Monitoring and auditing
Traceability
Riversoft® STCP Gemini Server records every session and transfer in the log database, with the user, direction, file and result. At the end of a transmission or reception, the message also includes the file size, the transfer time and the hash. OFTP protocol confirmations (EERP and NERP) are recorded too.
Each record has a message code and, in the transfer stages, an event code. See Message and event codes.
Reports
Records can be queried:
- in the Riversoft Console Portal, in the event and transfer reports;
- through the Riversoft STCP Gemini API, in the system event, user event, operator activity and transfer reports. See Query reports.
Supervision through the Riversoft Console Portal
Riversoft STCP Gemini Server runs a supervision service, used by the Riversoft Console Portal to track and operate the instance. The service is registered in the instance as the Supervision (gemini) network service (default port 33050), and the Riversoft STCP Gemini API connects to it on behalf of the Portal. See Supervision services.
Available operations:
| Operation | Description |
|---|---|
| Instance information | State and data of the running instance. |
| User information | Status of user mailboxes and connections. |
| Service information | Status of the network services. |
| Start schedule | Runs a schedule immediately. |
| Start and cancel user | Starts or cancels a user connection. |
| Create user | Creates a user’s directory structure. |
| Create test file | Generates a test file for a user. |
| Stop and restart the instance | Stops or restarts the instance. |
| Debug level | Changes the debug level without restarting the service. |
Supervision connections are authenticated with the supervision credential and recorded in the log.
Log contingency spool
When it cannot write to the log database, the Server writes events to a local contingency file, so records are not lost:
| Item | Value |
|---|---|
| Directory | $TMPDIR/stcplog-spool/, or /tmp/stcplog-spool/ when TMPDIR is not set |
| File | stcplog-events.jsonl, one JSON event per line |
| Rotation | Every 10 MB, keeping up to 20 files |
| Retention | 7 days |
Spool events are not resent automatically to the log database. Monitor this directory: new files indicate a failure writing to the database.
Debug
The debug level is set in ApplDebug, in the STCPCore section of the Server configuration (0 disables it), and can be changed at runtime through the Riversoft Console Portal. Debug messages are sent to the system log:
journalctl -u stcpgemini-serverUse debug only during diagnosis: it increases the volume of messages.
Monitoring checklist
- The
stcpgemini-serverservice is running (systemctl status stcpgemini-server). - The log database is reachable and receiving records.
- The
stcplog-spooldirectory has no new files. - Transfer reports are being followed in the Riversoft Console Portal or through the API.
- The debug level is set back to
0after a diagnosis.