Novell Doc: Novell Access Manager 3.0 SP4 Administration Guide

33.2 Monitoring Access Gateway Statistics

Access Gateway statistics are available for each Access Gateway and for clusters:

33.2.1 Viewing Access Gateway Statistics

The Statistics page allows you to monitor the amount of data and the type of data the Access Gateway is processing.

In the Administration Console, click Access Manager > Access Gateways > [Name of Server] > Statistics.
Select from the following types:
- Server Activity
- Server Benefits
- Server SSL Activity (NetWare only)
- Top 20 Sites (NetWare only)
- Service Provider Activity
- Configured Services (NetWare only)
Click Close.

Server Activity

Access Gateways > [Name of Server] > Statistics

Select whether to monitor live or static statistics:

Statistics: Select this option to view the statistics as currently gathered. The page is static and the statistics are not updated until you click Live Statistics Monitoring.

Live Statistics Monitoring: Select this option to view the statistics as currently gathered and to have them refreshed at the rate specified in the Refresh Rate field.

These general statistics are grouped into the following categories:

Server Activity

The Server Activity section displays general server utilization statistics.

Table 33-1 Server Activity

Statistic	Description
CPU Utilization	Displays the current CPU utilization rate. Use the available graph for capacity planning.
Cache Hit	Displays the current cache hit rate. A high cache hit rate indicates that the caching system is off-loading significant request processing from the Web servers whose objects have been cached. Use the available graph for capacity planning.
Mounted Partitions Disk Space	(Linux only) Displays the total disk space configured on mounted partitions.
Mounted Partitions Disk Space Used	(Linux only) Displays the disk space in use on mounted partitions.
Mounted Partitions Disk Space Free	(Linux only) Displays the disk space available on mounted partitions.
Swap Partition Disk Space	(Linux only) Displays the total disk space configured for the swap partition.
Swap Partition Disk Space Used	(Linux only) Displays the disk space in use on the swap partition.
Swap Partition Disk Space Free	(Linux only) Displays the disk space available on the swap partition.
Cache Disk Space	Displays the total disk space available for caching. The amount shown is smaller than the total disk space available on the Access Gateway because it doesn’t include the disk space reserved for the operating system and for log files.
Cache Disk Space Utilization	Displays the percentage of caching disk space currently in use.
Total Installed Memory	Displays the amount of memory that is installed on the Access Gateway.
Start Up Time	Displays the last time the Access Gateway was started.
Up Time	Displays the total time the Access Gateway has been running since it was last started.
Number of Objects Cached	Displays the total number of Web objects that have been cached.

Connections

The connection statistics show the current and peak levels of usage in terms of TCP connections.

Table 33-2 Connections

Statistic	Description
Current Connections to Origin Server	Displays the current number of connections that the Access Gateway has established with Web servers.
Current Connections to Browsers	Displays the current number of connections that the Access Gateway has established with browsers.
Current Total Connections	Displays the current total of all connections that the Access Gateway has established.
Connections to Origin Server	Displays the total number of connections that the Access Gateway has established with Web servers since it was last started.
Peak Connections from Origin Server	Displays the peak number of connections that the Access Gateway has established with Web servers.
Connections to Browsers	Displays the total number of connections that the Access Gateway has established with browsers since it was last started.
Peak Connections to Browsers	Displays the peak number of connections that the Access Gateway has established with browsers.
Total Connections through SOCKS	Displays the total number of connections the Access Gateway has established through a firewall.
Failed Connection Attempts	Displays the total number of failed connection attempts the Access Gateway has made while attempting to fill its Web object cache.

Bytes

The bytes statistics show how fast information is being sent in response to the following types of requests:

Browser requests to the Access Gateway
Access Gateway requests to the Web servers

Table 33-3 Bytes

Statistic	Description
Bytes per Second from Origin Server	Displays the number of bytes of data being sent each second from the Web servers to the Access Gateway.
Bytes per Second to Browsers	Displays the number of bytes of data being sent each second from the Access Gateway to the browsers.
Total Bytes per Second	Displays the total number of bytes of data being sent each second from the Access Gateway and from the Web servers.
Bytes Received from Origin Server	Displays the total number of bytes of data sent to the Access Gateway from the Web servers since the Access Gateway last started.
Bytes Sent to Browser	Displays the total number of bytes of data sent to the browsers from the Access Gateway since the Access Gateway last started.
Total Bytes	Displays the total number of bytes of data sent from the Access Gateway and from the Web servers since the Access Gateway was last started.

