Enable domain logging and debug messages

Domain log and debug messages allow you to troubleshoot domain configuration errors.

Before you begin

Role required: admin

Procedure

  1. Navigate to Domain Admin > Configuration.
  2. For Enable verbose domain logging, select the Yes check box.
  3. Click Save.

View a real-time domain message

You can view real-time domain messages from the system logs.

Before you begin

Role required: admin

Procedure

  1. Enable verbose domain logging.
  2. Navigate to System Diagnostics > Session Debug > Enable All. Because this is a real time review, there is no need to let the debug session run for a time before checking the log files.
  3. Navigate to System Logs > System Log > All.
  4. Search for the text Query against table.

    This query finds log messages in this format:

    08:36:43.974: [Domain Spool] Query against table incident restricted by domain values [Database Atlanta[db53580b0a0a0a6501aa37c294a2ba6b], 
    Database[287ee6fea9fe198100ada7950d0b1b73], 
    Database San Diego[db53a9290a0a0a650091abebccf833c6], global, NY DB[5f74727dc0a8010e01efe33a251993f9]]

    In this example, the user viewing the Incident table only saw records that matched the Database Atlanta, Database, Database San Diego, global, and NY DB domains.

View a historical domain message

You can view historical domain messages in the log file to troubleshoot domain separation issues.

Before you begin

Role required: admin

Procedure

  1. Enable verbose domain logging.
  2. Navigate to System Diagnostics > Session Debug > Enable All.
  3. Let the debug session run for a time period, such as a day, before checking the log files.
  4. Navigate to System Logs > Utilities > Node Log File Download.
  5. Open the record for the day you want to view. Log files use the naming format localhost_log.<yyyy-mm-dd>.txt.
  6. Click the Download log related link.
  7. Open the downloaded log file in a text editor and search for log messages with the following format:

    Query against table incident restricted by domain values [global, Software[8a4dde73c6112278017a6a4baf547aa7]]

    In this example, a user only saw records from the Incident table that matched the global and Software domains.

View domain relationships

The domain map offers domain administrators a read-only representation of the active domains on the instance and how they relate to each other.

Before you begin

Role required: admin

About this task

All domain maps must have one domain set as the primary domain. In addition, each domain in the domain map must meet these criteria:

  • The Parent field must be filled in (the primary domain is the only exception to this).
  • The Active check box must be selected.

The domain map does not draw domain relationships for domains that fail to meet the mapping criteria.

Procedure

  1. Navigate to Domain Admin > Domain Map.
  2. Click the plus (+) or minus (-) icons on the domain headers to show or hide sub domains.