This article relates to LoadMaster firmware version 7.2.53.
Client session logging for ESP-enabled Virtual Services has been enhanced in LoadMaster firmware version 7.2.53 to include additional session information:
The initially created ESP session
The time when the LoadMaster cleared the session from the cache. Note that if the entire cache is cleared, a single log message is recorded at the time of clearing, which notes that all existing sessions at that time were cleared form the cache.
If an ESP session is deleted (when the user logs out from the application, when the session expires, or the user enters invalid credentials). The time of when the LoadMaster cleared the session is also logged.
You can view these logs by going to System Configuration > Logging Options > Extended Log Files in the LoadMaster User Interface (UI) and click View for ESP User Logs.
Some example log messages are below:
2020-11-09T09:53:46+00:00 lb100 ssomgr: CEF:0|Kemp|LM|1.0|20|User AAA|0|vs=10.35.44.87:80 event=User AAA user=Test.026 domain=kpauto.net server=172.20.7.170 protocol=LDAP Unencrypted result=0:Success
2020-11-03T15:22:48+00:00 lb100 ssomgr: CEF:0|Kemp|LM|1.0|24|Flush SSO cache|1|event=Flush SSO cache msg=SSO cache has been flushed, therefore all 3 existing session(s) have been terminated.
2020-11-03T15:26:27+00:00 lb100 ssomgr: msg=SSO cache has been flushed, therefore all 3 existing session(s) have been terminated.
2020-11-03T15:31:22+00:00 lb100 ssomgr: CEF:0|Kemp|LM|1.0|23|Kill all sessions|0|event=Kill all sessions domain=KPAUTO.NET msg=Deleted 2 user session(s) associated with domain
2020-11-03T15:34:26+00:00 lb100 ssomgr: domain=KPAUTO.NET msg=Deleted 2 user session(s) associated with domain
For further details on the Common Event Format (CEF) logs, refer to the Long Term Support (LTS) CEF Logs Technical Note.
For further details on the ESP logs in general, refer to the LTS ESP Logs Technical Note.