Disk Space Management of ISAM Appliance

Size: px

Start display at page:

Download "Disk Space Management of ISAM Appliance"

Roxanne Carson
5 years ago
Views:

IBM Security Access Manager Tuesday, 5/3/16 Disk Space Management of ISAM Appliance Panelists David Shen Level 2 Support Engineer Steve Hughes Level 2 Support Engineer Nicholas Hasten Level 2 Support

1 IBM Security Access Manager Tuesday, 5/3/16 Disk Space Management of ISAM Appliance Panelists David Shen Level 2 Support Engineer Steve Hughes Level 2 Support Engineer Nicholas Hasten Level 2 Support Engineer Kathy Hansen Level 2 Support Manager Reminder: You must dial-in to the phone conference to listen to the panelists. The web cast does not include audio. USA toll-free: USA toll: Participant passcode: Slides and additional dial in numbers: NOTICE: By participating in this call, you give your irrevocable consent to IBM to record any statements that you may make during the call, as well as to IBM's use of such recording in any and all media, including for video postings on YouTube. If you object, please do not connect to this call.

2 Goal of session In the ISAM appliance, there is no direct control over the file system like there was in the software version. This makes it difficult to manage the hard disk space. The goal of this session is to discuss steps to prevent the file system from filling up, ways to monitor the file system space, and what to do incase the file system gets filled. 2

3 Table of contents / Agenda We will focus this Open Mic from the perspective of PMR work - What have customers been asking us. - What kinds of problems are they encountering. Resources / Tools Available - Live Monitoring Disk Usage Widget - Rsyslog - CLI Commands - REST API Snapshots Commands Known issues 3

4 How Disk Space Gets Filled: Logging Some traces are known to consume more disk space. Traces that enable multiple traces - pdweb Includes Pdweb.snoop Pdweb.debug - Pd Includes Pd.acl Pd.acl.acldb 4

5 How Disk Space Gets Filled: Logging Some traces are known to consume more disk space. GSKit tracing Strace strace -f -o /tmp/strace.log /opt/pdweb/bin/webseald -config etc/websealddefault.conf -foreground > /tmp/start.log 2>&1 Won't cause problems: Routing trace / Per Process Tracing 5

6 How Disk Space Gets Filled: Logging Filter by Total file Size to see which logs are large. Filter by level to see which logging is enabled. 6

How Disk Space Gets Filled: Logging Level Describes the intensity of logging (9 logs more entries). Rollover Size The size before a new file will be created.

7 How Disk Space Gets Filled: Logging Level Describes the intensity of logging (9 logs more entries). Rollover Size The size before a new file will be created. Maximum Rollover Files The maximum number of total files that will be created. If Maximum Rollover files is enabled, new logs will continue being logged and old logs will automatically be deleted. 7

8 Monitoring Disk Usage 8

9 Rsyslog logcfg = audit.azn:rsyslog server=grtvmw91-rhevm.tivlab.austin.ibm.com,port=514,log_id=webseald-test,flush_interval=2 9

10 Snapshots 10

11 Solution: Commands to Remove Logs "isam logs delete" "isam logs delete_trace" Description: 11

12 Solution: Commands to Remove Logs Syntax: "support purge" Description: 12

13 REST API 13

14 REST API ~ $ curl -v -k -u admin:admin -H "Accept:application/json" -X DELETE amweb _config.log < HTTP/ OK... * STATE: PERFORM => DONE handle 0x ; line 1590 (connection #0) * Connection #0 to host samapp1m1.tivlab.austin.ibm.com left intact * Expire cleared 14

15 REST API ~ $ curl -v -k -u admin:admin -H "Accept:application/json" -X GET < HTTP/ OK... * STATE: PERFORM => DONE handle 0x ; line 1590 (connection #0) * Connection #0 to host samapp1m1.tivlab.austin.ibm.com left intact [{"id":"msg amweb_config.log","version": ,"file_size":0}] 15

16 Known issues Legacy auditing left enabled to a path that is now invalid on the appliance. Rsyslog cache files use filesystem space when remote server is unreachable. Tracing left enabled Files are left on appliance. 16

17 Questions for the panel? Now is your opportunity to ask questions of our panelists. To ask a question now: Press *1 to ask a question over the phone or Type your question into the SmartCloud Meetings chat To ask a question after this presentation: You are encouraged to participate in our Forum topics 17

directed to the product forum: http://ibm.

18 Where do you get more information? Questions on this or other topics can be directed to the product forum: IBM Support Portal Sign up for My Notifications Follow us: 18

Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your

19 Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM DOES NOT WARRANT THAT ANY SYSTEMS, PRODUCTS OR SERVICES ARE IMMUNE FROM, OR WILL MAKE YOUR ENTERPRISE IMMUNE FROM, THE MALICIOUS OR ILLEGAL CONDUCT OF ANY PARTY. THANK YOU Copyright IBM Corporation All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, these materials. Nothing contained in these materials is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. References in these materials to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and / or capabilities referenced in these materials may change at any time at IBM s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others.

Security Support Open Mic Build Your Own POC Setup

IBM Security Access Manager 08/25/2015 Security Support Open Mic Build Your Own POC Setup Panelists Reagan Knowles Level II Engineer Nick Lloyd Level II Support Engineer Kathy Hansen Level II Support Manager