CFS Log Analyzer
The CFS Log Analyzer is the tool used for monitoring and troubleshooting the CFS server, as well as for auditing and creating reports. It displays all available information about user activity and log files. It allows you to view logs, and filter the data however you want. All reports can be exported to Excel. The Log Analyzer is installed on the same machine as the CFS server.
The Log Analyzer is installed on the same machine as the CFS server. You can find the tool here: C:\Program Files\Radiant Logic Inc\Cloud Federation Service\Tools\RLI.CFS.Tools.Admin.exe
Navigate to C:\inetpub\wwwroot\CFS Web Site\cfs\Logs and click OK.
The Log Analyzer has three main sections accessible at the top: Data, Stats, and Logs. Each is described in more details below.
Data Section
The Data section displays a summary of activity of your server. From here you can get a glimpse of the total amount of log activity per day (shown in the bar chart at the top). If you see any red areas in the chart, this indicates errors have occurred on that particular day. The log details for a selected day are shown below.
If logs are deleted from the Logs directory on the CFS machine, it could compromise the log system.
To change the type of log activity you want to see, click the "filter" button and mark what you are interested in (Connect, ConnectError, Disconnect, Information, Operation, Warning or Error). Only these types of log activities are shown.
Stats Section
The Stats section allows you to view more detailed information from the logs. Some of the important information is represented graphically (the hours during which the most users are connected, the average time of a user session on the portal).
On the left side, the top ten most used applications, the top ten most used Identity providers, and the top ten most connected users can be seen. The default view shows the Top 10 most active users. To view activity for a specific user, select the desired identity from this list.
To view the Top 10 most used applications, click in the drop-down list next to "Top 10" and select Applications.
To view the Top 10 most used authentication methods, click in the drop-list next to "Top 10" and select Idp.
On the "Data" section for a selected user, you can see the user’s sessions, cookies, and log content applicable to this user’s actions.
An error related to the user’s activities will be shown with a red "X" button. Click the "+" next to the error to show details like exact error message and stack trace.
On the "Stats" section for a selected user, you can see a summary of the user’s activities: hourly connections and average duration of the connection.
A list of applications (unique GUID) that the user has access will be shown on the left. In the drop-down list, you can select IDP to see a list of authentication methods used by the user.
Files Section
The Files section provides a list of the log files with the number of successful connections, errors, warnings, and so on, for each one.
Refreshing the Log Analysis
To contents of the Log Analyzer are set to update periodically. To refresh the view in the Log Analyzer more frequently than the default interval, click the refresh button in the bottom right corner as often as needed. You can control the auto update and put it on pause/activate it by using the buttons located at the bottom left of the screen.
Advanced Search Page
The log files can be filtered based on a date range. For advanced filtering, click the Advanced button at the top of the Log Analyzer.
Indicate a Start Date and End Date covering the timeframe of logs you want to analyze. Logs associated with this period of time display.
To change the type of log activity you want to see, click the filter button and mark what you are interested in (Connect, ConnectError, Disconnect, Information, Warning or Error). Only these types of log activities are shown.
Performance Counters
Performance Counters are used to provide information as to how well the operating system or an application, service, or driver is performing. The counter data can help determine system bottlenecks and fine-tune system and application performance. The operating system, network, and devices provide counter data that an application can consume to provide users with a graphical view of how well the system is performing.
The Performance Counters are available in both CFS Master and CFS Proxy. The counters for CFS Master are monitoring the LDAP connections to FID and the HTTP connections to the RSA server. The counters in CFS Proxy are monitoring the HTTPS connections to the CFS Proxy Web API. By default, the counters are disabled, to enable them, use the following instructions.
Counters for CFS Master
- Open the file
C:\inetpub\wwwroot\CFS Web Site\web.config(or where you have your CFS installed). - At the end of the file, look for the code:
- Change the value of the properties UsePerformanceCounters to True to enable the performance counters.
- The MaxPoolSize property is used to define the maximum number of connections that the CFS Connection Pool can create. The default value is 300.
- Once you save the file, IIS automatically restarts the web application and the changes are applied automatically.
Counters for CFS Proxy
- Open the file
C:\inetpub\wwwroot\CFS Web Site\cfs\web.config(or where you have your CFS installed). - At the end of the file, look for the code:
- Change the value of the properties UsePerformanceCounters to True to enable the performance counters.
- Once you save the file, IIS automatically restarts the web application and the changes will be applied automatically.
Performance Monitor
- Open the Performance Monitor.
- Click the green Add button to add a new counter to the monitoring console.
- Look for the category RadiantOne CFS or RadiantOne CFS Proxy, select the counters you want to have on your screen, click Add then Ok.
- You can adjust the scale of your counter by double clicking on the counter.
