Removing unwanted entries from the ES console log

Problem:

The console log for the ES region is filled with entries that include the words “LDAP Search”. An example:

170907 20314426      17380 REGIONNAME ESFEM1034I ESM2: LDAP search for "(&(objectclass=microfocus-MFDS-Resource)(cn=XXXX.YYYY.ZZZZ\\2a*))" in "CN=DATASET,CN=Enterprise Server Resources,CN=Micro Focus,CN=Program Data,DC=local" failed (32) 20:31:44

These are unwanted and are making it difficult to read the console log. Why are they there and how can they be removed?

Resolution:

This is due to tracing done in the LDAP external security manager.

Go to the security manager page for the LDAP esm being used.

In that Configuration box for the external security manager, you may have any one or all of these set:

    search=y

    rule=y

    groups=y

    modify=y

    bind=y

You need to comment those out if you do not want the messages to continue to be written to the console log, as they will cause those trace messages to be written to it.

If MFDS is using the same security manager it will need to be unsecured so you can change the security manager configuration than resecured. The region will require a restart.

Not only will those trace messages cease, but performance should improve as well, since all of that writing to the console log does affect performance.