Figure 12-2 illustrates the OAM Farm page in Fusion Middleware Control. The Farm Resource Center provides immediate access to online information.

Sections on the Farm page are described in Table 12-1.

The navigation tree on the left side of the page, like the one in Figure 12-3, enables you to choose a specific instance (target) on which to operate regardless of the page you are currently viewing. Target names in your environment will be different.

For more information, see "Logging In To Fusion Middleware Control".

The nodes are:

• Application Deployments

• Internal Applications (includes logout page and other details for the OAM AdminServer and OAM Server instances)

• WebLogic Server domains (WebLogic Server details, including the OAM Farm)

• Identity and Access (includes OAN Cluster or individual OAM Server instances)

Clicking a node in the navigation tree displays an information page with individual links and a description of the Target, Type, and Full Name, as shown in Figure 12-4 for Application Deployments.

Clicking an instance (target) name (from either the navigation tree or a page), displays a context menu and a more detailed summary page. The Internal Application target is highlighted in the navigation tree and a page of the same name is displayed on the right. The context menu is available beneath the target name at the top of the page, as shown in Figure 12-5.

The Application Deployment menu is shown in Figure 12-6.

WebLogic Server domain: The WebLogic Server domain page is shown in Figure 12-7 with the corresponding menu displayed. The Oracle WebLogic Server domain Resource Center, with links to online documentation, is visible in the bottom-left corner. This page more closely resembles the Farm landing page.

Selecting a target name within the WebLogic Server domain node displays a target summary page that more closely resembles the Application Deployment page in Figure 12-5.

For more information, see "Displaying Context Menus and Target Details in Fusion Middleware Control".

Fusion Middleware Control provides Administrators with:

• A cluster-wide view of performance for Access Manager with Security Token Service

• A per-server drill-down of key performance metrics

• The ability to quickly add or remove performance metrics

Table 12-2 summarizes the pages for selected nodes and target instances.

Cluster Page: The top node within Identity and Access leads to a page for the OAM Cluster Deployment, which includes a Performance Overview. For Figure 12-8, the Cluster is selected in the navigation tree, beneath the Identity and Access node. Figure 12-8 illustrates the Cluster Deployments and Performance Overview sections. This page includes a table for Token Issuance and Token Validations.

OAM Server Pages: Selecting an OAM Server target name from the navigation tree (or the open page), displays a Performance Overview for the target. At the top of the OAM Server page, a summary of Key Metrics for the server instances appears instead of the Cluster Deployment section. Figure 12-9 illustrates the OAM Server instance Key Metrics, which include Token Issuance and Token Validations per second. The Token Validation success rate is included.

Table 12-3 describes the elements of the Performance Overview for Clusters and OAM Server instances in Fusion Middleware Control. There are only a few differences.

On the Performance Summary page, a chart is displayed for each selected metric. An OAM Server Performance Summary page. Figure 12-13 shows the Performance Summary page with an open Metric Palette from which you can choose metrics to chart. Stacked charts allow you to easily compare multiple metrics for the same time frame, change the time frame to go back in time, or zoom in or out.

Table 12-5 describes the status and controls available on the Performance Summary page.

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Performance Overview:

   1. Expand the desired node and select a target. For example: Identity and Access.

      • Identity and Access
      • oam_server

   2. Review the Performance Overview.

3. Performance Summary:

   1. Select a target (Step 1).

   2. From the context menu, select Performance Summary.

   3. Review the Summary Page.

4. Changing Metrics:

   1. From the Performance Summary page (Step 2), click the Show Metrics Palette button.

   2. From the Metrics Palette, expand nodes and check (or clear) boxes to add (or remove) metrics from the summary.

   3. Review the updated the Summary page.

   4. Click Hide Metrics Palette when you finish.

5. Saving a Chart Set:

   1. From the View menu on the Performance Summary page, click Save Chart Set.

   2. In the dialog box that appears, enter a unique name for this chart set and click OK when the operation is confirmed.

   3. Click Hide Metrics Palette when you finish.

   4. Review the updated information on the Summary Page.

6. Adding an Overlay, Access Manager:

   1. From the Overlay menu on the Performance Summary page, click Another Oracle Access Manager.

   2. In the Search and Select Targets dialog, enter the target name and host name, then click Go.

   3. In the target results table, click the name of the desired target and then Select.

   4. When finished viewing the overlay, click Remove Overlay from the Overlay menu.

7. Adding an Overlay, Today with Yesterday:

   1. From the Overlay menu on the Performance Summary page, click Today with Yesterday.

   2. When finished viewing the overlay, click Remove Overlay from the Overlay menu.

8. Testing:

   1. Using the Access Tester, perform several authentication and authorization tests (see Validating Connectivity and Policies Using the Access Tester).

   2. In Fusion Middleware Control, check performance metrics.

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Expand the desired node and select a target. For example:

   • Identity and Access
   • oam_server

3. From the context menu, select Component Performance.

4. Choose Access Manager (or Security Token Service).

5. STS Partner ID: Choose a Partner ID in the Security Token Service results table for more details, if needed.

6. Component Performance:

   1. From the context menu, select Component Performance.

   2. Choose either Access Manager (or Security Token Service).

   3. Choose an item in the results table to get more details, if available.

7. Testing:

   1. Using the Access Tester, perform several authentication and authorization tests (see Validating Connectivity and Policies Using the Access Tester).

   2. In Fusion Middleware Control, check performance metrics.

Table 12-6 outlines log availability and functions in Fusion Middleware Control.

Figure 12-14 shows the Log Levels configuration page in Fusion Middleware Control. Notice that Runtime Loggers is the selected View and oracle.oam logger names are currently displayed. With Security Token Service there is only one logger that affects the log levels for Security Token Service: oracle.security.fed.

