Tracing and Logging 

Security tracing and logging are important elements for securing your application server systems. Therefore, the AS-Java includes monitoring and administration functions for the early detection and investigation of deviations from established security policies. The tracing and logging functions allow you to display security events for the entire J2EE Engine system landscape, as well as for individual J2EE Engines.

The logging and tracing functions on the J2EE Engine enable you to generate logs and traces for events affecting all components on the J2EE Engine. To facilitate information requirements for different levels of troubleshooting, logs are recorded by categories and traces by component location. In addition, you can use the administration tools of the J2EE Engine to generate logs and traces of system events with different severity levels.

The J2EE Engine uses the following categories to record system wide events:

·        System - all system related security and administrative log messages.

·        Applications - all system events related to the business logic.

·        Performance - reserved for single activity tracing.

By default, the J2EE Engine saves logs and traces in files with extensions .log and .trc respectively. The location of these files in your file system is \usr\sap\<sid>\<instance_number>\j2ee\cluster\<node>\log

The following topics give additional information about the logging and tracing features for the AS-Java:

·        UME Logging and Monitoring

Gives an overview of the logging and tracing files available for the User Management Engine of the J2EE Engine.

·        Security Aspects When Using HTTP and Web Container Tracing

Presents the security aspects involved in enabling HTTP and Web Container tracing.

·        Masking Security Sensitive Data in the HTTP Access Log

Includes information about the necessary configuration changes to mask security sensitive data written to the HTTP access logs.

The AS-Java monitoring and administration functions also enable you to view security events for the entire J2EE system landscape. For more information, see Supportability and Performance Management in the Administration Manual.

 

See also:

Log Configuration in the Administration Manual

Logging and Tracing in the Development Manual