您可以控制敏感信息(如 IP 地址和主机名)是否显示在运行状况检查 API https://<VIDM_FQDN>/SAAS/jersey/manager/api/system/health
和 https://<VIDM_FQDN>/SAAS/API/1.0/REST/system/health
的输出中。默认情况下,API 输出中不包含此类信息。
runtime-config.properties 文件中的 service.health.check.basic
属性可控制该设置。当该属性设置为 true 时,将会仅显示基本信息,而隐藏敏感信息。输出中的标签 "unknown" 指示信息受到限制。例如:
AnalyticsUrl: "unknown" ElasticsearchServiceOk: "true" EhCacheClusterPeers: "unknown" ElasticsearchMasterNode: "unknown" ElasticsearchIndicesCount "unknown" ElasticsearchDocsCount: "unknown" AuditPollInterval: "1000" AnalyticsConnectionOk: "true" ... IpAddress: "unknown" AuditDisabled: "false" AllOk: "true"
当该属性设置为 false 时,将会显示所有可用信息。例如:
AnalyticsUrl: "http://198.51.100.0" ElasticsearchServiceOk: "true" EhCacheClusterPeers: "" ElasticsearchMasterNode: "198.51.100.1" ElasticsearchIndicesCount: "13" ElasticsearchDocsCount: "11173" AuditPollInterval: "1000" AnalyticsConnectionOk: "true" ... IpAddress: "198.51.100.2" AuditDisabled: "false" AllOk: "true"
默认情况下,该属性设置为 true。
注:
如果您设置了一个 VMware Identity Manager 群集,则在更改该属性时,请确保在群集的所有节点中进行更改。