Chapter 3. cn=monitor
Information used to monitor the server is stored under
cn=monitor. This entry and its children are read-only; clients cannot directly modify them. The server updates this information automatically. This section describes the
cn=monitor attributes. The only attribute that can be changed by a user to set access control is the
nsslapd-counters attribute in
cn=config is set to
on (the default setting), then all of the counters kept by Directory Server instance increment using 64-bit integers, even on 32-bit machines or with a 32-bit version of Directory Server. For the
cn=monitor entry, the 64-bit integers are used with the
nsslapd-counters attribute enables 64-bit support for these specific database and server counters. The counters which use 64-bit integers are not configurable; the 64-bit integers are either enabled for all the allowed counters or disabled for all allowed counters.
This attribute shows the DN for each Directory Server database backend. For further information on monitoring the database, see the following sections:
- Section 5.4.10, “Database attributes under cn=attribute_name,cn=encrypted attributes,cn=database_name,cn=ldbm database,cn=plugins,cn=config”
- Section 5.4.5, “Database attributes under cn=database,cn=monitor,cn=ldbm database,cn=plugins,cn=config”
- Section 5.5.4, “Database link attributes under cn=monitoring,cn=database_link_name,cn=chaining database,cn=plugins,cn=config”
This attribute shows the number of bytes sent by Directory Server.
This attribute lists open connections and associated status and performance related information and values. These are given in the following format:
A is the connection number, which is the number of the slot in the connection table associated with this connection. This is the number logged as
slot=A in the access log message when this connection was opened, and usually corresponds to the file descriptor associated with the connection. The attribute
dTableSizeshows the total size of the connection table.
- YYYYMMDDhhmmssZ is the date and time, in GeneralizedTime form, at which the connection was opened. This value gives the time in relation to Greenwich Mean Time.
- B is the number of operations received on this connection.
- C is the number of completed operations.
rif the server is in the process of reading BER from the network, empty otherwise. This value is usually empty (as in the example).
E this is the bind DN. This may be empty or have value of
NULLDNfor anonymous connections.
F is the connection maximum threads state:
1is in max threads,
- G is the number of times this thread has hit the maximum threads value.
- H is the number of operations attempted that were blocked by the maximum number of threads.
I is the connection ID as reported in the logs as
- IP_address is the IP address of the LDAP client.
B and C for the initiated and completed operations should ideally be equal.
This attribute shows the number of currently open and active Directory Server connections
This attribute shows the current time, given in Greenwich Mean Time (indicated by
Z notation; for example,
dTableSize attribute shows the size of Directory Server connection table. Each connection is associated with a slot in this table and usually corresponds to the file descriptor used by this connection. For more information, see nsslapd-maxdescriptors and nsslapd-reservedescriptors.
This attribute shows the number of entries sent by Directory Server.
This attribute shows the number of Directory Server database back ends.
This attribute shows the number of Directory Server operations completed.
This attribute shows the number of connections where some requests are pending and not currently being serviced by a thread in Directory Server.
This attribute shows Directory Server start time given in Greenwich Mean Time, indicated by
Z notation. For example,
This attribute shows the number of threads used by Directory Server. This should correspond to
This attribute shows the total number of Directory Server connections. This number includes connections that have been opened and closed since the server was last started in addition to the
This attribute shows Directory Server vendor, version, and build number. For example,