystem_name directory with other types of logs,
while signed audit logs are written to /var/log/subsystem_name/signedAudit/. The default
location for logs can be changed by modifying the configuration.

15.1. An Overview of Log Settings

The Certificate System subsystem log files record events related to operations within that specific
subsystem instance. For each subsystem, different logs are kept for issues such as installation,
access, and web servers.
The way that logs are configured can affect Certificate System performance. For example, log file
rotation keeps logs from becoming too large, which slows down subsystem performance. This section
explains the different kinds of logs recorded by Certificate System subsystems and covers important
concepts such as log file rotation, buffered logging, and available log levels.
Section 15.1.1, "Services That Are Logged"
•
Section 15.1.2, "Log Levels (Message Categories)"
•
Section 15.1.3, "Buffered and Unbuffered Logging"
•
Section 15.1.4, "Log File Rotation"
•

15.1.1. Services That Are Logged

All major components and protocols of Certificate System log messages to log files.
"Services Logged"
lists services that are logged by default. To view messages logged by a specific
service, customize log settings accordingly. For details, see
Service
ACLs
Administration
All
Authentication
Certificate Authority
Description
Logs events related to access control lists.
Logs events related to administration activities, such as HTTPS communication be
Logs events related to all the services.
Logs events related to activity with the authentication module.
Logs events related to the Certificate Manager.
Table 15.1,
Section 15.6, "Viewing Logs".
359