Requests

The request statistics show the number of requests that are being sent from the browsers to the Access Gateway and from the Access Gateway to the Web servers.

Table 33-4 Requests

Statistic	Description
Current Requests to Origin Server	Displays the current number of requests that the Access Gateway has made to the Web servers.
Current Requests from Browsers	Displays the current number of requests that the browsers have made to the Access Gateway.
Total Current Requests	Displays the total number of current requests that the Access Gateway has received from the browsers and that the Access Gateway has sent to the Web servers.
Successful Requests to Origin Server	Displays the total number of successful requests that the Access Gateway has sent to the Web servers since the Access Gateway last started.
Failed Requests to Origin Server	Displays the total number of failed requests that the Access Gateway has sent to the Web servers since the Access Gateway last started.
Cumulative Requests to Origin Server	Displays the total number of requests that the Access Gateway has sent to the Web servers since the Access Gateway last started.
Cumulative Requests to Browsers	Displays the total number of requests that the browsers have sent to the Access Gateway since the Access Gateway last started.
Total Cumulative Requests	Displays the total number of cumulative requests that the Access Gateway has processed since the Access Gateway last started.
Requests per Second to Origin Server	Displays the number of requests that are being sent each second from the Access Gateway to the Web servers.
Requests per Second from Browsers	Displays the number of requests that are being sent each second from the browsers to the Access Gateway.
Total Requests per Second	Displays the total number of requests that are being sent each second from the Access Gateway and from the browsers.
Peak Requests per Second to Origin Server	Displays the peak number of requests that have been sent in one second from the Access Gateway to the Web servers.
Peak Requests per Second from Browsers	Displays the peak number of requests that have been sent in one second from the browsers to the Access Gateway.

Cache Freshness

The cache freshness statistics display information about the cache refresh process.

Table 33-5 Cache Freshness

Statistic	Description
Total “Get If Modified Since” Request	Displays the total number of Get If Modified Since requests that the Access Gateway has received from browsers.
Total Not Modified Replies	Displays the total number of 304 Not Modified replies that the Access Gateway has received from the Web servers for updated content.
Cache Freshness	Displays the percentage of objects in cache that are considered fresh.
Oldest Object in Memory	Displays how long the oldest cache object has been cached.

Server Benefits

Select whether to monitor live or static statistics:

Statistics: Select this option to view the statistics as currently gathered. The page is static and the statistics are not updated until you click Live Statistics Monitoring.

Live Statistics Monitoring: Select this option to view the statistics as currently gathered and to have them refreshed at the rate specified in the Refresh Rate field.

The Server Benefits page displays information about bandwidth and DNS caching:

Table 33-6 Server Benefits

Statistic	Description
Total Bandwidth Saved	(Linux only) Displays the amount of bandwidth saved by using data cached by the Access Gateway rather than requesting the data from the Web servers.
Bytes Saved per Second	Displays how many bytes of data the Access Gateway was able to send from cache rather than requesting it from the Web servers.
Bandwidth Saved	Displays the amount of bandwidth saved by using data cached by the Access Gateway rather than requesting the data from the Web servers.
Total DNS Lookups Saved	(Linux only) Displays the number of DNS requests that the Access Gateway could solve locally without performing a DNS lookup.
DNS “Modified Since” Queries Returning False	(Linux only) Displays the number of DNS Modified Since queries that the Access Gateway was able to service with a false value.
Total Number of Connections Saved	Displays the number of connections that the Access Gateway has with clients minus the number of connections that the Access Gateway has with Web servers. This statistic indicates the number of connections that the Access Gateway is off loading from the Web servers.

Server SSL Activity

(NetWare only) Select whether to monitor live or static statistics:

Statistics: Select this option to view the statistics as currently gathered. The page is static and the statistics are not updated until you click Live Statistics Monitoring.

Live Statistics Monitoring: Select this option to view the statistics as currently gathered and to have them refreshed at the rate specified in the Refresh Rate field.

The Server SSL Activity page displays information about the SSL communication process between the browsers and the Access Gateway and between the Access Gateway and the Web servers.

