Siteminder API's for enabling/disabling policy server trace

[sateeshcse1]

The policy servers (12.52 SP2 CR01) are hosted on Windows 2012 servers in our infrasturcture. Coud you please let us know if there are any Siteminder API's to enable or disable the policy server trace? If there are any, please provide the details of the same.

[DustinDauncey]

Hello,

 

It seems at first glance that this discussion should be a question as well as part of the SiteMinder / CA SSO community rather than the API Management community. I'll make the changes now so this can be properly discussed/answered by the right people.

[Ashok kumar Muthu]

Sateesh,

I don't think there is any API for enabling/disabling SM trace logs. However there are command line utilities to perform the same, you can also script them to automate as per your need.

 

Configure the Policy Server Profiler - CA Single Sign-On - 12.8 - CA Technologies Documentation 

Manually Roll Over the Profiler Trace Log File

The Policy Server allows you to manually rollover the Policy Server Profiler trace log file using the smpolicysrv command.

Important! If User Account Control (UAC) is enabled in Windows Server, open the command-line window with administrator permissions. Open the command-line window this way even if your account has administrator privileges.

To start trace logging to a file, run the following command:

smpolicysrv -starttrace

This command starts logging to a trace file and does not affect trace logging to the console. It issues an error if the Policy Server is not running.

If the Policy Server is already logging trace data, running the –starttrace command causes the Policy server to rename the current trace file with a time stamp appended to the name in the form: file_name.YYYYMMDD_HHmmss.extension and create a new trace file with the original name. For example, if the trace file name in Policy Server Management Console’s Profiler tab is C:\temp\smtrace.log, the Policy Server generates a new file and saves the old one as c:\temp\smtrace.20051007_121807.log. The time stamp indicates that the Policy Server created the file on October 7, 2005 at 12:18 pm.

If you have not enabled the tracing of a file feature using the Policy Server Management Console’s Profiler tab, running this command does not do anything.

To stop trace logging to a file, run the following command:

smpolicysrv -stoptrace

This command stops logging to a file and does not affect trace logging to the console. It issues an error if the Policy Server is not running.

Note: On Windows systems, do not run the smpolicysrv command from a remote desktop or Terminal Services window. The smpolicysrv command depends on inter-process communications that do not work if you run the smpolicysrv process from a remote desktop or Terminal Services window.

Dynamic Trace File Rollover at Specified Intervals

You can also write a script to cause a trace file to be rolled over at a specified time interval. For example, to create a new trace file every hour, write a script similar to the following:

smpolicysrv -starttrace repeat forever wait 1 hour smpolicysrv -starttrace end repeat

This is similar to the time-based rollover option on the Policy Server Management Console’s Logs tab.

 

Hope this helps !!!

Regards

Ashok

[Alfred Macedo]

Another option that could be used is a Powershell script to modify the registry remotely.

 

We already have the necessary registry changes documented here:

How to start SiteMinder smps trace without using S - CA Knowledge 

 

Hope this helps!