!--a11y-->
Logging in the ICM 
The access log contains a log of accesses to the ICM from an intranet or the Internet, and thus gives you an overview of the activity on the ICM. You can also log accesses to the Internet (if the SAP Web AS acts as the client).
You can use external analysis programs to analyze the log file.
A HTTP subhandler implements logging in the ICM. This subhandler statistically analyzes HTTP requests and records requests.

The log handler uses the log file to serialize itself, which makes it a bottleneck. It is therefore not usually activated.
The logging implementation procedure corresponds to the Apache Web Server mod_log_config module.

For security reasons the following information is hidden (replaced with points) from the logging procedure.
Parts of the URL:
· ;jsessionid
· URI parameters in round brackets if they contain the context ID
· ?...sap-contextid=…
· ;sap-contextid=
Header fields (case insensitive):
· Authorization
· sap-password
· SAP-R3Auth (RFC logon via HTTP)
· Proxy authorization
· MYSAPSSO2 (inheritance of the identity via HTTP channel)
Cookies (case sensitive):
· sap-contextid
· jsessionid
Form fields (case insensitive):
· sap-contextid
· sap-password

An entry could look like:
10.18.200.78 - - [25/May/2004:18:06:57 +0200] "GET /sap(..................)/public/icman/test;jsessionid=...../umu.html?sap-user=saphttp&sap-password=....&test=111 HTTP/1.1" 404 2144 .
You can configure
logging in parameters icm/HTTP/logging_<xx>
(for incoming requests) and
icm/HTTP/logging_client_<xx>
(for outgoing requests).

10.18.103.34 - - [08/Jan/2001:16:53:20 +0100] "GET /sap/bc/bsp/sap/it00/default.htm HTTP/1.0" 200 336
10.18.103.34 - - [08/Jan/2001:17:01:15 +0100] "POST /bc/bsp/sap/it00/transition_parameter.htm HTTP/1.0" 302 0
The following string creates the CLF format: %h %l %u %t "r" %s %b
The following format
LOGFORMAT=%b %h %H %S %a %l %u %t %T Line=%r %f %U %s %{user-agent}i
gives these kind of entries:
181 10.18.104.64 ls3022.wdf.sap-ag.de 8080 10.18.104.64 - - [11/Apr/2001:14:01:08 +0200] 0 Line=GET /sap/bc/bsp/sap/it00 HTTP/1.1 /bc/bsp/sap/it00 /bc/bsp/sap/it00 500 Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)