Table 33-7 Server SSL Activity

Statistic	Description
Current SSL Connection	Displays the current number of connections that are SSL connections.
Peak SSL Connections	Displays the peak number of SSL connections that the Access Gateway has established since it was last started.
Browser Full SSL Handshakes	Displays the number of browser connection requests that required a full handshake because the handshake information was not available from cache.
Browser Abbreviated Handshakes	Displays the number of browser connections requests that could perform an abbreviated handshake because the handshake information was still available from cache.
Browser SSL Alerts	Displays the number of SSL alerts that the browsers have sent to the Access Gateway.
Server SSL Full Handshakes	Displays the number of Web server connection requests that required a full handshake because the handshake information was not available from cache.
Server SSL Abbreviated Handshakes	Displays the number of Web server connection requests that could perform an abbreviated handshake because the handshake information was still available from cache.
Server SSL Alerts	Displays the number of SSL alerts that the Access Gateway sent to the Web servers.

Top 20 Sites

(NetWare only) Select whether to monitor live or static statistics:

Statistics: Select this option to view the statistics as currently gathered. The page is static and the statistics are not updated until you click Live Statistics Monitoring.

Live Statistics Monitoring: Select this option to view the statistics as currently gathered and to have them refreshed at the rate specified in the Refresh Rate field.

The Top 20 Sites page displays the DNS name or IP address of the sites that are receiving the most traffic. These sites are sorted by the number of hits they received and by the number of bytes of data they sent.

Service Provider Activity

Select whether to monitor live or static statistics:

Statistics: Select this option to view the statistics as currently gathered. The page is static and the statistics are not updated until you click Live Statistics Monitoring.

Live Statistics Monitoring: Select this option to view the statistics as currently gathered and to have them refreshed at the rate specified in the Refresh Rate field.

The ESP Activity page displays information about the communication process between the Access Gateway module (ESP) and the Identity Server. These statistics are grouped into the following categories:

Cluster Proxy Statistics

Statistic	Description
Number of non-proxied requests	The total number of times the L4 switch sent the request to the server that established the session for the user making the request. When this happens, the server does not need to proxy the request to a peer cluster member.
Number of proxied request in the cluster	The total number of times a cluster member has determined that it did not establish the session for the user making the request and then proxied the request to the peer cluster member that did establish the session.

Identity Federation Framework Statistics

Statistic	Description
Number of Identity De-Federations performed	The number of requests to defederate user accounts that the Identity Server has processed.
Number of Identity Federations performed	The number of requests to federate user accounts that the Identity Server has processed.
Number of Identity register-name performed	The total number of register name requests that the Identity Server has processed.

Identity Provider Statistics

Statistic	Description
Number of connections checked back into the pool	The total number of times a user store connection has been checked into a connection pool after being checked out and used.
Number of connections checked out of the pool	The total number of times a user store connection has been checked out of a connection pool and used.
Number of new connections created in the pool	The total number of times the Identity Server has created a new connection to a user store.
Number of connections destroyed in the pool	The total number of times the Identity Server has destroyed a connection to a user store.
Number of times User Store replica restarts	When the Identity Server loses a connection to an LDAP user store, that user store is placed on a restart thread. After a period of time, the restart thread attempts to reconnect to the user store. This count is the total number of times that the user stores have been placed on the restart thread.
Waiting period for failed replica	The total number of times the restart thread has failed to regain a connection with a user store and has needed to wait the given time period before trying again.
Number of times user store replica successfully restarted	The total number of times the restart thread has successfully regained a connection with a user store.
Number of connections reused	The total number of times a user store connection has been reused. This means that the Identity Server was able to check out a connection from the pool and use an existing connection.
Number of shared connections in the pool	Each user store has two connection pools: a user pool and an admin pool. As connections are checked out of each of these pools, it might become apparent to the Identity Server that one pool is overworked and the other pool has unused connections. When this situation is detected, a connection is shared from one pool to the other. Thus, the admin pool might gain a connection and the user pool might lose one. This is the total number of times that connections have been shared (over all user stores).
Waiting period for a connection	The total number of times that all connections have been checked out, and the requesting thread has waited for a connection to become available.
Total successful consumed authentications	The number of successful logins that the Identity Server has processed.
Number of failed consumed authentications	The total number of failed logins that the Identity Server has processed (for any reason).
Total successful provided authentications	The number of successful authentications that the Identity Server has provided to other service providers, including embedded service providers.
Number of failed provided authentications	The number of failed authentications that the Identity Server has provided to other service providers, including embedded service providers.
Number of logouts	The total number of logout requests that the Identity Server has processed.
% of free memory	The current percentage of system memory that Java considers free.
Number of users currently logged in	The number of sessions that are currently active, which equates with the number of currently logged-in users.
Total requests	The total number of requests that have passed through the Identity Server.

