Logging in the ICM 

Use

The access log contains a log of accesses to the ICM from an intranet or the Internet, and thus gives you an overview of the activity on the ICM. You can also log accesses to the Internet (if the SAP Web AS acts as the client).

You can use external analysis programs to analyze the log file.

A HTTP subhandler implements logging in the ICM. This subhandler statistically analyzes HTTP requests and records requests.

The log handler uses the log file to serialize itself, which makes it a bottleneck. It is therefore not usually activated.

The logging implementation procedure corresponds to the Apache Web Server mod_log_config module.

For security reasons the following information is hidden (replaced with points) from the logging procedure.

Parts of the URL:

○      ;jsessionid

○      URI parameters in round brackets if they contain the context ID

○      ?...sap-contextid=…

○      ;sap-contextid=

Header fields (case insensitive):

○      Authorization

○      sap-password

○      SAP-R3Auth (RFC logon via HTTP)

○      Proxy authorization

○      MYSAPSSO2 (inheritance of the identity via HTTP channel)

Cookies (case sensitive):

○      sap-contextid

○      jsessionid

Form fields (case insensitive):

○      sap-contextid

○      sap-password

An entry could look like:

10.18.200.78 - - [25/May/2004:18:06:57 +0200] "GET /sap(..................)/public/icman/test;jsessionid=...../umu.html?sap-user=saphttp&sap-password=....&test=111 HTTP/1.1" 404 2144 .

Procedure

Configuration

You can configure logging in parameters icm/HTTP/logging_<xx> (for incoming requests) and icm/HTTP/logging_client_<xx> (for outgoing requests).

Sample Log Entries for Default Format (CLF):

10.18.103.34 - - [08/Jan/2001:16:53:20 +0100] "GET /sap/bc/bsp/sap/it00/default.htm HTTP/1.0" 200 336

10.18.103.34 - - [08/Jan/2001:17:01:15 +0100] "POST /bc/bsp/sap/it00/transition_parameter.htm HTTP/1.0" 302 0

The CLF format is created by the following string: %h %l %u %t "%r" %s %b.

Sample Log Entry for a Self-Defined Format

The following format

LOGFORMAT=%b %h %H %S %a %l %u %t %T Line=%r %f %U %s %{user-agent}i

gives these kind of entries:

181 10.18.104.64 ls3022.wdf.sap-ag.de 8080 10.18.104.64 - - [11/Apr/2001:14:01:08 +0200] 0 Line=GET /sap/bc/bsp/sap/it00 HTTP/1.1 /bc/bsp/sap/it00 /bc/bsp/sap/it00 500 Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

Display

You can display the logging data in the ICM Monitor, by choosing Goto ® HTTP Log ® Server or Client ® Display Entries. For more information see Monitoring the Status of the ICM, section HTTP Log.