Showing statistics related to LDAP service port activity

You can see statistics about LDAP service port activity related specifically to LDAP operations, and also network statistics related to general network activity over the LDAP service ports. You can use the Show Stat command to see statistics. Each statistic listed in the following tables begins with the prefix LDAP, but the tables omit the prefix. For example, the statistic LDAP.Total LDAP Connections is shown as Total LDAP Connections.

Statistics related to LDAP operations

About this task

Statistics calculation begins at LDAP service startup.

Table 1. LDAP connections statistics
Statistic	Description
Total LDAP Connections	Number of LDAP connections
Simple LDAP Connections	Number of LDAP connections using name-and-password authentication
Anonymous LDAP Connections	Number of anonymous LDAP connections
Strong Authentication Connections	Number of LDAP connections using X.509 client certificate authentication
Failed LDAP Connections	Number of LDAP connections that failed
Total LDAP Searches	Number of LDAP search requests processed
Longest LDAP Search time	Longest amount of time taken to successfully complete an LDAP search request that has been received so far. This statistic does not include LDAP searches that fail with any error.
Average LDAP Search time	Average amount of time taken to process LDAP search requests received so far. The value includes time taken to process search requests that fail, and so on occasion it may exceed the Longest LDAP Search time value.
Longest LDAP Search request	Longest amount of time to receive an LDAP search request
Total LDAP Modifies	Number of LDAP modify requests processed
Total LDAP Compares	Number of LDAP compare requests processed
Total LDAP Adds	Number of LDAP add requests processed
Total LDAP Deletes	Number of LDAP delete requests processed
Total LDAP ModifyDNs	Number of modifyDN requests processed
Total LDAP Extended Operations	Number of requests to extend the schema processed
Total LDAP Abandons	Number of abandon requests processed
Total LDAP Searches for Subschema	Number of requests to search the subschema processed
Total LDAP Searches for Root DSE	Number of requests to search the root DSE processed
Total LDAP Referrals returned	Number of referrals to remote LDAP directories returned
Total LDAP Searches on Domain Catalog	Number of requests to search the Domain Catalog processed
Total LDAP Search Entries Returned	Number of entries returned from search requests
Total LDAP Search time	Total time spent processing LDAP searches
Server.Running	Shows whether the LDAP service is running

Statistics for network activity on the LDAP service ports

About this task

The following statistics relate to network activity over the LDAP service ports since Domino® server startup. These statistics can reflect network activity that does not involve the LDAP protocol, for example activity resulting from telnet requests.

Table 2. LDAP network statistics
Statistic	Description
Sessions.Inbound.Accept.Queue	Number of new connections waiting to be serviced by threadpool
Sessions.Inbound.Active	Number of currently running inbound TCP/SSL connections
Sessions.Inbound.Active.SSL	Number of currently running inbound SSL connections
Sessions.Inbound.BytesReceived	Number of bytes received by all inbound TCP/SSL connections
Sessions.Inbound.BytesSent	Number of bytes sent by all inbound TCP/SSL connections
Sessions.Inbound.Peak	Maximum number of concurrent inbound TCP/SSL connections
Sessions.Inbound.Peak.SSL	Peak number of concurrent inbound SSL connections
Sessions.Inbound.Total	Number of all TCP/SSL inbound connections since server started
Sessions.Inbound.Total.SSL	Number of all SSL inbound connections since server started
Sessions.Inbound.Total.SSL.Bad_Handshake	Total number of failed inbound SSL handshakes since server started
Sessions.Outbound.Active	Number of currently running outbound TCP/SSL connections
Sessions.Outbound.Active.SSL	Number of currently running outbound SSL connections
Sessions.Outbound.BytesReceived	Number of bytes received by all outbound TCP/SSL connections
Sessions.Outbound.BytesSent	Number of bytes sent by all outbound TCP/SSL connections
Sessions.Outbound.Peak	Maximum number of concurrent outbound TCP/SSL connections
Sessions.Outbound.Peak.SSL	Maximum number of concurrent outbound SSL connections
Sessions.Outbound.Total	Number of all TCP outbound connections since server started
Sessions.Outbound.Total.SSL	Number of all SSL outbound connections since server started
Sessions.Outbound.Total.SSL.Bad_Handshake	Total number of failed outbound SSL handshakes since server started
Sessions.Threads.Busy	Total number of running threads servicing network IO requests
Sessions.Threads.Idle	Total number of idle threads waiting to service network IO requests
Sessions.Threads.InThreadPool	Current® number of threads in threadpool
Sessions.Threads.Peak	Peak number of threads in threadpool

LDAP.Search.Longest statistics

About this task

This set of statistics allows administrators to quickly identify slow LDAP search patterns. Often it is the search pattern, not every search instance, that determines the overall efficiency of a Domino® LDAP search. LDAP applications search by reusing a limited set of search patterns, but with different values. The LDAP.Search.Longest statistics are performance statistics that provide non-disruptive detection of slow LDAP search patterns, and reveal the slowest search patterns used in LDAP searches.

All four sets of statistics are indexed in parallel. Therefore, information about the slowest search patterns has a statistic name suffix of .01, the second slowest has .02, and so on. This yields statistics names such as LDAP.Search.Longest.Pattern.01 and LDAP.Search.Longest.AverageTime.01.

After identifying slow search patterns, (and depending upon the LDAP application), application administrators are then able to adjust their LDAP applications to substitute search filters that the Domino® LDAP server can service more quickly.

Table 3. LDAP longest search time statistics
LDAP.Search.Longest.AverageTime	Total search time in milliseconds for the search pattern considered divided by count.
LDAP.Search.Longest.Count	Number considered (see LDAPMinLongestSearchTime) searches recorded for the associated pattern.
LDAP.Search.Longest.Entries	Number of result entries returned by the search pattern
LDAP.Search.Longest.Pattern	The search pattern is used to divide each of the individual sets of statistics entries. Its representation uses an abbreviated form of an RFC 4516 LDAP search URL where the ldap://hostname prefix has been omitted and %v is used in place of any attribute value in the filter. The syntax of the pattern is: [dn] ? [attributes] ? [scope] ? [filter] [? extensions] dn - Identifies the base of the LDAP search pattern. attributes - Indicates which attributes should be returned from the result entries. scope - Specifies the scope of the search. "base" for a base object search, "one" for a one-level search, or "sub" for a subtree search. If blank, "sub" is used. filter - Specifies the search filter to apply to entries within the specified scope during the search. It has the format specified in RFC 4515, except %v is used in place of attribute values. extensions - comma-separated list of type=value pairs, indicating requested timeouts, etc.

LDAPMaxLongestSearchCount and LDAPMinLongestSearchTime are two NOTES.INI variables you can use to configure how LDAP.Search.Longest statistics are maintained.