How to detect "Slow ACL" ?

[Philippe Casidy]

Hi everyone,

While making ATF on ACLs, it came under my radar a message similar to this one:

Slow ACL 62bbff831b2a68149dbcfc038d4ffbfb for the path record/sn_customerservice_case/read, time was: 21

I am trying to scope how wide the problem is on our instance. But this message is not displayed in the syslog, I could only find it in the Node Log.

Any idea how I would increase the visibility without having to dig into the Node Log? I want to see how bad the situation is, how often this happening and a list of ACLs to look at.

(and if anybody know what the '21' represents at the end of the message.... time in ms? )

Thank you

Philippe

[James Fricker]

With Washington DC release these Slow ACL log messages now appear to be promoted to the syslog table.

[Daniel Borkowi1]

Is there a property to define the log level for this SLOW ACL log messages?

[erik15]

Hello there, did you ever figure out if there is any options to configure the log to not show slow acl? 

[Daniel Borkowi1]

Hi @erik15  only by setting glide.security.slow_acl_threshold system to number like 100.000. But there will be still log entries.

[JC Moller]

You cannot completely remove these being written into the syslog table, but you can add a new glide.security.slow_acl_threshold system property and set the threshold value in milliseconds. I decided to go with 100ms. The default OOB value is 5ms.