Show TOC

Background documentationLogging and Tracing Locate this document in the navigation structure


The following files are available for logging important security events and helping administrators with troubleshooting:

  • Security logging

    Location in Log Viewer: ./log/system/security.<n>.log

    Location in file system: \usr\sap\<SID>\<instance_number>\j2ee\cluster\server<n>\log\system\security.<n>.log

    This file contains the log entries of a number of security related services, including the following:

    • Authentication

    • Destination service

    • User Management

    • Virus Scanner Interface

    • Web Services

    • Successful and failed user logons and logouts (LOGON.OK, LOGON.FAILED, LOGOUT.OK, LOGOUT.FAILED)

  • Security audit log

    This file contains a log of important security events, such as creation or modification of users, groups and roles.

    More information: Security Audit Log of the AS Java.

  • Trace files

    Location in Log Viewer: ./log/defaultTrace.<n>.trc

    Location in file system: \usr\sap\<SID>\<instance_number>\j2ee\cluster\server<n>\log\defaultTrace.<n>.trc

    This file contains all the trace information for the whole server and includes trace information for user management engine (UME) libraries and the UME provider ( The information in this file is on a fine-granular level and includes exceptions, warnings, and debugging information. It is mainly required by SAP support.

  • Change log

    Location in file system: \usr\sap\<SID>\<instance_number>\j2ee\cluster\changelog

    The change log contains changes that were done manually in the SAP NetWeaver Administrator, such as creating, deleting or modifying a policy configuration, creating, deleting or modifying a keystore view, and so on. The change log contains information about what was changed, who changed it, what was the old value and what is the new value.

  • Directory server logs

    When you use an LDAP directory server as a data source for the UME, you can configure log files to monitor and troubleshoot the connections.

    More information:

Viewing Log and Trace Files in the Log Viewer

Use SAP NetWeaver Administrator to view log and trace files. SAP NetWeaver Administrator provides a predefined security view.

More information:

Configuring the Log Viewer

Use SAP NetWeaver Administrator to configure log and trace files.

More information: Configuring Log Controllers.