SAML Statistics

Statistic	Description
Number of SAML requests	The total number of SAML1.1 query attribute requests that the Identity Server has processed.

SAML 2 Statistics

Statistic	Description
Number of SAML-2 Defederations	The total number of SAML-2 defederation requests that the Identity Server has processed.
Number of SAML-2 Federations	The total number of SAML-2 federation requests that the Identity Server has processed.
Number of SAML-2 requests	The total number of SAML-2 query attribute requests that the Identity Server has processed.
Number of SAML-2 register name	The total number of SAML-2 register name requests that the Identity Server has processed.

Web Service Framework Statistics

Statistic	Description
Number of credential-profile service ‘modify’	The total number of modify requests made to the Novell® Credential Profile Web Service.
Number of credential-profile service ‘query’	The total number of query requests made to the Novell Credential Profile Web Service.
Number of discovery service 'modify’	The total number of modify requests made to the Discovery Web Service.
Number of discovery service 'query'	The total number of query requests made to the Discovery Web Service.
Number of employee-profile service 'modify’	The total number of modify requests made to the Employee Profile Web Service.
Number of employee-profile service 'query'	The total number of query requests made to the Employee Profile Web Service.
Number of custom-profile service 'modify’	The total number of modify requests made to the Novell Custom Profile Web Service.
Number of custom-profile service 'query'	The total number of query requests made to the Novell Custom Profile Web Service.
Number of personal-profile service 'modify'	The total number of modify requests made to the Personal Profile Web Service.
Number of personal-profile service 'query'	The total number of query requests made to the Personal Profile Web Service.
Number of role-profile service 'modify ‘	The total number of modify requests made to the Novell Role Profile Web Service.
Number of role-profile service 'query'	The total number of query requests made to the Novell Role Profile Web Service.
Number of interaction service redirects by web services consumer (client)	The total number of times the Identity Server has been redirected to perform user interaction by using the User Interaction Redirection profile.
Number of interaction service redirects to server	The total number of times the Identity Server has handled a user interaction request that it received through the User Interaction Redirection profile.
Number of interaction service redirects initiated by web services consumer (client)	The total number of times the Identity Server has called a Trusted User Interaction Service by using the Trusted User Interaction Service profile.
Number of interaction service redirects handled by trusted server	The total number of times the Identity Server has handled a user interaction request that it received through the Trusted User Interaction Service profile.

Configured Services

(NetWare only) The Configured Services page displays information about all the services that have been configured on the selected Access Gateway. It includes information about the proxy services that you have configured as well as the system proxy services (the nesp and soapbc path-based proxy services).

33.2.2 Viewing Cluster Statistics

To view general performance statistics of the servers assigned to the selected cluster:

In the Administration Console, click Access Manager > Access Gateways > [Name of Cluster] > Statistics.

To determine performance, analyze the following statistics:

Column	Description
Server Name	Lists the name of the Access Gateways that belong to the group. To view additional statistical information about a specific Access Gateway, click the name of an Access Gateway.
CPU %	Displays the current CPU utilization rate. Use this statistic for capacity planning.
Cache Hit Rate %	Displays the current cache hit rate. A high cache hit rate indicates that the caching system is off-loading significant request processing from the Web server whose objects have been cached. If the percentage is low, you might want to configure a pin list. For this and other caching options, see Section 16.0, Configuring the Cache Settings.
Bytes per second to/from Server	Displays the rate at which the Access Gateway is requesting Web objects from the Web servers it is protecting.
Bytes per second to/from Browser	Displays the rate at which browser clients are requesting Web objects.
Current Connections	Displays the total number of TCP™ connections that are active, idle, or closing.
Statistics	Allows you to view all the statistics for a selected server. Click View to see these additional statistics. For more information, see Section 33.2, Monitoring Access Gateway Statistics.

Click Close.