Toggle navigationAirlock Secure Access HubAbout this documentAbout Airlock IAMIAM 8.1 release notesSecurity best practicesInstallation and upgradeOperationStarting / stoppingCreating servicesCustomizing servicessystemd services with profilesSandboxing with profilesUsing profilesGenerating log outputsLog parameters, appenders, and filesLog rotationProcessing log outputLogging APIElasticsearch / Kibana reportingIntegration with container envionmentsCustom log agent / data collectorUsing FluentdUser trail loggingUser trail clean-upLog message formatsMain log formatStructured log formatShared attributesReporting attributesaction_group / actionfactor / factor_detailMonitoring/health checksUsing systemdLR(S) probesEndpoints, responses, and securityConfiguration of health checks endpointsHealth check endpoint usageJMXPerformance tuningData backup and restoreExternalize session state in RedisReasons for connection dropsInitial configurationConfiguration managementAuthenticationSelf-servicesTarget applicationsOIDC and OAuthSAMLAPI access controlFlows (Airlock IAM concept)Loginapp (module)Adminapp (module)Service Container (module)Transaction approval (module)IAM REST APIsCustomizing UIs and textsThird-party licensesOperationIAM OperationChapter contentStarting and stopping Airlock IAM (system service integration)Sandboxing with profilesGenerating Airlock IAM log outputProcessing Airlock IAM log outputUser trail loggingLog message formatsMonitoring/health checksPerformance tuning and scaling best practicesData backup and restoreStoring session state in an external Redis session repositoryConnection drop with slash and/or backslash in the username
Chapter contentStarting and stopping Airlock IAM (system service integration)Sandboxing with profilesGenerating Airlock IAM log outputProcessing Airlock IAM log outputUser trail loggingLog message formatsMonitoring/health checksPerformance tuning and scaling best practicesData backup and restoreStoring session state in an external Redis session repositoryConnection drop with slash and/or backslash in the username