[389-users] Re: ldapsearch performance problem

Hi Marc,

thanks for answer, and the hint for indexes.

Am 15.06.2018 um 00:53 schrieb Mark Reynolds:
> Can we see your access log showing the slow searches?  Are they
> unindexed?  If you have unindexed searches they will bog down the entire

Whole log is difficult because of privacy, because it's a productive
environment with real user data.


What I can see are a log of unindexec component queries, most of them like:

[15/Jun/2018:21:51:14 +0200] conn=462 op=31251 SRCH
base="ou=Domains,dc=example,dc=org" scope=2
filter="(&(objectClass=domainrelatedobject)(associatedDomain=example.net))"
attrs="associatedDomain inetDomainBaseDN"
[15/Jun/2018:21:51:14 +0200] conn=462 op=31251 RESULT err=0 tag=101
nentries=1 etime=0 notes=U

but I'm not shure, if they are really a problem, because there are only
about 60 entries in domainrelatedobject

more relevant could be that there is no index for alias:

[15/Jun/2018:21:50:21 +0200] conn=106426 op=1 SRCH
base="dc=example,dc=net" scope=2
filter="(&(objectClass=kolabInetOrgPerson)(|(mail=test.user@example.net)(alias=test.user@example.net)(uid=test.user@example.net)))"
attrs="distinguishedName"
[15/Jun/2018:21:50:21 +0200] conn=106426 op=1 RESULT err=0 tag=101
nentries=1 etime=0 notes=U


> server.  Do you see high cpu for ns-slapd?

no. not at all: avarage about 7 %, load avarage about 0.4 with max 0.6,
and no i/o wait.

The specific phenomena is: for a couple of seconds everything is smooth
but suddenly it hangs for about 1 until 4 or more seconds - and this
seems to be related to all queries in this moment.

> Can you also run logconv.pl?
>
> logconv.pl -ulatn /var/log/dirsrv/slapd-YOUR_INSTANCE/access*
>
>

Access Log Analyzer 8.0
Command: logconv.pl /var/log/dirsrv/slapd-ldap0/access
Processing 1 Access Log(s)...

[001] /var/log/dirsrv/slapd-ldap0/access size (bytes): 4715242
25000 Lines Processed 3430177 of 4715242 bytes (72.747%)


Total Log Lines Analysed: 33372


----------- Access Log Output ------------

Start of Logs: 15/Jun/2018:19:06:52
End of Logs: 15/Jun/2018:19:26:39

Processed Log Time: 0 Hours, 19 Minutes, 47 Seconds

Restarts: 0
Total Connections: 2225
- StartTLS Connections: 0
- LDAPS Connections: 0
- LDAPI Connections: 0
Peak Concurrent Connections: 11
Total Operations: 13362
Total Results: 13389
Overall Performance: 100.0%

Searches: 10248 (8.63/sec) (518.01/min)
Modifications: 0 (0.00/sec) (0.00/min)
Adds: 0 (0.00/sec) (0.00/min)
Deletes: 0 (0.00/sec) (0.00/min)
Mod RDNs: 0 (0.00/sec) (0.00/min)
Compares: 0 (0.00/sec) (0.00/min)
Binds: 3038 (2.56/sec) (153.56/min)

Proxied Auth Operations: 0
Persistent Searches: 0
Internal Operations: 0
Entry Operations: 0
Extended Operations: 76
Abandoned Requests: 0
Smart Referrals Received: 0

VLV Operations: 0
VLV Unindexed Searches: 0
VLV Unindexed Components: 0
SORT Operations: 0

Entire Search Base Queries: 806
Paged Searches: 82
Unindexed Searches: 0
Unindexed Components: 8896


Regards
Jan
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/ZX2RQXRVIKGBHAUUQ5ZAXRMAP6OT2ULI/