The Log Levels tab on the Log Configuration page allows you to configure the log level for both persistent loggers and active runtime loggers:

• Persistent loggers are saved in a configuration file and become active when the component is started.

  The log levels for these loggers are persisted across component restarts.

• Runtime loggers are automatically created during runtime and become active when a particular feature area is exercised.

  For example, oracle.j2ee.ejb.deployment.Logger is a runtime logger that becomes active when an EJB module is deployed. Log levels for runtime loggers are not persisted across component restarts.

Table 12-7 explains the configuration status and options for log levels.

Table 12-7 shows the Log Files Configuration.

Table 12-8 describes the log files configuration parameters for Access Manager (or Security Token Service).

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Expand the desired node, and select a target. For example:

   • Identity and Access
   • oam_server

3. From the Access Manager menu, select Logs and then Log Configuration.

4. Create a Log File: From the Log Files tab (Table 12-8):

   1. Click the Create button to display a fresh Create Log File form.

   2. Enter a name and file system path for this log file. For example:

      Log File oam-odl-handler

      Log Path domains/oam_db/servers/oam-server1/log/oam.log

   3. Click the desired Log File Format. For example: ... Text

   4. Set the logging attributes. For example:

      Use Default Attributes

      Supplemental Attributes

   5. Associate a Logger. For example: Root Logger

   6. Specify the Rotation Policy. For example: Size Based

      Maximum Log File Size (MB) 10.0

      Maximum Size of All Log File Size (MB) 1000.0

   7. Click OK to submit the configuration.

5. Create Like:

   1. From the Log Files tab, click the name of an existing log file.

   2. Click the Create Like button.

   3. On the Create Log File form, enter your own information:

      Log File name

      Log Level

      Attributes

   4. Edit any other details as needed, then click OK to submit the configuration.

6. Edit Configuration:

   1. From the Log Files tab, click the name of an existing log file.

   2. Click the Edit Configuration button.

   3. Change configuration details as needed.

   4. Click OK to submit the changes.

7. View Configuration:

   1. From the Log Files tab, click the name of an existing log file.

   2. Click the View Configuration button.

   3. Review the information, then click OK to dismiss the configuration page.

      Contents are greyed out when opened for viewing configuration.

8. Proceed to "Viewing Log Messages in Fusion Middleware Control".

This procedure explains how to search for messages, view messages (or view related messages), view all messages in a single log file, and export or download messages.

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Expand the desired node and select a target. For example:

   • Identity and Access
   • oam_server

3. From the OAM context menu, select Logs and then choose View Log Messages.

4. Search (Table 12-9):

   1. Specify a Date Range.

   2. Check all Message Types to be included in your search.

   3. Define Message content options.

   4. Add Fields: Enter details to further refine message content.

   5. Click Search to display a list of messages that fit your search criteria.

5. View Messages: From the table of search results, click one or more messages to view on the lower half of the page.

6. View Related: Use one of the following methods to organize the table of search results.

   1. By Time: From the View Related menu, select by Time.

   2. By ECID: Click ECID in the message on the screen (or, from the View Related menu, select by ECID Execution Context ID).

   3. From the Scope menu, select a time period.

7. Log File: From the table of search results, click a name in the Log File column to view all messages in the file.

8. Export Messages

   1. Select one or more messages in the search results table.

   2. From the Export Messages menu, choose the desired export format. For example: As Oracle Diagnostic Log (.txt).

   3. In the dialog box, click Open with and then choose the desired program.

   4. From the open program, save the file to a new path.

9. Download

   1. Select one or more messages in the search results table.

   2. Click the Download button.

   3. In the dialog box, click Open with and then choose the desired program.

   4. From the open program, save the file to a new path.

10. Testing:

    1. Using the Access Tester, enter an invalid user name and try to authenticate (see Validating Connectivity and Policies Using the Access Tester).

    2. In Fusion Middleware Control, go to the log viewer and review the error.

    3. Using the Access Tester, enter an invalid password and try to authenticate.

    4. In the Fusion Middleware Control log viewer, check the error and then view all related log messages.

    5. Repeat this test using different log levels, as described in "Managing Log Level Changes in Fusion Middleware Control".

Table 12-10details about the System MBean Browser..

Table 12-11 describes the MBeans that Access Manager and Security Token Service deploy on the AdminServer on the domain runtime server (OAM Server).

Figure 12-18 Shows the System MBean Browser and the related Attributes tab displaying information for the Security Token Service CertRevocationListConfig: oracle.sts:Location=oam_server1,type=CertRevocationListConfig.

Table 12-12 describes the System MBean Browser and associated tab in greater details.

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Expand the desired node and select a target. For example:

   • Identity and Access
   • oam_server

3. From the Access Manager context menu, select System MBean Browser.

4. System MBean Browser: Expand classes and select an MBean target to display related attributes and operations. For example: oracle.sts or oracle.oam.

5. Manage MBean Attributes:

   1. Click the Attributes tab.

   2. Review the name and description of MBean attributes for the selected target.

   3. Edit values for one or more attributes and click Apply to submit changes (or click Revert to cancel changes).

      Alternatively: Click a Name in the Attributes table to display a full description and the value; change the value and click Apply (or click Revert to cancel the change).

6. Manage MBean Operations:

   1. Click the Operations tab.

   2. Review the name, description, number of parameters, and return type for each MBean operation for the selected target.

   3. Click a name in the Operations table to display the parameters and related name, description, type, and value.

   4. Edit values for the operation and click Apply to submit changes (or click Revert to cancel changes).

   5. Click Invoke to invoke the MBean and review the message that appears.