For the motivation and potential implementation issues see
The goal of this RFE is to be able to use the access logs in order to identify operations which access large entries. Users would then be able to use log filtering criteria to only log these operations along with other unusual operations.
This could be solved in two ways:
- define some thresholds and add additional log information tagging operations with a flag, similar to what we do for unindexed searches, or
- systematically log the size of the entry being accessed and let users choose thresholds via log filtering criteria.
The second approach seems the most flexible. Note that search operations may return multiple entries, so it's unclear what "entry size" means exactly. It could just log the size of the largest returned entry.