Analysing shibboleth log files

Peter Schober peter.schober at univie.ac.at
Thu Mar 20 10:19:57 EDT 2014


* Vani Aul <Vani.Aul at uwl.ac.uk> [2014-03-20 14:37]:
> I am keen to know how do you analyse the Shibboleth log files

What Shibboleth log files specifically? The SP's? The IDP's?

> and if you collect usage of individual eresources and the usage by
> school-level as well.

For the IDP's audit.log I used (and wrote, a while ago)
https://wiki.shibboleth.net/confluence/display/SHIB2/IdP+Audit+Log+Analysis+Tool

That will give you usage stats per Service Provider ("individual
eresources"), if you want.

Not sure what "usage by school-level" means. Since you're asking about
analyzing the log files you'd first have to write that information to
the log (for the IDP that would mean writing a Script attribute
definition, mostly likely).

If you're asking about the SP, that depends on what the IDPs are
sending. Also, for logging of attribute values other than REMOTE_USER
you will have to customize the your webserver's logging first. The
Shib SP will not log attribute values by itself.

Also have a look at https://iam.cf.ac.uk/trac/RAPTOR maybe this is
what you're after.
-peter


More information about the users mailing list